Re: Opinions on malwarebytes virus cleanup software?

[Mark Rogowski <m.rogowski () UWINNIPEG CA>]

We have acquired a few technician's licenses for use on our desktops here.  MalwareBytes is but one of a few utilities 
used to clean systems.  Like AV, we notice that different packages tend to leap-frog each other - one month Product X 
appears to be more effective than Product Y, and vice versa the following month.
 
Our desktop group examined the possibility of replacing our current AV with Malwarebytes but found the lack of any 
centralized management to be operationally prohibitive (when you have 3 FTEs supporting 1700 desktops plus a multitude 
of labs this becomes important).
 
I'm not certain, but I recall hearing that MalwareBytes needs to obtain updates from the main site - it cannot be 
configured to download pattern files from a local source.  When you have 1000+ systems pulling down updates across the 
'net daily that can chew up a fair bit of bandwidth...
 

--On Monday, February 22, 2010 2:39 PM -0600 "McCrary, Barbara"=20
<bmccrary () OGSLP ORG> wrote:

> I don't know what has changed at Malwarebytes, but it has been less
> effective as of late, last 3 or 4 months,  in catching and cleaning some
> of the latest malware.  I am talking about the free version.
> Barbara McCrary
> Chief Information Security Officer
> MCSE, MCSE:Security, +Messaging, CompTia:Security+
> bmccrary () ogslp org <mailto:bmccrary () ogslp org>
> Oklahoma State Regents for Higher Education
> 421 NW 13th, Ste 250
> Oklahoma City, OK  73103
> 405 234.4316 office
> 405 234.4321 cell
> 405 234.4588 fax
> Note:  This communication and attachments, if any, are intended solely
> for the use of the addressee hereof.  In addition, this information and
> attachments, if any, may contain information that is confidential,
> privileged and exempt from disclosure under applicable law.  If you are
> not the intended recipient of this information, you are prohibited from
> reading, disclosing, reproducing, distributing, disseminating, or
> otherwise using this information.  If you have received this message in
> error, please promptly notify the sender and immediately, delete this
> communication from your system.
>
> ________________________________
>
> From: The EDUCAUSE Security Constituent Group Listserv on behalf of
> Christianson, Lorrayne K. Sent: Mon 2/22/2010 1:31 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU 
> Subject: Re: [SECURITY] Opinions on malwarebytes virus cleanup software?
>
>
>
> Colleen,
>
> I was just perusing my Educause archive for info on Malwarebytes. It
> looks as though many institutions are using is as we do, mainly to clean
> after an infection. Your response mentioned you were considering
> purchasing the corporate version. Did you go forward with that purchase?
> If so, what feedback can you provide on the success of the full product.
>
> Thank you for your assistance
>
> Lori Christianson
>
> Associate Director, Client Services
>
> University of St. Thomas, St. Paul, MN
>
> 651-962-6286
>
>
>
>
>
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Colleen Hurd Sent:
> Wednesday, December 10, 2008 4:23 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU 
> Subject: Re: [SECURITY] Opinions on malwarebytes virus cleanup software?
>
>
>
> We just recently started using MalwareByte's AntiMalware (MBAM) and have
> found it to be an excellent tool for removing some of the peskiest
> malware, especially the fake antispyware variety.  The free download
> allows full scanning capability with manual updating. Their licensing for
> the free version does not restrict its use in an academic environment,
> subject to standard-type limitations on modifications, etc.
>
>
>
> Since Antivirus products are just not up to the task of preventing many
> of the most prevalent malware infections, we are looking at adding a
> malware protection product to our arsenal.  Given the increasing rate of
> drive-by downloads and the hotbed of Facebook malware activity, we are
> spending way too much time cleaning up after the fact.
>
>
>
> Registering the MBAM product with a purchased license adds real-time
> heuristic protection and automatic updating. I inquired about their
> volume discount pricing for educational/non-profit use, and just received
> a quote yesterday for $1.16/per license/per year based on 800 licenses.
>
>
>
> We also heard from a student today that Dell phone support recommended it
> to her as a good malware solution.
>
>
>
> Best,
>
>
>
> Colleen Hurd
> Network/Help Desk Technician
> Vermont Law School
> 802-831-1354
 
Mark Rogowski  CISSP, CISM
IT Security
Technology Solutions Centre
University of Winnipeg
Ph: (204) 786-9034
> > > > Gary Flynn <flynngn () JMU EDU> 12/10/2008 4:59 PM >>>
> Any opinions on this software:
>
> http://www.malwarebytes.org/ 
>
> Our support staff is recommending it.
>
> --
> Gary Flynn
> Security Engineer
> James Madison University
> www.jmu.edu/computing/security 



Richard

http://www.bris.ac.uk/infosec