Pirated Version Confusion

[OrcWarrior]

At every reboot MBAM tells me that I am using a pirated version, and it has forwarded information to your servers. The thing is, I downloaded this copy from an official mirror that is located on your site and I downloaded what I assumed was a free version. I have not entered any registration information, and have simply been using it as-is. The protection module was never enabled.

Why does it keeps telling me after every single reboot that I am using a pirated version? Is this some type of error?

[sho-dan]

Hello OrcWarrior, Welcome to Malwarebytes.org

The MBAM team is working to resolve this issue.

Give this a read, to understand the whys.

http://www.malwarebytes.org/forums/index.php?showtopic=13237

[OrcWarrior]

I would like to thank you for the quick reply, and I have read the information provided. With that said:

The information in those posts did not directly state what information was sent to the MBAM servers. I think we (the users) have a right to know what information is sent to them when this error occurs. For the most part, no developer has came out and answered this question. This is a privacy risk that most users would not want to accept if they knew in advance that the company would send, even trivial, information to themselves from the end-users machine on a whim.

I will be uninstalling this product, and also instruct users to not use this software anymore until this issue is resolved and the developers either allow the source-code to be audited or at least make a public statement about what information is sent.

Sincerely,

Concerned user.

[OrcWarrior]

I would like to thank you for the quick reply, and I have read the information provided. With that said:

The information in those posts did not directly state what information was sent to the MBAM servers. I think we (the users) have a right to know what information is sent to them when this error occurs. For the most part, no developer has came out and answered this question. This is a privacy risk that most users would not want to accept if they knew in advance that the company would send, even trivial, information to themselves from the end-users machine on a whim.

I will be uninstalling this product, and also instruct users to not use this software anymore until this issue is resolved and the developers either allow the source-code to be audited or at least make a public statement about what information is sent.

Sincerely,

Concerned user.

I could not find an option to EDIT the post above, so I apologize for double posting. I just wanted to add:

According the Princeton University the definition of spyware is:

"S: (n) spyware (computer software that obtains information from a user's computer without the user's knowledge or consent) "

SOURCE: http://wordnetweb.princeton.edu/perl/webwn?s=spyware

Just something the developers of an anti-malware program should consider.

[Baz.]

I could not find an option to EDIT the post above, so I apologize for double posting. I just wanted to add:

According the Princeton University the definition of spyware is:

"S: (n) spyware (computer software that obtains information from a user's computer without the user's knowledge or consent) "

SOURCE: http://wordnetweb.princeton.edu/perl/webwn?s=spyware

Just something the developers of an anti-malware program should consider.

Hi,

I assume that the EULA that you accepted when installing the program made provision for such an event.

If this is a mistake on the part of the MBAM developers it will be rectified and they will explain what the issue, if any, was to blame

Otherwise, you can assume that any information sent is information that is covered and specified in the EULA.

I would assume it is something trivial such as IP address and license number, although only a developer could give you a concrete answer to that question.

[OrcWarrior]

Hi,

I assume that the EULA that you accepted when installing the program made provision for such an event.

If this is a mistake on the part of the MBAM developers it will be rectified and they will explain what the issue, if any, was to blame

Otherwise, you can assume that any information sent is information that is covered and specified in the EULA.

I would assume it is something trivial such as IP address and license number, although only a developer could give you a concrete answer to that question.

I am not implying that this is MALICIOUS spyware, but it does meet the overall criteria to be called spyware in its own right.

In regards to an EULA agreement, there are plenty of malicious threats that contain their own EULA, but that does not make them any more right in their actions. If it did, then modern anti-malware software would not flag and remove said items. Also, there are plenty of non malicious items that include EULA agreements and transmit information as MBAM did, but those worried about privacy risks will also choose not to use said products. Normally, this would not be such a huge deal, but you just expect more from software designed to protect your privacy.

I'm not saying the developers have, had or will have any malicious intent and I am sure the information sent is trivial and would not have much of an impact on anything. They should at least make it apparent, and even allow people to opt-out of it. They could disallow updates or use of their software to those who opt-out, but at least it would give them a choice. With that said, my choice is to simply stop using it. I would happily use it again if they at least made an effort (the developers) to publicly address the situation and/or implement such an opt-out strategy listed above.

[RubbeR DuckY]

Do you mind please exporting the following registry keys.

