Malwarebytes for Business now replaces Antivirus (update: now for Home users as well)

[Kaido]

This is interesting:

https://blog.malwarebytes.com/malwa...-generation-antivirus-replacement-businesses/

I'll be trying this out at a couple of small businesses I service (both the server-based version & the cloud-based version) to see how it fares & how it compares to traditional A/V's like Kaspersky & Symantec.

Can I replace my traditional antivirus with Malwarebytes Endpoint Protection?

Yes! Malwarebytes Endpoint Protection is designed to replace your antivirus solution. We believe in layered defense and built Malwarebytes Endpoint Protection to provide the right mix of proactive and signature-less technologies to combat modern threats and zero-day malware.

Malwarebytes is now a validated, next-generation replacement for traditional antivirus (AV) solutions. Coalfire Systems, a leading provider of cybersecurity, risk management, and compliance services, certified by the PCI Security Standards Council as a Qualified Security Assessor (QSA), conducted an independent assessment of Malwarebytes.

Note that this is a different product from the consumer version. Basic viz chart from their twitter:

 

[PeterRoss]

It's nice to see Malwarebytes constantly evolving and moving forward. Since their initial product was good, they just kept improving it until a point of expansion. Probably would go blind trust when it comes to them.

 

[Kaido]

It's nice to see Malwarebytes constantly evolving and moving forward. Since their initial product was good, they just kept improving it until a point of expansion. Probably would go blind trust when it comes to them.

Yeah, for sure. I'm testing out the cloud version today & the local server version next week. I service a lot of small businesses in my IT work, so having a combo anti-virus & anti-spyware would be really awesome, especially one that has good cloud management for smaller places that don't necessarily have a central AD server. Since most of the businesses have >100 users, I don't always bother with typical Windows Server stuff like GPO rollouts either, since there are faster, better, and more reliable tools available now. I'm thinking a combination of Malwarebyes for Business, Currentware, and BatchPatch will be the route I typically go. Currentware does excellent per-computer web tracking, plus their suite has some other features like being able to disable USB ports & sound easily:

http://www.currentware.com/currentware-suite/

BatchPatch is basically an amazing scripted admin tool (think PowerShell for Dummies). Among other things, it's great for targeted Windows updates:

https://batchpatch.com/

Also super userful for pushing out special updates, like the recent MS17-010 patch for the WannaCry exploit or updates for the AMT critical firmware vulnerability. I can easily zap batches of computers with verification in a much more efficient manner than going through the standard Windows server admin tools. For most companies, I typically have done a combination of A/V (like Symantec) & Malwarebytes, so I'm very interested to see how Malwarebytes fares on its own. They also seem a lot more serious about managing things like ransomware than antivirus vendors do, which is nice because even with a good backup system, prevention always saves time over having to do system restores on servers & desktops.

 

[PeterRoss]

Let me know how it fairs in your business and in your environment. Haven't had many encounters with cloud side of them, but it could be worth while.

Well, it would make sense for them to focus on malware side since that is where their origins are. I would say, dealing with malware is a lot tougher than with viruses and it could prove that Malwarebytes took a massive risk with going strictly anti-malware and coming out on top.

Good to see that you have all of the security covered and indeed let us see how combo Malwarebytes will fair in actual environments.

 

[mikeymikec]

Only 80% effective?!? But sites like av-comparatives and av-test assure me that some AV programs are 99-100% effective and even MSE/WD is about 95%!

Joking aside, I'd be inclined to trust malwarebytes AV more than others I've encountered, though to be completely fair my use of the free version is always after the infection in my line of work, which is probably not a fair comparison.

