Hi
Recently I got hit by a tiny program that gathered my passwords from firefox, IE, messengers and then tried to upload it some where on the Internet. I found this out by submitting the app to virustotal.
Malwarebytes paid program was able to catch this app before executing. However Norton Internet Security 2011 was not able to do so. I had NIS analyze the file and it saw it as clean. Well; it wasn't.
I believe you can have both applications run side by side. I am talking about the malwarebytes with real time protection enabled.
1. Use a startup delaying software (such as startupdelayer) to make malwarebytes GUI start run 30 or 45 seconds after windows start.
2. Go to NIS settings, computer settings, antivirus and sonar exclusions.
3. Click configure on BOTH "items to exclude from scans" and "items to exclude from auto-protect and sonar detenction"
4. Exclude the following
For Windows XP:
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
C:\Windows\System32\drivers\mbam.sys
C:\Windows\System32\drivers\mbamswissarmy.sys
C:\Program Files\Sandboxie\SbieSvc.exe --> if you have sandbox IE installed of course.
For Windows Vista and Windows 7:
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
C:\Windows\System32\drivers\mbam.sys
C:\Windows\System32\drivers\mbamswissarmy.sys
C:\Program Files\Sandboxie\SbieSvc.exe --> if you have sandbox IE installed of course.
Let me know what you think as real time protection feature of Malwarebytes is a terrific tool to fight malware & spyware.
nyer2011