Malwarebytes Anti-Malware 3.0.4.1269

[ZackMark29]

13 minutes ago, Stig said:

Don't use either.

They are both a piece of poo.

 

You don't need it hogging your system.

In 2017, Malwarebytes has nothing to offer you. You are being conned.

I wouldn't use it even it is was FREE. Malwarebytes is dead.

 

It's just my friendly advice.

If you don't choose to take this advice, then all is OK.

 

Yeah  I'm actually contented with ESET. 

[Kalju]

33 minutes ago, romark said:

I've decided to downgrade to v2 because this v3 is consuming a lot of memory and cpu. 

hopefully they can fix it for the next version.

This argument is more than 100% false.

If you have something like that, then you need to look for a mistake somewhere else.

[alienvi]

Installed v3.0.4.1269

now premium

blocked mbamservice.exe in firewall via wfc, so it is not updating

in wfc (windows firewall control) what settings to do, so that updates happen
also what to block in host file (if any beyond in firewall)

 

thanks
 

[knowledge-Spammer]

3 hours ago, alienvi said:

Installed v3.0.4.1269

now premium

blocked mbamservice.exe in firewall via wfc, so it is not updating

in wfc (windows firewall control) what settings to do, so that updates happen
also what to block in host file (if any beyond in firewall)

 

thanks
 

try block

 

attrib -r %WINDIR%\system32\drivers\etc\hosts

SET NEWLINE=^& echo.

FIND /C /I "skipittok.com" %WINDIR%\system32\drivers\etc\hosts
IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1                   skipittok.com>>%WINDIR%\system32\drivers\etc\hosts

FIND /C /I "keystone.mwbsys.com" %WINDIR%\system32\drivers\etc\hosts
IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1                   keystone.mwbsys.com>>%WINDIR%\system32\drivers\etc\hosts

 

attrib +r %WINDIR%\system32\drivers\etc\hosts

[alienvi]

On ‎01‎-‎02‎-‎2017 at 6:05 PM, knowledge said:

try block

 

attrib -r %WINDIR%\system32\drivers\etc\hosts

SET NEWLINE=^& echo.

FIND /C /I "skipittok.com" %WINDIR%\system32\drivers\etc\hosts
IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1                   skipittok.com>>%WINDIR%\system32\drivers\etc\hosts

FIND /C /I "keystone.mwbsys.com" %WINDIR%\system32\drivers\etc\hosts
IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1                   keystone.mwbsys.com>>%WINDIR%\system32\drivers\etc\hosts

 

attrib +r %WINDIR%\system32\drivers\etc\hosts

I'm on windows 10

my C:\Windows\System32\drivers\etc
folder has 2 different host files unlike the normal namely
hosts.ydk.ako
lmhosts.sam

 

i created a normal host file and copied into the folder

I copied the above code and put into a batch file and ran (as admin), this is the output
 

C:\Users\alienvi>mb.bat

C:\Users\alienvi>attrib -r C:\Windows\system32\drivers\etc\hosts
Access denied - C:\Windows\system32\drivers\etc\hosts

C:\Users\alienvi>SET NEWLINE=& echo.

C:\Users\alienvi>FIND /C /I "skipittok.com" C:\Windows\system32\drivers\etc\hosts

---------- C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS: 1

C:\Users\alienvi>IF 0 NEQ 0 ECHO 127.0.0.1                   skipittok.com 1>>C:\Windows\system32\drivers\etc\hosts

C:\Users\alienvi>FIND /C /I "keystone.mwbsys.com" C:\Windows\system32\drivers\etc\hosts

---------- C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS: 1

C:\Users\alienvi>IF 0 NEQ 0 ECHO 127.0.0.1                   keystone.mwbsys.com 1>>C:\Windows\system32\drivers\etc\hosts 

C:\Users\alienvi>attrib +r C:\Windows\system32\drivers\etc\hosts
Access denied - C:\Windows\system32\drivers\etc\hosts

C:\Users\alienvi>

 

Please guide, thanks

[T3rM1nat0Rr3]

5 hours ago, alienvi said:

lmhosts.sam

 

Windows XP has that also (although the file has not been modified since August 2004).