 

[PliotronX]

Yeah, for sure. I'm testing out the cloud version today & the local server version next week. I service a lot of small businesses in my IT work, so having a combo anti-virus & anti-spyware would be really awesome, especially one that has good cloud management for smaller places that don't necessarily have a central AD server. Since most of the businesses have >100 users, I don't always bother with typical Windows Server stuff like GPO rollouts either, since there are faster, better, and more reliable tools available now. I'm thinking a combination of Malwarebyes for Business, Currentware, and BatchPatch will be the route I typically go. Currentware does excellent per-computer web tracking, plus their suite has some other features like being able to disable USB ports & sound easily:

http://www.currentware.com/currentware-suite/

BatchPatch is basically an amazing scripted admin tool (think PowerShell for Dummies). Among other things, it's great for targeted Windows updates:

https://batchpatch.com/

Also super userful for pushing out special updates, like the recent MS17-010 patch for the WannaCry exploit or updates for the AMT critical firmware vulnerability. I can easily zap batches of computers with verification in a much more efficient manner than going through the standard Windows server admin tools. For most companies, I typically have done a combination of A/V (like Symantec) & Malwarebytes, so I'm very interested to see how Malwarebytes fares on its own. They also seem a lot more serious about managing things like ransomware than antivirus vendors do, which is nice because even with a good backup system, prevention always saves time over having to do system restores on servers & desktops.

Batchpatch >>> WSUS

 

[PeterRoss]

Only 80% effective?!? But sites like av-comparatives and av-test assure me that some AV programs are 99-100% effective and even MSE/WD is about 95%!

Joking aside, I'd be inclined to trust malwarebytes AV more than others I've encountered, though to be completely fair my use of the free version is always after the infection in my line of work, which is probably not a fair comparison.

I mean honestly, I would rather trust a fair 80% effectiveness that has been solid reasoning behind it, then a fake 99% one. We all know that 99% is certainly not true....

 

[mikeymikec]

I mean honestly, I would rather trust a fair 80% effectiveness that has been solid reasoning behind it, then a fake 99% one. We all know that 99% is certainly not true....

Unfortunately, plenty of people even on this forum put stock in av-test and av-comparatives.

 

[Kaido]

Batchpatch >>> WSUS

Yeah, this script was life-changing:

Update + Reboot Cycle – Create a Continuous Loop to Download and Install Windows Update Plus Reboot Until there are no Applicable Updates

 

[Kaido]

So the cloud version is pretty interesting. Login is here:

https://cloud.malwarebytes.com/

They have several packages available:

WinXP & Server 2003:
1. 32-bit agent
2. Full agent with required software (.NET framework etc.)

Windows Vista 7, 8, 8.1, 10 and Server 2008, 2011, 2012, 2016:
1. 32-bit agent
2. 64-bit agent
3. Web download agent (agent + auto-download of .NET etc. as necessary)
4. Full agent with required software (.NET framework etc.)

Mac OS X Yosemite 10.10 or higher:
1. Endpoint Agent Installer

Malwarebytes Breach Remediation:
1. A .zip package that includes the unmanaged dissolvable client.

This is basically the emergency fix-it tool, more info here:

https://www.malwarebytes.com/pdf/datasheets/MBBRDatasheet.pdf

Tools:
1. Malwarebytes Discovery and Deployment Tool

The deployment guide is available here:

https://www.malwarebytes.com/pdf/guides/DDQSG.pdf

The deployment guide covers:

1. Active Directory (AD) Group Policy
2. System Center Configuration Manager (SCCM)
3. Third-party deployment tools
4. Manually on the endpoints
5. Other scenarios that may be unique to your organization
6. Once the installation is complete, the endpoints will be displayed in the console.

Consumer & business guides available here:

https://www.malwarebytes.com/support/guides/

Other resource files are available here:

https://www.malwarebytes.com/resources/

So for starters, it's very nice to see Windows XP & Server 2003 support, especially the 32-bit versions, as a lot of small businesses I deal with still have really old machines that they use every day & don't have want to upgrade for whatever reason (budget, hardware/software compatibility, owners being too cheap, owners not caring too much about security, etc.). Also nice to see Mac support, both because OSX is getting more & more virus/spyware threats (mostly annoying adware) & because Mac users can spread Windows threats without realizing it (email, file servers, etc.), so it's nice to have that option available as well.