HKEY_LOCAL_MACHINE\SOFTWARE\Malwarebytes' Anti-Malware

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

And posting them here. It will help us with our investigation.

Also, I assure you, the message is a scare tactic for pirates only. No information is transmitted to our servers except when retrieving a database update.

[OrcWarrior]

Do you mind please exporting the following registry keys.

HKEY_LOCAL_MACHINE\SOFTWARE\Malwarebytes' Anti-Malware

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

And posting them here. It will help us with our investigation.

Also, I assure you, the message is a scare tactic for pirates only. No information is transmitted to our servers except when retrieving a database update.

I am afraid I cannot comply with this request. I have already removed the software, and cleaned my registry. I apologize that I could not be of more assistance.

[RubbeR DuckY]

I triple checked all of the code and had an outside expert do the same. The only way that message can be executed is if a blacklisted license key was ever on the system. Therefore, I must conclude that this is the case in your situation. I urge you to ask all family members and others using the machine if they ever installed the product with a blacklisted license key.

[Guest claudiubotezatu]

Do you mind please exporting the following registry keys.

HKEY_LOCAL_MACHINE\SOFTWARE\Malwarebytes' Anti-Malware

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

And posting them here. It will help us with our investigation.

Also, I assure you, the message is a scare tactic for pirates only. No information is transmitted to our servers except when retrieving a database update.

Hi RubbeR DuckY,

People who are using pirated key are not stupid; if MBAM displays the same message even though you are disconnected from internet this doesn't scare anybody.

You are missing though the point here.

Claudiu

Toronto,

Canada

[RubbeR DuckY]

Claudiu,

I realize that, but even if it scares one pirate, our job is done . We have multiple layers of protection to discourage pirates. However, in my opinion, if they are going to pirate the software they weren't going to purchase it anyway, so we do not really focus any energy toward preventing pirates.

[Guest claudiubotezatu]

Hi,

I assume that the EULA that you accepted when installing the program made provision for such an event.

If this is a mistake on the part of the MBAM developers it will be rectified and they will explain what the issue, if any, was to blame

Otherwise, you can assume that any information sent is information that is covered and specified in the EULA.

I would assume it is something trivial such as IP address and license number, although only a developer could give you a concrete answer to that question.

Hi,

"I assume ", "you can assume ", "I would assume ".....

What 's the point of this answer, Baz???If you cannot give a concrete answer you should stay (only) with Kaspersky forum....

Claudiu

Toronto,

Canada

[OrcWarrior]

I triple checked all of the code and had an outside expert do the same. The only way that message can be executed is if a blacklisted license key was ever on the system. Therefore, I must conclude that this is the case in your situation. I urge you to ask all family members and others using the machine if they ever installed the product with a blacklisted license key.

I assure you that your conclusion is incorrect. There are other posts on these boards with users having the same issue. I understand that you're not pointing fingers at anyone, and you are simply following the logic to come up with a logical answer in an attempt to resolve the situation - that is understandable. However, from a business stand-point that is also not the best way to reach out to your user-base, imo.

However, if all of the reports on this forum are pirates using blacklisted keys then why on earth would we take the time to register an account on your forums, report the situation and then follow-up on said situation. That just does not make any logical sense.

It could be one of a million things triggering a small glitch, but to insinuate that we are all trying to use blacklisted keys is a slap in the face to the loyal users that come here to report the problem. Also, I run a 64-bit operating system and would have no real value from the full version. It has been said time and time again that the protection module is not 64-bit compatible. Again, this further illustrates how pointless it would be for me to try to pirate software that won't even have any value for pirating it, and then coming here reporting it.

I do not wish for this to turn into a debate, argument or anything else you would like to call it. However, you have to admit that I make a pretty good point in regards to your last response to me.

[RubbeR DuckY]

I will bring in more experts and testers to help resolve this issue. Do not think we are ignoring it. However, as I stated I know how the code works. I eat, breathe, and dream it daily and nightly. If other experts confirm that the code can only execute with a pirated version then what am I supposed to think .

Once again I stress that I am bringing additional testers and coders to check the code.

[OrcWarrior]

I will bring in more experts and testers to help resolve this issue. Do not think we are ignoring it. However, as I stated I know how the code works. I eat, breathe, and dream it daily and nightly. If other experts confirm that the code can only execute with a pirated version then what am I supposed to think .

Once again I stress that I am bringing additional testers and coders to check the code.

