Malwarebytes ideas

[kakashi2000]

hi Malwarebytes here some ideas so you can improve more 

you shold add a new engine for IDS AND IPS for network security and attack protections 

make a new engine for home device exploit protection. this why protect your modem and routers I hear that the FBI say some malware infect the router with malware and other things making routers vulnerable to attack or host routers infections to  target and  send attacks to  other networks locations with the infected routers or modems 

make dos and ddos protection 

make a special scrips protection  why because there are lot of website that have hidden scrips attacks that infect the pc with malware scrips attaking the windows 10 to steal data ,damage the windows 10 ,lock the full tab of the browser hacking your pc ,you add java and flash to protect it too 

make better detection to detect hidden malware hidden in the https or http  encryption I here some malware hide and are encrypted and any anti virus don't detect it 

make a strong pop up blocking this is a problem most website infected have  a stupid pop up open when you enter a website this sucks but most of the pop ups are infected with diferent type of malware

that continue opening pop up infected  make something yo can block or allow  if you like it 

make a strong web code report with privacy  this mean when you enter a website malwarebytes will scan and send a report of the code of any website so you can  detect malware  and ect /please don't invade users privacy 

make a network monitor to see what ports are open or close on the windows 10 

improve security in windows 10 remote to prevent hackers have remote access to your pc 

improve compatibility with other anti virus  and engine so Malwarebytes don't have conflict with other anti virus and the pc and start freezing or getting laggy 

improve to detect  malware spy tools that the government use to spy and invade privacy

add webcam protection to protect your webcam so hackers cant bypass webcam security  

improve cpu performance and memory performance 

improve backdoor detection for windows 10 and website and ect

improve solid security protection  for all sharing areas of windows 10 and all areas and ect  so hackers can bypass the sharing areas 

improve anti spam 

make a new engine that when you enter to your Hotmail and you select to read your message detect if that message is infected or is a fraud message and ect  so you be secure too 

add a new engine to encrypted website that don't have https 

ect just helping 

 

 

Edited June 7, 2018 by kakashi2000

[exile360]

Greetings,

Thanks for the suggestions, though there are a few of them at least which are actually already covered in Malwarebytes Premium as well as some of the other offerings from Malwarebytes:

• Malicious IP addresses are already blocked as well as malicious domains/URLs and there's also a (currently free) Malwarebytes browser plugin for Chromium and Firefox/Mozilla based browsers (Edge support coming soon) which is currently in beta that blocks additional items, including malicious pop-ups, tech support scam sites, phishing sites and tracking servers, many of which are blocked not just through positive identification of specific domains/URLs or IP addresses, but also via behavioral detection (such as tech support scam sites that try to prevent you from closing their pop-ups etc.).  The Web Protection in Malwarebytes is also very good for preventing DDoS attacks as it blocks many of the servers and networks known to be used in such attacks, though it doesn't specifically target DDoS/DoS attacks behaviorally (your router/hardware firewall should cover this, and you can use a software firewall such as Windows Firewall Control which was recently acquired by Malwarebytes and will most likely be integrated in some form into the main Malwarebytes Premium product at some point down the road).
• With regards to malicious scripts in websites (as well as documents and other non-executable/non-PE files), these are already covered by the signature-less, behavior based protection in the Anti-Exploit component of Malwarebytes Premium and the same goes for any other hidden malicious content found on webpages you visit (both HTTP and HTTPS, though I'd strongly recommend using a plugin such as HTTPS Everywhere to force all sites you visit to use HTTPS as it has become the standard and even Google is beginning to push websites to switch over to HTTPS; more info here, here, here, here, here, here, as well as here).
• Regarding pop-ups, while I already mentioned the Web Protection in Malwarebytes Premium as well as the Malwarebytes browser plugin beta, there are also already excellent pop-up blockers built into all modern web browsers (the most robust I've found of the 3 major web browsers based on my own experience so far is the one built into Internet Explorer when cranked up all the way so that it blocks all pop-ups and asks you to allow pop-ups from sites that attempt to display them, though the ones built into Chrome and Firefox are pretty good as well, though some pop-ups do get past them, at least in my experience).
• With regards to privacy, refer to the Malwarebytes browser plugin I mentioned as it blocks common tracking servers to protect privacy, and beyond that, the cookie blocking capabilities built into all web browsers is also quite useful in that regard, especially if you max out the setting so that it blocks all cookies (though this will prevent some sites from working such as pages you have to sign in to use so you'll need to add those to your exceptions/allowed lists in your web browsers).
• Regarding ports, this too is the job of a hardware and/or software firewall (including your router if you use one for connecting to the web) and since Malwarebytes acquired Binisoft as I mentioned above, a software firewall will likely be integrated into Malwarebytes Premium before long.
• For both antivirus and other security software compatibility as well as CPU and memory performance, Malwarebytes is always striving to improve these areas and the latest release, version 3.5.1 Component Update 1.0.374 is the best so far so if you haven't got it yet, open Malwarebytes and go to Settings>Application and click the Install Application Updates button to get it  
  
• With regards to both remote access as well as sharing, these can easily be secured in Windows (I tend to disable them completely personally as I never use them) and should also be secured by your software firewall (again, as I mentioned before, since Malwarebytes acquired Binisoft, this should be covered in the future once it is integrated into Malwarebytes Premium)
  
• Regarding stealth malware including spy tools, backdoors, Trojans and rootkits, these all should already be covered by the various layers of defense built into Malwarebytes, including its various behavior based signature-less components as well as those which do use signatures and of course the anti-rootkit component built into Malwarebytes which detects hidden/stealth objects such as rootkits.
  
