Why is KTS 21 suddenly seeing MBAM as incompatible software (3x - 4x) - no reinstall of KTS?

[Berny]

@smipx

Personally i recommend to disable MBAM Ransomware Protection.

 

[Guest]

@Wesly.Zhang 

Hi Wesly,

FYI , this is working on my side :
 

 

 

 

Hi Berny.  I take you Exclusions and raise you “MBAM Service”, MBAM AE module, Chameleon and a few other critical parts of MBAM.  Twist or Stick?  This is what I have :-)

 

PLUS:

 

[Flood and Flood's wife]

Hi @Berny, 

Thank you, but, it’s already done. 

Thank you🙏

Flood🐳+🐋

[Guest]

@smipx

Personally i recommend to disable MBAM Ransomware Protection.

 

Does KSC”Free” have ransomware protection?

It seems to be working with mine at the moment - had all sorts of issues a while back (the last time this ugly situation blew up) but since I implemented all the fixes, tweaks and updates from MBAM and precumably Kaspersky the Ransomware module has been behaving impeccably (for at least 5 months). Not that it has ever been tested on my PC (and I hope never will).

Cheers,

PAul

 

[Guest]

Important to remember that I am running the Free KSC and this does not have the Firewall and possibly some other “Paid” modules so for me it may be working because of that fact alone?

 

[Guest]

Important to remember that I am running the Free KSC and this does not have the Firewall and possibly some other “Paid” modules so for me it may be working because of that fact alone?

 

Well,  I decided to do a little test.  I downloaded Knowb4 ransomware simulator to my PC and extracted the installer.  Malwarebytes deleted it before I could even run it to test :-)

Tells me what I needed to know ?

I am sure KSC would have stopped it too but I like multiple layers for a reason.  one app is 99.9% protection overall and the other is a different 99.8% protection overall and that adds to a system with perhaps 99.97% overall. Yea there may be pain points and yes the system may be 10% slower but I like that compromise as long as they can stay working together :-)    When they don’t though its a real nightmare - Been there and got the T-Shirt for it.  I hope mine keeps working ...   If not I might have to go back to another alternative and infrerior AV to keep the MBAM.  I don’t want to so fingers crossed. 

[Guest]

It would be so much easier if Malwarebytes purchased Kaspersky or Kaspersky purchased Malwarebytes and they integrated the two :-)   With those lucky “for life” Malwarebytes licence holders, of course, being looked after as they have been so far by Malwarebytes.

[Berny]

@Wesly.Zhang

Hi Wesly,  thank you for your feedback.

Strange story 🤔 :

With my few exclusions  Kaspersky Security Cloud doesn’t block MBAM updating to the latest version  4.4.2.123,  however Kaspersky is blocking the download from the latest installer, any idea ?

BTW , my only security suite is Kaspersky Security Cloud,
i only run MBAM (lifetime full version) in real-time  for testing purpose or second opinion.

[Guest]

They are taken from the Standard MBAM KB article here: https://support.malwarebytes.com/hc/en-us/articles/360038522974-Malwarebytes-for-Windows-antivirus-exclusions-list

 

There are 2 web exclusions in this article and also you need ALL of the other exclusions added per this article and it might work?  

 

I have to admit I always use the offline installer for my MBAM installs. The latest is always at: https://downloads.malwarebytes.com/file/mb4_offline so I would never have your exact issue 😜

 

Cheers,

Paul

 

[Guest]

Actually - Hold that… I just tried the offline installer and KSC blocked it - its a False Positive!

 

Today, 08/07/2021 18:23:25;C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Profile 4\Cache\f_0074c5\data0002.res;data0002.res;C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Profile 4\Cache\f_0074c5//;File;Detected;Malicious object detected;Detected;HEUR:Trojan.Win32.DllHijacker.gen;Trojan;High;Partially;Google Chrome;chrome.exe;C:\Program Files (x86)\Google\Chrome\Application\chrome.exe;C:\Program Files (x86)\Google\Chrome\Application;11016;DESkToP1\Paul;Active user;Expert analysis

 

But then… I checked myTrusted Web addresses in KSC and noticed I too have not added the two sites in that article.  As soon as I did - the offline installer downloaded just fine :-)

 

[Berny]

@smipx I am sure you understood that I am talking about Kaspersky blocking the download from the installer …

[Guest]

@smipx I am sure you understood that I am talking about Kaspersky blocking the download from the installer …

Sorry Berny. I did but I was editing my reply above at the same time you were replying to it….

But then… I checked myTrusted Web addresses in KSC and noticed I too have not added the two sites in that article.  As soon as I did - the offline installer downloaded just fine :-)

 

If you add those then does it work?

They are essential for MBAM to be able to update itself 

 

[Berny]

 

Actually - Hold that… I just tried the offline installer and KSC blocked it - its a False Positive!

 

This confirms my screenshot above.

Only Kaspersky Virus Lab can confirm or deny a FP.

[Berny]

@smipx I am sure you understood that I am talking about Kaspersky blocking the download from the installer …

Sorry Berny. 
 

No excuses of course, you are welcome.

 

[Guest]

… and remember - I’t doesn’t block it if you add those two lovely web exclusions :-)

[Berny]

@smipx With all respect for your suggestion  , i prefer a Kaspersky Virus Lab verdict.

[Guest]

Malwarebytes have instructions for how to make thier product work with AV’s - If you prefer not to follow their KB article then that is your choice of course - Malwarebytes will not work :-)  Simple :-)

 

[Berny]

@smipx For testing purpose I use my own simple configuration,  
i came back into this Topic @Wesly.Zhang only for the download issue.

[rufford155]

Happened to me this morning after restart for update to Windows - coincidence?

But it’s all happened before as Flood and others have said.

I have uninstalled MBAM and will wait for Kaspersky to correct what is obviouly their mistake !