ANTI-MALWARE PRO Reviewed May 2009 What’s it do? The program claims to detect and remove malware that even the most well known antivirus and antimalware applications fail to detect. The Real-time Protection Module uses advanced heuristic scanning technology. The Threats Center keeps up-to-date with the latest malware threats. The program features quick scanning on all drives, daily database updates, quarantine, ignore list for scanner and Protection Module, extra utilities for manual malware removal, and multilingual support. It works together with other antimalware utilities and provides context menu integration to scan files on demand, scheduled scanning, and scheduled updating. Does it do what it promises? Reviewer 1: Probably. I tested Anti-Malware Pro's ability to recognize and block the 17 malware exploits on the Spycar site (http://www.spycar.org/). These are designed to mimic malware behavior in order to test the performance of anti-malware programs. Anti-Malware Pro quickly identified and quarantined all 17, giving them no opportunity to harm my computer. Although this speaks well for Anti-Malware Pro's capabilities, I could not put it to a more authentic test, since I was unable to find any real viruses or other malware for it to block or remove. Using the PowerShadow sandbox program, I even went to all kinds of unsavory Web sites and downloaded files that I thought would be evil, but all my anti-malware programs agreed that they were harmless. Reviewer 2: Yes. Although I took my computer to some of the wilder frontiers of the Internet, and deliberately tried to get "infected", Malwarebytes' AntiMalware Pro had erected an effective barrier. I was unable to entice any kind of badware to lodge itself on my computer. Reviewer 3: Anti-Malware Pro claims to identify and remove malicious software. In my testing it appears to work well, scanning quickly and maintaining a constant watch for offending intruders. Reviewer 4: Yes. It claims to “detect and remove malware that even the most well known anti-virus and anti-malware applications fail to detect.” My testing over many months found this statement to be true but with one exception: it tends to not do as well on tracking cookies as others. Was it easy to install? Reviewer 1: Anti-Malware Pro downloaded and installed quickly and easily and offered the option of adding desktop and/or quick launch icons. After installation, it checked for updates. I was told to click on the Start Protection button to enable the Protection Module. I did so and was told that the Protection Module was now protecting the computer, although no further explanation was provided. Everything went very smoothly until I rebooted some hours later. The computer hung and I had to force it to turn off. I tried to reboot again, with the same result. Eventually, I booted into Safe Mode and uninstalled Anti-Malware Pro. Tech Support provided instructions for using a cleanup program and then reinstalling a fresh copy of Anti-Malware Pro. The problem recurred but this time I couldn't get into Safe Mode. I eventually was able to remove the program from my computer and Tech Support worked with me for well over a month to identify the source of the problem, an incompatibility between Anti-Malware Pro and the version of McAfee Enterprise Edition anti-virus software that I was using. When I switched to a newer version, the problem disappeared but recurred when I updated the McAfee software to version 8.7. I had to remove Anti-Malware Pro from my computer. Reviewer 2: Yes. On a fast cable connection the program file downloaded very quickly; in fact, I was not even sure that it had started. It uses a standard Windows installation process that allowed me to place the program and its shortcuts where I wanted. The downloaded file is freeware and a dialog informs that users may upgrade to the pro version, which contains real-time protections, scheduled scanning and updating for a one-time payment of $24.95. Reviewer 3: Yes, this program installed easily and resides in the system tray providing active protection. Reviewer 4: Yes. The 2.61MB is almost tiny in comparison with its competitors such as the popular AdAware at a bloated 32.9MB, or even Spybot Search & Destroy at 15.6MB. It installs smoothly in about 30 seconds using standard wizards, and immediately following set-up it prompts for an update to get the latest definitions files. This is an unusually fast and easy installation. The EULA (End User License Agreement) may be one of the most straightforward, easy to understand (no legalese) EULAs I have seen. The application is free or for a one-time fee of $24.95, real time protection is enabled. There is unrestricted use of the application, and support and upgrades are free for life. Good points Reviewer 1: I am impressed with several aspects of Anti-Malware Pro. One is that the malware definitions are continually updated. Although the automatic update feature operates once a day, updated definitions are usually available for downloading even more frequently. This makes it more likely that new malware will be prevented from doing harm. The software program itself is also being frequently updated. In the five months that I have been testing the software, there have been at least half a dozen updates to the program. Another thing I like about Anti-Malware Pro is its extremely fast and efficient Quick Scan. Many anti-malware programs take close to an hour to scan my hard drive. Malwarebytes has devised a Quick Scan that they claim will detect malware just as well as a full scan. On my computer, the Quick Scan usually took a mere four or 5 minutes. The Quick Scan's speed is likely to encourage users to run more frequent scans, thereby adding to Anti-Malware Pro's ability to spot and remove new infections. Unlike many anti-virus and anti-malware programs that charge a yearly fee for continued protection, Anti-Malware Pro is available for home use for a one-time fee, currently $24.95. For me, one of the most annoying