[Possible false positives - few sites hxxp:\\ 34.230.127.91]

Hello Mark,

I will be moving your topic to an appropriate forum as there are indications that your system is infected with adware.

[False positive for myactv.net subdomains]

On 12/4/2020 at 5:26 PM, bemoats said:

Hello Dashke,

Looking through the the source code we do not see this variable in the JavaScript. Can you please provide where you have found this code?

Thank You!

Please check this link -

http://myactv.net/tech-support/faq.php

 

[False positive for myactv.net subdomains]

4 hours ago, WCL-HKA said:

Possible False Positives (detected as Malicious Website) for the following websites:

• https://webmail.myactv.net/
• https://sso.myactv.net/
• https://myservices.myactv.net
• https://portal.myactv.net
• https://idp.myactv.net

Can you please check your website, as there seems to be a malicious script?

<!--
var s="=b!isfg>#nbjmup;bcvtfAnzbduw/ofu#?bcvtfAnzbduw/ofu=0b?";
m=""; for (i=0; i<s.length; i++) m+=String.fromCharCode(s.charCodeAt(i)-1); document.write(m);
//-->

 

[again - I would like understanding]

I will be closing this topic as there are still links that lead to riskware websites.

Please keep in mind that if you continue to post in the forum without removing the suspicious content, it will be considered as a spam and you might be banned.

Thank you for your understanding and have a great day.

[again - I would like understanding]

The block will stay as your other links are active.

Until you remove them all, we are unable to unblock your domain.

And yes, we are blocking app.monetizze[.]com.

[My website www.mt-finance.com false positive]

It's a pleasure!

The update should be out in an hour or so.

[My website www.mt-finance.com false positive]

Hi,

The block will be removed.

If you need additional help, please let us know. Thanks!

[My website www.wildgoose.co.uk false positive]

18 minutes ago, whatdoesthismean said:

My website is giving me a trojan warning when I go to it. We can find no trace of any malware on the site

Hi,

We are not blocking this domain with MB4 at this point.

Can you please provide us a screenshot or a log?

[Possible FP, raports attached]

Thanks Adam,

The block will be removed.

If you need additional help, please let us know. Thanks!

[URL rescan]

Hello seanafford,

Please try updating your database and let us know if that helps.

[Domain blocked by malwarebytes, how to fix it?]

Hello Kevin,

This is a legit detection as you are redirecting users to -

https://mobile-app-tracking.com/vb/pl/clk_98021202.php?cep=kYc4IMa2q6N44Xqull9ZLImBErEUl1mWjHY3za1GiD4FPY5FdqnJbcvMjI_pCSHfo6HdimkR1gIcXLJ7XyYpFXtqp3V3tF5f902oqVVWL6o_4jJHzYvCvxTDhgnoFrhpeEZTwq2wSPJOxzYt730HQFL4XziZMUbx8ORcr6lDEHZD-RJjoq51zHdcqO0Pj2ls_QEmBHgPeExuSXVSDjECt4hBATRx4AccFs-QbriYBRQz_0QHSGaB3Mizw5zMrWi1NCCrIKm6TRBHD7Ki5PflxR9HxRv1EDPaNLZPAddBEYSusioCNtUaA6y_-V2KNfKEYn9HtGRO2ZMUHUqD64bgZP5mOlkdep2W6FQ2IfdGvjQiw4ceZF8CCoHdAgZphTlLRIvMs-RnmmgKkaxrtOaoBzthnO9nSMHQdWMxoQQEdgC7v8Tc24rx1eBcTsBa4ULbgpVC3aL9eFgkLngT10Nl7DG2TZ-RwiZOhdfPOgC-u-tVFF1qYMqI4e1Iv-8spR0c&lptoken=16bc054f69714870100c&s=1562864&referrer=vazio&isp=siminn%20hf&clickid=336582864038531803&origin=&tag=6666&bat=86.106.74.105&source=mt=n&scr=&path=false_

which is using scare tactics to get users to purchase the VPN (VPN Update title, youtube imitation gif in the background)

[FALSE POSTIVE https://www.ipace.online/]

8 minutes ago, CarCaptureUK said:

Please remove as not malicious

Hi CarCaptureUK,

We are not detecting this domain with MB4.

Can you please attach the logs or a screenshot?

[Website blocked]

Hi Kurt,

Glad to hear that.

If you need additional help, please let us know.

Wish you a great day!

[False positive on our Website]

Hi taxpool,

The block will be reviewed.

If you need additional help, please let us know. Thanks!

[MalwareBytes false positive trojan detection on client site]

1 hour ago, andreiiacob said:

Hello,

Could you please let me know if this has been actioned yet? Our clients are getting rather anxious and, if possible, I would like to be able to give them an update!

Thank you in advance and best regards,

Andrei Iacob

Hello Andrei,

The block has been removed on 2020-10-27. Are you still experiencing the block?
If yes, pease try updating the database and let us know if that helps.

[reteam.org : f0dder.reteam.org : 192.186.225.64]

Hi chuckdee,

The block will be reviewed.

If you need additional help, please let us know. Thanks!

[Website Blocked]

Hi jared77,

The block will be reviewed.

If you need additional help, please let us know. Thanks!

[Website blocked]

Hi Kurt,

We are not blocking this domain at this point.

Can you please try updating your database and let us know if that helps?

[again - I would like understanding]

Thanks, we are already blocking app.monetizze[.]com.br.

[again - I would like understanding]

Hello evipes,

Can you please let us know which other companies are not blocked?

As we said previously, please remove all redirects to same-content-same-looking websites that promote p**** enlargement pills and we will remove the block.

[subdomain app.evipes.com - request removing from blacklist]

The block will not be removed as the links are not offline.

[Could you double-check ninjapinner.com?]

Hi giroone,

Seems that the files are harmless.

[Docker Desktop | vpnkit.exe | APIPA address]

14 minutes ago, carolinajustin said:

Event: RTP Detection
Report: Blocked website
Domain: N/A
File: C:\Program Files\Docker\Docker\resources\vpnkit.exe
Category: Trojan
Port: 80
IP Address: 169.254.169.254
Type: Outbound Connection
System: Windows 10 Build 20231.1000 x64 NTFS
MalwareBytes: 4.2.1.89 / 1.0.1070 / 1.0.31508

Hello carolinajustin,

Please try updating your database and let us know if that helps.

[Possible false positive - hxxp:\\clicknupload.co]

Hi Mark,

This is a legit detection.

If you want to access the website, you can add it to the exclusion list (personally, I wouldn't recommend you doing that as they are redirecting users to PUP websites).

[Could you double-check ninjapinner.com?]

Hello giroone,

Are you submitting this domain because you suspect that it's malicious?

p.s. Nice profile photo