Unsolved

This post is more than 5 years old

2 Intern

 • 

1K Posts

30154

December 27th, 2012 18:00

Malwarebytes Anti-Malware 1.70 Released!

New MBAM v. 1.70.0.1100 was released this afternoon.

Copied from MBAM History & Updates

http://forums.malwarebytes.org/index.php?showtopic=3283&view=findpost&p=627398

Version 1.70

New Features:

1. New program logo and icons
2. Heuristics for 0-day exploit detection now implemented in protection module for PRO version
3. Threats detected by the protection module are now quarantined automatically by default
4. Malwarebytes Anti-Malware now shows Windows 8 START screen notifications
5. Malwarebytes Anti-Malware now identified in scan logs, registry and About tab
6. More Tools tab enhanced with tons of new content and more to come in the future
7. Option to allow a threat to run temporarily (Allow Temporarily) added to filesystem protection prompts
8. Option to add a detected item to the Ignore List (Allow Always) added to filesystem protection prompts

Improvements:

1. Heuristics for detecting new and unknown threats improved
2. Scanner efficiency improved
3. Microsoft Windows 8 and Internet Explorer 10 now identified correctly in scan logs
4. Help file updated to include information on new features
5. Better compatibility with many other security products in realtime

Issues Fixed:

1. Minor issue with password creation from CLI fixed

I installed mine through automatic updates. First thing I noticed was a change of logo and icon. Now is blue. Very fast quick scan. Usually 5 to 6 min on my machine, now about 3 min and a half.

Tooltab includes more tools like FileAssasin, Chameleon, Anti-rootkit, and StartupLitefor easy download if necessary.

Eventhough the automatic install did not ask for reboot, I did. Unfortunately MBAM did not have al modules active. I have to activate, manually, the web module.

5 Journeyman

 • 

15.6K Posts

 • 

45K Points

December 28th, 2012 06:00

Concerning new features 3, 7, & 8:

  • Automatically quarantine filesystem threats detected by the
    protection module:
    This option will quarantine infected files detected
    by the protection module automatically.
  • When this setting is disabled, the user
    will be prompted to take an action. The three available actions are 'Quarantine'
    which will block the threat from running and quarantine the file, 'Allow
    Temporarily' which will allow the threat to run one time but will block the
    threat if it attempts to run at a later time, and 'Allow Always' which will add
    the threat to the Ignore List.




2 Intern

 • 

2.2K Posts

December 28th, 2012 06:00

I went ahead and got the Pro version a couple weeks ago. Download and installation went like clockwork, and the protection module choice were already prechecked.

2 Intern

 • 

1K Posts

December 28th, 2012 07:00

This morning MBAM modules started automatically. :emotion-2:

David.

I forgot to mention this new feature to automatically quarantine filesystem detected as threats. I rather have this inactive. I do not like anything that automatically can get rid of a file, even if it is only quaratined. I rather stop the file momentarily while looking for information about it. A F/P may happen at any time.

 

5 Journeyman

 • 

15.6K Posts

 • 

45K Points

December 29th, 2012 06:00

Hernan,

I have done the same as you... I would rather investigate matters (to either confirm the threat, or reject it as a F/P) rather than allowing automatic quarantining.    However, I can understand their logic, that for "average" users [who are not in a position to do such investigation], it's probably better to auto-quarantine than than anything else [delete, ignore].

MBAM has had a good record on minimizing F/P's, but even it has had some "doozies" on (rare) occasion.

Have you encountered any discussions at the MBAM forum on this matter?

I'm also wondering what BB thinks about this...

2 Intern

 • 

1K Posts

January 1st, 2013 15:00

Hi David.

Happy New Year. Sorry for my late response, but I had some technical difficulties and the holydays also in the middle:emotion-11:

No I have not seen many comments about this new addition to MBAM. Only this:

http://forums.malwarebytes.org/index.php?showtopic=120085&st=20&p=627658&#entry627658

May be because not too many users like to fiddle with the program and they are pleased as is. I can tell you that I tried it and the alert or warning comes out as advertised, even in this old war horse. You see, in Windows XP, when MBAM stops an IP the tooltip balloon is very basic. It Just saying that a malicious IP was blocked and the IP address. I undestand that in W7 it gives more info on the IP. This time the warning is like the image. Also you can allow the file temporarily, but you have to be quick otherwise it stops the file again.

Regards.

No Events found!

Top