Jump to content

False positive or not?

Go to solution Solved by Zynthesist,

Recommended Posts


advise please as to if this website block by Malwarebytes is a false positive or not?.


The zip file is attached to this post.

Log: -Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Trojan
Domain: ohsw7kcq3.qnssl.com
IP Address:
Port: [49897]
Type: Outbound
The IP address changes though!.

The link that was blocked is a firmware update and update program/tool which runs on Windows, but the firmware is for a non windows device.

I scanned the zip file that I downloaded after removing the website block and Malwarebytes detects nothing.

The webpage with the Link on it to the firmware update and update tool is not blocked: hxxps://www.smoktech.com/faq/273

but the download link for the firmware update and update tool on the above webpage is blocked & listed as a Trojan, but like I said, Malwarebytes detects nothing when I scan the zip file.

So what I need to know is was it just a false positive?, or was the connection to the Domain the problem?.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.