Virus Removal and Staying on the Right Side of the Law

[MCDIT]

This is something that has bothered me over the past number of months.


I had previously used free versions of Malwarebytes, Hitmanpro & Superantispyware as primary tools for malware removal. Since discovering that 2/3 of them no longer have tech licenses and Mbam now requires a £320 yearly fee (crazy amount and totally out of my budget).

To counteract I have been struggling with a concoction of Avast, Roguekiller, Adwcleaner, TDSSKiller, Ultra Adware Killer in order to get the job done. Even with this, though, some things are quite difficult to remove and Avast takes an absolute age to scan. I thought Herdprotect would have been ideal, though it seems it is a fancy way of breaking 68 different terms of service at the same time.


I need help! From what I have heard so far the tech community seems only to be split into two groups: larger businesses who can afford Mbam and smaller businesses that will use the free version illegally. There must surely be other legitimate options for the regular ole sole trader.



Any advice at all is much appreciated,

Darran.

 

[carrcomp]

I struggle to find their TOS, but I'm pretty confident that using the free version of MBAM to scan a client's computer is not against TOS.

Hitman Pro under Who Should Use it http://www.surfright.nl/en/hitmanpro/intro#whoshoulduseit states that

• Help Desk and Support organizations can use the Free Scan of HitmanPro as a quick check for viruses and other malware. It can be run from USB or CD/DVD. No installation is required"

Activation of the trial is required to do the removal, but still not against TOS.

The only one out of the three that I know you'd need to deal with seperately is the SuperAntiSpyware.

Section 1c of the License Agreement states that Free and Portable versions of SAS is for Personal use only. It goes on to say that if you are a computer technician to contact SAS for licencing details, suggesting they may have something not advertised on their website.

 

[Porthos]

I struggle to find their TOS, but I'm pretty confident that using the free version of MBAM to scan a client's computer is not against TOS.

The agreement is in a doc file in the program folder of malwarebytes. It does state it cannot be used in a repair shop environment.
The old agreement before techbench was released stated you could use it only IF you sold a paid copy to each customer you ran the program on. As a reseller that is not a problem. No virus removal is ever done by me without selling a copy to each customer. It is part of my price and is non-negotiable.

If they want to come after me now since the terms have changed so be it.

The other tools ...I fire off a donation now and then.

 

[carrcomp]

Now that's crazy.

So you can't view MBAM's TOS until after it's installed?

Read over everything and you are absolutely right, but it gets worse.

It's not just that you can't use MBAM to clean a customer's computer without purchasing that Tech Bench, but remote support companies cannot use MBAM at all.

Looks like we're going to need to change our processes.

By the way ....

(b) Free License. If you are using a free version of the Software, then conditioned upon your compliance with the terms and conditions of this Agreement, Malwarebytes grants you a non-exclusive and non-transferable license to Execute (as defined herein) a single copy of the Software solely in executable form on a single computer or virtual machine (a “Computer”), solely for your personal, non-commercial purposes (i.e., not on Computers used in a business). You may not transfer the Software to a different user, except that once installed onto a Computer, the Software may be operated by any person directly using the Computer (i.e., not remotely), provided that that person resides in, or is a guest in, your household and that you are responsible for each such person’s operation of the Software. You may not run the Software on a network, but must install it only on the individual Computer(s) you are licensed for and run it locally on those Computers. For purposes of this Agreement, “Execute” and “Execution” means to load, install, and run the Software locally on a single Computer in order to benefit from its functionality as designed by Malwarebytes

(d) Restrictions on Free & Trial License. You may transfer the Software to a different Computer if you uninstall and remove the Software from the first Computer when you install it on the other Computer. For avoidance of doubt, you must have a license to the Software for every Computer on which you operate the Software. You may not use on behalf of, or make the functionality of the Software available to, third parties for any purpose, including, but not limited to, providing any computer repair, help desk or troubleshooting service. You may not combine this Software with any third party script, application, hardware or tools which would cause it to run on an automated or unattended basis. You may not: (a) copy (except in the course of loading or installing) or modify the Software, including but not limited to adding new features or otherwise making adaptations that alter the functioning of the Software; (b) transfer, sublicense, lease, lend, rent or otherwise distribute the Software to any third party; or (c) make the functionality of the Software available to any third party through any means, including but not limited to by uploading the Software to a network or file-sharing service or through any hosting, application services provider, service bureau, software-as-a-service (SaaS) or any other type of services. You acknowledge and agree that portions of the Software, including but not limited to the source code and the specific design and structure of individual modules or programs, constitute or contain trade secrets of Malwarebytes and its licensors. Accordingly, you agree not to disassemble, decompile or reverse engineer the Software, in whole or in part, or permit or authorize a third party to do so, except to the extent such activities are expressly permitted by law notwithstanding this prohibition.

