"Website blocked" notifications

[digger78]

There should be a way to disable the "website blocked" notifications while leaving all other notifications allowable.

[exile360]

Yes, more granular control over the various notifications/notification types is something the team has planned though no ETA on when that will happen at this time.

Thank you for the suggestion and if you have any others please don't hesitate to let us know.

[dazzknowles]

This really is the most annoying thing about MalwareBytes. I bought the premium version and now wish I hadn't as the notifications are ridiculous. For now I've disabled all of them which is hardly ideal.

[Porthos]

2 minutes ago, dazzknowles said:

This really is the most annoying thing about MalwareBytes. I bought the premium version and now wish I hadn't as the notifications are ridiculous. For now I've disabled all of them which is hardly ideal.

The average user hardly sees any blocks. Could you provide any of the logs for these blocks?

[dazzknowles]

I don't have the logging option on but here's a screenshot from the Reports pane. This was the same ip/port reported dozens of times and I can scroll 2-3 pages worth of those. The notifications would be OK if they were only reported once per ip/port per time period or, as per the opening comment on the thread, users could just turn off the 'Website blocked' ones.

 

[Porthos]

2 minutes ago, dazzknowles said:

I don't have the logging option on but here's a screenshot from the Reports pane.

Double click on one of those and export it to the clipboard and paste it to your reply. 

[dazzknowles]

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 12/2/17
Protection Event Time: 10:11 AM
Log File: 37205652-d749-11e7-bb7d-f46d0448a091.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.236
Update Package Version: 1.0.3394
License: Premium

-System Information-
OS: Windows 10 (Build 14393.1770)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Domain: 
IP Address: 41.220.136.99
Port: [56489]
Type: Inbound
File: C:\Windows\System32\svchost.exe

(end)

[dazzknowles]

I suspect it's related to my p2p software that I run from time to time and it's great that MB is blocking those connections, I just don't need to see them repeated so much.

[Porthos]

1 minute ago, dazzknowles said:

File: C:\Windows\System32\svchost.exe

I suggest you post in the malware removal section.  This not from your p2p software. It is a sign of infection.

 

[dazzknowles]

Thanks but the swarm of notifications only happens when the p2p app starts a download and stop a couple of minutes later and the nightly MB scans find no threats and my KAV running side-by-side finds no threats. I did run the FRST tool mentioned in that post you linked to and there was nothing in the scan results that I didn't recognise or couldn't Google to verify. So, thank you for your concern but I'm happy that there isn't something more nefarious going on.

So to get this thread back on topic, the MB notifications need some serious attention. I'd prefer an intelligent de-duplication setup as then users would still be rightly notified but not spammed but anything would likely be better than the current options.

[Porthos]

8 minutes ago, dazzknowles said:

Thanks but the swarm of notifications only happens when the p2p app starts a download

Then you can exclude your p2p app since you are so sure you are clean.