Malwarebytes Anti-Malware 4 Beta / Final Thread

[oldschool]

How does it compare to Exploit Guard?

Exploit Guard's UX and GUI suck, a lot actually but in terms of features, Exploit Guard is quite thorough

I can't give you a technical comparison since I lack the qualifications, and I'm not sure how and what Exploit Guard protects at default settings. MBAE beta is supposed to protect browsers, PDF readers, etc. like Windows EG, and you can add apps to its protected list. I have used both EG @ default settings and MBAE together. It's simple, set-and-forget and lightweight.

However, your question is about a subject that deserves its own thread.

 

[ForgottenSeer 823865]

I'm not sure how and what Exploit Guard protects at default settings.

it is system-wide and protect the classic exploits path, it is remodeled EMET after all, then you can customize it by adding and/or increasing some processes' protection.

I have used both EG @ default settings and MBAE together. It's simple, set-and-forget and lightweight.

unless they changed something, MBAE is supposed to silently take over EG. So in fact, you dont run both together.

 

[oldschool]

it is system-wide and protect the classic exploits path, it is remodeled EMET after all, then you can customize it by adding and/or increasing some processes' protection.

Yes, but understanding how to customize EG is the issue for me. I have only a very general understanding of EG's individual features/settings, eg. Bottom-up ASLR, DEP, SEHOP, etc., and most users wouldn't have the faintest idea which to enable for different apps. There is no M$ documentation about these.

 

[ForgottenSeer 823865]

Yes, but understanding how to customize EG is the issue for me. I have only a very general understanding of EG's individual features/settings, eg. Bottom-up ASLR, DEP, SEHOP, etc., and most users wouldn't have the faintest idea which to enable for different apps. There is no M$ documentation about these.

All true anti-exploit uses those settings (HMPA, MBAE) you can find explanations about those on google but if you don't want go deep, just let the default settings.

 

[blackice]

View attachment 229121

Against my better judgment, I downloaded Malwarebytes 4.0.4.

And all went well.

Since both the previous major update transitions were not smooth, my expectations were low.

The soft blue on soft blue motif brings out my metro-feminine side.

A change from 3.x ------ when one hits the "My Account" button, it does not lead to account info in the Malwarebytes GUI. It opens my.malwarebytes webpage.


View attachment 229126

They remember me..

They did seem to redesign much of the GUI.

There is now only one type of scan, the "Threat Scan." So the quick scan (whatever it was called) is gone.

I installed it, too. Over the top of 3 (next to WD since I told it not to register in the security center). It did it’s scan, seems fine. Now it’s sitting there. The web filtering still seems good, maybe I’ll keep it and drop some extensions.

 

[Dhruv2193]

The new GUI looks like a web console/cloud console/online management platform! It does no longer display the files/folders currently scanning!

 

[roger_m]

It does no longer display the files/folders currently scanning!

I was just about to post that. I don't know why they removed that.

 

[Bombus]

Dr.Web has something with the same name
Dr.Web KATANA
A non-signature anti-virus

Dr.Web anti-virus / Download

Doctor Web is a Russian IT-security solutions vendor developing Dr.Web anti-virus for businesses and personal use, as well as anti-virus as a service since 1992.

download.drweb.com

 

[Bryan320]

I still don't get why malwarebytes disables rootkit scanning by default? This should be a no brainer for a company like Malwarebytes. You're suppose to be going forward not backwards.

 

[oldschool]

I still don't get why malwarebytes disables rootkit scanning by default? This should be a no brainer for a company like Malwarebytes. You're suppose to be going forward not backwards.

Maybe because it would slow down startup?

 

[Bryan320]

Maybe because it would slow down startup?

I (believe although) I could be wrong about this...…. I think they disable it from the on demand scanner not the premium version.

 

[Threadripper]

Rootkits are rare these days with secure boot and all, but I don't see why they would have the option off by default either.

 

[codswollip]

I still don't get why malwarebytes disables rootkit scanning by default? This should be a no brainer for a company like Malwarebytes. You're suppose to be going forward not backwards.

Did you contact MB for a reply?

 

[Burrito]

Rootkits are rare these days with secure boot...

Yes. I recall somebody from MBAM indicating that with Windows 10, the probability of rootkits has diminished -- and that's why the scan is not on by default. But that was awhile ago.

And -- there are some indications that the rootkit threat is returning. Scranos and other rootkits are out there doin' their thing..