• For webcam security, while it is possible to have a software tool alert the user when a program attempts to activate their webcam, I personally prefer a more robust hardware solution such as the covers you can purchase that cover the webcam to prevent its use physically even if it is switched on without you knowing so that you can simply remove/open it deliberately only when you wish to use your webcam.
  
• Any threat, malicious link, attachment etc. embedded in an email should be detected/blocked by the various protection components in Malwarebytes, even though it doesn't explicitly integrate a plugin into email clients the way many AVs do, it does still check any URL you click as well as any remote URL the message might attempt to load any content from so that it is blocked if it is a known malicious server, and thanks to the malware protection and exploit protection in Malwarebytes Premium, any malicious attachment should be detected as well as soon as you try to open it/execute it (we leave scanning attachments/email content on download to the AVs as this is one of the ways that Malwarebytes maintains good compatibility with them as attempting to do otherwise would create conflicts with them, so they get to scan the content first so that if they miss it and you try to run it/click it, Malwarebytes will then step in and block/detect/quarantine the threat).
• While Malwarebytes does not include any specific anti-spam components (again, we leave this up to the AVs as this is one of their areas and we don't want any conflicts), we do target/block known spam/scam domains/URLs/IPs etc. so that if you should click on a spam address in an email, it should be blocked by Malwarebytes, especially if you have the new beta Malwarebytes browser plugin installed in your default browser.
• With regards to unencrypted websites, see my comments above regarding HTTPS Everywhere as well as the info about Google starting to attempt to force HTTPS for the entire web (and many others in the industry are following suit) so if a site isn't secure, especially if it's a site where you intend to enter any personal information, including your name, email and especially any purchase info such as a credit card number etc., then I would strongly recommend not doing so as you want such information to be secure, and securing the info on your end via some plugin wouldn't be sufficient, if they aren't providing HTTPS then I would question their commitment to securing user data and wouldn't trust them with it even if I were able to force the communication of that info to be secure.  It's just a bad idea to give a site like that your info no matter what.
  

I hope that helps to clarify things.  You have a lot of solid ideas there, and many of them likely will be addressed in the time to come as these new components are integrated into Malwarebytes, and for many of the others your antivirus should cover them and we don't want Malwarebytes to conflict with your AV, so Malwarebytes must be careful about what kinds of features they choose to implement.

I will definitely advise the Product team on any new ideas you provided which would be a good fit for Malwarebytes if it's an area they aren't already covering, and if you have any additional ideas in the future please let us know as we're always looking for such feedback/ideas.

Thanks  

[exile360]

By the way, the Exploit Protection in Malwarebytes also already covers both Java and Flash browser plugins, so exploits which attack them should be detected/prevented (along with other browser based exploits).  In fact, any plugin you run within a protected/shielded browser should be protected from exploits and 0-day vulnerabilities thanks to Exploit Protection in Malwarebytes Premium.

[makeupbyomar]

Hi Guys,

Not sure if this has topic has been brought up before, and I can't seem to find this particular feature in the 'settings' menu, unless I am missing it... However,

Does Malwarebytes scan other drives (besides the default C drive) and USB plug and play drives? 

Thanks.

[exile360]

Greetings,

Yes it does, via the Scan tab if you select Custom Scan you may select which drives to scan.  Also, if the right-click context menu Scan with Malwarebytes option is enabled (which it is by default) you may right-click on any drive to scan its contents.

Beyond this, Malwarebytes also checks all running processes and threads in memory, regardless of where their physical files might reside when performing scans that include the memory scan phase, including the default Threat scan, so if a malicious item is active in memory, it should be detected regardless of where it is located.

If there's anything else we can answer for you, please let us know.

Thanks  

[makeupbyomar]

Ahhh! There it is! Thanks exile360, much appreciated.

Cheers.

[exile360]

You're very welcome  

[Arsenal123]

I have a suggestion - I'd like an option to automatically turn off the PC after a scan is complete it's an option in Kasperaky and Mcaffe(and possibly other A.V's)

[exile360]

Greetings,

The most likely reason this option hasn't been made available is because the default scan type, the Threat scan, is normally very quick so there's no need to launch the scan and leave the computer running for a long time for it to complete, generally only taking a few minutes.

There is a Custom scan which can be used as a full scan function via the options provided, however this type of scan is not selected by default and generally not very useful since the Threat scan has been designed by the Researchers and Developers to look in all the areas where malware actually installs itself along with several key locations where malware droppers/installers are commonly found (such as the Desktop and Downloads locations and all of the temp folders).

That is not to say that this is not a good idea, I'm just not sure how useful it would be to most users.

With that said, were you looking for a shutdown option for scheduled scans or for manual scans?