Faken Jones

Thank you for the timely response.

The website www.bolytv.com is being blocked when I try to access it. Works on computers without MAM. 2012/03/11 10:35:12 -0400 THEMAINFRAME Main PC IP-BLOCK 128.127.109.122 (Type: outgoing, Port: 53775, Process: chrome.exe)

Thanks. Good to know they were harmless.

Background: I have the full version of MBAM that is updated almost real time. Current database version is 5635. Description: Visited a forum that I frequent often. It has never had any problems before. Forum tends to have posts with embedded links to pictures on 3rd party sites. Two of these pages resulted in IP block; this has never happened before. Both of these pages had a post by the same author with some same pictures linked. Trying to go to each picture's direct url did NOT result in an IP block. *So we are not sure whether this is a genuine threat, or a false positive. We await your reply on that. Thanks* Websites which activate the IP-Block: - http://forum.paradoxplaza.com/forum/showth...vine-Wind/page3 - http://forum.paradoxplaza.com/forum/showth...)-Empire/page43 MBAM Protection Log with Suspicious IP listings: (PS - Orca.exe is my browser; And my name is edited out for privacy reasons) 03:04:29 ********** IP-BLOCK 210.51.185.10 (Type: outgoing, Port: 58621, Process: orca.exe) 03:48:08 ********** IP-BLOCK 210.51.185.10 (Type: outgoing, Port: 58733, Process: orca.exe) 03:48:33 ********** IP-BLOCK 210.51.185.10 (Type: outgoing, Port: 58739, Process: orca.exe) 07:35:20 ********** MESSAGE Scheduled update executed successfully 07:36:26 ********** MESSAGE IP Protection stopped 07:36:49 ********** MESSAGE Database updated successfully 07:36:50 ********** MESSAGE IP Protection started successfully 08:56:18 ********** IP-BLOCK 210.51.185.10 (Type: outgoing, Port: 59449, Process: orca.exe) 09:00:20 ********** IP-BLOCK 188.72.250.124 (Type: outgoing, Port: 59489, Process: orca.exe) 09:01:00 ********** IP-BLOCK 210.51.185.10 (Type: outgoing, Port: 59525, Process: orca.exe) 12:30:27 ********** MESSAGE Scheduled update executed successfully 12:31:16 ********** MESSAGE IP Protection stopped 12:31:21 ********** MESSAGE Database updated successfully 12:31:22 ********** MESSAGE IP Protection started successfully 13:07:16 ********** IP-BLOCK 210.51.185.10 (Type: outgoing, Port: 59710, Process: orca.exe) 13:08:45 ********** IP-BLOCK 188.72.250.124 (Type: outgoing, Port: 59717, Process: orca.exe) 13:09:17 ********** IP-BLOCK 210.51.185.10 (Type: outgoing, Port: 59727, Process: orca.exe) 13:17:28 ********** IP-BLOCK 210.51.185.10 (Type: outgoing, Port: 59761, Process: orca.exe) 13:37:52 ********** IP-BLOCK 188.72.250.124 (Type: outgoing, Port: 60222, Process: orca.exe)

Is that supposed to be a 20% off coupon of some sort? If so, thats a real shame. I only just purchased my copy a few hours earlier. Wonder if there's a way to go back and honour it...

thanks

Nice. But does this mean I can or can't run the file? I'm looking to play the game. Just need to know if the file is actually infected or not.

Pretty much the same issue: http://forums.malwarebytes.org/index.php?showtopic=66016

UPDATE: I just scanned the .RAR file. Scanning the .RAR scans clean. Then when I unRAR the file, scan the exe, it scans Infected. Is this how MBAM works? Ie , it doesn't normally detect infected files in RAR format? If not, then it might be this particular virus causing the .RAR to be undetected as infected.

Hey, I just purchased full version of MalwareBytes Anti-Malware. And it apparently detected a malicious file. I suspect the file is NOT malicious. Now I have had the free version of MBAM for months. And previous scans have never picked up this particular file as malicious. Also, I scanned the file using an up to date Symantic Endpoint Protection Antivirus Scan. It came back clean. The file itself is an exe for a game called Crusader Kings: Deus Vult, published by Paradox Interactive. I have attached a log and the scan as directed. I haven't removed the file yet. I await further information and instructions. Hoping for a quick response. Thanks in advance. Crusaders.rar mbam_log_2010_10_26__23_37_27_.txt

Aite well its done. If theres some sort of reward program I'd definitely recommend tommarnk (ie the OP). It was basically the title of his post that brought me here and led me to the purchase. A good review like that is often hard to come by. And lol @ the how to setup. That's amazingly detailed. Thanks noknojon. time to go configure this business.

yeah sorry about the dual post. I lost this one once I posted here (I had searched it through google). If anyone would like to continue the convo, see link above. Thanks.

Hey, You guys are fast. Thanks for all the info again. @yardbird: Yep I've had the free version for a while now. Its served me pretty well. @advancedsetup: I'm intending to get 1 license for now, see how that goes, and then consider it for the other PCs, so it shouldn't be an issue. @noknojon: I do have a few questions. Well they are probably better defined as irrational/irrelevant fears. 1) How is the real time scan? Does it have a lot of false positives? I remember if you ran something like BlackICE or ZoneAlarm back in the day that were active scanners, eventually they would block all sorts of ports, and other useful things, and the only way to get back full functionality on the PC and internet would be to deep clean the PC or reformat windows. I do not want to go through that experience again. 2) Knowing the nature of spyware, I am well aware that the best Anti-malware solution varies from time to time. I guess I'm wary that in a few months, Malware-Bytes will become outdated or fall off, meaning I'll have to go search for some other solution. But this is more of my own issue. It does feel good supporting a good program though. (Yeah ignore this one).

nice thanks for that info having never bought a anti-malware before, here goes nothing. Really couldn't stand the new ad-aware heaviness.

Hey, I have a question regarding this. I typically like to register/support products that I like and make regular use of. In this case, its Malwarebytes Anti-Malware. I am looking into purchasing it, but I have some questions: 1) How long does my definitions subscription last? Lifetime? Renewable yearly? etc 2) Can I upgrade to newer versions of Malwarebytes Antivirus for if they release a) tomorrow? cool.gif a month from now? c) 6 months from now? d) a year from now? e) anytime in the future 3) Will the upgrade be free, or at a discounted rate than for newer customers. Hoping for a quick response as I am looking to purchase tonite. Thanks.

Hey, I have a question regarding this. I typically like to register/support products that I like and make regular use of. In this case, its Malwarebytes Anti-Malware. I am looking into purchasing it, but I have some questions: 1) How long does my definitions subscription last? Lifetime? Renewable yearly? etc 2) Can I upgrade to newer versions of Malwarebytes Antivirus for if they release a) tomorrow? a month from now? c) 6 months from now? d) a year from now? e) anytime in the future 3) Will the upgrade be free, or at a discounted rate than for newer customers.