False positives processes MBAM and Spybot

Avast Free Antivirus / Premium Security
1

With AIS 5.0.396(and older) the processes of the realtime protection from Malwarebytes’ Anti-Malware Full and Spybot S&D are detected as a threat: mbamservice.exe and teatimer.exe(VPS 100130-0, and older)
I’ll include a screenshot of the scan log:

2

MBAM and Spybot should not be detected as a virus because I’ve tried both of them already with avast 5.0
Maybe your system was already infected when you were trying to install spybot and MBAM so…or else your flashdrive/pendrive was infected with a virus plus you put the installation of Spybot and MBAM in it and install it in your computer.

Try to do a full/quick scan if these two are the only infected uninstall them do a scan to see if any infections left then delete file from Spybot and MBAM

Thanks :slight_smile:
Shiw Liang

3

I don’t think they are real infections. With a custom scan with most full and thorough settings it doesn’t detect anything else then those processes. My computer is also very recently reinstalled and Avast already detected them from the beginning(I also have an old post about this on the beta forum, but no replies.) SuperAntiSpyware, MBAM, Spybot, A-Squared free, Hitman Pro 3.5 and Dr. Web Cure-it!(all with highest settings if possible) all detect nothing.
I created a custom memory scan with avast! starting with the highest settings possible and then going lower. If I turn off Ignore virus targeting MBAM is no longer detected and Spybot is not detected anymore when putting “Recognize file types by their:” to name extension (fast).

4

The problem is that avast is detecting their signatures which have been placed in memory and they are unencrypted.

So avast is only doing what it should in detecting the unencrypted signatures, so for me MBAM is at fault storing unencrypted signatures in memory, for a resident antivirus to find.

Have you been tweaking the File System Shield, see image2, especially the item arrowed ?
Or this setting may be in your Custom Memory Scan settings, Sensitivity.

5

Thank you, it makes thing a lot clearer. I haven’t tweaked my file system shield but I have custom scans with that setting on yes. If I turn it off MBAM is not detected anymore, but Spybot still is.

6

So then you need to look at Spybot S&D for a resolution (encrypt their signatures) as avast is doing what it should looking for virus signatures.

7

Shame on me :-[
I didn’t know that one :frowning:

Anyway at least we know we shouldn’t change anything if we are not sure of it :)\

Well sometimes even my whole computer is infected with a virus when I didn’t have any antivirus I tried with MBAM and SAS but the detected one was about 0.1 percent of all the infected files in my computer.
I wonder why ???