ALternate OD Scanner to MalwareBytes?

remm · 01 May 2015

Recently updated MBytes and I don't like the new version. There are no options when it detects something to right-click and Ignore or Add To White List or ... whatever. From what I can tell, either check the box and let MB delete, or uncheck and A> go thru the trouble to make a note of the key or file and path for every false detection and manually add those to the exclusion list, or B> let MB find it all over again next time.

Is there an alternate OD scanner that has shell integration that is respected? Is the free version of SUPERAntispyware any better?

Thanks.

MoxieMomma · 01 May 2015

remm said:

Recently updated MBytes and I don't like the new version. There are no options when it detects something to right-click and Ignore or Add To White List or ... whatever.
Thanks.

Hi:

Actually, that's not exactly true.
The Quarantine "flow" was changed in version 2.1.
It's not entirely intuitive and this has been discussed at the MBAM forums.
(I am just a home user myself, so I take neither credit nor blame for the new flow.)

However it is certainly possible to exclude or whitelist items from the quarantine list.

TMALSS, the new flow will automatically select ALL detections for removal.
If one wants to ignore/keep a particular item in the list, then one needs to un-select it (remove the check-mark).
That will generate a dialog, asking the user how to proceed.
IIRC the options include the equivalent of "ignore this one time", "ignore permanently" and perhaps one other selection.

Stay tuned -- I will post back with more details shortly.

Thanks,

MoxieMomma · 01 May 2015

Follow-up:

Here is the original announcement:
https://forums.malwarebytes.org/inde...d/#entry948845

Simplified Quarantine flow – threats detected are pre-selected for removal and users are presented with a single “Remove Selected” button. Clicking “Remove Selected” quarantines all checked items. If you uncheck any threats you will see a new dialog asking what action should be taken on the unselected items: Ignore Once, Ignore Always, Cancel.

Excerpt from the User Guide >>HERE<<

More info about v2.1.6 HERE
More info about v2.1.4 HERE
User Guide ONLINE
User Guide PDF
FAQ: Common Questions, Issues, and their Solutions

Thank you again,

remm · 01 May 2015

Thanks Moxie... I did uncheck mine and get no such dialogs. Using the latest 2.16... will read the links above to see what I am doing wrong, and will report back here.

EDIT: Yup, isn't working for me plain and simple. Like I said in the OP, I unchecked the fp's and .... nothing. I tried to right-click... highlight... nothing.

The thing I really don't like is it's hard to see the whole path, especially when a reg key. I had to really work at expanding the window and moving columns... in (for example) the old A-Squared, all you did was mouse over a detected threat and you could see the entire path in the mouse over text.

Unfortunately A-Squared is now Emsisoft, and I do like a lot of features about their free OD scanner EXCEPT updating the virus db takes FOREVER... that's how they get you to want to get the paid version. Apparently that version updates quickly but they have the server for the free version throttled back to a drip.

Will try a couple more things with MB... but I'm not sure what. I wouldn't even mind using v 1.7x again, but don't want to deal with this again later if they retire that version and suddenly require an update to the program before the AV db can be updated.

MoxieMomma · 01 May 2015

OK, sounds like a plan.

BTW, I assume that you know that you can add "Malware Exclusions" from the dashboard > "Settings" > "Malware Exclusions"?

Just another suggestion,

remm · 01 May 2015

Yes. But that doesn't address when it finds fp's that are not already in the exclusion list. Like I say, it's a hassle to note the path and add to the exclusion list manually. Any basic AV should have a way to send it immed to whitelist or ignore or whatever. Apparently MB does too, but it's not working for me. I am getting the feeling this program is simply going downhill from what it was (and has been) up to v1.7. Another thing I loathe about this version... it does not save my config settings for custom scan. Maybe this is again only a problem on my machine, but the coding of this thing seems whack.

So my original query stands: any alternatives anyone would like to suggest for an OD scanner (free)?

Thanks!

Callender · 01 May 2015

MBAM - personally I'd keep it. Other scanners?

EEK - I use it and like you said, updates take forever to download. I just used it today. I keep it for occasional use.

HerdProtect - herdProtect - Anti-Malware Multiscanning Platform in the Cloud

9-Lab Removal Tool - Free malware remover - 9-lab - watch out for false positive detections.

Crystal Security - http://www.crystalsecurity.eu/ - only use stable version and only run on demand.

Edit: If trying Crystal Security add known false positives and excluded folders to whitelist. Configure not to auto- remove anything.

ALternate OD Scanner to MalwareBytes?-crystal-security.jpg

remm · 01 May 2015

@ Callender Is MBAM keeping your settings for custom scans? Is it opening the dialog in the history list when you uncheck an item, to ignore or whitelist or whatever it's supposed to be doing?

EDIT: Thanks for tip about Crystal

MoxieMomma · 01 May 2015

Yes. But that doesn't address when it finds fp's that are not already in the exclusion list.

Sorry, but I'm not sure what you mean by that.
I volunteer at the Malwarebytes forum and do not see any reports there of the same problems you describe.

If you have what you think is a bonafide False Positive (something MBAM detects that you think ought not to be detected), then the suggested way to handle that would be the following:

Start with the advice in this pinned topic >>HERE<<
Report the suspected False Positive in a new thread in the dedicated forum here: File Detections - FP
The Research Team will analyze the file and determine if the detection is appropriate or not.

You could try a clean reinstall, as this often resolves minor issues.
Best practices for that are here: MBAM Clean Removal Process 2x

Alternatively, the staff and forum experts would be more than happy to assist you with configuring and troubleshooting MBAM at the Help forum >>HERE<<.

I'm sorry I wasn't able to resolve your issues.

I'll leave the passionate debate about alternative scanners to the other forum members.:)

Thank you again,

remm · 01 May 2015

MoxieMomma said:

Yes. But that doesn't address when it finds fp's that are not already in the exclusion list.

Sorry, but I'm not sure what you mean by that.

Sorry for not being clear. I mean I have things entered into the exclusion list, that I put there before doing any scans. Things I know trip fp's.

But when MBAM runs a scan and finds a new fp's, I want to be able to send it to the exclusion list with a click... not make a mental note of the path and add it manually. And while I understand all I should have to do in uncheck a 'threat' in the History window, and a dialog should popup asking me what I want to do, that's not happening. I am not getting any choices.

I hope that's clearer. I am not looking to report anything to MBAM... I just want an OD scanner that works to use alongside Sandboxie on those infrequent occasions I need it. And if I should choose to run a scan, it would be nice (and not asking much) if the custom scan config settings were saved between sessions. MBAM is not saving my settings. All reasons I am looking for alternatives...

Thanks again.