Jump to content

False positive or not?


drinx
 Share

Go to solution Solved by Zynthesist,

Recommended Posts

Hi,

advise please as to if this website block by Malwarebytes is a false positive or not?.

hxxps://ohsw7kcq3.qnssl.com/file/14984687013583gjox1savd4.zip

The zip file is attached to this post.

Log: -Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Trojan
Domain: ohsw7kcq3.qnssl.com
IP Address: 117.91.177.227
Port: [49897]
Type: Outbound
..
The IP address changes though!.

The link that was blocked is a firmware update and update program/tool which runs on Windows, but the firmware is for a non windows device.

I scanned the zip file that I downloaded after removing the website block and Malwarebytes detects nothing.

The webpage with the Link on it to the firmware update and update tool is not blocked: hxxps://www.smoktech.com/faq/273

but the download link for the firmware update and update tool on the above webpage is blocked & listed as a Trojan, but like I said, Malwarebytes detects nothing when I scan the zip file.

So what I need to know is was it just a false positive?, or was the connection to the Domain the problem?.

 

14984687013583gjox1savd4.zip

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.