Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Latest Version of Malwarebytes

23 Apr 2014   #331
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Well, there are my results in living color mate.
NIS does use Trust Control, it doesn't re-scan a file found to be OK from a previous scan. 55% of mine are trusted. If there is any type of change to a file it will trigger a new scan.


My System SpecsSystem Spec
.
23 Apr 2014   #332
andrew129260

Windows 10 Pro
 
 

Quote   Quote: Originally Posted by Britton30 View Post
Well, there are my results in living color mate.
NIS does use Trust Control, it doesn't re-scan a file found to be OK from a previous scan. 55% of mine are trusted. If there is any type of change to a file it will trigger a new scan.
I don't know about you, but that sounds like a dangerous way for an antivirus to work. Just because a file is trustworthy one day does not mean it stays that way. No wonder they no longer participate in av comparatives and av test.
My System SpecsSystem Spec
23 Apr 2014   #333
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

If it is based on the hash it should be OK. Not sure if a hash can be faked? Besides, if the file is changed, it is scanned again. A Guy
My System SpecsSystem Spec
.

23 Apr 2014   #334
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Quote   Quote: Originally Posted by andrew129260 View Post
Quote   Quote: Originally Posted by Britton30 View Post
Well, there are my results in living color mate.
NIS does use Trust Control, it doesn't re-scan a file found to be OK from a previous scan. 55% of mine are trusted. If there is any type of change to a file it will trigger a new scan.
I don't know about you, but that sounds like a dangerous way for an antivirus to work. Just because a file is trustworthy one day does not mean it stays that way. No wonder they no longer participate in av comparatives and av test.
Note this.
My System SpecsSystem Spec
23 Apr 2014   #335
andrew129260

Windows 10 Pro
 
 

I did see that, but there are ways for a file to be changed and hashes to be faked and not detected. The worst of malware does preciously that. I know most AV's do this now, its just something I am not comfortable with the new practice of this. I know why it was done, to speed us scan time and grow a database of safe files. But it's risky to me. But unfortunately I cannot change the way anti-malware software works.
My System SpecsSystem Spec
23 Apr 2014   #336
Slartybart

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
 
 

Quote   Quote: Originally Posted by AdvancedSetup View Post
Yes it was and there are now several users that have posted that that time has decreased by 50% or more and in some cases has gone from several hours to less than an hour.
I have not had any major issues with my testing Mbam 2, but it would be negligent for me not to state observed scan times (my pet peeve). These are not exact, but hopefully give you an idea of what one end user sees.

2.0.0.x: 9-11 mins Threat scan - no options - all options
2.0.1.x: 22-29 mins (same test set)
2.0.2.x: 8-12 mins (added initial scna without changing settings)

This tells me that there really wasn't any gain - the scan times were out of whack in 2.0.1.x and the next version 2.0.2.x fixed what 2.0.1.x 'broke'. It happens, but v1 was about 5 mins.

I understand that v2 does more, so if 10 minutes for 250,000 files is what v2 ends up running - that's ok
30 mins was not OK. I'm sure Malwarebytes wants better times too.

There were a few very minor glitches (update screen popped up between inistall and initial scan - most likely an artifact of the change to automatically update instead of depending on the end user to update. A momentary screen flicker isn't a deal breaker. It was introduced between 2.0.1 and 2.0.2 though.

I'm glad they toned down the screaming screens, I asked nicely if they could tone down and consolidate the marketing.

I plan on joining their forum and participating directly if there is a short 2.0.3.x beta. It doesn't help posting here.

I have a full plate the next two weeks (daughter#3 getting married, daughter# 2 / son-in-law arriving from the Philppines, daughter# 4 buying a house). I think I can sneak in a few hours though, to run four scans and document/analyse the findings.

Here are avast times on my machine to use as comparison
- the quick scan uses cached results, the full scan does not use the cache, it builds the cache


Attached Images
Latest Version of Malwarebytes-avasttimes.png 
My System SpecsSystem Spec
24 Apr 2014   #337
AdvancedSetup

Windows 7 Pro x64
 
 

@SlartyBart

For many users there is little change in times as you noted, but for others there is a huge change. There were some hardware and software issues involved that "some" users have that caused very slow scans. This was hopefully corrected for at least most of those users. Myself I have similar fast scan times in all versions with my hardware/software mix.

