MalwareBytes Blocked Torrent Sites >Now Helps PIRATES
 

https://ci4.googleusercontent.com/pr...warebytes1.jpg


Posted: 20 Jul 2015, TF.


Anti-malware software MalwareBytes has proven somewhat of a hit with pirates lately following a rather generous offer.


Rather than punishing people who use unlicensed versions of their software, MalwareBytes’ creators ran an amnesty program through which people could receive a premium product for zero cost.

It’s likely that many of those now using a free key will have accessed their previously unlicensed version from a torrent site. However, a feature present in the premium edition means that at least two of the world’s most popular venues are now completely off-limits to users of the software.

As can be seen from the screenshots below, visitors to Isohunt.to and LimeTorrents.cc – two of the world’s largest torrent sites – are currently rendered inaccessible by MalwareBytes’ “Malicious Website Protection” module.



https://ci6.googleusercontent.com/pr...nt-blocked.png


https://ci4.googleusercontent.com/pr...me-malware.png



Puzzled at why the software should take this approach but noting the similarity between the IP addresses used by both sites, TF approached MalwareBytes for comment.

“We’re blocking the IPs (amongst others) because there’s a plethora of IPs on the [same network] housing a ton of malvertising and fraud sites,” Malware Intelligence Analyst Steven Burn told TF.

“The ASN involved is thus far unresponsive and has been since March,” he added.

So, while neither Isohunt.to nor LimeTorrents are considered harmful by MalwareBytes, the company has chosen to block their IP addresses due to their proximity to others that are allegedly behaving maliciously.


These two sites are not the only ones affected either. A range of other sites hosted in Ukraine are all blocked by MalwareBytes’ Web Protection module.


While it’s easy to regain access to any blocked site by selecting the appropriate button in the corresponding MalwareBytes popup box, many users are likely to consider blocked sites as dangerous, despite them essentially being victims of someone else’s wrong doing.

Speaking with TF, Isohunt.to told TF that the blocked host in question actually provides a good service.


“These guys webcare360.com provide great hosting that is bulletproofed against different kind of abuses. So a lot of websites around the world use their service,” the site explains.


(BEST SERVER ON THE NET - check it out folks - Ladybbird)

webcare360.com



“Looks like MalwareBytes simply blocked all IP addresses that belong to this hosting provider.”

Another issue that raised its head during our tests is the seemingly random IP addresses MalwareBytes blocks while connecting to certain torrent swarms. On numerous occasions the software flags IP addresses as malicious and denies connections to them. Intrigued, we asked MalwareBytes for an explanation.

“Our main goal is to protect our users from malicious hosts that could either be servers participating in drive-by downloads or even home computers spewing spam,” Jérôme Segura, Senior security researcher at MalwareBytes, told TF.

“So the block of only certain IPs within that pool is simply that. We are blocking the ones that we have identified for malicious activity, which also happen to be torrenting.”

The blocking of these IP addresses raises an interesting dilemma. Due to their connections to suspicious activity elsewhere, MalwareBytes considers them malicious and excludes them.

However, it’s worth noting that despite their potential bad deeds elsewhere, peers in a torrent swarm go through a kind of vetting process based on the hash content of the material they’re carrying.

Put simply, while they possibly cause mischief elsewhere, these peers can’t do any real harm to the swarm. Blocking them won’t cause any really serious problems either (unless they’re the only seeder) but since they don’t need to be blocked we asked MalwareBytes about their policy.

“You bring up a very valid comment and something that many people might wonder about. I will pass this information along to see how we can manage this in a better way,” Jérôme Segura notes.

In conclusion, both scenarios (site and peer blocking) are caused by the blocking of IP addresses either directly or loosely connected to malicious activity elsewhere. MalwareBytes users will have to use their discretion when deciding whether to block or allow those connections in future.

re: MalwareBytes Blocked Torrent Sites >Now Helps PIRATES
 

I hope this resolves why I cant login from my old home in Manila. My IP was blocked there and when we get a new internet in the new place next month when we go back there after the kids summer hols I will see if my IP is still blocked.

I can use a Mobile WiFi if this is the case to get around the IP block because its a different ISP.

re: MalwareBytes Blocked Torrent Sites >Now Helps PIRATES
 

bobo, our ADMIN Support, reported this prob. LAST year;


Malwarebytes Issue -May Affect Members Signing in



However, I HAVE NEVER trusted MalwareBytes & did NOT use them for years, even before bobo's thread......


It appears bobo was right.

BUT many other folks on the Net continue to use/trust them


One thing I am sure of shadowwar, is > that WIFI connection you had at that time/region you were in/receiving an IP signal from .... was def. BLACKLISTED


I tested it in every 'means' I know for hours to help you get back onto our site, but the results came back as the same...


NOTHING to do with MalwareBytes, simply the IP region you were in at that time & receiving a signal from was def. BLACKLISTED


I suggest you stop using WIFI on your cel for the net, in the country you are living in....


Just get a stable trusted ISP in your home.

JMO. ;)

re: MalwareBytes Blocked Torrent Sites >Now Helps PIRATES
 

Thanks :-)

re: MalwareBytes Blocked Torrent Sites >Now Helps PIRATES
 

i' ve used this one in the past and it was fine for me. but i am not currently using it though

re: MalwareBytes Blocked Torrent Sites >Now Helps PIRATES
 

It appears that bobo, our Admin support was correct., as he posted in an earlier thread, (see the live link I posted in this thread, to read it)


MalwareBytes had a reason for changing their thoughts.... :dunno:


Even folks that are not 'Tech Savvy', must by now be aware, that the FREE OFFER to download FROM WINDOWS 10, traces Pirates.....

>>>as reported by jenkins4 on this site weeks ago


NB: I have NOT used MalwareBytes for years


Thanks for your input wildhoney66....:)

re: MalwareBytes Blocked Torrent Sites >Now Helps PIRATES
 

to answer your question yes i am aware about windows 10. in fact i posted about it on my site as well for others who don't know about it. we have a section of it that's dedicated to torrents if you so want to use them. i don' t normally though. but our faithful leader over there lol. a real good guy i think. he has windows 10

and i posted it on there i think it was the next day after he posted that he had started using it. i have yet to update to windows 10. for reasons you just said. yes i am aware that if they want me they can find me i'm sure. but

correct me if i'm wrong but i'm a little safer having said that by not using windows 10 right now. and honestly i'm surprised that it took windows that long to put it in one of their updates to be honest. though next time i need a computer which hopefully won't be for another decade or more. i hope that by than they take that out by than.

cause i didn't install windows 8.1 it came with my puter. my old one had XP and was going to expire like within a few months anyways when my puter went down. so i would have had to update it anyways regardless