Jump to content

Recommended Posts

Hey guys ! So, when I'm trying to use malwarebyte and avira together, after scanning with malwarebyte  I get a error from avira that it blocked access/changes to my proxy/files in my directory.

It's probably because malwarbytes tried to clean up some malware from my pc. '

Is there any way to add malwarbytes to "allowed" or "exceptions" in avira ? so that it can complete the whole process ?

Share this post


Link to post
Share on other sites
1 minute ago, DivineKataroshie said:

Is there any way to add malwarbytes to "allowed" or "exceptions" in avira ?

Exclude the following in Avira

  • C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
  • C:\Windows\system32\Drivers\farflt.sys
  • C:\Windows\System32\drivers\mbae64.sys
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\System32\drivers\MBAMChameleon.sys
  • C:\Windows\System32\drivers\MBAMSwissArmy.sys
  • C:\Windows\System32\drivers\mwac.sys

Also please exclude the following folders too: (The complete folder)

  • C:\Program Files\Malwarebytes\Anti-Malware
  • C:\ProgramData\Malwarebytes\MBAMService

 

Share this post


Link to post
Share on other sites
23 minutes ago, Porthos said:

Exclude the following in Avira

  • C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
  • C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
  • C:\Windows\system32\Drivers\farflt.sys
  • C:\Windows\System32\drivers\mbae64.sys
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\System32\drivers\MBAMChameleon.sys
  • C:\Windows\System32\drivers\MBAMSwissArmy.sys
  • C:\Windows\System32\drivers\mwac.sys

Also please exclude the following folders too: (The complete folder)

  • C:\Program Files\Malwarebytes\Anti-Malware
  • C:\ProgramData\Malwarebytes\MBAMService

 

Just to be clear, are you sure adding so many exceptions is necessary and safe ?

I mean, I hope you understand that I just want to make sure that my pc is safe and I might have some suspicions :D 

EDIT : Furthermore, it didn't help at all even after restarting my pc and adding all the exceptions :/

25175863bce6f992f50dc84b541f34ae.png
https://gyazo.com/25175863bce6f992f50dc84b541f34ae

Edited by DivineKataroshie

Share this post


Link to post
Share on other sites
7 minutes ago, DivineKataroshie said:

ust to be clear, are you sure adding so many exceptions is necessary and safe ?

You are just telling Avira to ignore all of the MB files so they do not conflict. You can also do the same in MB exclusion to ignore Avira files.

Share this post


Link to post
Share on other sites
19 minutes ago, DivineKataroshie said:

it still didn't fix my issue unfortunately

Let's get some diagnostic logs, please. Tell Avira to allow if it tries to block as these are safe.  This will asst us in determining if you are infected.

  1. FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs
  2. Download FRST and save it to your desktop
    NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
  3. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
  4. Press the "Scan" button
  5. This will produce two files in the same location (directory) as FRST: FRST.txt and Addition.txt
    NOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you
  6. NEXT: Create and obtain an mb-check log
  7. Download MB-Check and save to your desktop
  8. Double-click to run MB-Check and within a few second the command window will open, then click "OK"
  9. This will produce one log file on your desktop: mb-check-results.zip
  10. Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area

Share this post


Link to post
Share on other sites
4 minutes ago, Porthos said:

Let's get some diagnostic logs, please. Tell Avira to allow if it tries to block as these are safe.  This will asst us in determining if you are infected.

  1. FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs
  2. Download FRST and save it to your desktop
    NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
  3. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
  4. Press the "Scan" button
  5. This will produce two files in the same location (directory) as FRST: FRST.txt and Addition.txt
    NOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you
  6. NEXT: Create and obtain an mb-check log
  7. Download MB-Check and save to your desktop
  8. Double-click to run MB-Check and within a few second the command window will open, then click "OK"
  9. This will produce one log file on your desktop: mb-check-results.zip
  10. Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area

There you go :) hope this logs will help somehow

mb-check-results.zip

FRST.txt

Addition.txt

Share this post


Link to post
Share on other sites
1 hour ago, DivineKataroshie said:

Hey guys ! So, when I'm trying to use malwarebyte and avira together, after scanning with malwarebyte  I get a error from avira that it blocked access/changes to my proxy/files in my directory.

It's probably because malwarbytes tried to clean up some malware from my pc. '

Go ahead and allow the changes if you are alerted after a MB clean-up

44 minutes ago, DivineKataroshie said:

I hope you understand that I just want to make sure that my pc is safe

.  Using the paid version instead of just the FREE version of MB would go along way to keeping you safe.

Share this post


Link to post
Share on other sites
On 8/4/2017 at 5:39 PM, Porthos said:

Go ahead and allow the changes if you are alerted after a MB clean-up

.  Using the paid version instead of just the FREE version of MB would go along way to keeping you safe.

I'm sorry but after multiple attempts I still have the detection issue :/ 

df93cd127584576bac6a54249db0393f.png
https://gyazo.com/df93cd127584576bac6a54249db0393f

Is there any chance that despite the registry blocked detection, malwarebytes still manages to work fine ? 

Share this post


Link to post
Share on other sites

In the screenshot you posted reproduce it and this time choose settings and screenshot the window that comes up.

Share this post


Link to post
Share on other sites

@PorthosIs there any way to make this testing faster ? Haha because the reason I replied so late is because it's pretty difficult to test this settings. 

 

If not, I would need to wait for next malware to get into my pc :D 

Share this post


Link to post
Share on other sites

It is probably trying to block a registry change caused by Malwarebytes cleaning routine.  But like I had said in an earlier post the item that was detected would never have made it on your computer if you had the paid version of MB. 

Share this post


Link to post
Share on other sites

@Porthos Well, so the problem appeared again, as soon as any malware got onto my pc. And the avira still detects malwarebyte :/ After I restart pc and do the scan again the malware seems to be gone tho

 

Does it mean that the application actually worked ? I did some screenshot from my settings as you asked :

https://gyazo.com/79d44ec9fa9911e094bcc4d9a0e7754d

 https://gyazo.com/7819ed7833b6655ce991660dcde6b81c

 

unfortunetly I can't afford even one years subscription for now, so I need to somehow deal with free version for now :/

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.