Jump to content

Recommended Posts

I am a single user and not a corporation. I am using the trial edition of MBAM and have used MBAM free in the past.

Background for Question #1,

I have a 21TB array shared over my gigabit network. I have it mapped to a network drive in "My Computer" of Windows 7. It is mapped to the D: drive.

Question #1)

How does Malwarebytes handle network-shared mapped drives, if at all?

Background for Question #2,

I use uTorrent to download lots of free software (free as in freedom/open source/linux), lots of unlicensed Anime, and pretty much any other legal resource which offers torrent links as part of their service (such as the Humble Bundle 4). I'm stating this because there are a lot of people who don't understand what torrenting is and usually associate it with illegal activities, blame it on ignorance. However I do not use it for that.

That being said. I have added "C:\Program Files (x86)\uTorrent\uTorrent.exe" to ignore list in MBAM settings. I keep getting the following like messages:

sam IP-BLOCK XXX.XXX.XXX.XXX (Type: outgoing, Port: 51971, Process: utorrent.exe) where XXX.XXX.XXX.XXX is an IP address.

Since I have added uTorrent to my outgoing firewall rules and to the ignore list of mbam I would assume that it would allow outgoing connections for uTorrent. It does not, so I assume that ignore list is for quick and full scanning modes only.

Question #2)

How can I tell the active protection to ignore certain programs so that it doesn't block outgoing IP connections?

Please let me know, Thanks.

SAM

Link to post
Share on other sites

Greetings :)

For question 1, it should handle them just fine. If something tries to execute from your mapped drive, MBAM should block it from running and prompt you, allowing you to quarantine or ignore the threat or disable protection the same as it would for a threat on any other drive. If you wish to scan such drives, you may do so using the Full Scan, which will prompt you to select the drives you desire to have scanned when you attempt to initiate such a scan.

Regarding question 2, there is currently no way to exclude a program or process from the IP blocking mechanism, so if you're using P2P software, such as a Bittorrent client like uTorrent, then I would recommend disabling the IP blocker until your download completes, and then enabling it once more when you're done, otherwise you're likely going to see tons of IP blocks and slower downloads due to several of the IP's being blocked. If it's only the notifications of the blocks that bothers you then you can disable them by unchecking Show tooltip balloon when malicious website is blocked. in the Protection tab of Malwarebytes Anti-Malware. Blocked IP's will still be logged in your protection logs if you need to later review them.

Link to post
Share on other sites

It's a one time fee for life and each license is valid for use on a single PC, however it can be transferred, if for example you later purchased a new PC to replace your current one. The transfer process is fairly simple:

  • Download and run mbam-clean.exe from here
  • It will ask to restart your computer, please allow it to do so very important
  • Once that is complete, just install the free version of MBAM on your new PC if it isn't installed already, and then register it with the ID and Key that you received via email when you made your original purchase

That's all there is to it. If you have any additional questions or concerns, please let us know.

Thanks :)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.