[ARM Support]

I would greatly appreciate if Malwarebytes for ARM64 was developed.

If Malwarebytes ARM64 is released will it support lifetime licenses?

[STEAM PCMark Trojan.Meterpreter and The Binding of Issac false detections]

These are the default files that are downloaded through steam.

PCMark appears to be apart of the java runtime environment.

Let me know if you need anything else!

log.txt False Detection EXE.zip

[version 2.0.1.1004 custom scan hung up on a jpg file]

Did you have rootkit scanning activated? Its an known issue for the rootkit scanner to get hung up on some jpg files.

[MBAM 2.0 video bug]

Never seen this issue before.

While having the MBAM window in focus try holding down the windows key and then pressing the arrow keys. This should resize the window/snap it to the sides of your screen. Maybe when its snapped you can resize the window?

 

If that doesn't help you may want to just try reinstalling MBAM using these instructions.
https://forums.malwarebytes.org/index.php?showtopic=122284

[Does the devs plan on adding Anti Exploit to MBAM 2 premium?]

I worded that weirdly. I was saying Malwarebytes Anti-Exploit was in beta not MBAM 2.

 

It would be a cool feature to see in MBAM.

[Does the devs plan on adding Anti Exploit to MBAM 2 premium?]

With the addition of chameleon and anti rootkit technologies added in MBAM 2 I was wondering if there were any plans on adding the anti-exploit technology that's currently in beta?

[[Bug] Showing same file as a potential threat multiple times.]

Thanks for the reply Miekiemoes.

 

Was a bit confusing when you see the same file listed a bunch for the same infection but it must just be listing it for each Crossrider reference in the file.

 

Good to know MBAM 2 will remove the Crossrider references and not the entire file.

[[Bug] Showing same file as a potential threat multiple times.]

Well in the file it lists extensions.crossrider.bic and crossriderapp14917 121 times so maybe that could be why it detected the file multiple times.

 

According to a post on mozilla forums

https://support.mozilla.org/en-US/questions/930192

 

crossrider is used to build apps that are multi platform. The app that was installed was one that blocked people from seeing that you saw their facebook message but that app has long been uninstalled for one I made.

[[Build 2.00.0.1000]Firefox prefs.js -> PUP.Optional.CrossRider.A false positive.]

Decided to try out the beta and found something 1.75 didn't. I already posed about it as a bug report
https://forums.malwarebytes.org/index.php?showtopic=144642

 

The file in question is attached below.

 

pref.zip

[[Bug] Showing same file as a potential threat multiple times.]

MalwareBytes detects and lists the file located at C:\Users\Gloserous\AppData\Roaming\Mozilla\Firefox\Profiles\3p8tc5ma.default\prefs.js 122 times every time I run a scan, doesn't matter the scan has rootkit turned on or not. The file isn't detected with I right click and hit scan with MalwareBytes.

 

Exporting a log as a .txt file also crashes MalwareBytes.

 

The file in question is uploaded in a zip and I also believe it is a false positive. The non-beta version of MB doesn't detect this file as an pup. Should I post this in the FP forum?

pref.zip

[[Bug] Getting Currently Scanning : Filesystem Objects where it should show the file location.]

When scanning on a secondary drive for example a D: and F: drive you will get Currently Scanning : Filesystem Objects where it should say Currently Scanning : D:\dir\file.extension. It works fine while running on your main C: drive but the second it hits another drive you get this bug.

 

 

 

 

I also have a quick question, will 2.00.0.1000 be updated automaticly to the next release or will I have to manualy download it?

[Cheat Engine 6.2 (%install dir%\dbk64.sys == Rootkit.Necuts.GO)]

I just read https://forums.malwarebytes.org/index.php?showtopic=3228 and learned that I had to zip/rar the file.

Its attached below.

dbk64.sys.zip

[Cheat Engine 6.2 (%install dir%\dbk64.sys == Rootkit.Necuts.GO)]

Today MalwareBytes detected  the file dbk64.sys from a Cheat Engine 6.2 install as an Rootkit.Necuts.GO infection.

I can't upload the file due to not having permissions but here is the virus total of the file
https://www.virustotal.com/en/file/edc21b955b5697a42207879d87b7908728c0d2cf12a9e17ef3b4c6d8dccc0ed4/analysis/1394514743/

 

==========Here is a copy of the log==========

 

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.11.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Gloserous :: IMASHARKSMD [limited]

Protection: Enabled

3/11/2014 1:20:53 AM
MBAM-log-2014-03-11 (01-20-59).txt

Scan type: Custom scan (C:\Program Files (x86)\Cheat Engine 6.2\dbk64.sys|)
Scan options enabled: File System | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled: Memory | Startup | Registry | Heuristics/Extra
Objects scanned: 1
Time elapsed:

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Program Files (x86)\Cheat Engine 6.2\dbk64.sys (Rootkit.Necurs.GO) -> No action taken.

(end)