ANSWERED False positive: ProtonVPN

[GinQ]

Hello,

My name is Gin and I represent ProtonVPN. Sending you ProtonVPN application for Windows. Couple users reported that Malwarebytes is causing connection issues with ProtonVPN. I would like you to review this application and whitelist it in your database so that ProtonVPN and Malwarebytes users could enjoy both services without unnecessary bothering.

Thank you.

ProtonVPN_win_v1.6.3.zip

[miekiemoes]

Hi,

I can't reproduce any detection at all, nor connection issues with Malwarebytes installed. So we can't whitelist what we don't detect.

Do you have detection logs where it's displayed that we are detecting anything related with ProtonVPN?

Thanks!

[GinQ]

Users reported that Malwarebytes is blocking openvpn.exe process. Will try to ask logs from them.

Thank you for your answer.

[shadowwar]

I believe it was related to this ip block which has been fixed.

 

[GinQ]

Great, thank you.

[GinQ]

Hello,

Got couple of requests on this issue. Could you please check it out?

[miekiemoes]

Hi Gin,

This has been fixed already and should no longer be detected anymore.

[premcharan2011]

Nope, it's still not fixed. I use linux with protonvpn. Everytime I make connection, this pops up. American server works fine, but netherlands server connection gets blocked by Malwarebytes. Please fix this and whitelist protonvpn.

[Zynthesist]

Block on 89.39.107.195 is being removed.

[premcharan2011]

Thanks. Malwarebytes team rocks!!! I will let you know if any other blocks occur.

Keep up the great work guys.! 

[premcharan2011]

here it is again. please fix!

[Zynthesist]

Thanks, block on 217.23.3. 92 is being removed. 

[premcharan2011]

Thanks again. 

[premcharan2011]

And here is another one..

[Zynthesist]

Thanks for the details. IP block 89.39.107. 199 is being removed.

[premcharan2011]

I think its best to whitelist this IP host range 89.39.107.***

Here is the third one.

[Dashke]

18 hours ago, premcharan2011 said:

I think its best to whitelist this IP host range 89.39.107.***

Here is the third one.

Thanks, I have removed the block on that IP.

[premcharan2011]

On 11/12/2018 at 2:35 PM, Dashke said:

Thanks, I have removed the block on that IP.

Thanks for that. but this seems to keep going. Here is another set of IPs getting blocked while connecting to Protonvpn (Netherlands VPN server). 

IP: 46.166.142.215, 46.166.142.220

 

[premcharan2011]

Another one! 

[premcharan2011]

And the IP: 46.166.142.215 is still being blocked.! 

[Zynthesist]

I am reviewing the IP blocks now. Will update by COB. 

[Zynthesist]

46.166.142.215
46.166.142.220
109.201.133.26

Are being ublocked. 

 

[premcharan2011]

Thanks for the update

[Zynthesist]

Cheers.