Home web page gets error 400

[icmc]

Hi all

 

I am new to malwarebytes.

I bought it last week and installed it on my machine

I then had a problem to get on to my home page which is with BTInternet

The page is

http://home.bt.yahoo.com/

But I always get a error 400 that the syntax is wrong

I went into msconfig and tried to eliminate the error

I found it to be MBAM. I disabled MBANService and MBAMScheduler and do not have a problem anymore

Is this what you call a false positive?

 

I would appreciate any help from you clever guys. I do believe MBAM is a brilliant software but if I can't get to my home page it doesn't really help

 

I have WINDOWS 7 and MBAM 1.75.0.1300  database 2013.08.05.06

 

Thx in advance

 

Ian

[exile360]

Greetings and welcome

Please open Malwarebytes Anti-Malware and click on the Logs tab and open one of your protection logs from a day when the 400 error occurred. Look in the log to see if any IP blocks occurred during that day, as that would likely be the culprit.

If that is the case, then verify that you have the product set to show notifications when malicious websites are blocked under protection settings within the Protection tab, re-enable the protection module via the checkboxes found on that tab, visit your homepage again and look for the block notification in the tray.

If the notification occurs, right-click on the Malwarebytes Anti-Malware tray icon and use the Add to Ignore List menu and select the IP address of the site which was listed in that block notification for your homepage.

Once that is done, clear out your DNS cache and try visiting the webpage again and it should no longer be blocked.

If you would like to file a false positive report because you believe this page has been blocked in error, then please do so by following the instructions here and creating a new topic here with the information requested.

Please let us know if you need any additional information or assistance.

Thanks

[icmc]

Hi Samuel

 

Thx for your fast response. I have had a look at what you have written and in the logs it doesn't show any IP Blocks

 

2013/08/05 17:50:04 +0100 BAD-KARMA (null) MESSAGE Executing scheduled update:  Daily
2013/08/05 17:50:09 +0100 BAD-KARMA (null) MESSAGE Starting protection
2013/08/05 17:50:09 +0100 BAD-KARMA (null) MESSAGE Protection started successfully
2013/08/05 17:50:09 +0100 BAD-KARMA (null) MESSAGE Starting IP protection
2013/08/05 17:50:11 +0100 BAD-KARMA (null) MESSAGE IP Protection started successfully
2013/08/05 17:50:30 +0100 BAD-KARMA (null) MESSAGE Scheduled update executed successfully:  database updated from version v2013.08.03.05 to version v2013.08.05.06
2013/08/05 17:50:30 +0100 BAD-KARMA (null) MESSAGE Starting database refresh
2013/08/05 17:50:30 +0100 BAD-KARMA (null) MESSAGE Stopping IP protection
2013/08/05 17:50:30 +0100 BAD-KARMA (null) MESSAGE IP Protection stopped successfully
2013/08/05 17:50:33 +0100 BAD-KARMA (null) MESSAGE Database refreshed successfully
2013/08/05 17:50:33 +0100 BAD-KARMA (null) MESSAGE Starting IP protection
2013/08/05 17:50:34 +0100 BAD-KARMA (null) MESSAGE IP Protection started successfully
2013/08/05 20:01:11 +0100 BAD-KARMA (null) MESSAGE Starting protection
2013/08/05 20:01:11 +0100 BAD-KARMA (null) MESSAGE Protection started successfully
2013/08/05 20:01:11 +0100 BAD-KARMA (null) MESSAGE Starting IP protection
2013/08/05 20:01:13 +0100 BAD-KARMA (null) MESSAGE IP Protection started successfully
2013/08/05 20:11:01 +0100 BAD-KARMA (null) MESSAGE Starting protection
2013/08/05 20:11:01 +0100 BAD-KARMA (null) MESSAGE Protection started successfully
2013/08/05 20:11:01 +0100 BAD-KARMA (null) MESSAGE Starting IP protection
2013/08/05 20:11:03 +0100 BAD-KARMA (null) MESSAGE IP Protection started successfully
2013/08/05 20:17:05 +0100 BAD-KARMA (null) MESSAGE Starting protection
2013/08/05 20:17:05 +0100 BAD-KARMA (null) MESSAGE Protection started successfully
2013/08/05 20:17:05 +0100 BAD-KARMA (null) MESSAGE Starting IP protection
2013/08/05 20:17:07 +0100 BAD-KARMA (null) MESSAGE IP Protection started successfully
2013/08/05 20:54:02 +0100 BAD-KARMA (null) MESSAGE Starting protection
2013/08/05 20:54:04 +0100 BAD-KARMA (null) MESSAGE Protection started successfully
2013/08/05 20:54:04 +0100 BAD-KARMA (null) MESSAGE Starting IP protection
2013/08/05 20:54:05 +0100 BAD-KARMA (null) MESSAGE IP Protection started successfully

 

On the protection page I have all boxes ticked except 'Enable malicious website blocking

That will not stop the web page coming up. So I am only partially protected

 

Thx Ian

[exile360]

Yes, if you have Malicious Website Blocking disabled, then it won't block any connections. Enable it again and let me know if there are any blocks or not when you visit your homepage. If there are, then follow the above instructions as recommended, either adding that site to your ignore list or putting in a false positive report by following the instructions in the links provided.

[icmc]

Yes, if you have Malicious Website Blocking disabled, then it won't block any connections. Enable it again and let me know if there are any blocks or not when you visit your homepage. If there are, then follow the above instructions as recommended, either adding that site to your ignore list or putting in a false positive report by following the instructions in the links provided.

Dear Samuel

 

I know if this is disabled that it will not block any connections. That is what I am saying with that off it works when I put it on it doesn't.  I copied in my previous reply a log and it doesn't show an error or a block.

I will try to add the site to my ignore list.

See if that works.

 

Thx Ian

[exile360]

Right, but with it on, does it show any block notifications and log any IP blocks in your protection logs? That's what I need to see.

[icmc]

That's the thing the log above was from a day when the blocking was ENABLED. And it doesn't show anything at least I can't see anything in there.

 

Thx Ian

[exile360]

Odd, I'm not certain how it's blocking it then as it should be logged. If you would, please contact our Support team directly here so that they may assist you in diagnosing this issue directly.

Thanks