Jump to content
Porthos

ANSWERED Aol CDN blocked

Recommended Posts

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 10/7/18
Protection Event Time: 11:40 AM
Log File: a89386b6-ca4f-11e8-b96f-a215a4f7dac5.json

-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.463
Update Package Version: 1.0.7233
License: Premium

-System Information-
OS: Windows 10 (Build 17763.1)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Trojan
Domain: s.aolcdn.com
IP Address: 192.229.211.36
Port: [55684]
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

(end)

Share this post


Link to post
Share on other sites

In an effort to protect our users from getting infected, the block was put on aolcdn.com. It will be removed right away.

It was caused by this file -

o.aolcdn.com/hss/storage/fss/a5cfeea95eff131bc3cb21821a28b547

2018-10-07_19-12-14.png.cd61ae3521009227cc37b9237956524f.png

Edited by Dashke

Share this post


Link to post
Share on other sites
Just now, mystiefreak said:

Cool - so was this a Trojan, or was it misreported?  I wanted to delete the file causing it, if it's safe to do that.

Yes, the files is malicious but fortunately we already detect it as Trojan.MSIL.Dropper -

https://www.virustotal.com/#/file/50d9e490042d226bfaeef0b39c7903d4e166803fd743f6e6a7a6c2aaadfd933c/detection

Which file do you want to delete?

Share this post


Link to post
Share on other sites
1 minute ago, spielman36 said:

I am having this same issue trying to access aol.com

domain:  0.aolcdn.com

Do we just need to wait and try again?

Updates are out, please try to update the database and let us know if that helps -

MBAM2 Version: v2018.10.07.05
MBAM3 Version: 1.0.7235
:) 

Share this post


Link to post
Share on other sites
1 minute ago, mystiefreak said:

You showed the file a few comments ago - will Malwarebytes remove it if I run it again now, or should I find and delete it myself?

If the file is on your system, Malwarebytes will automatcally remove it so you don't have to worry at all. :)

Share this post


Link to post
Share on other sites
7 minutes ago, Dashke said:

If the file is on your system, Malwarebytes will automatcally remove it so you don't have to worry at all. :)

I noticed the messages seemed to stop on their own, and I've run Malwarebytes, but is said it didn't find anything.

Share this post


Link to post
Share on other sites
16 minutes ago, spielman36 said:

I updated and that worked fine.  Thanks!

Thanks a bunch for checking! :)

10 minutes ago, mystiefreak said:

I noticed the messages seemed to stop on their own, and I've run Malwarebytes, but is said it didn't find anything.

Yep, that means that MB3 has been updated automatically. :)

Share this post


Link to post
Share on other sites
7 minutes ago, Dashke said:

Thanks a bunch for checking! :)

Yep, that means that MB3 has been updated automatically. :)

Awesome - you guys are the best.

 

Share this post


Link to post
Share on other sites
5 minutes ago, KDMalcolm said:

I have the same issue.  How do I fix it?

 

Please try updating your database by clicking "Current" like in the screenshot -

2018-10-07_19-57-25.png.f8b2f16add1d9c8291c9aa66648acdb3.png

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.