Jump to content

VLC download site blocked


BillH99999

Recommended Posts

Yep, based on the URL it looks like a CDN/hosting provider being used by VLC/VideoLAN much like what Malwarebytes themselves and many other software vendors use; for example:

https://data-cdn.mbamupdates.com/web/mb3-setup-consumer/mb3-setup-consumer-3.5.1.2522-1.0.441-1.0.6595.exe

That said, using IE (just to make sure it wasn't blocked and because its built in download manager allows one to easily grab the direct URL for files being downloaded) I just downloaded 2 versions of VLC direct from VLC's website (assuming it is www.videolan.org), the 32 bit ZIP package/portable version and the 64 bit installer (why no 64 bit ZIP/portable version VideoLAN, come on man :P) and here are the URLs where the actual downloads came from:

https://mirror.lstn.net/videolan/vlc/3.0.4/win32/vlc-3.0.4-win32.zip
https://mirror.clarkson.edu/videolan/vlc/3.0.4/win64/vlc-3.0.4-win64.exe

It looks to me like, as with many open source/freeware tools/programs, they are relying on charitable third parties and non-profits to host their files/downloads for them.

I got my downloads from mirrors too and when you select the build you want from the drop-down menu (the small arrow on the right side of the big orange Download VLC button) on this page it takes you to the page where the download comes through from a mirror that I assume it semi-randomly selects:

https://get.videolan.org/vlc/3.0.4/win64/vlc-3.0.4-win64.exe
https://get.videolan.org/vlc/3.0.4/win32/vlc-3.0.4-win32.zip
Edited by exile360
Link to post
  • 3 weeks later...

VLC is still being flagged.

vlc-3.0.4-win32.exe

vlc-3.0.4-win64.exe

Exploit payload process blocked                BLOCK           C:\Users\jhay\AppData\Local\Temp\vlc-3.0.4-win32.exe             jhay       VLC Player           C:\Program Files (x86)\VideoLAN\VLC\vlc.exe   Attacked application: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe; Parent process name: SpillmanClient.exe; Layer: Application Behavior Protection; API ID: 205; Address: ; Module: ; AddressType: ; StackTop: ; StackBottom: ; StackPointer: ; Extra:

Exploit payload file blocked         BLOCK           C:\Users\jhay\AppData\Local\Temp\vlc-3.0.4-win32.exe             jhay       VLC Player           C:\Program Files (x86)\VideoLAN\VLC\vlc.exe   Attacked application: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe; Parent process name: SpillmanClient.exe; Layer: Application Behavior Protection; API ID: 205; Address: ; Module: ; AddressType: ; StackTop: ; StackBottom: ; StackPointer: ; Extra:

Let me know what you need

 

Link to post
On 9/25/2018 at 12:51 PM, bhabel said:

VLC is still being flagged.

vlc-3.0.4-win32.exe

vlc-3.0.4-win64.exe

Exploit payload process blocked                BLOCK           C:\Users\jhay\AppData\Local\Temp\vlc-3.0.4-win32.exe             jhay       VLC Player           C:\Program Files (x86)\VideoLAN\VLC\vlc.exe   Attacked application: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe; Parent process name: SpillmanClient.exe; Layer: Application Behavior Protection; API ID: 205; Address: ; Module: ; AddressType: ; StackTop: ; StackBottom: ; StackPointer: ; Extra:

Exploit payload file blocked         BLOCK           C:\Users\jhay\AppData\Local\Temp\vlc-3.0.4-win32.exe             jhay       VLC Player           C:\Program Files (x86)\VideoLAN\VLC\vlc.exe   Attacked application: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe; Parent process name: SpillmanClient.exe; Layer: Application Behavior Protection; API ID: 205; Address: ; Module: ; AddressType: ; StackTop: ; StackBottom: ; StackPointer: ; Extra:

Let me know what you need

 

That detection is actually coming from the Exploit Protection component in Malwarebytes 3, not the Malwarebytes browser extension being discussed in this thread.  To get that issue resolved please create a new topic in the Malwarebytes Exploit false positive area by clicking here and a member of the Research team will assess the situation and take the necessary measures to correct the FP.

Thanks

Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.