[alienvi]

On ‎20‎-‎12‎-‎2016 at 3:21 PM, sledge101 said:

@skunk mate.. i really havent used eset for a long time now.. to check if your activation holds...

Here is one way just in case, there are lot of ways, btw:

1. block host first  ( you know about this already)

2. install mb3 and open program - if  activated.

3.  setup your firewall settings

1. Using FWB using IP ,  one method is block mbamservice.exe program ( outbound )

34.192.62.75,34.194.121.98,52.20.33.185,54.236.135.120,35.162.95.44, 52.89.202.104 and 54.68.224.128

4.  remove host block

5. open the program  and if program remains premium, then that will hold

 

As steve and I are discussing on previous post:

if you want to block the proxy cdn.mwbsys.com , you should allow data-cdn.mbamupdates.com in your firewall, ips previously posted so you can enable updates. Otherwise, you block the update server proxy.

 

So, here: Create 2 rules ( Updated) in mbamservice.exe

a.  MBUPDATES -  Allow Outbound remote IP:  68.232.34.124, 93.184.215.124, 204.237.215.237 and 205.185.208.98.

b.  MBSERVICE - Block Outbound remote IP:  38.68.170.220( cdn.mwbsys.com) 

latest update package :  1.0.799 as of now. 1.0.808

Installed v3.0.4.1269 which updated to 3.0.5

now premium

blocked mbamservice.exe in firewall via wfc, so it is not updating

in wfc (windows firewall control) 
 

Quote

Create 2 rules ( Updated) in mbamservice.exe

a.  MBUPDATES -  Allow Outbound remote IP:  68.232.34.124, 93.184.215.124, 204.237.215.237 and 205.185.208.98.

b.  MBSERVICE - Block Outbound remote IP:  38.68.170.220( cdn.mwbsys.com) 

 

 

 

this is NOT working, pl guide

 

thanks
 

[sledge101]

sorry havent visited the thread for a while,   try host method only. 

 

-0.0.0.0 keystone.mwbsys.com

-uncheck host read only but make sure host excluded in the mbam list.

try this

after installation, do not click update on main dialog,  go to scan first (side dialog) , let it finish then restart pc, .

[visitor]

On 1/6/2017 at 5:40 AM, Kautsar_KRj said:

Sometimes protection feature is disabled by itself at the beginning of the pc is turned on
especially in malware protection feature and when it press turn on just show "starting" continues to be delayed and slow UI response when selected

Quote

... a bug, and replicable.

... in ALL of the settings, if a user SLIDES the setting button from off to on (or vice versa), the setting will not stick.

A user must CLICK the setting button either off or on for it to stick.

What makes this most frustrating is that SLIDING the setting button will APPEAR to have changed the setting, allowing one to think that sliding is an acceptable way of changing a setting.  But it is not!  Only CLICKING will result in a setting change that sticks, or remains.

... Sliding will appear to have changed the setting, but if you change tabs, then come back, the setting will have reverted.  Only clicking results in an actual setting change. 

 

[sledge101]

be careful when using fwb, they updated their ip, so not guaranteed it will pass thru.  host blocking method still works but you to make sure it is working prior to installation.  

 

why premium key reverted to free,   to fix this make sure host block is working and lastly better change the key to a new one.

 

[tao]

On 1/28/2017 at 3:01 AM, romark said:

I've decided to downgrade to v2 because this v3 is consuming a lot of memory and cpu. 

hopefully they can fix it for the next version.

And I downgraded to v1.75.1300 and find it working well still with no hassles.  With Windows Defender or a third-party anti-virus for real-time protection, what need is there for MalwareBytes v3 or v2?