[sparkeyes]

Hi. Can anyone advise me if I can be protected by the Malwarebytes Protection module without the Malwarebytes icon in my start-up tray throwing out a speech bubble (and beep) advising me it's just "successfully blocked access to malicious IP..etc" every 15 seconds I'm on-line?

[Byteman]

The BEST place to ask is right here> http://www.malwarebytes.org/forums/

Then, I think a good place to start is here > http://www.malwarebytes.org/forums/i...p?showforum=41

Not that we might not know.....but it's always a good idea to browse around the user forum, where the makers and gurus hang out

[Phantom010]

I've been trying to get rid of that annoying feature myself. MBAM is a good tool but this IP thing is something I could realllllly do without. You can disable it once MBAM has loaded but you cannot set it to not run automatically at Windows startup. The issue has been discussed on MBAM's forum and the administrators told us they would fix that in the new version of MBAM. Hell, it has been 1.41 for ages. That was many weeks ago! I think it's the first time I see a version lasting such a long time. It's about time for a new fixed version to come out! It finds malicious IPs where there isn't any!

[Byteman]

Here's one discussion of the issue- hope they fix it for you soon.

http://www.malwarebytes.org/forums/i...howtopic=21076 < shows how to disable it in Windows....and more stuff.

That's about all you can do for now, just disable the function

[Phantom010]

Many thanks Byteman!

After reading that long thread, I finally stumbled on what I was looking for:

Registry Switches for Controlling IP-Blocking in MBAM 1.41

Create the indicated registry value (labeled as key | value) with the indicated data and reboot to enforce the policies below. All of the values are of type DWORD. In order to create a registry value, open the Registry Editor (Start -> Run -> regedit), navigate to the key listed, and then right-click in the right-hand panel and choose New -> DWORD.

1) HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware | silentipmode
Description: With a DWORD value of 1, the protection module will block and log IPs silently.

2) HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware | startipdisabled
Description: With a DWORD value of 1, IP blocking will start disabled on reboot, although it can be enabled subsequently.

3) HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware | disableipblocking
Description: With a DWORD value of 1, IP blocking will be permanently disabled (cannot be toggled).

Thanks again!

[Byteman]

That's good-

I think you would have to UNinstall your present version when and if a fixed version is released- the changes for Option#3 are not toggle-able it says,----- but as long as those constant alerts aren't bugging you, it really doesn't matter!

[Phantom010]

For now, I'll settle for option #2.

[flavallee]

This option and problem is with the "paid" version of MBAM?

----------------------------------------------------------------

[Phantom010]

Originally Posted by flavallee

This option and problem is with the "paid" version of MBAM?

----------------------------------------------------------------

Yes, the paid version.

[flavallee]

That's what I thought. Thanks!

I didn't know there was a problem with MBAM. I'll stick with the free version for now.

--------------------------------------------------------------------

[BillC]

With regard to the "IP Blocked" alert I have a question. On my paid version of Malwarebytes I get an alert after booting and before I do anything. Alerts also come at other times but usually I've got a browser and other programs open. So I checked the IP's being blocked only to discover one was in China and another in Moldavia neither of which gives me a warm & fuzzy feeling.

I've used my security software for scanning and the Task Manger, Process Explorer, and TCP Port view in an effort to identify just what is doing this - all efforts failed. I can not find a rogue program. Any suggestions on how to identify the culprit short of installing a paid firewall like Zone Alarm that would show programs trying to access the internet?

[Phantom010]

So far, MBAM is the first program I found actually including this feature. So, I have disabled it since I find it irrelevant (but that's my opinion...). You have your antivirus protecting you in case of a malicious website trying to send you nasties.

[BillC]

Thank you for your response. I do have confidence in my security software as you suggested - more than anything I just want to know what is in the bowels of my computer trying to send a packet to China or Moldavia and what's in the packet.

Again, thanks for your input.

[sparkeyes]

Disabling the function is fine with me. Geez, right-clicking an icon is usually the first thing I do. Sorry to waste time.