rcmaehl

Actually they've finally stopped. Nvm.

I've hit "restore default settings" to be safe and the alerts still pop-up if the Controller is not running.

No, I had just downloaded it and as soon as I started the trial I started getting spammed with the notifications until I started my UniFi Controller.

Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 2/24/23 Protection Event Time: 3:50 PM Log File: e463abb6-b484-11ed-bdab-7085c234cfa7.json -Software Information- Version: 4.5.22.236 Components Version: 1.0.1915 Update Package Version: 1.0.66073 License: Trial -System Information- OS: Windows 10 (Build 19045.2364) CPU: x64 File System: NTFS User: System -Exploit Details- File: 0 (No malicious items detected) Exploit: 1 Exploit.JavaMaliciousInboundSocket, , Blocked, 0, 392684, 0.0.0, , -Exploit Data- Affected Application: Java Protection Layer: Application Behavior Protection Protection Technique: Java malicious inbound socket detected File Name: URL: (end)

The root cause of this is my UniFi AP attempting to contact the UniFi controller runs on this computer as needed, but the UniFi controller not currently running. MalwareBytes has had an issue with this for EIGHT YEARS (Unifi Community Post). The worst part of this is that there's no way to exclude this spam from MalwareBytes as it doesn't even show up to be allowed

I'm getting spammed with annoying Exploit.JavaMaliciousInboundSocket notifications 2-3 times a minute. These pop-ups should be setup to not occur if there is no Java process running. With the current setup it is nothing but scareware for users. The internet is being scanned all the damn time by Shodan, Malicious Actors, Researchers, and much much more. Please fix this.