faults of many anti-malware programs is a false positive. Such faulty claims result in my spending needless amounts of time running additional scans, searching for information about the supposed infections, and communicating with the anti-malware companies. I am pleased to report that in the entire time I used Anti-Malware Pro, it never incorrectly claimed that there was malware on my system. During this same time, scans with several other anti-malware programs on my computer did report what turned out to be false positives. Perhaps the aspect of Anti-Malware Pro that impresses me most is the extraordinary tech support it offers. When I was having trouble getting Anti-Malware Pro to work on my computer, Tech Support worked intensively with me for more than a month to try to identify the cause of the problem. They provide detailed help to many in the Malwarebytes Web forum and offer this assistance regardless of whether the person is a paying customer or someone using the free version of the software. Reviewer 2: As with all other aspects of Malwarebytes’ AntiMalware Pro, the Main Window is simple and elegant. All functions are available with tabs across the top from the one interface and each screen appearing from clicking the tabs is also simple and clear, with no confusing clutter of choices or layers of sub-menus. Nor are there any other bells and whistles added that are not consistent with the one function of the program – to protect one’s computer from malware, or to remove it, if ever it is discovered. In December 2008, I installed Malwarebytes' AntiMalware Pro on a computer that has another active anti-virus program. At no time was there ever any conflict between the two programs; this is not always the case when there is more than one anti-badware running on the same machine. Every other anti-malware program that I have used seems to find it important to remind me of their presence by displaying a prominent splash screen as they start, taking front and center stage when they are updating themselves, and popping up to inform that they have stopped an attack, and so on. In some cases, they have interfered with Web surfing or disallowed me from downloading suspect files, even though the files subsequently turned out to be safe. Some have made themselves so annoying that I have banished them from my computer. Malwarebytes' AntiMalware Pro is not only effective, but it does its work completely in the background. In fact, some time after having set it up, I actually forgot that it was there. Yet it is always up-to-date, it always runs regular scans, and is always effective in preventing any malware from getting onto my computer. I did spend several long sessions attempting to infect my computer but I was completely unsuccessful. I uninstalled all other protection devices, so that Malwarebytes’ AntiMalware Pro would be the only protection on my computer and my computer remained clean. Incidentally, I have a storage directory on one of my backup drives, where old programs from the mid-nineties have been archived. Every other anti-malware program that I have used has usually picked on three or four of these old programs, and reported them as spyware or viruses. These oldies predate spyware, yet they are always flagged. Malwarebytes' AntiMalware Pro is the only one that has not picked them out and falsely reported them as dangerous. Malwarebytes' AntiMalware Pro offers protection against all varieties of malware: virus, spyware, Trojans, worms, and so on, in one single program. It does so without having a significant impact on my system, and does not interfere with the normal operation of my computer. I have the updates and daily system scan set to run at night, when the computer is usually scheduled to do all its maintenance tasks. However, even though the daily update on one machine is set to take place during the day, I have never particularly noticed it, and it has not interrupted my work. This is another feature that sets Malwarebytes' AntiMalware Pro apart from the experience I have had with all other "protection" programs. Malwarebytes' AntiMalware Pro provides the user with a set of additional tools, but they are specifically designed to help deal with issues if they are found. Logs are kept of all scans, and any one of them is easily available. In the "More Tools" tab there are several buttons to get further information, to contact support or to log on to the users’ forum to report a bug or to report a false positive. Reviewer 3: This application does seem to work well, maintaining itself with daily updates to the signature database that can be scheduled whenever desired. The scan was fairly quick, typically taking 8-10 minutes for the “quick scan”. The “Full Scan” took longer, (45-60+ minutes) but looked at every file and location. Scanning and Updates can be scheduled via drop downs and check boxes on the “Protection” tab. Startup with Windows can be elected or decline from the check box on this page. This was one of those “set it and forget it” applications that worked without being intrusive. I did see a hit on resources when AntiMalware Pro scanned, but with the fast operation it was never a big problem. There were no conflicts with other antivirus and malware applications. It did its job quietly and without a lot of big pop-ups, flashing banners and sirens. When something was found during a scan, it simply pops up a small window and providing a hyperlink to launch the program’s interface to see what it found. Reviewer 4: Having tested virtually all of the major ant-malware tools over the last several years, and as a consultant occasionally called on to remove malware from infected Window’s computers, Anti-Malware may well be one of the best such applications currently available based on its ease of use, size, cost, and most importantly its ability to detect and clean infections. For my testing, I used for comparison and installed where needed the following anti-malware/anti-spyware programs: WebRoot’s