Easy to kill

[swrain]

Hey guys,

First I want to say I love the product. I use it as a backup for my other anti-virus in case all else fails. It's a really neat program. I do however, have a question.

The other day I was just testing to see if my anti-malware programs (including MalwareBytes) were working correctly. Thankfully, all of them passed. However, I decided to branch out and test something, based on something I saw on the internet. I created a wannabe-virus batch file that had the following interally:

"taskkill /F /IM mbamgui.exe"

and, to my surprise, it worked. It disabled my realtime protection. I tried it with my other anti-virus and it didn't work (said access was denied).

I'm just a little worried, that a virus might be able to shut down my MalwareBytes. Am I being too paranoid?

[AdvancedSetup]

Well the real issue is that if an infection gets on your computer with admin rights to run that or a similar command then the computer is already compromised. That said we are working on an improved feature to help protect and keep the program running in an upcoming future version so stay tuned for that.

Thank you

[swrain]

Well the real issue is that if an infection gets on your computer with admin rights to run that or a similar command then the computer is already compromised. That said we are working on an improved feature to help protect and keep the program running in an upcoming future version so stay tuned for that.

Thank you

Thanks for the reply. Really looking forward to it. I love the program and I think you all are doing a fine job.

[cooldude255220]

Although I'm not entirely sure, wouldn't running MBAM as a system critical process be useful?

[exile360]

Although I'm not entirely sure, wouldn't running MBAM as a system critical process be useful?

Greetings

Unfortunately, no. Many infections these days can easily disable (or even replace) system critical processes and system critical files. The methods we plan to use to protect Malwarebytes Anti-Malware PRO are going to be much more powerful and dynamic than that .

[swrain]

Well, I for one can't wait.

I have a deadly concoction of anti-malware + anti-spyware programs running in my memory. If they take one down, I have others waiting.

I do think I am being too paranoid. Knowing the speed of Malwarebytes, they would stop it before they could execute the first letter.

[exile360]

I do think I am being too paranoid. Knowing the speed of Malwarebytes, they would stop it before they could execute the first letter.

Yes, even after we have implemented some sort of self-protection, the main and best line of defense will remain our detection rates, particularly our heuristics capabilities which have proven quite successful against new and unknown 0-day threats.

[cooldude255220]

Greetings

Unfortunately, no. Many infections these days can easily disable (or even replace) system critical processes and system critical files. The methods we plan to use to protect Malwarebytes Anti-Malware PRO are going to be much more powerful and dynamic than that .

Hey again. That's quite impressive, I didn't realise that doing such was possbile. Those methods sound interesting. When can we expect them to be implemented and will we find out what they are?

[exile360]

Hey again. That's quite impressive, I didn't realise that doing such was possbile. Those methods sound interesting. When can we expect them to be implemented and will we find out what they are?

When these features are ready, we'll include information in our changelogs, though we're unlikely to publish any technical details as we woudln't want the bad guys to know how we're protecting ourselves.

You may sign up for our newsletter to keep up to date on the latest info about Malwarebytes' products, including new releases of Malwarebytes Anti-Malware.