ZackMark29 Posted January 28, 2017 Share Posted January 28, 2017 13 minutes ago, Stig said: Don't use either. They are both a piece of poo. You don't need it hogging your system. In 2017, Malwarebytes has nothing to offer you. You are being conned. I wouldn't use it even it is was FREE. Malwarebytes is dead. It's just my friendly advice. If you don't choose to take this advice, then all is OK. Yeah I'm actually contented with ESET. Link to comment Share on other sites More sharing options...
Kalju Posted January 28, 2017 Share Posted January 28, 2017 33 minutes ago, romark said: I've decided to downgrade to v2 because this v3 is consuming a lot of memory and cpu. hopefully they can fix it for the next version. This argument is more than 100% false. If you have something like that, then you need to look for a mistake somewhere else. Link to comment Share on other sites More sharing options...
alienvi Posted February 1, 2017 Share Posted February 1, 2017 Installed v3.0.4.1269 now premium blocked mbamservice.exe in firewall via wfc, so it is not updating in wfc (windows firewall control) what settings to do, so that updates happen also what to block in host file (if any beyond in firewall) thanks Link to comment Share on other sites More sharing options...
knowledge-Spammer Posted February 1, 2017 Share Posted February 1, 2017 3 hours ago, alienvi said: Installed v3.0.4.1269 now premium blocked mbamservice.exe in firewall via wfc, so it is not updating in wfc (windows firewall control) what settings to do, so that updates happen also what to block in host file (if any beyond in firewall) thanks try block attrib -r %WINDIR%\system32\drivers\etc\hosts SET NEWLINE=^& echo. FIND /C /I "skipittok.com" %WINDIR%\system32\drivers\etc\hosts IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 skipittok.com>>%WINDIR%\system32\drivers\etc\hosts FIND /C /I "keystone.mwbsys.com" %WINDIR%\system32\drivers\etc\hosts IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 keystone.mwbsys.com>>%WINDIR%\system32\drivers\etc\hosts attrib +r %WINDIR%\system32\drivers\etc\hosts Link to comment Share on other sites More sharing options...
alienvi Posted February 3, 2017 Share Posted February 3, 2017 On 01-02-2017 at 6:05 PM, knowledge said: try block attrib -r %WINDIR%\system32\drivers\etc\hosts SET NEWLINE=^& echo. FIND /C /I "skipittok.com" %WINDIR%\system32\drivers\etc\hosts IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 skipittok.com>>%WINDIR%\system32\drivers\etc\hosts FIND /C /I "keystone.mwbsys.com" %WINDIR%\system32\drivers\etc\hosts IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 keystone.mwbsys.com>>%WINDIR%\system32\drivers\etc\hosts attrib +r %WINDIR%\system32\drivers\etc\hosts I'm on windows 10 my C:\Windows\System32\drivers\etc folder has 2 different host files unlike the normal namely hosts.ydk.ako lmhosts.sam i created a normal host file and copied into the folder I copied the above code and put into a batch file and ran (as admin), this is the output C:\Users\alienvi>mb.bat C:\Users\alienvi>attrib -r C:\Windows\system32\drivers\etc\hosts Access denied - C:\Windows\system32\drivers\etc\hosts C:\Users\alienvi>SET NEWLINE=& echo. C:\Users\alienvi>FIND /C /I "skipittok.com" C:\Windows\system32\drivers\etc\hosts ---------- C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS: 1 C:\Users\alienvi>IF 0 NEQ 0 ECHO 127.0.0.1 skipittok.com 1>>C:\Windows\system32\drivers\etc\hosts C:\Users\alienvi>FIND /C /I "keystone.mwbsys.com" C:\Windows\system32\drivers\etc\hosts ---------- C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS: 1 C:\Users\alienvi>IF 0 NEQ 0 ECHO 127.0.0.1 keystone.mwbsys.com 1>>C:\Windows\system32\drivers\etc\hosts C:\Users\alienvi>attrib +r C:\Windows\system32\drivers\etc\hosts Access denied - C:\Windows\system32\drivers\etc\hosts C:\Users\alienvi> Please guide, thanks Link to comment Share on other sites More sharing options...
