Jump to content
Sign in to follow this  
kstev99

User input before Quarantine

Recommended Posts

While I do realize the importance of stopping ransomware immediately, it would be nice, especially during this beta testing, if rather than just quarantining a program, a dialogue box would alert you that this program is about to be quarantined and give user an option to add/report as a False Positive and skip quarantine. Perhaps this could be timed where if there is no response from the user within xxx min/sec the quarantine continues.  There seems to currently be a lot of FP's.  I'm sure that will improve with time, however I have chosen to uninstall the beta, as I could not imaging the horror of having to re-install a program like Microsoft Office and its 2 years of security updates

I intended to post this in the "Ideas for Malwarebytes Anti-Ransomware Beta" Forum

Share this post


Link to post
Share on other sites

Hello kstev99:

The MBARW Beta development team is sure to see your post.

Posting with your own topic is always the most desired as is urged by Malwarebytes' staffers.

Thank you always for your participation.

Share this post


Link to post
Share on other sites
7 hours ago, kstev99 said:

While I do realize the importance of stopping ransomware immediately, it would be nice, especially during this beta testing, if rather than just quarantining a program, a dialogue box would alert you that this program is about to be quarantined and give user an option to add/report as a False Positive and skip quarantine. Perhaps this could be timed where if there is no response from the user within xxx min/sec the quarantine continues.  There seems to currently be a lot of FP's.  I'm sure that will improve with time, however I have chosen to uninstall the beta, as I could not imaging the horror of having to re-install a program like Microsoft Office and its 2 years of security updates

I intended to post this in the "Ideas for Malwarebytes Anti-Ransomware Beta" Forum

That is one heck of a good idea, beings as this Beta is throwing so many false positives.  It should at least be an option in "Settings" of some sort.  I can understand, with the devastating effect of Ransomware, why someone might not want to delay blocking it -- but for the purposes of this Beta it is essential.  MBAR is just blocking AND quarantining too many legitimate programs.  Clearing a false positive requires a reboot and at least on my system that's a serious issue.  I know we're testing a beta and should not be using it on a "live" system in a production environment, but without real-world use the Beta will never get enough testing to move on to a stable release.  If MBAM/MBAR wants a good Beta test they need to allow us to clear false positives BEFORE a reboot and before a quarantine action occurs.

Share this post


Link to post
Share on other sites

Maybe it would be a good idea if we had a list of known FP's in one place so we could add them to the exclusion page on first install?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.