Jump to content
Tertiumquid

App Block & Polaris Office

Recommended Posts

I understand the rationale for App Block, a recent feature addition. But I need to know *why* Malwarebytes is applying it to my Polaris Office suite. Anybody know what the basis was for that decision? If it's bad news, let's hear it.

I assume (always dangerous) that Malwarebyte block of Polaris is either

1) Polaris is known for sloppy security in their easily abused code, or 2) something unknown to me is resident in the Polaris executable.

Whichever, I need to make a decision to override or not.

Share this post


Link to post
Share on other sites

Can you attach the file being detected and the scan log? Thanks.

Share this post


Link to post
Share on other sites

I am happy to but the instructions seem to be for a Windows machine. When I run Malwarebytes v-3.7.34 I get a list of "reports" including  "PROTECTION NOTIFICATION: MALWAREBYTES HAS BLOCKED POLARIS OFFICE" but there is no "Export" button I can find anywhere.

Share this post


Link to post
Share on other sites

I see in the reports list that protection was updated to Version 4.0.369 but that was prior to the Protection Notification blocking Polaris from running.

What do you advise?

Share this post


Link to post
Share on other sites

Also, Cindy, the file being protected is PolarisOffice.app and it's 287MB, so I don't know how to send that to you. I can't get at the logs as I mentioned above. I suspect that Malwarebytes has hardwired its software decision to block Polaris. But why? Or do you disagree?

Share this post


Link to post
Share on other sites

I'm not familiar with the Mac product, but I'm looking into how to best assist you. There can be different reasons why it is being detected and usually having the log and file will allow us to give you an accurate answer as well appropriate actions to take.

Share this post


Link to post
Share on other sites

I've investigated this, and it looks like Polaris Office is being blocked because it's signed with a certificate that we have seen being used to sign adware installers... specifically, the adware called InstallCore. I'll investigate further, but best case scenario, they distributed InstallCore installers that were signed with their certificate, which is not the behavior of a particularly respectable company. For that reason, I'd suggest using a different office suite. macOS already comes with the Pages, Numbers, and Keynote apps for free, which are pretty decent at importing and exporting Microsoft Office documents.

Share this post


Link to post
Share on other sites

Hey Thomas, Thanks for your putting time to investigate. Adware installers, especially loaded without user knowledge is shady indeed. You've filled out the playing field.

Given Malwarebyte's mission and what your research turned up, I would have made that same management decision. However, I would have additionally provided an over-ride option for users, who for whatever reason, needed to use a particular application. I know decision makers at Malwarebytes to be wary of opening any door (over-ride) that may make problems for you and your colleagues. I appreciate your suggestion at Apple's software suite. I've been there over that last years. I need a professional suite (meaning designed for professional use–––one earmark of which is the software's ability to get at a solution from more than one sequence).

In the case of Polaris, it has been quite useful and without (known) issues technical or adware-wise (not to say they couldn't improve their design. They should). There might have been adware sneaking in their back door, but none I'm aware of or even have experienced. Polaris also runs on my Android phone with grace and aplomb.

That last sentence hints at the fact that for me, Apple is not my diehard standard champion. They make good hardware which is why I gratefully use this Macbook and spent many years with an iPhone in my hand.  But, software designed as a professional tool is, in my little opinion, not what Apple can be admired for. Thus I have looked deeply and reject most if not all Apple software, but for their OS. I know many Apple users disagree, and it's all fine for them. Anyway, I've switched to Android without regret and gained controllability Apple famously remains opposed to. Yes, Google is frustrating on many fronts but overall, Android serves me well and I just do not miss Apple's iPhone, and haven't looked back. Ever.

I am happy to consider other "suites" but at this moment know of none other than MS that runs on both MacOS and Android. Should you ever come across one that Malwarebytes allows to run either natively or with over-ride, do, please let me know.

I hope Malwarebytes revisits the issue and provides App-Block over-ride. I deeply appreciate your input. But it Looks like I've got to make decisions....

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.