Firewall Blocking Malwarebytes

Page 2 of 2 FirstFirst 12

  1. Posts : 2,468
    Windows 7 Ultimate x64
       #11

    MoxieMomma said:
    The use of torrents ("legal" or not) is a good way to get infected.
    That's not correct. Use of torrents themselves has nothing to do with getting infected or not. It's what the torrent carries what might be dangerous (pretty much in the same way as any download obtained in any other imaginable way).

    About that particular block, the fact that the antivirus blacklists it may mean there is a seedbox running there, serving many other unrelated torrents, some of them possibly malicious. It's not unreasonable to leave the thing blocked just to be on the safe side, but generally this type of things tend to be false positives, as long as it's just the torrent client the one making the connection.

    To be extra careful, the ideal thing to do is to harden your torrent client. Run it in a separate user account, so if that ever finds a vulnerability the damage is vastly restricted. Blocking the connection outright is not a crazy idea too.
      My Computer


  2. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #12

    I surly must be crazy because if Malwarebytes doesn't like something I don't want it on my computer.

    Then again I don't use P2P or Torrents of any kind.
      My Computer


  3. Posts : 1,102
    OEM Windows 7 Ult (x64) SP1
       #13

    Hi:

    Alejandro85 said:
    MoxieMomma said:
    The use of torrents ("legal" or not) is a good way to get infected.
    That's not correct. Use of torrents themselves has nothing to do with getting infected or not. It's what the torrent carries what might be dangerous (pretty much in the same way as any download obtained in any other imaginable way).
    I don't use torrents or any P2P, but it seems like a bit of an artificial distinction to separate the "what" from the "how", especially for basic computer users.
    While advanced users may be able to deploy specific strategies to "harden" their torrents, it's well described and reported all over security fora (and has been for years) that they are indeed a means of becoming infected, especially for users who don't take added precautions.

    And it's simply NOT true (and a dangerous assumption) that the IPs blocked by MBAM in real-time are "false positives", including the IP reported by the OP. They are being blocked for a reason.
    This explains why: Why does Malwarebytes Anti-Malware block BitTorrent or other Peer-to-Peer Programs?

    And their blocks are largely cosmetic, having no impact on the torrent/P2P performance.
    Ignoring or whitelisting those IPs would be considered "softening", not hardening, one's defenses.
    In fact, for most basic computer users, adding ANYTHING to the MBAM malware or IP whitelists (except perhaps for one's AV and other security applications) should be done with extreme caution.
    A safer approach is to submit the files (for malware) or the IPs/URLs (for IP/website) to the MBAM Research Team for evaluation BEFORE ignoring or whitelisting or excluding them.

    I make no claim to being an expert in either torrents or computer security. I am just a home user.
    And my replies here are posted from that perspective and from that of a volunteer helper at MBAM forum, to explain the behavior reported by the OP in this thread, with "safe" advice.

    As such, I do not wish to participate in a heated debate about the virtues or lack thereof for torrents or other P2P software.

    Cheers,
    MM
      My Computer


  4. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #14

    Very well said MoxieMomma.
    It's been known for years that P2P and or torrents are one of the best ways to get infected. It's not news; well yes it is to some.
    That is why I, them, we and others post warnings about using such method of downloading.
    That is why security programs give pop up's to warn users.

    I have been downloading off the internet for years and never had to use a P2P or torrent.
      My Computer


  5. Posts : 226
    Win7 Home Premium x64
       #15

    Where you get the torrent from, like where you get ANYTHING from, is what matters. A fantastic example, a few years back, a television show, Pioneer 1, was distributed via torrent. If you wanted to see the show, you torrented it. Most (if not all) torrent clients have built in hash-checking, assuring that what you download is only the original, uncorrupted files that were originally seeded. Even if one person in that swarm is infected/is a spammer, etc, you cannot catch anything from them, as any corrupted pieces will not pass the hash check.

    Now, if you grab anything and everything off of public torrent sites, without regard for who the uploader is, any any comments that may be made about the files, yes, you are very likely to get infected. But, same can be said if you download what you want from some random website that you don't know and trust. It's always about getting your documents from trusted sources.
      My Computer


 
Page 2 of 2 FirstFirst 12

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:46.
Find Us