Porthos Posted October 7, 2018 ID:1273886 Share Posted October 7, 2018 Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 10/7/18 Protection Event Time: 11:40 AM Log File: a89386b6-ca4f-11e8-b96f-a215a4f7dac5.json -Software Information- Version: 3.6.1.2711 Components Version: 1.0.463 Update Package Version: 1.0.7233 License: Premium -System Information- OS: Windows 10 (Build 17763.1) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Trojan Domain: s.aolcdn.com IP Address: 192.229.211.36 Port: [55684] Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe (end) Link to post Share on other sites More sharing options...
chuckgrigsby Posted October 7, 2018 ID:1273890 Share Posted October 7, 2018 I get this message when I launch either Microsoft Explorer or Chrome. It pops up continuously. Link to post Share on other sites More sharing options...
Staff Solution Dashke Posted October 7, 2018 Staff Solution ID:1273891 Share Posted October 7, 2018 (edited) In an effort to protect our users from getting infected, the block was put on aolcdn.com. It will be removed right away. It was caused by this file - o.aolcdn.com/hss/storage/fss/a5cfeea95eff131bc3cb21821a28b547 Edited October 7, 2018 by Dashke Link to post Share on other sites More sharing options...
kerrdelune Posted October 7, 2018 ID:1273893 Share Posted October 7, 2018 I have this problem too, both s.aolcdn and o.aolcdn. How do I fix this? Link to post Share on other sites More sharing options...
Blackard Posted October 7, 2018 ID:1273894 Share Posted October 7, 2018 Same Problem S.aolcdn.com, O.aolcdn.com Link to post Share on other sites More sharing options...
Staff Dashke Posted October 7, 2018 Staff ID:1273895 Share Posted October 7, 2018 (edited) @Porthos @chuckgrigsby @kerrdelune @Blackard Thanks for reporting this, we really appreciate it! The update will be available in ~10 minutes. Update for MBAM v2 is out - v2018.10.07.05 Edited October 7, 2018 by Dashke Link to post Share on other sites More sharing options...
mystiefreak Posted October 7, 2018 ID:1273900 Share Posted October 7, 2018 Cool - so was this a Trojan, or was it misreported? I wanted to delete the file causing it, if it's safe to do that. Link to post Share on other sites More sharing options...
Staff Dashke Posted October 7, 2018 Staff ID:1273901 Share Posted October 7, 2018 Just now, mystiefreak said: Cool - so was this a Trojan, or was it misreported? I wanted to delete the file causing it, if it's safe to do that. Yes, the files is malicious but fortunately we already detect it as Trojan.MSIL.Dropper - https://www.virustotal.com/#/file/50d9e490042d226bfaeef0b39c7903d4e166803fd743f6e6a7a6c2aaadfd933c/detection Which file do you want to delete? Link to post Share on other sites More sharing options...
spielman36 Posted October 7, 2018 ID:1273902 Share Posted October 7, 2018 I am having this same issue trying to access aol.com domain: 0.aolcdn.com Do we just need to wait and try again? Link to post Share on other sites More sharing options...
Staff Dashke Posted October 7, 2018 Staff ID:1273904 Share Posted October 7, 2018 1 minute ago, spielman36 said: I am having this same issue trying to access aol.com domain: 0.aolcdn.com Do we just need to wait and try again? Updates are out, please try to update the database and let us know if that helps - MBAM2 Version: v2018.10.07.05 MBAM3 Version: 1.0.7235 Link to post Share on other sites More sharing options...
mystiefreak Posted October 7, 2018 ID:1273905 Share Posted October 7, 2018 You showed the file a few comments ago - will Malwarebytes remove it if I run it again now, or should I find and delete it myself? Link to post Share on other sites More sharing options...
Staff Dashke Posted October 7, 2018 Staff ID:1273906 Share Posted October 7, 2018 1 minute ago, mystiefreak said: You showed the file a few comments ago - will Malwarebytes remove it if I run it again now, or should I find and delete it myself? If the file is on your system, Malwarebytes will automatcally remove it so you don't have to worry at all. Link to post Share on other sites More sharing options...
spielman36 Posted October 7, 2018 ID:1273907 Share Posted October 7, 2018 I updated and that worked fine. Thanks! Link to post Share on other sites More sharing options...
mystiefreak Posted October 7, 2018 ID:1273913 Share Posted October 7, 2018 7 minutes ago, Dashke said: If the file is on your system, Malwarebytes will automatcally remove it so you don't have to worry at all. I noticed the messages seemed to stop on their own, and I've run Malwarebytes, but is said it didn't find anything. Link to post Share on other sites More sharing options...
Staff Dashke Posted October 7, 2018 Staff ID:1273916 Share Posted October 7, 2018 16 minutes ago, spielman36 said: I updated and that worked fine. Thanks! Thanks a bunch for checking! 10 minutes ago, mystiefreak said: I noticed the messages seemed to stop on their own, and I've run Malwarebytes, but is said it didn't find anything. Yep, that means that MB3 has been updated automatically. Link to post Share on other sites More sharing options...
Blackard Posted October 7, 2018 ID:1273923 Share Posted October 7, 2018 Working now. Thanks for the quick response! Link to post Share on other sites More sharing options...
mystiefreak Posted October 7, 2018 ID:1273924 Share Posted October 7, 2018 7 minutes ago, Dashke said: Thanks a bunch for checking! Yep, that means that MB3 has been updated automatically. Awesome - you guys are the best. Link to post Share on other sites More sharing options...
Staff Dashke Posted October 7, 2018 Staff ID:1273930 Share Posted October 7, 2018 Thanks a lot for checking! Link to post Share on other sites More sharing options...
KDMalcolm Posted October 7, 2018 ID:1273948 Share Posted October 7, 2018 I have the same issue. How do I fix it? Link to post Share on other sites More sharing options...
Staff Dashke Posted October 7, 2018 Staff ID:1273950 Share Posted October 7, 2018 5 minutes ago, KDMalcolm said: I have the same issue. How do I fix it? Please try updating your database by clicking "Current" like in the screenshot - Link to post Share on other sites More sharing options...
KDMalcolm Posted October 7, 2018 ID:1273956 Share Posted October 7, 2018 Thank you that was it! Link to post Share on other sites More sharing options...
Staff Dashke Posted October 7, 2018 Staff ID:1273978 Share Posted October 7, 2018 2 hours ago, KDMalcolm said: Thank you that was it! You are always welcome! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now