 

[MichaelBits]

Which is why using something like RepairTech Techsuite is nice. Licensing is done by them and you don't have to worry about it.

 

[carrcomp]

JRT seems like it would be a good solution to the MBAM problem. Seemed redundant to use both anyway ....

 

[ohio_grad_06]

I like using the following.

1. TDSS
2. Rogue Killer
3. JRT
4. ADW
5. Avast boot scan if they don't have current AV, then leave avast installed to protect their system.

There are naturally exceptions, but seems like this takes care of about 85% of what I see.

 

[NYJimbo]

"There must surely be other legitimate options for the regular ole sole trader."​

I install and run these programs on behalf of the customer and then uninstall or remove them on behalf of the customer. If anyone has a problem with that, I will be sitting at the other end of the bar....

 

[repairtechinc]

Hey guys - Just wanted to chime in here because we've done a ton of research into this because we vet every tool before putting it in TechSuite.

MWB is a great tool, but the EULA is restrictive to the point of preventing you from using it in your shop unless you have a TechBench license, like Chris said. The issue we've had with them is that they forbid automating the tools as well, so we can't even use AutoIT to streamline the process. For this reason, we only include an installer for MWB in TechSuite. We don't actually run it.

Attached to this post are a list of malware removal tools* you can run in your shop. However, there are two exceptions that are included:

Hitman Pro: Scan Only - You can only legally scan for malware, you cannot remove it unless you buy a license.
MWB: Install Only - You can only install the software on the clients machine unless you have a TechBench license.

Let me know if you have any questions,

Ian

EDIT: Malware Removal Tools*

 

[citizensmith]

TL;DR all those T&C above . What if - as a mobile tech I go to clients. IF they download - or I download MBAM free/ HMP single use for them onto their pc? Most have some sort of AV alraedy and do'nt want to change - so they won't activate or trial MBAM anyway. - Not trying to be a licence weasel here - Any thoughts?

 

[Porthos]

the Software may be operated by any person directly using the Computer (i.e., not remotely), provided that that person resides in, or is a guest in, your household and that you are responsible for each such person’s operation of the Software.

That covers the mobile tech,lol At least with MBAM

 

[citizensmith]

With T&C / TOS I usually just click [OK] - Big thanks to those who actualy readsall that blurb

 

[repairtechinc]

The key thing here is "Commercial Environment". That doesn't have to be your shop, it's about whether or not you profit from it.

HMP is legal to use for scanning. For removal it's not. You can however become a reseller/partner, so that may be a way of doing it that I haven't explored: http://www.surfright.nl/en/home/partner

Ian

 

[altrenda]

Props to the OP for bringing up the biggest unspoken problem in our business..

There are many free tools around, mostly aimed at the consumer or as a form of advertising to get people to pay for the advanced version. Most of these don't allow use by us, like this quote from the Malwarebytes restrictions posted above.

You may not use on behalf of, or make the functionality of the Software available to, third parties for any purpose, including, but not limited to, providing any computer repair, help desk or troubleshooting service. You may not combine this Software with any third party script, application, hardware or tools which would cause it to run on an automated or unattended basis.

This leaves out most of what we do, as well as using it as part of any of the automated scripts that run a collection of third party tools

There are other issues. How do we resolve statements like these that appear here from time to time while at the same time using these applications against the creators EULA's.

1.I won't work on a computer with a pirated version of Windows or other software.
2. People keep calling asking for free advice, without paying me.
3. I won't install free AV software, I only set up customers with paid solutions.

Using the "They will never catch me" defense isn't good enough. The creators of these tools deserve to be paid just like I do.
I am not naive or a goody two shoes, I use some of these without really complying with the license, but at the same time it bothers me that most of what I use I have paid for, while competing with techs who use free stuff in violation or pirated versions of the same software I use.

I don't know the answer to any of these questions. I just try to do the best I can.

