[Rootkit not detected by Malwarebytes]

Why Vanguard (by Riot Games) is not detected?

 

It is a rootkit

[Does Malwarebytes detect the NSO group Pegasus Spyware?]

From a 2021 reply

 

[Malwarebytes Browsis not updated to the latest version in the mozilla store]

Then the solution is as I said, Malwarebytes at its main page, or here at forum distribuite the Firefox extension

 

See per example Fortnite when Google banned it from Play Store

[Malwarebytes Browsis not updated to the latest version in the mozilla store]

Here still with version 2.6.17

What are risk or problems to continue with out-dated version?

[Malwarebytes Browsis not updated to the latest version in the mozilla store]

No if people know that must download it from Malwarebytes site (or a download button at main program)

[Malwarebytes Browsis not updated to the latest version in the mozilla store]

Question for staff

Can you offer the extension out of the store?

[Malwarebytes Browsis not updated to the latest version in the mozilla store]

now 2.6.17 at firefox

current version 2.6.23

[an URL of Mercado Pago blocked by MBG again]

Again is blocked the URL shortener of Mercado Pago, used to donate at other pages (in this case, a web radio)

[[ RESOLVED ] Multiple IPs blocked when using qBittorent]

14 hours ago, guthrie said:

Thanks for all the support and information.

I have the same issue, as wold all MBytes users of torrents -

As I understand it, whitelisting the application does not solve the problem, and one would have to try to remember all the blocked IPs from the pop-up messages, and individually white-list them each?

Is there some table/log where they are listed for easier access?

@Porthos let me try a better explanation

Allow a file or folder and Allow an application to connect to internet are 2 different options that tell what to do to 2 different shields

First option you add a file or folder to no be detected by Real Time Protection when you open or execute it (also exclude from manual scans)

Second option say to Web Shield allow all connections originated by the application you add at this list. Due it, here you never should include a browser or a vpn, only games and other programs you trust and had connection problems due Web Shield

 

[Other 2 RTP blocks at GTA V today]

Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del evento de protección: 24/2/24
Hora del evento de protección: 12:45
Archivo de registro: b712cb3a-d32b-11ee-87ef-309c231cf382.json

-Información del software-
Versión: 4.6.8.311
Versión de los componentes: 1.0.2249
Versión del paquete de actualización: 1.0.81365
Licencia: Premium

-Información del sistema-
SO: Windows 10 (Build 19045.4046)
CPU: x64
Sistema de archivos: NTFS
Usuario: System

-Detalles del sitio web bloqueado-
Sitio web malicioso: 1
, F:\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe, Bloqueado, -1, -1, 0.0.0, ,

-Datos de sitio web-
Categoría: En peligro
Dominio:
Dirección IP: 168.194.189.169
Puerto: 3889
Tipo: Saliente
Archivo: F:\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe


(end)

 

Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del evento de protección: 24/2/24
Hora del evento de protección: 19:57
Archivo de registro: 1d347468-d368-11ee-96e8-309c231cf382.json

-Información del software-
Versión: 4.6.8.311
Versión de los componentes: 1.0.2259
Versión del paquete de actualización: 1.0.81377
Licencia: Premium

-Información del sistema-
SO: Windows 10 (Build 19045.4046)
CPU: x64
Sistema de archivos: NTFS
Usuario: System

-Detalles del sitio web bloqueado-
Sitio web malicioso: 1
, F:\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe, Bloqueado, -1, -1, 0.0.0, ,

-Datos de sitio web-
Categoría: En peligro
Dominio:
Dirección IP: 187.182.5.168
Puerto: 1042
Tipo: Saliente
Archivo: F:\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe


(end)

2nd one cause some problem at gameplay, as disconnect me from other players

[2 falses positives while play GTA Online]

Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del evento de protección: 18/2/24
Hora del evento de protección: 19:03
Archivo de registro: 84ba4298-cea9-11ee-b360-309c231cf382.json

-Información del software-
Versión: 4.6.8.311
Versión de los componentes: 1.0.2249
Versión del paquete de actualización: 1.0.81121
Licencia: Premium

-Información del sistema-
SO: Windows 10 (Build 19045.4046)
CPU: x64
Sistema de archivos: NTFS
Usuario: System

-Detalles del sitio web bloqueado-
Sitio web malicioso: 1
F:\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe, Bloqueado, -1, -1, 0.0.0, ,

-Datos de sitio web-
Categoría: En peligro
Dominio:
Dirección IP: 45.232.153.176
Puerto: 6674
Tipo: Saliente
Archivo: F:\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe


(end)

 

Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del evento de protección: 8/2/24
Hora del evento de protección: 16:33
Archivo de registro: e8bd455e-c6b8-11ee-b379-309c231cf382.json

-Información del software-
Versión: 4.6.8.311
Versión de los componentes: 1.0.2242
Versión del paquete de actualización: 1.0.80677
Licencia: Premium