The cloud panel is pretty straightforward:

For management, you can create groups, schedules, and policies. So you can create say a policy for HR with a daily scan schedule in the Northwest group or whatever you'd like. For asset management, it can report storage devices, memory objects, startup programs, installed software, and software updates. The incident response & endpoint protection sections pretty much mimics the consumer version of Malwarebytes as far as settings go...you can enable scan for rootkits, it has ransomware protection built-in (yay), etc. Exclusions include: file by path, folder by path, wildcards (for both files & folders), file extension, registry key, and website. The full installer for Win7 was under 80 megs, so even that deployment is pretty lightweight (I forget the last A/V I rolled out, but the install file was like a freakin' gig lol).

Overall, pretty easy & very convenient through the cloud deployment system. I'm a BatchPatch fan, so I can just zap out the EXE through a simple script without having to go through the server. I'll try out the server-based version maybe next week & see how that fares at a larger site, as I have a lot of security renewals to do over the next few months.

 

[Kaido]

Let me know how it fairs in your business and in your environment. Haven't had many encounters with cloud side of them, but it could be worth while.

Pricing is here FYI:

https://www.malwarebytes.com/pricing/

The cloud management is under Enterprise, but typically for under 99 users you'd go with a local server using the Business edition, although I'd imagine you can request the cloud version (costs a bit more per computer) if you don't want to deal with a server install for smaller sites.

 

[Kaido]

TechRadar has a review up: (consumer version, which is billed as an antivirus replacement as well)

http://www.techradar.com/reviews/malwarebytes

Pros:
* Easy-to-use
*Powerful anti-exploit module
*Anti-ransomware monitor
*Works with other antivirus tools

Cons:
*Below-average detection rates
*High single user price

You can always run it alongside another A/V, so if you want to throw MSE or Defender on there for free, that adds another layer of detection. I'm testing that now on the business product, as I've actually had pretty good success with Microsoft's free antivirus solutions for companies that don't want to invest in a full package...although I usually at least have them get a copy of Malwarebytes, because of all the additional junk the Internet brings, so it's nice to have it in a single package, or optionally in conjunction with MSE/Defender for a two-layer budget combo.

 

[PeterRoss]

BAAAAAAAAAAATCH PAAAAAAAAAAAAAAATCH!!!!!!!!!!!!!! Its amazing how Malwarebytes has stepped up their business game, it seems to be one of the more convenient and satisfying full suite solutions out there right now.

 

[corkyg]

Does it block ransom ware? MBAM Premium does. The free version does not.

 

[Kaido]

Does it block ransom ware? MBAM Premium does. The free version does not.

Yes; Tech Radar actually tested it with a homemade encryption virus & it caught it within minutes. I think the free version lacks live monitoring, which would explain why it doesn't block ransomware, since you have to push the scan button manually.

I had to do this manually on servers previously, using an early-warning system (typically something like FolderSpy, which monitored a dummy folder for changes, in case someone's desktop got encrypted & then it spilled over to network shares), so it's nice to have it available not only for servers but also for desktops through an auto-detection & removal software package.

 

[bigboxes]

Yes; Tech Radar actually tested it with a homemade encryption virus & it caught it within minutes. I think the free version lacks live monitoring, which would explain why it doesn't block ransomware, since you have to push the scan button manually.

I had to do this manually on servers previously, using an early-warning system (typically something like FolderSpy, which monitored a dummy folder for changes, in case someone's desktop got encrypted & then it spilled over to network shares), so it's nice to have it available not only for servers but also for desktops through an auto-detection & removal software package.

No. MB had a Anti-Ransomware Beta that was free if you jumped on it early. It's now out of Beta and now only available in the MBAM Premium (for home users). I use Cybereason RansomFree for my home boxes.

 

[Kaido]

No. MB had a Anti-Ransomware Beta that was free if you jumped on it early. It's now out of Beta and now only available in the MBAM Premium (for home users). I use Cybereason RansomFree for my home boxes.

