Jump to content

Dumping the ballon info

Recommended Posts

Hello and Welcome to Malwarebytes

Here are the setting you can add to your registry....

Registry Switches for Controlling IP-Blocking

Create the indicated registry value (labeled as key | value) with the indicated data and reboot to enforce the policies below. All of the values are of type DWORD

In order to create a registry value, open the Registry Editor (Click on Start -> Run -> and type in REGEDIT.EXE)

Browse to the key listed, and then right-click in the right-hand panel and choose New -> DWORD and create one of the listed keys and set the value as shown.

  1. x86 32 Bit Key: HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware
    x64 64 Bit Key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
  2. silentipmode
    Description: With a DWORD value of 1, the protection module will block and log IPs silently.
  3. startipdisabled
    Description: With a DWORD value of 1, IP blocking will start disabled on reboot, although it can be enabled subsequently.
  4. disableipblocking
    Description: With a DWORD value of 1, IP blocking will be permanently disabled (cannot be toggled).

Link to post
Share on other sites

Greetings geoffmee :lol:

If you are running a 32 bit version of Windows XP, Windows Vista or Windows 7 and the language of the OS is English you may use the IP Shortcuts Installer in this post.

Here is a Windows installer to create the IP Policy shortcuts.

It basically runs the REG command line tool and sets the registry values or removes them.


1. Only installs on x86 (32 Bit)

2. Only tested on English XP/Vista Operating Systems (may work on non English but preliminary tests indicate it does not work on other languages)

3. Assumes user did not change default installation path: C:\Program Files\Malwarebytes' Anti-Malware

4. Users on Vista will need to either have UAC disabled (not recommended) or right click on the desired shortcut and chose Run As Admin

5. Reboot is required for most of these changes to function

6. User must have Admin rights to run the installer

If you hover your mouse over the shortcut it also has a tooltip description of what it does.

Link to post
Share on other sites

I would be more concerned why the constant stream of balloons telling me it is blocking a site.

I would investigate why the balloon is popping up as it could signify malware or a suspicious application on your system.

Have you updated MBAM to the latest definitions then run Quick scan to see what it finds?

Look in MBAM logs and provide the IP address of the site that is blocked so that it can be investigated as to if it is a malicious site or not.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.