Malwarebytes Anti-Ransomware Beta

Discussion in 'other anti-malware software' started by ZeroVulnLabs, Jan 25, 2016.

  1. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    9,869
    Location:
    The Netherlands
    OK, thanks for the info. :thumb:
     
  2. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    3,201
    Location:
    DC Metro Area
    Hi pbust :)

    I run MARW 0.9.15.416, with EMIS 11 and MBAE Premium on a Windows 8.1 PC.

    On three separate occaisions I have gotten a series of gray, red-bordered pop-ups from the lower right-hand corner of my monitor saying something like: "Warning. MARW has detected ransomeware activity on your system and has quarantined it." Yet, whenever I see that and look at my Quarantine it is empty.

    Am I misreading those warnings and they actually say "......has blocked it..." The pop-ups drop quickly so I am not totally certain if it says blocked or quarantined.

    I did acually have that experience today. I left a scan running and left the PC for a couple of hours. When I entered my password to wake up my pc and lift the passsword screen, I got a very quick look at my desktop and saw that the scan had completed and thet EMIS required a restart to install an update. Then my password page suddenly dropped and it said "Locked"

    So I tried a restart. This time I first got a spinning Windows sceen saying something like Windows is setting up/configuring (something like that) your PC. When my desktop reappeared my system was nearly totally borked. Everything under Desktop in File Explorer had disappeared. My PC had reverted to an much earlier state/configuration and most of my programs would not open, including my One Drive. My Firefox extensions and bookmarks had been totally wiped. I did however have everything that had been filed under C: User.>Me.

    I tried another re-start and this time my PC was back to its most current configuration with all files and programs there and functioning as they should.

    After one of the restarts I had to reverify my PC with Microsoft.

    It was during one of these attempts that MARW popped up with its warnings, I was so confused and upset that I don't recall at what point a series of three MARW warning pop ups appeared, but I am pretty sure it was after the first restart when my system appeared borked.

    So while my Quarantine remained empty it appears that MARW may have unlocked or prevented from re-locking the second restart and saved my system by effecting whatever it was that first locked and borked my PC. Dunno. As everyone here knows I am relatively clueless :)
     
    Last edited: Apr 6, 2016
  3. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,296
    MBARW is supposed to block ransomware without user intervention.

    You want to stop it before it can encrypt your files. So it should quarantine and automatically delete suspected ransomware downloaded from the Web.
     
  4. 1PW

    1PW Registered Member

    Joined:
    Apr 2, 2010
    Posts:
    718
    Location:
    North of the 38th parallel.
    Hello hawki:

    Before any data is lost, please consider logging into, or registering and logging into, Malwarebytes Anti-Ransomware Beta and opening a topic with with a Copy/Paste of your above post.

    Additional data will likely be requested.

    Thank you in advance hawki.
     
  5. SpeedyPC

    SpeedyPC Registered Member

    Joined:
    Dec 27, 2010
    Posts:
    105
    Location:
    The Land of OZ (Australia)
    What the time frame for the Malwarebytes Anti-Ransomware to be release in the final stage, do you Malwarebytes guys have any information on what is you're current time frame for this.

    Thank you.
     
  6. ropchain

    ropchain Registered Member

    Joined:
    Mar 26, 2015
    Posts:
    335
    The MB forum is being blasted with false positives, So I guess it will probably take some time for them to finish it ;-)
     
    Last edited: May 6, 2016
  7. SpeedyPC

    SpeedyPC Registered Member

    Joined:
    Dec 27, 2010
    Posts:
    105
    Location:
    The Land of OZ (Australia)
    Thanks for the heads up ;)
     
  8. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,296
    MBARW occasionally identifies legitimate software as ransomware and tries to delete it. I've had to add them to MBARW's exclusion list to make sure it doesn't remove them.
     
  9. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    9,869
    Location:
    The Netherlands
    I get the impression that the false positives are a too big of a problem at the moment.
     
  10. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,725
    Lost my MBAM Pro license thanks to reinstall... At least it came with a device from Craigslist.

    Therefore I probably won't be able to see this in action, since I won't be able to buy a lifetime license.

    No, I don't see the need for a subscription security service with my current setup and mindset.
     
  11. anon

    anon Registered Member

    Joined:
    Dec 27, 2012
    Posts:
    4,998
  12. lordraiden

    lordraiden Registered Member

    Joined:
    Jan 30, 2006
    Posts:
    3,473
    Any news about MBARW? updates or something?
     
  13. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,296
    No updates. If there's a new beta, it should be posted here.
     
  14. 1PW

    1PW Registered Member

    Joined:
    Apr 2, 2010
    Posts:
    718
    Location:
    North of the 38th parallel.
  15. digmor crusher

    digmor crusher Registered Member

    Joined:
    Jul 6, 2012
    Posts:
    525
    Location:
    Canada
    Usually I don't run beta software, Emsisoft and Malwarebytes are the exclusions, haven't tried this beta yet, I may yet just to check it out, but not really needed as Appguard should cover any ransomware. However, waiting with anticipation for this to be incorporated into MBAM, should be another win for the Malwarebytes crew.
     
  16. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    9,869
    Location:
    The Netherlands
    I'm not going to lie, based on everything that I read, I don't feel comfortable to install it on my machine.
     
  17. ropchain

    ropchain Registered Member

    Joined:
    Mar 26, 2015
    Posts:
    335
    :isay:
     
  18. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    9,869
    Location:
    The Netherlands
    And you're point is? I just have the feeling that it's not ready for prime time yet. You would have hoped that by now it would be.
     
  19. Trying MBARW out. Simple and clean user interface, uses a service called MBAMService.exe. Uses 0.01 to 0.18% on my CPU (a low end dual core pentium G3240), seems that this beta 7 has solved most issues. Malware Bytes is known for its long beta's when introducing 'new' technology to their flagship (MBAM), so they will release one or two beta's with the technology incorporated into MBAM, before public release.
     
  20. SHvFl

    SHvFl Registered Member

    Joined:
    May 7, 2015
    Posts:
    817
    And that's how it should be. Most users hate issues and constant beta versions so better try the new technology with beta testers that don't mind. Like all i hate waiting but the path they took is the smart one.
     
  21. @SHvFI

    Agree complety, just to be sure nothing gets lost in translation: my comment is not a complaint, just an observation.

    Thx
     
  22. SHvFl

    SHvFl Registered Member

    Joined:
    May 7, 2015
    Posts:
    817
    I didn't imply that you complained. I just agreed with your comment. Atleast that was my intention. Sorry if you confused you.
     
  23. daman1

    daman1 Registered Member

    Joined:
    Mar 27, 2009
    Posts:
    1,097
    Location:
    USA, MICHIGAN
    Is this SW ever going to go any where or is it abandonware,o_O seems like it's been in beta for ever now :rolleyes:
     
  24. fblais

    fblais Registered Member

    Joined:
    Jul 31, 2008
    Posts:
    1,037
    Location:
    Québec, Canada
    I think it's supposed to be integrated into MBAM.
    It was never meant to be a standalone utility.
     
  25. daman1

    daman1 Registered Member

    Joined:
    Mar 27, 2009
    Posts:
    1,097
    Location:
    USA, MICHIGAN
    Correct, the program has many issues still and it was released some time ago. They just don't seem to be making any real progress with it.
     
Loading...