Malwarebyte is not a good anti-malware?

[RaG]

Last night I downloaded a program fully crypter. And malwarebytes could not detect

This program is recorded in the startup of the computer the WinLogon

Scan :

 

https://malwr.com/analysis/MWRkNzYyZTYzNGRiNDU0YWIyZjM3MjlkYWYxNTY0Nzk/

https://www.virustotal.com/pt/file/47365ecf7ad3d81d1537b8a382eeebae45aa4178559791fba60dc75f4afe1d59/analysis/1454139863/

 

Kaspersky managed to remove the trojan from my computer.

 

[LDTate]

I will submit this and let our research Team know.

 

We are not:
A pop-up blocker, anti-virus nor Firewall.
We don't prefiter web pages. That is your web browsers + antivirus along with the firewalls job.

We remove **Malware**

 

That appears to be a new infection that only 4 anti-virus are hitting on it.

 

 

 

 

http://www.av-test.org/en/test-procedures/award/av-test-award-2014/

https://blog.malwarebytes.org/news/2014/07/malwarebytes-anti-malware-free-scores-100-in-av-test-removal-test/
    

No single product is 100% foolproof and can prevent, detect and remove all threats at any given time. Just because one anti-virus or anti-malware scanner detected threats that another missed, does not mean its more effective. The security community is in a constant state of change as new infections appear and it takes time for them to be reported, samples collected, analyzed, and tested by anti-vendors. Every vendor's virus lab and program scanning engine is different. Each has its own strengths and weaknesses and they often use a mix of technologies to detect and remove malware.
 

[RaG]

How hard was it to remove this virus.

AdwCleaner, and no other found

[LDTate]

https://support.malwarebytes.org/customer/portal/articles/1834872?b_id=6438

Malwarebytes Anti-Malware is not meant to be a replacement for antivirus software. Malwarebytes Anti-Malware is a complementary but essential program which detects and removes zero-day malware and "Malware in the Wild".

[David H. Lipman]

To begin with, it is not a virus.
 
A cryptor is a program used to manipulate an executable binary in such a fashion that its strings are obfuscated, its size and checksum are altered and its original format is altered.
 
A crypted detection is based upon a file that has been manipulated by a cryptor.
 
Detection is made difficult by this binary manipulation and is part of the cat and mouse game of malware detection.  In is not a case of Malwarebytes' Anti-Malware ( MBAM ) being good or not.  Each anti malware vendor has the same issues.  It is a case of the mouse outsmarting the mouse trap at this point in time.  Once Malwarebytes' researchers get a handle on the mouse outsmarting the mouse trap, they will create a new mouse trap that has has a higher efficacy.
 

That is why Malwarebytes invites its users submit malware ( in accordance with its guidelines )  so they can build that better mouse trap based upon malware submission examination.
 
Normal day-to-day malware and Potentuially Unwanted Programs ( PUPs) are submitted in;  Newest Malware Threats
 
Those that are cyptographic, hold a system and/or files for ransom or are in the rogue families ( fake anti virus, fake hard disk repair utilities, etc ) are submitted in;  Newest Rogue-Ransomware Threats
 
Please reference the following on how to provide sample submissions such that Malwarebytes' Anti-Malware (MBAM) can detect targeted but presently undetected threats.

Malware hunters please read
Purpose of this forum
Malware Hunters group
 
Upload Directions:

• Take the files and put them in a ZIP or RAR archive file.
• Create a new post and paste the Virus Total ( or other service ) report URL in the body of the post.
• Choose "More Reply Options" on the bottom Right of the Web Form
• Now choose "Attach Files" on the bottom Left of the Web Form.
• Browse and find your ZIP or RAR file.
• Choose "Add Reply" and there's your post with your attachment(s)

[LDTate]

David,

RaG doesn't have access to submit it.

I have submitted the file to our Research Team for detection.

[RaG]

This caught 67% of my ram what would it be?

Malwarebytes was blocking a connection coming from the program.

[LDTate]

RaG,

I would suggest you do this:

https://forums.malwarebytes.org/index.php?/topic/9573-im-infected-what-do-i-do-now/

[David H. Lipman]

This caught 67% of my ram what would it be?

 

What does that mean ?

 

If you think you are infected, you are invited to obtain one-on-one assistance from a Forum Helper in the malware removal section of the forum;  Malware Removal Help

[LDTate]

RaG,

Thanks for the file.

It will be added to our next MBAM update.

[RaG]

Hey LDTate, Which type of malware?