Jump to content

ngrok.io false-positive


samuelcseto
 Share

Go to solution Solved by Zynthesist,

Recommended Posts

Hello,
today I found out (after trying to use the service named as ngrok) that MBAM is flagging ALL domain names generated by the system.
Example: http://49b927ba.ngrok.io and even the default domain http://www.ngrok.io
I even wrote ngrok support and it looks like they are not aware of this issue. (e-mail screenshot included)

Here is the MBAM report:

Spoiler

 

Malwarebytes
www.malwarebytes.com

-Podrobnosti denníka-
Dátum udalosti ochrany: 25.06.18
Čas udalosti ochrany: 22:39
Súbor denníka: e9e7d7be-78b7-11e8-b33b-d8cb8a140f33.json
Správca: Áno

-Údaje o softvéri-
Verzia: 3.5.1.2522
Verzia súčastí: 1.0.374
Aktualizovať verziu balíka: 1.0.5623
Licencia: Premium

-Systémové informácie-
OS: Windows 10 (Build 17134.112)
Procesor: x64
Systém súborov: NTFS
Používateľ: System

-Podrobnosti blokovanej webovej lokality-
Škodlivá webová lokalita: 1
, , Zablokované, [-1], [-1],0.0.0

-Údaje webovej lokality-
Kategória: Malvér
Doména: 49b927ba.ngrok.io
Adresa IP: 52.14.61.47
Port: [61606]
Typ: Výstupný
Súbor: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(end)

 

 

Screenshot_3.jpg

MBAM report.txt

Edited by Zynthesist
remove link
Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.