-Información del sistema-
SO: Windows 10 (Build 19045.3930)
CPU: x64
Sistema de archivos: NTFS
Usuario: System

-Detalles del sitio web bloqueado-
Sitio web malicioso: 1
, F:\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe, Bloqueado, -1, -1, 0.0.0, , 

-Datos de sitio web-
Categoría: Troyano
Dominio: 
Dirección IP: 45.229.55.9
Puerto: 49251
Tipo: Saliente
Archivo: F:\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe



(end)

 

[Help is only in english]

Only titles of FAQ at main program is in spanish

Once you click at any topic, go to page and all is in english

[Cheat Engine as Malware]

On 2/11/2024 at 10:07 AM, Gool said:

So since I choose to not install adware, is it safe to install cheat engine?

Safe, yes

But note if you have Valorant, or League of Legends after March 2024, Riot Games's Vanguard anti-cheat, that work since boot your PC, will no let you play these 2 games if detect Cheat Engine

(just a warning)

[Gaggle Mail - false postive]

What pages are blocked?

I can enter, also can login using google

[Can you, please, add an anti-keylogger on MalwareBytes?]

Anyway you know, at office employees also access to their social network or use home banking to pay their services when get paid

At least here Argentina is not rare do so (when only 1 user use a pc), then keylogger would make office PCs quite a risk as IT guys has access to your accounts

[Main program + extension, redundant blocking, should follow extension]

Then if have Malwarebytes Browser Guard, should disable web shield at main program to allow the button "continue to site" work as intended?

I mean, as I use that button when download ebooks for my mom, that as is expected, as are EPUB not legally purchased, some of them, at end are hosted at download sites, you know, those sites known for piracy and popentially used to host other not so inocent tools (sites blocked by malwarebytes databases)

Or at least the main program block page also should have an option to continue to site without need to add exception

[Can you, please, add an anti-keylogger on MalwareBytes?]

On 8/20/2023 at 10:57 PM, David H. Lipman said:

Keyloggers are a sub-class of trojans and have always been detected by Malwarebytes.  Note that there are also legal keyloggers.  If you are furnished company assets to perform your duties as an employee, it is legal for a company to install a keylogger on their equipment. They own it.  The legality of which is based upon the country.  Localities may even enhance country laws.

 

WHAT?

I no agree, keyloggers always are keyloggers, or say, illegal by privacy concerns, as keyloggers are mainly to theft your passwords

[Unable to restore purchase from this Google. Account]

On 1/28/2024 at 11:32 PM, Porthos said:

@JustinT Is Malwarebytes for Android still installed and activated on any other Android device?

I have not MB at my andoid but interesting this thread and your reply. Then I could ask to team: when plan to change phone, is needed deactivate Malwarebbytes within the app before uninstall or hard reset the phone?

[Main program + extension, redundant blocking, should follow extension]

I tested, and it is not so good

Currently if you have main program and extension, when a site is blocked by MBG then you click "continue to site", follow a main program block, and main program only has option to block or add exception

 

If click at MBG option continue to site without check no ask again, main program also should allow the site once

[Our company's internal application website website blocked due to phishing]

@subash Im not staff member, but a user that want help

As you said started see the block, but cant see same as @Porthos , also to check if problem is after login, I suggest (as seem you are logged and when did it at a begin, you used "remember me" option):

1 - Click "Continue to this websiite"

2 - Log off

3 - Close browser

4 - Open browser and go to the site

See if can acces to site, then login and see if block is just after login

[Escape from tarkov outgoing connection detected as compromised/malware]

On 12/31/2023 at 9:04 AM, Dashke said:

Yes, that would be the best choice, better than excluding the IP in the application. 🙂

Even better than disable notifications and add IP to exclusions, would be add the game .exe file to applications that connect to internet, right?

[an URL of Mercado Pago blocked by MBG]

 

When tried to donate money to an online radio

[Bug in the extension. Youtube : the first video of the list doesn't appear]

I have no the problem you say

Windows 10 Pro x32 (im at job right now)

Firefox 120

Malwarebytes Browser Guard 2.6.15

[Is Malwarebytes Browser Guard using EasyList]

22 hours ago, Porthos said:

No conflict for me fully enabled.

Maybe, per se no conflict between both extensions.... but at Youtube, it still detect Malwarebytes (at both scenarios, with ublock or without ublock)

Ublock as the only adblocker, is not detected by Youtube

[Is Malwarebytes Browser Guard using EasyList]

On 11/22/2023 at 10:18 AM, sp123 said:

No, uBlock Origin has other filterlists.
However, this does mean the adblocking-component of MBG will conflict with uBlock Origin (the malware/scam blocking parts shouldn't).

 

Thans, anyway to avoid conflicts I disabled globally the Ads/Tracker compoment, as I use it alongside with Ublock