Firewall Blocking Malwarebytes

Page 1 of 2 12 LastLast

  1. Posts : 708
    Windows 7 Pro
       #1

    Firewall Blocking Malwarebytes


    When I got up this morning I had a popup indicating that Malwarebytes was being blocked by the Microsoft Firewall.

    I have never seen this before but I tried to unblock it but Malwarebyes is NOT listed the programs being blocked by the Firewall.

    I guess I could uninstall Malwarebytes and then reinstall it but I don't believe this would cure the problem.

    Does anyone have a suggestion??
      My Computer


  2. Posts : 708
    Windows 7 Pro
    Thread Starter
       #2

    BTW here is the popup I am seeing:

    Firewall Blocking Malwarebytes-mal.jpg
      My Computer


  3. Posts : 1,102
    OEM Windows 7 Ult (x64) SP1
       #3

    Hi:

    That sounds rather unusual.
    MBAM and the native Windows firewall usually play together just fine.
    And if things *were* working OK previously, but now you are getting a "conflict", something must have changed on the system to create that.

    >>Are you running the current MBAM version (2.2.0.1024)?
    >>Aside from the Windows firewall, what are your other security applications?
    >>Can you please provide a screen shot or the exact wording of the message?

    Yes, you could try a proper clean reinstall of MBAM. The "best practices" for that are here: MBAM Clean Removal Process 2x.
    >Be sure to have your license info handy before you start.
    >Be sure to reboot when prompted by the removal tool.
    >It's a good idea to reboot again AFTER the reinstall.

    Another thing to try would be setting mutual exclusions between MBAM and your AV and firewall.
    This is NOT normally needed for the Windows firewall or MSE.
    So, while it may resolve your issue, I'm not sure why you would need to do this, unless something else is amiss or creating conflicts (e.g. too many security applications).
    If you want to go that route, let me know, and I will provide instructions.

    Please let us know how it goes,

    MM
      My Computer


  4. Posts : 1,102
    OEM Windows 7 Ult (x64) SP1
       #4

    Ahhhhhhhhhhh.
    Our posts crossed in cyberspace....


    That is an entirely different "problem".
    That is NOT Windows firewall blocking MBAM.
    That is the MBAM web/IP blocking module generating IP blocks when using P2P software.

    That is not a problem at all.
    That is a normal expected behavior when running torrents or other P2P.
    MBAM is just doing its job.
    This explains why and how to *safely* deal with the blocks: Why does Malwarebytes Anti-Malware block BitTorrent or other Peer-to-Peer Programs?

    Please let us know if this explains/resolves your issue.

    Thanks,
    MM
      My Computer


  5. Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       #5

    huffman said:
    When I got up this morning I had a popup indicating that Malwarebytes was being blocked by the Microsoft Firewall.
    ?
    Your image doesn't say windows firewall is blocking anything :/
      My Computer


  6. Posts : 226
    Win7 Home Premium x64
       #6

    MoxieMomma is absolutely correct. MalwareByes is blocking a seed or peer attempting to connect to your bittorrent program. It's very likely a false positive, and you can whitelist the IP in malwarebytes if you wish, but, as MM stated, this is not a "problem" it's simply MalwareBytes doing it's job!
      My Computer


  7. Posts : 708
    Windows 7 Pro
    Thread Starter
       #7

    I see now that MWBs is doing the blocking. I followed instructions on how to disable. I expect it is still blocking but just NOT telling me it.

    I hope this is NOT the case.
      My Computer


  8. Posts : 1,102
    OEM Windows 7 Ult (x64) SP1
       #8

    huffman said:
    I see now that MWBs is doing the blocking. I followed instructions on how to disable. I expect it is still blocking but just NOT telling me it.

    I hope this is NOT the case.
    Did you disable the notifications or did you disable malicious IP/website blocking?

    If you disabled the notifications, please be aware that there is no way (at this time) to selectively disable ONLY the IP block notifications. So, you will have no way of knowing if other, non-critical notifications from MBAM are also being blocked. You'll probably want to keep an eye on your daily protection & scan logs (Dashboard > History > Application Logs) to monitor for other events.

    If you disabled the entire website blocking module, then you have created a significant security vulnerability.
    The use of torrents ("legal" or not) is a good way to get infected. The MBAM IP/website blocking module is there to protect you from this common malware vector. MBAM (the acronym/abbreviation we use is not "MWBs") will nag you about having disabled this key protection component (as would your AV if you disabled any of its key components).

    Cheers,
      My Computer


  9. Posts : 1,102
    OEM Windows 7 Ult (x64) SP1
       #9

    Zoloft said:
    It's very likely a false positive, and you can whitelist the IP in malwarebytes if you wish,
    Respectfully disagree.
    It is likely NOT a F/P.
    A F/P means that MBAM is blocking an IP that is "clean".
    Given the way that torrents work, it is much more likely that it is a legitimate block and that MBAM is doing its job correctly.
    Moreover, there is no need to "whitelist" such blocked IPs, as the blocks generally have no impact on the P2P performance.
    IOW the IP block popup notifications are merely a "cosmetic" issue.
    "Whitelisting" those IPs would be unsafe and defeats the purpose of running the malicious website protection module.

    This explains why: Why does Malwarebytes Anti-Malware block BitTorrent or other Peer-to-Peer Programs?

    If you really think that a particular IP block arising from your torrent software *might be* a False Positive, then I suggest starting with THIS PINNED TOPIC for instructions and then submitting the requested info in a new post in the website blocking F/P section of the MBAM forum HERE.
    The research team will review the info and determine whether or not it might be safe to remove the block on a particular IP.

    Cheers,

    MM
      My Computer


  10. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #10

    The IP comes from Bangladesh ... don't think I'd let it through!
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:04.
Find Us