Woody Leonhard's no-bull news, tips and help for Windows, Office and more… Please disable your ad blocker – our (polite!) ads help keep AskWoody going!
Home icon Home icon Home icon Email icon RSS icon
  • Malwarebytes for Windows 3.4.4 available, which fixes 7-Zip vulnerabilities

    Posted on MrBrian Comment on the AskWoody Lounge

    Home Forums Code Red – Security advisories Malwarebytes for Windows 3.4.4 available, which fixes 7-Zip vulnerabilities

    This topic contains 12 replies, has 8 voices, and was last updated by  Bob99 3 months ago.

    • Author
      Posts
    • #174872 Reply

      MrBrian
      AskWoody MVP

      Download: https://www.malwarebytes.com/.

      Release history: https://www.malwarebytes.com/support/releasehistory/.

      Possible issue: Malwarebytes Free Removes Windows Update Registry Key.

      • This topic was modified 3 months, 1 week ago by  MrBrian.
      2 users thanked author for this post.
    • #174878 Reply

      MrBrian
      AskWoody MVP

      If you also use 7-Zip, it’s not sufficient to update just 7-Zip. You must also update Malwarebytes.

      Vulnerability reference: Multiple vulnerabilities in 7-Zip. Get it updated now!

    • #174883 Reply

      PKCano
      AskWoody MVP

      I just installed the 3.4.4 version. It installs as the Premium Trial, which should set the Regkey since is it active protection. I disabled the free trial, and I no longer have the QualityCompat Regkey even though I am running TrendMicto Internet Security. Disabling the full version may be the cause of loss on the setting.

      Update: I rebooted the computer and the QualityCompat Regkey is back. I think the active anti-virus is supposed to set/reset/check the key on every startup (think I read that somewhere, don’t remember where, senior moment).

      8 users thanked author for this post.
      • #174955 Reply

        The Surfing Pensioner
        AskWoody Lounger

        Many thanks for this; presumably MSE will se-set the Regkey at re-boot as well. I shall be installing Malwarebytes Free 3.4.4. in due course and don’t want the Premium Trial either.

        • #174964 Reply

          EP
          AskWoody Lounger

          MSE alone does not set “QualityCompat” Regkey unless you have downloaded & installed any MSE definition updates from 1/5/2018 or later (I manually download & use either mpam-fe.exe or mpam-feX64.exe for MSE now that my family & I have gotten superfast Spectrum cable internet a few weeks ago)

          • #175986 Reply

            The Surfing Pensioner
            AskWoody Lounger

            I manually download and install MSE definition updates twice a day without even thinking about it. I have had the Regkey since it first became a requirement for WU patches, yet never clicked a tab to set it myself. Presumably, therefore, MSE did it for me.

      • #175112 Reply

        Bob99
        AskWoody Lounger

        @PKCano-

        How’d it return for you when it didn’t return for me??? When I rebooted after ending the free trial, the registry key was still missing!! Please read my post here and see what you might’ve done differently than I. from what your post says above, the noly difference is that I’m running AVG free 2017, whereas you’re running Trend Micro’s AV solution. (I thought you were running Bit Defender free).

        R/

        Bob99

        • #175151 Reply

          PKCano
          AskWoody MVP

          I installed mbam 3.4.4 free the same way you did – as an update through the earlier version. What was installed was the Free Trial for the paid version. At that point the Regkey was still there. I subsequently deactivated the Trial and found the Regkey was removed. I also turned off mbam running on computer startup because I am running Trend Micro Internet Security on the machine as my active anti-virus and don’t need it except for manual CYA. When I rebooted, TMIS replaced the Regkey.

          The second part of this is TMIS. I have been running IMIS for years and renew by buying a new license key and simply changing the key number. But this year, after just changing the key to gain another renewal, the old engine version was not Regkey savvy. I had to download and install the latest engine (not to be confused with definitions). It seems this one resets/checks for the key on startup. So, maybe AVG 2018 would be the answer?

