Thread split - Mbam trial question

Re: Malwarebytes Anti-Malware's malicious website blocking module

Malwarebytes is a complex animal indeed!

A pal of mine came around recently and connected to my BT 'Home Hub'.

He wanted to try out the 'trial' of Malwarebytes Pro before purchasing same, but received this message:-

"The trial is not available for your product version. We apologise for the inconvenience."

Please will you explain this?

--

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

We do our own research and have our IP blacklist that is updated as needed (both additions and subtractions). FYI even if you don't use Malwarebytes you benefit from this because server owners that find out that they are blacklisted tend to get their issues cleaned up fast.

I have a theory but I want to ask the dev guys first.

EDIT TO ADD:

THIS seems to be an very rare issue.

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

https://www.wilderssecurity.com/search.php?searchid=4856891

BD,

You seem to have an issue with MBAM.

You can't have an issue with MBAMs performance, as recent tests have indicated that MBAM is incredibly effective.

For you (and only you), I recommend Superantispyware.

It's perfect for you.


Your Pal,

-ftp



.

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

Thank you.

As you are probably well aware, I'm not a computer whiz, but I do try to understand how things work.

The laptop in question had, indeed, had Malwarebytes installed previously (at my suggestion) but all traces were supposedly removed using Add/Remove programmes (Control Panel) and a search made for any file containing 'mbam' in the file name. All such files found were deleted. In addition, Prefetch data was removed.

So, superficially, there supposedly should have been no trace of Malwarebytes on the machine.

Please will you explain, then, how Malwarebytes knows that a trial version has previously been installed? (Viz: "... you have a trial expire and then attempt to enable a second trial later."

I'm intrigued! I don't wish to be a nuisance, merely understand.

--

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

It may be done by IP address, that would account for it saying you couldn't have another free ride.

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

Hello ftp! First off, your link didn't 'work' for me! I see this when I clicked on your link:- http://i50.tinypic.com/neumjc.jpg

I'm interested because I recently used the MBAM Pro trial version on my Windows desktop machine. Here's a picture of what was found:- http://i49.tinypic.com/2d0avdd.jpg

I must admit to being surprised that MBAM found a Trojan - one that can disable other protection on a machine, making folk think they are protected when they are not!

This information may be of interest:-

Ref: http://www.removemalwarespyware.com/remove-trojan-zbotr-gen-virus-completely-manual-removal-guide/

--

HTH explain my curiosity!

I have no idea how it got onto my computer. Any suggestions?
.

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

All traces of MBAM are not removed unless you use mbam-clean.exe after uninstalling MBAM from Control Panel.

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

I don't think it could be that 'Mman79'.

I force a change in my IP address frequently!

Thank you for the suggestion though.

D.

 

We leave a small bit of data behind about the past trial so that it is not kindergarten simple to use MBAM pro free forever. This is actually far LESS aggressive than most apps where trials are recorded on a server requiring that some of your personal info be logged, typically your email address at the very least (so they can email you your key).

As usual you are looking for trouble where compared to industry standard our software is LESS of a problem than what is considered typical or normal.

 

ot post removed

If you think it was a false positive then report it to MBAM. Otherwise, generaly speaking see how malware gets on computers
http://www.bleepingcomputer.com/forums/topic287710.html

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

*It's a valid question, though one unfortunately we don't have enough information to answer. To try to answer it though, Zeus ((which is what this is)) is used a lot for stealing banking information. Usually it's spread through spam emails claiming something is wrong with your account and "If you just click here and enter your information" can be fixed. It's used in drive-by downloads as well though, so who knows how it got there. The bigger concern is what data has it transmitted back home and if it's really all gone from the system. The first step is to contact any financial accounts the poster may have and see if they can get any information that can be had on recent transactions if any. I'd also seriously consider getting any credit/debit card numbers cancelled and new ones sent, along with changing passwords to any and all accounts.

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

This detection sounds like the zeus trojan. I would keep it off the internet until you are clean. If you are inclined to try and remove the infection,( rather than reinstalling windows ) I would seek expert help from either of these forums.
http://www.geekstogo.com/forum/topic/2852-malware-and-spyware-cleaning-guide/
http://www.bleepingcomputer.com/forums/forum22.html
As already suggested, you could first find out if it;s a F.P at the MBAM forums.It can happen.
I would also start changing any passwords use on the machine, from another clean pc

edit

@Mman did not see your reply, I was not copying your info

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

Thank you so much for that little snippet of information 'Amit'!

We'll run that on the laptop and then see if we can download the trial of Malwarebytes Pro!

I did take time out to read the Malwarebytes licence agreement and noticed that one must pay a licence fee for each and every computer upon which the 'Pro' version is installed. Do you have any idea how the company keeps a check of this when someone has a number of computers in use at he same time?

Thanks again for your advice.
--

 

Maybe here is a better place for your questions.

Consumer Support

or

Business Support

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

Checking today after 'cleaning' that machine, instead of getting that message, this image http://i48.tinypic.com/orp53o.jpg is shown on screen. Please explain. TIA

--

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

I don't know where the problem is if you are not trying to cheat and use the trial over and over again. All the software I know work this way. They always leave something in your computer to check if you have already used a trial.

 

Mbam-clean.exe is for removing all elements of the program, usually where there is a problem, and before reinstalling. It s not going to remove, whats probably a hidden registry entry, used , to make sure people don't re-use the trial.
What's with all this ' trial ' nonsense. Either use the free version,or buy the pro version. ( well worth the money ) The free version will still give you the option to remove malware

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

Thank you for your suggestion, but Malwarebytes have banned me from asking my 'difficult' questions in their forums.

HTH

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

Click on Contact us button which will allow you to do exactly that, contact MBAM tech support

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

Thank you. I do understand that!

There has been a discrepancy in the 'message' shown. Why?

There MUST be a reason! What is it?
--

 

Re: Malwarebytes Anti-Malware's malicious website blocking module

Yes, there is a very simple one, see
https://www.wilderssecurity.com/showpost.php?p=2140287&postcount=9
if still not clear try
https://www.wilderssecurity.com/showpost.php?p=2140722&postcount=14
and as we have closed the circle we close this thread.