This is fair enough. You are a human, and can't be expected to magically make problems fix themselves in the instant we want it. I also understand that you're only saying what the code and even fellow developers lead you to believe. I think we have both made valid points, and we understand each other quite well.

Thank you for the assistance, and I hope the MBAM team can figure this out. I am also satisfied with official word from a developer.

To be honest, my biggest fear with this is that the company might have targeted "pirates" by keylogging them, downloading malware, etc. I mean, you're not exactly the most well-known company in the world and there have been other "trusted" companies that have completely shattered their trust with the community by using this trust to make more profit or spy on their users (Sony, for example).

Again, I hope that I was not too disrespectful. This is a great product and I am sure it will only get better. This is a small bump in the road, but please do not hold any hard feelings. I think if more users would put in the extra effort to be informed then they would be much better off, and I am sure the MBAM staff would agree.

[RubbeR DuckY]

No hard feelings at all, let me make an official post and pin it .

[k9cop]

I will bring in more experts and testers to help resolve this issue. Do not think we are ignoring it. However, as I stated I know how the code works. I eat, breathe, and dream it daily and nightly. If other experts confirm that the code can only execute with a pirated version then what am I supposed to think .

Once again I stress that I am bringing additional testers and coders to check the code.

Well i was getting the message (trial version )also I have asked other members of the family if they downloaded this program all stated no, I used jv16 powertools to delete all registry entries and now paid for the license as I like the program I have not seen the popup again so far. There is not much of a difference as all stated for the paid version to the trial version but it 's good and works for me. Thanks again any proplems Im sure tech will fix.

[OrcWarrior]

Well i was getting the message (trial version )also I have asked other members of the family if they downloaded this program all stated no, I used jv16 powertools to delete all registry entries and now paid for the license as I like the program I have not seen the popup again so far. There is not much of a difference as all stated for the paid version to the trial version but it 's good and works for me. Thanks again any proplems Im sure tech will fix.

I found an interesting news article when Googling all of this. Maybe everyone here would be interested in it. It is on the following sites main page http://sudolab.com/

[RubbeR DuckY]

It's OK. As we grow bigger we'll have more and more scrutiny against us. People like to assume we are down the tube and stuff like that . We all just shrug it off and continue to work 15 hours a day.

[evilfantasy]

Whoever wrote that simply has a grudge and is trying to do all they can to defame the good name of MBAM and everyone involved with it. They need to grow up.

[OrcWarrior]

Whoever wrote that simply has a grudge and is trying to do all they can to defame the good name of MBAM and everyone involved with it. They need to grow up.

And how much faith are your readers supposed to have in you?

It really does not look like the author of that post was trash talking or anything of that nature. Heck, if you notice on the right-hand side of the page then this site is actually linked there.

[RubbeR DuckY]

It's just a disappointed fan . We'll make it up to them soon enough .

[k9cop]

It's OK. As we grow bigger we'll have more and more scrutiny against us. People like to assume we are down the tube and stuff like that . We all just shrug it off and continue to work 15 hours a day.

Wow let them look into the problem, if I thought there was a real problem I assure you I would not have bought it . remember it works

[k9cop]

Malwarebytes anti-malware detection

--------------------------------------------------------------------------------

http://www.malwarebytes.org/ this program works great there is a free version and a paid version with a little more options .Just spreading the word

__________________

Hope you don't mind I posted this on my favorite site http://www.cdfreaks.com/

[tlchost]

If other experts confirm that the code can only execute with a pirated version then what am I supposed to think .

One could recite how many times experts hae been wrong.

I found, after I had loaned a system to a group that someone had installed a version of your software that was pirated.

I decided to purchase the software, since I had heard good things about it....and paid for a registration.

This is the third time I have used the third party uninstaller your support people suggested, the third time I have

used the clean utility your support people have suggested and the third time I have instlled the product from the list your support folks have suggested.

It appears that the program is registered, it appears that it removed things, it appears that it is protecting my computer, but it also appears when I reboot my computer that I will see the "scare" message.

So I suspect that:

The third party uninstaller doesn't work correctly,

or

Your clean utility doesn't work correctly

Perhaps the experts can tell you how to get rid of the message.

But what I wonder....and I'm not asking how the software works....but if it really can detect that a pirated key

was used, doesn't that mean it does "phone home"? If so, is it only during the install?

Thom