Sorry, I wasn't clear - I was referring to the pay-for Business version of Malwarebytes. Like the Premium home version, it has an option for ransomware protection. Screenshot from the cloud console:

 

[bigboxes]

Sorry, I wasn't clear - I was referring to the pay-for Business version of Malwarebytes. Like the Premium home version, it has an option for ransomware protection. Screenshot from the cloud console:

I was just stating that it has nothing to do with the manual starting of MB Free Version. It has to do with MB only including Anti-Ransomware in their paid versions, unless you got in on the Beta. I understand what you are saying now.

 

[Kaido]

I was just stating that it has nothing to do with the manual starting of MB Free Version. It has to do with MB only including Anti-Ransomware in their paid versions, unless you got in on the Beta. I understand what you are saying now.

Yes, the way I worded it was confusing.

Malwarebytes free is still pretty great, but imo if you run Windows at home, it's definitely worth buying the pay-for version, especially if you have non-technical family members who use the computer...both for the live protection & the ransomware features, in particular.

Security is a difficult thing. I've switched most of my family over to Chromebooks (Chrome & uBlock Origin + Gmail & 2FA + Google Photos), but most of the elderly users still somehow get a dozen spyware extensions anyway lol. On Windows, it's so easy to get junk on your PC, even if you're being careful, but more especially if you're an average user who doesn't really watch what they click on or download. I'm really pleased that Malwarebytes is bundling an antivirus product in with their anti-spyware solution because it's one less thing to have to manage. I am still vetting my business installations (per the Tech Radar, it's not a 100% perfect solution...but then again, nothing really is), but I am liking how it performs so far.

 

[bigboxes]

Yes, the way I worded it was confusing.

Malwarebytes free is still pretty great, but imo if you run Windows at home, it's definitely worth buying the pay-for version, especially if you have non-technical family members who use the computer...both for the live protection & the ransomware features, in particular.

Security is a difficult thing. I've switched most of my family over to Chromebooks (Chrome & uBlock Origin + Gmail & 2FA + Google Photos), but most of the elderly users still somehow get a dozen spyware extensions anyway lol. On Windows, it's so easy to get junk on your PC, even if you're being careful, but more especially if you're an average user who doesn't really watch what they click on or download. I'm really pleased that Malwarebytes is bundling an antivirus product in with their anti-spyware solution because it's one less thing to have to manage. I am still vetting my business installations (per the Tech Radar, it's not a 100% perfect solution...but then again, nothing really is), but I am liking how it performs so far.

I'm all about what can I get for free? I recommend MSE/Bit Defender + MB Free for my clients. I use a few other scanners. Like I said, Cybereason Ransom Free was recommended by some Cyber Security groups I belong to. I was already using the Beta of MD Anti-Ransomware. Once it went paid only it was a no brainer. The problem with home users is that it doesn't matter how much security you have if they choose to let the malware in. I actually do more than clean off the infection. I install free software and instruct them on how to update and scan. I also instruct them on safe surfing practices (like not clicking on the "Speed up your PC now!" button that pops up from time to time). Doesn't seem to matter. I still get a call from this retired old lady who repeatedly keeps on getting infected. I also use FF & uBlock Origin/AdBlock Plus and that keeps a lot of crap off the computer.

 

[Kaido]

I'm all about what can I get for free? I recommend MSE/Bit Defender + MB Free for my clients. I use a few other scanners. Like I said, Cybereason Ransom Free was recommended by some Cyber Security groups I belong to. I was already using the Beta of MD Anti-Ransomware. Once it went paid only it was a no brainer. The problem with home users is that it doesn't matter how much security you have if they choose to let the malware in. I actually do more than clean off the infection. I install free software and instruct them on how to update and scan. I also instruct them on safe surfing practices (like not clicking on the "Speed up your PC now!" button that pops up from time to time). Doesn't seem to matter. I still get a call from this retired old lady who repeatedly keeps on getting infected. I also use FF & uBlock Origin/AdBlock Plus and that keeps a lot of crap off the computer.

