Does Malwarebytes automatically stop services without user notification?

[jerrysec45]

I ran Malwarebytes quick scan and was wondering if the software stops a service without letting the user know.  When I ran it, I had a service stop and never had this happen before.  I just need to make sure that malwarebyte does not stop a computer service without user notification.  Anyone with info on this it would be greatly appreciated.  Thanks,

[John L. Galt]

As an end user of MBAM for a long time, I can say that I have never seen that sort of behavior before.  But there are a few caveats.

 

1)  I normaly do not have Task Manager (nor Process Explorer / Proces Hacker, the latter being my choice of task managers) running when I run a scan.

 

2)  MBAM relies on services for various aspects, such as checking for updates, periodic scheduled scans, and a couple of other items, IIRC.  So, it is possible that what you had seen may have been MBAM killing one of its own services.

 

3)  Could you provide any details as to the service that was killed?  Could it possible have been one that was a malicious service running in the background (and / or malicious file that attached itself to a legitimate service, such as svchost.exe or task scheduler) that was killed?  In that sort of situation I would fully expect MBAM to kill any required service (at least temporarily, in order to remove the infection).

 

HTH

[jerrysec45]

As an end user of MBAM for a long time, I can say that I have never seen that sort of behavior before.  But there are a few caveats.

 

1)  I normaly do not have Task Manager (nor Process Explorer / Proces Hacker, the latter being my choice of task managers) running when I run a scan.

 

2)  MBAM relies on services for various aspects, such as checking for updates, periodic scheduled scans, and a couple of other items, IIRC.  So, it is possible that what you had seen may have been MBAM killing one of its own services.

 

3)  Could you provide any details as to the service that was killed?  Could it possible have been one that was a malicious service running in the background (and / or malicious file that attached itself to a legitimate service, such as svchost.exe or task scheduler) that was killed?  In that sort of situation I would fully expect MBAM to kill any required service (at least temporarily, in order to remove the infection).

 

HTH

Thanks,  The service was related to a schedualing software I run and I believe that I've run a scan before and never had this happen.  It's a legitamate service, but MB did not show that it being bad after a quick scan.  I'm not saying that MB had stopped the service.  I just need to know that if MB does, don't it report that to the user to show the file.  Just like any other AV products show what it catches and give you the result of a scan.

[John L. Galt]

But the real question is that did MBAM actually stop the service, or did something else?

[jerrysec45]

But the real question is that did MBAM actually stop the service, or did something else?

Exactly.  The log shows that it didn't nor did it find anything suspicious.

[AdvancedSetup]

We do not target and stop any service or any infection for that matter until you tell the program to actually take action and do the removal.

 

If you restart the computer and the application is running and you run MBAM again and do another scan does the program stop again?

[John L. Galt]

Thanks for the clarification, Ron.  That confirms that just running a scan by itself will not stop anything.

[jerrysec45]

We do not target and stop any service or any infection for that matter until you tell the program to actually take action and do the removal.

 

If you restart the computer and the application is running and you run MBAM again and do another scan does the program stop again?

That is exactly what I needed to know.  Thanks all! 

[jerrysec45]

We do not target and stop any service or any infection for that matter until you tell the program to actually take action and do the removal.

 

If you restart the computer and the application is running and you run MBAM again and do another scan does the program stop again?

Forgot to add regarding your last question.  No, I have tried running another scan to see if it would stop again as I've never had MB do that before.