Jump to content

Malwarebytes and Spyware terminator exception

didpoy
 Share

Recommended Posts

Firefox

Firefox

Posted
Posted

Hello and :welcome:

 

What gives you the indication that it is Malwarebytes that is blocking this update?  Are you getting a notification from Malwarebytes? Error Codes?  Can you provide a screen shot?

 

That being said, there is a way that you can exclude files and programs, please see this KB Article....

 

How do I add a file, program or folder to Ignore List?

Link to post
Share on other sites
didpoy

didpoy

Posted
  • Author
Posted
2014/01/07 18:24:56 +0100 DIDIER_PC Didier IP-BLOCK 212.117.183.25 (Type: outgoing, Port: 6881, Process: spywareterminatorupdate.exe)

2014/01/07 18:26:41 +0100 DIDIER_PC Didier IP-BLOCK 89.28.94.136 (Type: outgoing, Port: 6881, Process: spywareterminatorupdate.exe)

Link to post
Share on other sites
didpoy

didpoy

Posted
  • Author
Posted
Re

 

It is the same after reboot...

 

More I realize that it crashes my browser on some sites without that I can allow or exclude by Setup any.

 

I disabled the web protection because I find that this protection lack of ease of Setup.

 

If you have solutions I'm interested

 

Thank you

Link to post
Share on other sites
Firefox

Firefox

Posted
Posted

Well I am out of ideas, we will have to wait for one of the staff to see what else can be done, as I am not on the Malwarebytes staff.  In the meantime please provide the logs below so that they can review them.... Thanks for understanding....

Please run the tools below and ATTACH (do not copy and paste) the logs so someone can better assist you.

Please post an mbam-check log:

Create an mbam-check log:

  • Download mbam-check.exe from here and save it to your desktop
  • Double-click on mbam-check.exe to run it, it should then open a log file
  • Please attach the CheckResults.txt file which should now be located on your desktop to your next reply
Next:

Please run the following scanner and send back the logs.

Download DDS from one of the locations below and save to your Desktop

dds.scr

dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.

  • When done, DDS will open two (2) logs:
    • DDS.txt
    • Attach.txt
  • Save both reports to your desktop
  • Please include the following logs in your next reply "as an attachment": DDS.txt and Attach.txt

    You can ignore the note about zipping the Attach.txt file in most cases.

Link to post
Share on other sites
didpoy

didpoy

Posted
  • Author
Posted
For sites, the problem is solved by putting the ip in the list of exclusions.
 
But the problem remains with the updates of spyware Terminator, which uses a different IP with each request for update!!!
 

 

2014/01/11 09:04:04 +0100 DIDIER_PC (null) MESSAGE Starting IP protection

2014/01/11 09:04:10 +0100 DIDIER_PC (null) MESSAGE IP Protection started successfully
2014/01/11 09:18:47 +0100 DIDIER_PC Didier MESSAGE Executing scheduled update:  Daily
2014/01/11 09:19:44 +0100 DIDIER_PC Didier IP-BLOCK 218.9.185.14 (Type: outgoing, Port: 6881, Process: spywareterminatorupdate.exe)
2014/01/11 09:22:58 +0100 DIDIER_PC Didier MESSAGE Starting database refresh
2014/01/11 09:22:58 +0100 DIDIER_PC Didier MESSAGE Stopping IP protection
2014/01/11 09:22:58 +0100 DIDIER_PC Didier MESSAGE Scheduled update executed successfully:  database updated from version v2014.01.07.04 to version v2014.01.11.02
2014/01/11 09:22:59 +0100 DIDIER_PC Didier MESSAGE IP Protection stopped successfully
2014/01/11 09:23:03 +0100 DIDIER_PC Didier MESSAGE Database refreshed successfully
2014/01/11 09:23:03 +0100 DIDIER_PC Didier MESSAGE Starting IP protection
2014/01/11 09:23:06 +0100 DIDIER_PC Didier MESSAGE IP Protection started successfully
2014/01/11 09:24:15 +0100 DIDIER_PC Didier IP-BLOCK 93.170.147.198 (Type: outgoing, Port: 6881, Process: spywareterminatorupdate.exe)
2014/01/11 09:25:04 +0100 DIDIER_PC Didier IP-BLOCK 212.113.35.103 (Type: outgoing, Port: 6881, Process: spywareterminatorupdate.exe)
2014/01/11 09:25:28 +0100 DIDIER_PC Didier IP-BLOCK 219.151.186.35 (Type: outgoing, Port: 6881, Process: spywareterminatorupdate.exe)
2014/01/11 09:25:46 +0100 DIDIER_PC Didier MESSAGE Stopping IP protection

 

Thank's

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Le programme Spyware Terminator tend la main et à l'aide des adresses IP dynamiques qui sont affectés à un secteur de la maison resedential et pas un secteur d'activité qui se trouve en Chine. Cela seul donne lieu de s'alarmer pour lesquelles le programme serait d'utiliser une adresse de la maison en Chine.

Nous sommes désolés mais il n'y aucun moyen à ce moment pour autoriser les adresses IP basée sur un programme. Vous devrez soit les ajouter manuellement chaque fois que vous utilisez Spyware Terminator ou de désactiver notre bloqueur de Web en utilisant Spyware Terminator. Encore une fois cependant, il semble difficile de comprendre ou de faire confiance à Spyware Terminator s'ils utilisent ces adresses car il ne semble pas être une bonne pratique de la sécurité.

Merci.

 

 

 

 

The program Spyware Terminator is reaching out and using Dynamic IP addresses that are assigned to a Resedential home sector and not a business sector that is located in China.  This alone gives cause for alarm as to why the program would use a home address in China.

We're sorry but there is no way at this time to allow IP addresses based on a program.  You will either need to manually add them each time you use Spyware Terminator or disable our Web blocker while using Spyware Terminator.   Again though it seems difficult to understand or trust Spyware Terminator if they're using those addresses as it does not seem to be a good security practice.

Thank you.
 

Link to post
Share on other sites
didpoy

didpoy

Posted
  • Author
Posted
Hello

 

Thank you for your well detillees explanations.

 

I wanted to just test the two products and see their reactions and thus get an idea on the most effective.

 

In the light of what you tell me, I uninstall Spyware terminator and I now use Malwarebytes.

 

Thank you for your help and patience.

 

Kind regards

Link to post
Share on other sites
DavidMbncus

DavidMbncus

Posted
Posted

I tested several AM programs years ago and saw the same issue with Spyware Terminator.

I found that with some ST program update, ST changed their "update mechanism" to use P2P for delivering updates.

I can't remember the exact ST program update where they changed to P2P...

 

When I understood what happened and why the blocks, I removed ST...

With P2P there is no telling where something might be coming from from one minute to the next...

 

I don't use torrents, P2P, ... and never have (I don't trust them).

 

After my AM testing I went with MBAM Pro, and no regrets here.

:)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.