 

[MCDIT]

Very helpful replies, thank you. It's good to know that I am not the only one.

I have a bit of hope for Hitmanpro now anyway, as I thought I heard that they offered technician licenses in the past. It does seem that their new "Who Should Use it" seems favourable. I had checked the ToS that appears before running a scan, sure enough, it says:

3. Free License
The "Free License" permits home users to use one copy of the Software solely for personal usage. The Free License is issued once and is valid for 30 days. The Free License may be used by non-commercial organizations that offer their service for free to home users. Service desks, computer repair centers and other support organizations must buy a license if they use HitmanPro as part of their commercial (paid) service.

Could it be that their standard ToS is a leftover from whenever they did offer tech licenses? Perhaps they will have some development in the future. As for Superantispyware, I am heartened. I will need to send a few emails and see what I can come up with!

 

[carrcomp]

Very helpful replies, thank you. It's good to know that I am not the only one.

I have a bit of hope for Hitmanpro now anyway, as I thought I heard that they offered technician licenses in the past. It does seem that their new "Who Should Use it" seems favourable. I had checked the ToS that appears before running a scan, sure enough, it says:

3. Free License
The "Free License" permits home users to use one copy of the Software solely for personal usage. The Free License is issued once and is valid for 30 days. The Free License may be used by non-commercial organizations that offer their service for free to home users. Service desks, computer repair centers and other support organizations must buy a license if they use HitmanPro as part of their commercial (paid) service.

Could it be that their standard ToS is a leftover from whenever they did offer tech licenses? Perhaps they will have some development in the future. As for Superantispyware, I am heartened. I will need to send a few emails and see what I can come up with!

I shot an email out to HMP about that ..... their website statement and the TOS are conflicting.

The question I asked is if I can purchase a licence for our use. The idea there being that we'd activate with the licence, and then uninstall it after.

It would mean we'd buy 5-10 licences, but it would be well worth it to stay compliant.

 

[Kitten Kong]

I fired an email to HMP re their tech licences some time ago, and didn't get a reply. Be interesting to see if they reply, and what they come back with Chris.

 

[Mike McCall]

I'm one who is adverse to using something and not paying for it. If the owner is fine with my using the product to make a buck then so am I. If they're not, then neither am I. This puts me in the position of either selecting the tools I wish to use, purchasing them, keeping them updated, and ensuring I remain compliant, or, I contract with a 3rd party such as RepairTech and let them handle that for me. Anything else is a theft of the use of a commercial product. That's not a good place to be.

Conventional business wisdom suggests that before you do that first job you've done your business plan, which includes identifying the tools required and their costs. The startup costs are usually a combination of your own funds and friends/family, or outside investors. However, many techs get their start doing side-work for friends/family using the same tools they legitimately used on their own machines. Hopefully at some point they purchase the tools and become legally compliant. Unfortunately, many do not.

I don't find it difficult to understand why the companies who develop these tools intentionally look to exclude those who profit from using these tools illegally. It's also in their best interest to consider providing license to use their tools commercially exclusively to 3rd party companies such as RepairTech. By doing so they limit the illegal use of their product, are ensured of compliance and royalty income, which they would not receive otherwise. So, it seems that the options are to select/purchase/manage the tools myself, or sign up with another company who will provide those services for me. Perhaps we could do a better job of policing our own industry in that regard?

 

[carrcomp]

Hello Chris,
Thank you for contacting us.
I recommend our Incident license packs. These packs contain temporary licenses, ideal for one-time cleans.
We offer packs of 25, 100 and 250 licenses. You will receive 1 key per pack. The licenses cannot be reused, so a 25 pack can clean 25 computers.
Pricing can be found on your website: www.surfright.com/shop/business
Please let me know when you have any further questions.
Best regards,
Lisa
HitmanPro Support

 

[carrcomp]

HitmanPro Incident License 25-pack $ 187.50 (7.50/shot)
HitmanPro Incident License 100-pack $ 675.00 (6.75/shot)
HitmanPro Incident License 250-pack $ 1,525.00 (6.10 / shot)

My response to them is what happens if the customer comes back within 30 days.

I sure won't be using 2 licences on the same system within a month if we decide to keep using their software.

I have no problem with paying for software (anyone that listens to the podcasts know my view on free), but why not have a monthly fee per technician?