T3rM1nat0Rr3 Posted February 3, 2017 Share Posted February 3, 2017 5 hours ago, alienvi said: lmhosts.sam Windows XP has that also (although the file has not been modified since August 2004). Link to comment Share on other sites More sharing options...
alienvi Posted February 4, 2017 Share Posted February 4, 2017 On 20-12-2016 at 3:21 PM, sledge101 said: @skunk mate.. i really havent used eset for a long time now.. to check if your activation holds... Here is one way just in case, there are lot of ways, btw: 1. block host first ( you know about this already) 2. install mb3 and open program - if activated. 3. setup your firewall settings 1. Using FWB using IP , one method is block mbamservice.exe program ( outbound ) 34.192.62.75,34.194.121.98,52.20.33.185,54.236.135.120,35.162.95.44, 52.89.202.104 and 54.68.224.128 4. remove host block 5. open the program and if program remains premium, then that will hold As steve and I are discussing on previous post: if you want to block the proxy cdn.mwbsys.com , you should allow data-cdn.mbamupdates.com in your firewall, ips previously posted so you can enable updates. Otherwise, you block the update server proxy. So, here: Create 2 rules ( Updated) in mbamservice.exe a. MBUPDATES - Allow Outbound remote IP: 68.232.34.124, 93.184.215.124, 204.237.215.237 and 205.185.208.98. b. MBSERVICE - Block Outbound remote IP: 38.68.170.220( cdn.mwbsys.com) latest update package : 1.0.799 as of now. 1.0.808 Installed v3.0.4.1269 which updated to 3.0.5 now premium blocked mbamservice.exe in firewall via wfc, so it is not updating in wfc (windows firewall control) Quote Create 2 rules ( Updated) in mbamservice.exe a. MBUPDATES - Allow Outbound remote IP: 68.232.34.124, 93.184.215.124, 204.237.215.237 and 205.185.208.98. b. MBSERVICE - Block Outbound remote IP: 38.68.170.220( cdn.mwbsys.com) this is NOT working, pl guide thanks Link to comment Share on other sites More sharing options...
sledge101 Posted February 4, 2017 Share Posted February 4, 2017 sorry havent visited the thread for a while, try host method only. -0.0.0.0 keystone.mwbsys.com -uncheck host read only but make sure host excluded in the mbam list. try this after installation, do not click update on main dialog, go to scan first (side dialog) , let it finish then restart pc, . Link to comment Share on other sites More sharing options...
visitor Posted February 4, 2017 Share Posted February 4, 2017 On 1/6/2017 at 5:40 AM, Kautsar_KRj said: Sometimes protection feature is disabled by itself at the beginning of the pc is turned on especially in malware protection feature and when it press turn on just show "starting" continues to be delayed and slow UI response when selected Quote ... a bug, and replicable. ... in ALL of the settings, if a user SLIDES the setting button from off to on (or vice versa), the setting will not stick. A user must CLICK the setting button either off or on for it to stick. What makes this most frustrating is that SLIDING the setting button will APPEAR to have changed the setting, allowing one to think that sliding is an acceptable way of changing a setting. But it is not! Only CLICKING will result in a setting change that sticks, or remains. ... Sliding will appear to have changed the setting, but if you change tabs, then come back, the setting will have reverted. Only clicking results in an actual setting change. Link to comment Share on other sites More sharing options...
sledge101 Posted February 5, 2017 Share Posted February 5, 2017 be careful when using fwb, they updated their ip, so not guaranteed it will pass thru. host blocking method still works but you to make sure it is working prior to installation. why premium key reverted to free, to fix this make sure host block is working and lastly better change the key to a new one. Link to comment Share on other sites More sharing options...
tao Posted February 5, 2017 Share Posted February 5, 2017 On 1/28/2017 at 3:01 AM, romark said: I've decided to downgrade to v2 because this v3 is consuming a lot of memory and cpu. hopefully they can fix it for the next version. And I downgraded to v1.75.1300 and find it working well still with no hassles. With Windows Defender or a third-party anti-virus for real-time protection, what need is there for MalwareBytes v3 or v2? Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.