SpySweeper, Sunbelt’s CounterSpy, Super Anti-Spyware, A-Squared Anti-Malware, AdAware, and Spybot Search & Destroy. I purposely downloaded the notoriously impossible to get rid of AntiVirus 2009 Trojan, a particularly nasty W32/Mmorpg Trojan, and the notoriously hard to clean and prevent Vundo Trojan. Additionally, I visited multiple unsavory sites known to be ripe with infections of all sorts: adware, spyware, Trojan, worms, rogue security software, and so on. I then scanned my computer with Anti-Malware, quarantined the findings, restored them to my machine, and repeated the test with the aforementioned six of the most respected and highly rated antispyware programs on the market. The results showed that Anti-Malware: • was the only one of the seven applications to remove the AntiVirus 2009 Trojan. Spybot Search & Destroy detected it but could not remove it. The other applications neither detected it nor removed it; and, • was the only of the seven applications to be able to remove the W32/Mmorpg Trojan. SpySweeper, CounterSpy, and SuperAnti-Spyware detected it but could not remove it completely. The remaining three did not even detect it, and, • was the only application to remove the Vundo Trojan. CounterSpy, Super Anti-Spyware, A Squared, and AdAware detected it but could not remove it. The other did not detect it or remove it; and, • was the only application of the seven that prevented the above three Trojans from being installed, i.e. they were blocked by the real time protection. • Overall results: Anti-Malware blocked 23 pieces of malware; SuperAnti-Spyware blocked 21, A Squared blocked 20, CounterSpy blocked 20, SpySweeper blocked 16, AdAware blocked 9, and Spybot blocked a frighteningly four! With the real time protection turned off and using manual scans only, Anti-Malware found the same number as it had blocked and removed everything it detected. SuperAnti-Spyware detected everything it blocked in addition to six tracking cookies, but was unable to remove only the tracking cookies and 17 of the blocked items. A Squared detected eight more items than it had blocked, six tracking cookies and one keylogger, but was only able to clean 15 of the detected items as well as the cookies and the keylogger. CounterSpy detected and cleaned all that it found but did not find the keylogger. SpySweeper detected only 12 of the items it had blocked and cleaned 12, but found an addition six items, which it was also able to clean. It did not detect the keylogger, Spybot and AdAware results were too poor to consider. • Summary Results: Blocking/Detection/Cleaning combined. MBAM = 94%, Super Anti-Spyware 87%, CounterSpy = 82%, A Squared = 74%, SpySweeper = 69%, AdAware = 33%, Spybot = 21%. While the extra cost real-time protection in the Pro version successfully blocked everything I exposed it to and, more importantly, was the only one of the seven to be able to detect and clean the three nastiest pieces of malware—one of the newest and worst rogue security programs - my testing would indicate that Anti-Malware may fall short in detecting tracking cookies and key loggers. However, with the growing category of rogue security programs Anti-Malware must at least be a part of one’s defense system. In addition to the testing and test results, there are several other items worth noting: • The user interface (GUI) is very simple in design but attractive and makes it easy for even a novice to understand. • There are two scanning options available, a quick scan and a full scan, with a choice of drives to be scanned. • The scans are the fastest I have seen in any security software, and while the speed will be determined to some extent by the configuration and drive size in one’s PC, my testing would indicate that an averaged quick scan will be in the 2-4 minute range, with a full or complete scan taking from as little as 50 minutes to as much as one hour 20 minutes. • The use of resources is extremely low with the program using approximately 29MB of RAM. • There is also an option to enable the application to run in the context (right click) menu to scan individual files or attachments before opening. • The program updates daily and as often as two times a day to stay on top of the latest threats as they occur. • There is support by email with a promised turn-around time of one business day and which, based on my testing, is kept. The best part of support, however, is the tremendous forum where there are over 11,000 registered members and over 73,400 posts. Any and every question will likely be answered there almost immediately. For those familiar with the HighjackThis program, there is a section in the Forum to post HighjackThis logs to have them analyzed by experts, a very nice touch. Anti-Malware does not have a lot of bells and whistles and seems to believe in the KISS principle of “Keep-It-Stupid-Simple” as it really does just one thing: it protects, detects, and cleans one’s system of some of the newest and nastiest pieces of malware out there. Because of this, its light use of resources, its fantastic support, its price and it superb effectiveness, this has my highest recommendation. Weak points Reviewer 1: Obviously, the fact that Anti-Malware Pro failed to work with two of the three versions of McAfee Enterprise Edition anti-virus software that I used during the five months in which I tested Anti-Malware Pro is a very substantial weakness. The only other weakness I encountered was a lack of information about the Anti-Malware program. There is no User's Manual, nor a Frequently Asked Questions file. The Help file within the program's user interface offers rather perfunctory information. More than half the entries merely define error messages. Such information is important but insufficient. For example, the Help file provides no explanation of exactly what the Protection Module does or how it works. Also, although company representatives have said in private communications and in the Malwarebytes Forum that there is no need to run a Full Scan