Yeah I hear you. Plus everyone wants to cheap out on their computer...spend hundreds of dollars on a nice machine & then don't bother with any sort of backup or protection. I have some friends who have lost not one but two drives worth family pictures & still have not bothered to buy either a backup drive or switch to Google Photos (which is free for regular HD photos) or some other cloud-based service.

I think probably the safest route for some people is a Chromebook with a guest user login (so they can't store extensions, lol) & 2FA login for all of their websites. Getting older people to use 2FA can be difficult tho, especially as not all of them use smartphones, so no authenticator apps or even SMS codes, plus it's an extra hassle to an already complicated-for-them system.

 

[bigboxes]

Yeah I hear you. Plus everyone wants to cheap out on their computer...spend hundreds of dollars on a nice machine & then don't bother with any sort of backup or protection. I have some friends who have lost not one but two drives worth family pictures & still have not bothered to buy either a backup drive or switch to Google Photos (which is free for regular HD photos) or some other cloud-based service.

I think probably the safest route for some people is a Chromebook with a guest user login (so they can't store extensions, lol) & 2FA login for all of their websites. Getting older people to use 2FA can be difficult tho, especially as not all of them use smartphones, so no authenticator apps or even SMS codes, plus it's an extra hassle to an already complicated-for-them system.

It doesn't have to be old people. I was visiting my sister and noticed this external that was continually running (bad practice). I could hear the HDD inside making noises (not good). I turned it off. Turns out it was my sister's and had some irreplaceable pics. I had given it to her a year ago and copied pics from a old phone. She did not back up that drive. :/

 

[PeterRoss]

Yes, the way I worded it was confusing.

Malwarebytes free is still pretty great, but imo if you run Windows at home, it's definitely worth buying the pay-for version, especially if you have non-technical family members who use the computer...both for the live protection & the ransomware features, in particular.

Security is a difficult thing. I've switched most of my family over to Chromebooks (Chrome & uBlock Origin + Gmail & 2FA + Google Photos), but most of the elderly users still somehow get a dozen spyware extensions anyway lol. On Windows, it's so easy to get junk on your PC, even if you're being careful, but more especially if you're an average user who doesn't really watch what they click on or download. I'm really pleased that Malwarebytes is bundling an antivirus product in with their anti-spyware solution because it's one less thing to have to manage. I am still vetting my business installations (per the Tech Radar, it's not a 100% perfect solution...but then again, nothing really is), but I am liking how it performs so far.

It really is surprising how elderly people manage that. Regardless, I have forced my family to use Malwarebytes, Adblock, and thought them a little internet awareness. Even so, Malwarebytes is keeping them much safer, that alone would help me trust business version as well.

 

[corkyg]

It really is surprising how elderly people manage that. ...

"All generalizations are false including this one."

I'll be 86 in September. Been doing this stuff since 1983.

 

[Kaido]

It doesn't have to be old people. I was visiting my sister and noticed this external that was continually running (bad practice). I could hear the HDD inside making noises (not good). I turned it off. Turns out it was my sister's and had some irreplaceable pics. I had given it to her a year ago and copied pics from a old phone. She did not back up that drive. :/

That's true, which is why I switched my family over to Chromebooks, haha. Bought a bunch on sale on Black Friday a couple years ago...it has really minimized my tech support requests from family members As part of the agreement, I took away their old computers & transferred their photos & files to gDrive (google gives you like 100 gigs for gDrive for a couple years free with every Chromebook). The basic setup is:

1. Chromebook
2. Files moved to Google Drive & Google Photos
3. 2FA for security (using Google Authenticator, not SMS)
4. All old email forwarded to new Gmail address
5. uBlock Origin extension for ads

I try to encourage the ones who need computers to go the Mac route, but at least to use good protection on Windows if need be (Malwarebytes, offline backup, etc.).