Malwarebytes' Anti-Malware 1.50.1.1100

[David H. Lipman]

From: "Buffalo" <Eric@nada.com.invalid>



| David H. Lipman wrote:
>> From: "Buffalo" <Eric@nada.com.invalid>



>>> Ron wrote:
>>>> Released yesterday.
>>> I updated to that version and I am running Win2000ProSP4 and MBAM
>>> will keep finding my ScriptSentry on every scan even though it is in
>>> the Ignore List several times.
>>> No big deal, but why doesn't it ignore the items in the Ignore List?
>>> It used to.
>>> Free version.
>>> Buffalo


>> Why don't you create an account on the Malwarebytes' forum and ask ?


| Sure, let me do all the work!
| Buffalo

LOL :-)


--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp

[Buffalo]

David H. Lipman wrote:
> From: "Buffalo" <Eric@nada.com.invalid>
>
>
>
>> David H. Lipman wrote:
>>> From: "Buffalo" <Eric@nada.com.invalid>
>
>
>
>>>> Ron wrote:
>>>>> Released yesterday.
>>>> I updated to that version and I am running Win2000ProSP4 and MBAM
>>>> will keep finding my ScriptSentry on every scan even though it is
>>>> in the Ignore List several times.
>>>> No big deal, but why doesn't it ignore the items in the Ignore
>>>> List? It used to.
>>>> Free version.
>>>> Buffalo
>
>
>>> Why don't you create an account on the Malwarebytes' forum and ask ?
>
>
>> Sure, let me do all the work!
>> Buffalo
>
> LOL :-).


Actually I do have an account there and just posted in the General Forum.
The item in question is a Registry Key from ScriptSentry. The other items in
the Ignore List are ignored.
The key is HKEY_CLASSES_ROOT\regfile\shell\open\command | [default]

Minor nusiance overall.
Buffalo
PS: Wish all in this NG a Happy and Fun New Year!!

[David H. Lipman]

From: "Buffalo" <Eric@nada.com.invalid>



| David H. Lipman wrote:
>> From: "Buffalo" <Eric@nada.com.invalid>



>>> David H. Lipman wrote:
>>>> From: "Buffalo" <Eric@nada.com.invalid>



>>>>> Ron wrote:
>>>>>> Released yesterday.
>>>>> I updated to that version and I am running Win2000ProSP4 and MBAM
>>>>> will keep finding my ScriptSentry on every scan even though it is
>>>>> in the Ignore List several times.
>>>>> No big deal, but why doesn't it ignore the items in the Ignore
>>>>> List? It used to.
>>>>> Free version.
>>>>> Buffalo


>>>> Why don't you create an account on the Malwarebytes' forum and ask ?


>>> Sure, let me do all the work!
>>> Buffalo

>> LOL :-).


| Actually I do have an account there and just posted in the General Forum.
| The item in question is a Registry Key from ScriptSentry. The other items in
| the Ignore List are ignored.
| The key is HKEY_CLASSES_ROOT\regfile\shell\open\command | [default]

| Minor nusiance overall.
| Buffalo
PS:: Wish all in this NG a Happy and Fun New Year!!


Looks like MBAM sees a mod to the association of how REG files are opened and thus if
changed could block the importing of REG files for the purposes of fixing mods malware
makes in placing Policies to reduce your ability to remove said malware.

{ I may start calling them Malware STIGs - LOL }

Happy New Year!


--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp

[Buffalo]

David H. Lipman wrote:
> From: "Buffalo" <Eric@nada.com.invalid>
>
>
>
>> David H. Lipman wrote:
>>> From: "Buffalo" <Eric@nada.com.invalid>
>
>
>
>>>> David H. Lipman wrote:
>>>>> From: "Buffalo" <Eric@nada.com.invalid>
>
>
>
>>>>>> Ron wrote:
>>>>>>> Released yesterday.
>>>>>> I updated to that version and I am running Win2000ProSP4 and MBAM
>>>>>> will keep finding my ScriptSentry on every scan even though it is
>>>>>> in the Ignore List several times.
>>>>>> No big deal, but why doesn't it ignore the items in the Ignore
>>>>>> List? It used to.
>>>>>> Free version.
>>>>>> Buffalo
>
>
>>>>> Why don't you create an account on the Malwarebytes' forum and
>>>>> ask ?
>
>
>>>> Sure, let me do all the work!
>>>> Buffalo
>
>>> LOL :-).
>
>
>> Actually I do have an account there and just posted in the General
>> Forum. The item in question is a Registry Key from ScriptSentry. The
>> other items in the Ignore List are ignored.
>> The key is HKEY_CLASSES_ROOT\regfile\shell\open\command | [default]
>
>> Minor nusiance overall.
>> Buffalo
> PS:: Wish all in this NG a Happy and Fun New Year!!
>
>
> Looks like MBAM sees a mod to the association of how REG files are
> opened and thus if changed could block the importing of REG files for
> the purposes of fixing mods malware makes in placing Policies to
> reduce your ability to remove said malware.
>
> { I may start calling them Malware STIGs - LOL }
>
> Happy New Year!

Thanks for the info.
Buffalo

[Buffalo]

David H. Lipman wrote:
[snip]
> Looks like MBAM sees a mod to the association of how REG files are
> opened and thus if changed could block the importing of REG files for
> the purposes of fixing mods malware makes in placing Policies to
> reduce your ability to remove said malware.
>
> { I may start calling them Malware STIGs - LOL }
>
> Happy New Year!

MBAM duplicated the find and said it is a bug that will corrected in the
next version.
Very minor problem, but I am very pleased with their quick response, testing
and replies.
Buffalo