because the Quick Scan is just as effective, the Help file contains no information about this. Reviewer 2: The only complaint that I have is that Windows does not recognize it as an anti-virus program, and warns of impending doom unless something is done about the situation. Since I already have a good anti-virus program, I use Malwarebytes' AntiMalware Pro to cover all the rest of the malware nastiest that lay in wait for the unwary. Reviewer 3: I did not discover anything that I would consider a “weak point” in my use of this program. Reviewer 4: I really can find no weaknesses in this program or any changes in the program. It seems a little weak in detecting minor bugs such as adware or tracking cookies, but does not claim to do this especially; nor does it claim to replace all other security programs. Developer's Web site Reviewer 1: It seems as if almost all of Malwarebytes' time and resources have gone into combating malware, to the detriment of the company's Web site. The website contains considerably more information than is readily apparent. The home page provides links to download or buy the software, dates of the latest versions of the software, and a list of five pieces of malware that may or may not be the five most frequently encountered malware items, possibly with some relationship to something called MalwareNET™, a name that appears above them. There is no link to MalwareNET™ nor any explanation of what it is. Clicking on one of the five listed malware navigates to a page providing little specific information about MalwareNET™. Clicking on "return to list" navigates to a page listing almost 1700 pieces of malware that the program will detect. Similarly, clicking on Products and then on Malwarebytes' Anti-Malware reveals an inadequate description of the program. For example, it reports that "we have implemented a threats center which will allow you to keep up to date with the latest malware threats," but the description provides no link and no indication of how to find the threats center. Probably MalwareNET™ is the threats center, but there is no direct link to it. Unfortunately, the Web site contains no overall search mechanism, index, or site map to help users find information. Reviewer 2: Not only does the program operate effectively on my computer, the Web site is set up as an anti-malware site. In addition to the different programs produced and offered by Malwarebytes, most of the site is dedicated to information and assistance. Access to the site is provided in the program itself, either under the About menu item or under the "More Tools" tab on the Main Screen. In one section there are definitions for all the different types of malware currently in circulation. But more useful, is an active users forum. Here, knowledgeable forum members will help with malware troubles. Reviewer 3: The Malwarebytes Web site is clean with no “hard sell”. It is simple, easy to navigate, lots of “white space”, and no flash or animations. Several other applications are offered, designed to remove “locked” files and keys that are difficult to remove during a regular uninstall or for malware that locks access permissions so it cannot be removed. Reviewer 4: The Web site seems to deal with the entire subject of malware and security rather than simply selling software. There are no unsightly ads, there are no columns of out-of-context- snippets taken from so-called reviews, there is simply a professional appearing site full of useful information and the necessary and easy-to-navigate links. Other comments Reviewer 1: The Malwarebytes Company makes its anti-malware program available in a freeware version as well as the Pro version that the NNT Panel tested. There are a few important differences between the two. Probably the most significant is that the Pro version offers real-time protection via its Protection Module, while the freeware will only detect and remove malware after it has already entered one's computer. Also, the Pro version enables the user to schedule daily updates and scans, whereas the freeware version’s user must arrange for manual updates and scans. Still, both versions use the same frequently updated anti-malware definitions and offer equally thorough scans. Reviewer 2: Unlike many other anti-malware products that I have used, the freeware version of Malwarebytes' AntiMalware is fully functional. The only difference is that the "Protection" tab, which gives access to the automated features of the Pro Version, contains only a reminder to purchase the Pro version to enable these features. Functions can be handled manually with the free version, but I think that the one-time fee for the automation provided by the Pro version is worth the price. Reviewer 3: The “free” version works fine, but lacks the ability to run “real time protection”, scheduled scans and scheduled updates. These functions are done manually instead. Anti-Malware Pro adds an entry to the right click menu to scan individual files. This is handy if it is not already running in the real-time mode. Reviewer 4: Four words: Small Tool, Huge Results! This is not just another security program. This is a newer program meant to improve upon where other programs fail—especially in the detection and removal of rogue security programs. This program will detect and remove infections that other anti-spyware or anti-malware will simply not detect or will not be able to remove. At $24.95 for an unlimited license and free updates and upgrades for life, who can go wrong? Will you continue to use it? Reviewer 1: No. I had planned to do so, but the incompatibility between Anti-Malware Pro and the current version (8.7) of McAfee anti-virus Enterprise Edition makes that impossible. Reviewer 2: Yes. Reviewer 3: Yes, since it does not conflict with my anti-virus program and has a small “footprint”, I will leave it running in the System Tray. Reviewer 4: Absolutely. OPERATING SYSTEMS USED IN THIS REVIEW Windows XP Pro, XP Home, XP Media Center, Vista Premium Back