nweissma Posted March 27, 2012 Report Share Posted March 27, 2012 i'm sure this question has been asked before .. apologies, but i can't wade through 500 messages with search word "blocked IP."to wit -- malwarebytes' popups state that port 25641, incoming and outgoing, "potentially malicious website" blocked. typical ip's are 217.24.246.34 [Albania], 89.28.6.43 [Moldovia], 222.69.96.63 [China].what course of action should i follow; is it safe to perfunctorily add these ip's to mbam's 'ignore list' ? Link to comment Share on other sites More sharing options...
IFar Posted March 27, 2012 Report Share Posted March 27, 2012 Allow all IPS's (IN/OUT) to the port you have utorrent running on.IFar Link to comment Share on other sites More sharing options...
Firon Posted March 27, 2012 Report Share Posted March 27, 2012 Allow all traffic from µTorrent. Link to comment Share on other sites More sharing options...
nweissma Posted March 27, 2012 Author Report Share Posted March 27, 2012 but why is this strategy not dangerous -- i understand the $free version of uTorrent does not possess the ability to catch virus/malware? Link to comment Share on other sites More sharing options...
ktetch Posted March 27, 2012 Report Share Posted March 27, 2012 thats not how you'd get them though.It's two things being confused as each other.MWB is flagging the activity, because it's activity on a port thats not normally used. So it's flagging activity that might happen if you already had malware, and it was phoning home.What you're talking about with the free version, is the scanner checking the files you're downloading..To use a car analogy ,malwarebytes is alerting you than a disused track has cars on it.utorrent plus would be checking the contents of vehicles to make sure there's no bombs on it.Does that make sense? Link to comment Share on other sites More sharing options...
IFar Posted March 27, 2012 Report Share Posted March 27, 2012 To date there hasn't been a virus embeded in a single packet (chunk or piece). Additionally the 3.X series have yet to be exploited and there are no known (published) security vulnerabilities with regard to the UDP/TCP packets that utorrent sends/receives. So there is no danger in allowing all traffic to from utorrent.The danger lies when you execute said torrent as the content can contain malware/virus/spyware/trojans etc. And best practice would dictate you scan your completed torrents prior to doing anything with them.IFar Link to comment Share on other sites More sharing options...
nweissma Posted March 27, 2012 Author Report Share Posted March 27, 2012 Does that make sense?yes, ktetch, it does! Thank You.{btw, your "little about me" link is broken.} Link to comment Share on other sites More sharing options...
nweissma Posted March 27, 2012 Author Report Share Posted March 27, 2012 Thanks IFar. Link to comment Share on other sites More sharing options...
ktetch Posted March 27, 2012 Report Share Posted March 27, 2012 Does that make sense?yes' date=' ktetch, it does! Thank You.{btw, your "little about me" link is broken.}[/quote']I know, some annoying smeghead decided to mobilise a little army and rfd that wikipedia page Link to comment Share on other sites More sharing options...
nweissma Posted March 30, 2012 Author Report Share Posted March 30, 2012 i proffer this as relevant :http://forums.malwarebytes.org/index.php?showtopic=107926&pid=538318&st=0entry538318i, "nweissma", am the original poster, and the only coherent answer is by "exile360" ["Porthos" is as useful as a rubber crutch; his motto is "if you can't dazzle 'em with brilliance, then baffle 'em with bullshit"] Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.