          As for your reference to Bitdefender Free – I have:
          MacMini running VMs – XP, Win7 Ult, Win8.1 Pro, Win10 Pro 1709, Win10 Insiders
          iMac running VMs – Win7 Ult, Win8.1 Pro, Win10 Pro 1703
          iMac running VM – Win8.1 Pro Media Center
          13″ MacBook Pro (2012 Ivy Bridge w/ CD drive) running VMs – XP, Win7 Ult, Win8.1 Pro
          15″ MacBook Pro (Haswell) running VMs – Win7 Ult, Win8.1 Pro, Win10 Pro 1703
          4 older hardware installed Win7 (Home & Pro) one XP vintage, one Vista vintage, 2 early Win7 vintage.

          On the Macs and VMs I use daily (Internet facing, business related) I use TMIS (yes, on the Macs too) for a total of 10 seats. But I simply cannot afford paid anti-virus on all the test stuff. So I use Bitdefender Free. Nuff said.

          1 user thanked author for this post.
          • #175726 Reply

            anonymous

            I guess maybe that my copy of AVG Free (2017 or, by now, 2018) must not have been “smart enough” to catch the removed key and replace it like your copy of TMIS did. But, since my AVG is the free version and your TMIS is the paid version, maybe that’s the difference as well…maybe the free version of AVG doesn’t monitor the key but the paid version does. 🙂 😉

            R/

            Bob99

      • #176730 Reply

        Bob99
        AskWoody Lounger

        …I disabled the free trial, and I no longer have the QualityCompat Regkey even though I am running TrendMicto Internet Security. Disabling the full version may be the cause of loss on the setting…

        I believe I’ve finally found a reason WHY this happens. See my post on the other thread here on AskWoody for the explanation I found on the Malwarebytes forums. Basically, it’s what I believe to be a built-in program behavior. 🙁

    • #175328 Reply

      Justin42
      AskWoody Lounger

      This title seems a bit unclear– it’s fixing the version of 7-zip that is integrated within Malwarebytes, but if you’re not using Malwarebytes software, it doesn’t affect you (or 7-zip) at all. It’s not fixing 7-zip’s vulnerabilities outside of Malwarebytes.

      It’s not like you need to install this to mitigate 7-Zip’s issues if you’re not already using Malwarebytes. But if you are using Malwarebytes, you should upgrade it. (after reading and taking proper precautions, such as backup).

      (not trying to be too pedantic, when I saw this link I thought Malwarebytes was doing something special for extra protection given the ongoing controversies about 7-zip and the author’s decisions being made in the light of these security issues)

      • This reply was modified 3 months, 1 week ago by  PKCano.
      • This reply was modified 3 months, 1 week ago by  Justin42.
      2 users thanked author for this post.
      • #175492 Reply

        MrBrian
        AskWoody MVP

        Sorry if the title misled anyone. Technically, Malwarebytes for Windows includes 7-Zip file 7z.dll, which on my computer is located in C:\Program Files\Malwarebytes\Anti-Malware\.

        1 user thanked author for this post.
    • #175869 Reply

      fred
      AskWoody Lounger

      Download: https://www.malwarebytes.com/. Release history: https://www.malwarebytes.com/support/releasehistory/. Possible issue: Malwarebytes Free Removes Windows Update Registry Key.

      Updated Windows 10 Home 64b (windows10.0-kb4088776-x64, Intel I7-gen.6) with an elevated account, my Malwarebytes lifetime, so had to reregister; + the Quality-key in the registry was gone too, and did not reappear after reboot, had to set this key manually.

      With the registry settings for Spectre enabled, there still is a considerable loss in speed this  microcodefix in the Micro$oft-update(s?). Don’t have a clue whare and what is causing this loss in performance.
      Gribson-Inspectre_v7-1

      Is there anybody who has a suggestion?, please pass it on, thanks.
      regards Fred

      EDIT html to text

      Attachments:
      You must be logged in to view attached files.

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Malwarebytes for Windows 3.4.4 available, which fixes 7-Zip vulnerabilities

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.

    Your information:


    Comments are closed.