Malwarebytes Premium issues

urbanspaceman1 said:

I contacted Foolish IT and asked if it was possible to prevent their latest (7.1) version from removing my gadgets, that was on Monday and I haven't had a response. Maybe they'll move a little faster if you are giving them money - which I'm not, of course.
Otherwise: the early incarnation of CryptoPrevent is co-existing happily with MBAM Premium.
I haven't explored Crypto Guard yet.

Cryptolocker: I tried a few solutions including Cryptoguard but in the end settled for Bitdefender's Anti-Crypto portable and still have it. I don't use it though.

I use a couple of other methods.

Detect any executable (any extension) without a valid signature that's not in the trusted certificate list and prompt for action if it attempts to run:



I can't actually recommend this software without testing the new version. I'm sticking with the old version for now.

Warning if any executable (any extension) is created or modified with the option to quarantine:



I'm the sort of person who likes pop-ups! I like to know what's going on.

Also I use EMET. I've noticed that a beta version of flash player has been released - that usually means that there will be a new patched version released within a few days.

There's a flash exploit currently doing the rounds. See:

https://blog.malwarebytes.org/exploi...k-exploit-kit/

urbanspaceman1 said:

@Callender
I thank you for your input but I'm afraid I don't understand it.
I may have given the impression I was more accomplished than is actually true; it happens a lot I'm afraid.

No problem! I've just remembered another solution that I use. HitmanPro.Alert has built in CryptoLocker prevention. All you need to do is configure the settings screen.

Download: HitmanPro.Alert 2 - SurfRight

To adjust settings when HitmanPro.Alert is up and running just click the following:

C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe

CryptoPrevent creates software restriction policies that prevent executables from running from certain locations like those listed on page 2 here:

Cryptolocker: How to avoid getting infected and what to do if you are | Computerworld

The problem is that sometimes a safe application will need to execute from one of those locations but will be blocked from doing so by CryptoPrevent.

Both work in different ways so in theory it should be possible to run both.

I just downloaded CryptoPrevent and see that if you're having problems it's possible to add blocked executables to a whitelist.



There's also an option elsewhere to allow gadgets. Personally I've disabled gadgets after reading some time ago that there could be a security issue.

Tip: Reset gadgets to default if you ever need to:

Gadgets - Restore Default Gadgets