[ RESOLVED ] Soulseek p2p program throwing too many Malwarebytes notifications

[Cronos42]

When I use Soulseek (which is a p2p file sharing program), I often get a bunch of Malware Bytes popups about blocked IP addresses via the Soulseek app (usually "Trojan", "compromised" or "malware"). I think these are thrown because Soulseek has a feature where you can tell it to search for specific files you're looking for. Also, I think (I am not sure) it checks your Soulseek shared folders to see if you have files other people are looking for. This never actually downloads anything, it just looks. I have added the Soulseek app to the Allow List, but I still get all these messages. Sometimes there are so many notifications that I cannot get to any other internet sites because things lock up. That might have something to do with my also using Maylwarebytes Privacy. I'd like to have Soulseek not checked at all (which is why it's on the Allow list). How would I do that? And how real is the threat of Malware or Trojans via Soulseek if I basically only exchange mp3/flac/txt/jpg/png files?

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

• For use when you are on the forums and need to provide logs for assistance
• For use when you don't need or want to create a ticket with Malwarebytes
• For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler

1. Download Malwarebytes Support Tool
2. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
3. Place a checkmark next to Accept License Agreement and click Next
4. Navigate to the Advanced tab
5. The Advanced menu page contains four categories:
   • Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
   • Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
   •  Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
   • Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
6. To provide logs for review click the Gather Logs button
7. Upon completion, click OK
8. A file named mbst-grab-results.zip will be saved to your Desktop
9. Please attach the file in your next reply.
10. To uninstall all Malwarebytes Products, click the Clean button.
11. Click the Yes button to proceed. 
12. Save all your work and click OK when you are ready to reboot.
13. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
14. Select Yes to install Malwarebytes.
15. Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler

 

 

 

 

Spoiler

 

 

 

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[Porthos]

2 hours ago, Cronos42 said:

When I use Soulseek (which is a p2p file sharing program), I often get a bunch of Malware Bytes popups about blocked IP addresses via the Soulseek app

As for why Malwarebytes blocks Soulseek software, this is because Soulseek software is what is known as Peer-to-Peer (P2P) applications meaning it connects to many different servers/IP addresses (this is how files are downloaded through Soulseek software) and because of this, Soulseek software will connect to a server that is also known for hosting malicious content.  This is because servers/IP addresses are often shared by multiple sites, so while what you are downloading through Soulseek software may be perfectly safe, some of the sites hosted on some of the IP addresses that Soulseek software connects to may be malicious.  Such connections are not a threat however, and you may exclude Soulseek software from the Web Protection component in Malwarebytes to stop the blocks from happening without compromising your protection (your web browser and other critical web-facing programs will still be fully protected from malicious websites and other malicious content).  To do so, add your Soulseek software.exe to your exclusions using the method described under the Exclude an Application that Connects to the Internet section of this support article.

Allow an application to connect to the Internet

To prevent Malwarebytes for Windows from blocking an application you trust, add the application executable.

1. Click Allow an application to connect to the Internet.
2. To find the application, click Browse.
3. Select the application executable you want to add, then click Open.
4. Click Done to confirm your changes.

 

Edited August 26, 2023 by Porthos

[Cronos42]

I already added the app to the Allow List...but I still get the notifications...

By the way, Soulseek is not Torrent-based. You always actually download from one person at a time.

[Porthos]

6 minutes ago, Cronos42 said:

I already added the app to the Allow List...but I still get the notifications...

Did you add SoulseekQt.exe to the section I posted?

[Cronos42]

Yes I did.

[Porthos]

What version of Malwarebytes do you have? Current version is 4.6.1.280

[Cronos42]

My version was not the latest, though it wasn't very old either (I guess a few months). This seems, remarkably, to have fixed the issue. Thanks for the tip. I'll update the next time I have any problems, *before* posting here and wasting your time ;-)

[Porthos]

Just now, Cronos42 said:

I'll update the next time I have any problems, *before* posting here and wasting your time ;-)

Never a waste of time. We are happy to assist.

It is here for others who have the same issues to see.

Since the issue is solved, I will close this topic and mark it as solved.

[Porthos]

Closing this topic as it's been resolved.