Trojan in Malwarebytes Free

Hi Imacri,

Thanks.  I found Deactivate.

and now @Krusty13 re Enable self-protection module


MBAM Free Dashboard.png

R Palmer:

Thanks for the reply, but I wasn't clear enough. It was the Malwarebytes scan that showed up the Trojan in it's own program!

Hi R Palmer:

There has been a slight change in the way you switch to the free version of Malwarebytes.   With the old Malwarebytes Anti-Malware (MBAM) v2.x the installer prompted users to decline the 14-day trial during the last step of the installation process.  The new Malwarebytes (MB) v3.x installer now requires users to go to Settings | Account and click Deactivate Premium Trial after MB v3.x is installed as described the support article How-To: Deactivate Trial version in Malwarebytes 3.

When you downloaded the MB v3.x installer from the official site did you download from the main website at https://www.malwarebytes.com/free/ or the direct download link at https://downloads.malwarebytes.com/file/mb3?  Both links are currently downloading a 66,806 KB installer named mb3-setup-consumer-3.2.2.2029.exe.  I just submitted that installer for a SHA-256 hash analysis to VirusTotal.com and the report at https://www.virustotal.com/#/file/d02b91b47647a7545e7bb021711bbaf4cb7045d2088a39cce5b6e3c8ceb3eda0/detection shows that over 80 scan engines report that installer is safe.

Krusty13:

Norton has detected what I am sure is a false positive in Malwarebytes quite a few times.  I think it has something to do with the Malwarebytes definitions...

Apologies in advance if I misunderstood, but I think Krusty13 was referring to .tmp files in Malwarebytes folders that are sometimes detected as false positives by Norton scans.  See Pkshadow's thread NS scan finds malware in a Malwarebytes/temp file for one example of a user that would see temporary Malwarebytes files flagged as a possible Trojan by Norton after they installed MBAM v2.x in a custom folder on their D:\ drive.

It sounds like you are talking about a Malwarebytes scan that is detecting a Malwarebytes file as a Trojan.
------------
32-bit Vista Home Premium SP2 * Firefox ESR v52.3.0 * NS Premium v22.10.1.10 * MB Premium v3.2.2

Ah yes, good screenshots, that's what I got when I said install free version, I got exactly that, I think Malwarebytes has got tired of a lot of us using the proper free version.

Anyone know an alternative free version of a Malware seeker?

Krusty13:

Norton has detected what I am sure is a false positive in Malwarebytes quite a few times.  I think it has something to do with the Malwarebytes definitions.  In the Premium version of Malwarebytes you can enable Self Protection which stops this.  I don't know if that is available in the free version of not.
I hope that helps a little.
Cheers.

IDK what happens to Enable self-protection module switches upon trial expire.
With Reat-Time Protection OffEnable self-protection module switches remains at default.

YMMV

Startup Options

These settings define how Malwarebytes will behave when your computer starts. You may launch several applications at startup, and they may initiate startup processes which require Malwarebytes launch timing to be adjusted. Let's look at each setting in detail.

  • Start Malwarebytes at Windows startup: If this setting is off, Malwarebytes will not start with Windows. No real-time protection layers will start when Windows starts, though they may still be started manually by launching Malwarebytes.
  • Delay Real-Time Protection when Malwarebytes starts: There may be times when the startup of system services used by Malwarebytes conflicts with services required by other applications at boot time. When this is the case, turn this setting on. You may also adjust the delay timing. You will need to experiment with the specific delay setting necessary to compensate for any conflicts that are noted. When required, this must be done on a case-by-case basis. The delay setting is adjustable from 15-180 seconds, in increments of 15 seconds.
  • Enable self-protection module: This setting controls whether Malwarebytes creates a safe zone to prevent malicious manipulation of the program and its components. Checking this box introduces a one-time delay as the self-protection module is enabled. While not a negative, the delay may be considered undesirable by some users. When unchecked, the "early start" option which follows is disabled.
  • Enable self-protection module early start: When self-protection is enabled, you may choose to enable or disable this option. When enabled, the self-protection module will become enabled earlier in the computer's boot process, essentially changing the order of services and drivers associated with your computer's startup.

 

https://www.malwarebytes.com/support/guides/mbam/Settings2.html?lang=en#startup 

Well you could try it, see if Norton flags it like it did mine. If it says Trial version, they have obviously changed something.

If you do install it, run a Malwarebytes scan, see if it quarantines the program and flags it as being in the Malwarebytes, if yes like mine, uninstall!

I'll post the reply I get from Malwarebytes, I told them about this two days ago, still waiting!

R Palmer:

I've been using Malwarebytes for years, I think that option has disappeared, I did the usual, clicked Download FREE version, tried it three times, it installed the trial every time and Norton warned each time 'needs attention' Said only 4 people in Norton Community had used it and it was a new file only a couple of weeks old.
I was going direct to the true site, but I'm not touching it again 'til they reply to my email, they seem a bit slow!

you may Close X Upgrade Now window and run Trial or Close X Upgrade Now window and turn off Real-Time Protection.Free source: https://www.malwarebytes.com/mwb-download/

https://www.malwarebytes.com/support/guides/mbam/Settings2.html?lang=en#rtp

https://www.malwarebytes.com/support/guides/

I just launched it and got the “newer version ready to be installed”… i think i shall hold off now.

I've been using Malwarebytes for years, I think that option has disappeared, I did the usual, clicked Download FREE version, tried it three times, it installed the trial every time and Norton warned each time 'needs attention' Said only 4 people in Norton Community had used it and it was a new file only a couple of weeks old.

I was going direct to the true site, but I'm not touching it again 'til they reply to my email, they seem a bit slow!

not sure about the Trojan aspect, but as for the installing the trial version issue, if I recall during the installation process you need to uncheck the “install free trial” option to get the free version to install.

Thanks for the reply, but I wasn't clear enough. It was the Malwarebytes scan that showed up the Trojan in it's own program!

Norton has detected what I am sure is a false positive in Malwarebytes quite a few times.  I think it has something to do with the Malwarebytes definitions.  In the Premium version of Malwarebytes you can enable Self Protection which stops this.  I don't know if that is available in the free version of not.

I hope that helps a little.

Cheers.