The Full Scan time by Avast is more in range with what I would expect. Wife is on the computer I was going to test NIS on but seeing that it is now reported that they're fingerprinting that makes sense as you can read the hash much faster than you can read properties and analyze a file. I'll still try to do one myself but guessing my times will be pretty quick too. My 48 hour scans were from last year over a UNC path to a mapped server drive that had millions of files.
My System SpecsSystem Spec
24 Apr 2014   #338
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Quote   Quote: Originally Posted by andrew129260 View Post
I did see that, but there are ways for a file to be changed and hashes to be faked and not detected. The worst of malware does preciously that. I know most AV's do this now, its just something I am not comfortable with the new practice of this. I know why it was done, to speed us scan time and grow a database of safe files. But it's risky to me. But unfortunately I cannot change the way anti-malware software works.
Howe may I change/fake a has so it matches a previous one? As far as I know for a given file MD5 uses one algorithm to calculate the hash, if the file is changed in any way so does the has.

Say you have 1000s of images (I do) they don't need to be scanned more than once. Videos are in the same boat along with audio files. Those 3 classes of files can comprise 100s of GB on users' systems.
My System SpecsSystem Spec
24 Apr 2014   #339
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by Britton30 View Post
Quote   Quote: Originally Posted by andrew129260 View Post
I did see that, but there are ways for a file to be changed and hashes to be faked and not detected. The worst of malware does preciously that. I know most AV's do this now, its just something I am not comfortable with the new practice of this. I know why it was done, to speed us scan time and grow a database of safe files. But it's risky to me. But unfortunately I cannot change the way anti-malware software works.
Howe may I change/fake a has so it matches a previous one? As far as I know for a given file MD5 uses one algorithm to calculate the hash, if the file is changed in any way so does the has.

Say you have 1000s of images (I do) they don't need to be scanned more than once. Videos are in the same boat along with audio files. Those 3 classes of files can comprise 100s of GB on users' systems.
MD5 - Wikipedia, the free encyclopedia
Quote:
In 2004 it was shown that MD5 is not collision resistant.[5] As such, MD5 is not suitable for applications like SSL certificates or digital signatures that rely on this property for digital security.
Peter Selinger: MD5 Collision Demo
Quote:
Here, you can download the software that I used to create MD5-colliding executable files.
And then there is a line of malware that intercepts & changes the hash value being reported to programs that ask for them. No need to have the file be special, just lie about its hash.
My System SpecsSystem Spec
24 Apr 2014   #340
Britton30
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Thanks UNI, I did not know that.
My System SpecsSystem Spec
Reply

 Latest Version of Malwarebytes




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Malwarebytes Pay Version
I have the pay version and have it set under "Settings" > "Updater Settings" > have "Download and Install Program Updates If Available" checked and also "Notify Me When Update is Ready for Installation" checked. I am not getting any updates. I have to manually get the program updates. Is there...
System Security
Malwarebytes version 1.61
Malwarebytes released version 1.61 today. I tried to update using the auto update on a W7 x64 PC and it failed. I ran the mbam-clean uninstall utility and downloaded/installed version 1.61 without issues. Had to re-register and reconfigure the options. I'll wait a few days to see if others...
System Security
Upgrading to a Pro version of Malwarebytes... advice please!
If I go to the company site https://store.malwarebytes.org/342/purl-inproduct?x-source=inproduct&x-action=bottom_button it costs £19.95. and includes a backup CD and something called Extended Download. There are what seem to be similar products from Amazon DSOLUTION Malwarebytes'...
System Security
Malwarebytes Database Version
I just ran the updater in Malwarebytes, and was surprised at the change in version numbers, as can be seen in the screenshot. I suppose they may just have decided to use a different system, but I'm wondering if it might indicate something more nefarious, like someone else slipping into the picture?
Software
Full retail version of Malwarebytes & Comodo.. anyone using both?
I recently purchased the retail version of Malwarebytes just to see if it's any good. It seems almost mindless how people talk about Malwarebytes but and I have yet to try it. However, the only computer I have that I am absolutely determined to keep for more than a few months already has comodo...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 07:58.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App