kcarrandale Posted February 10, 2020 ID:1361518 Share Posted February 10, 2020 Okay, cool! Thanks for the quick reply. (Do you know if there's a way to delete my logs since they aren't relevant? Guess that'd require a moderator...) Link to post Share on other sites More sharing options...
LeDroid Posted February 10, 2020 ID:1361519 Share Posted February 10, 2020 I have had 3 notifications as well this afternoon, all after 4pm UK time (attached is the most recent) all outbound to login.live.com, but 2 different IPs (40.90.137.120, 40.90.23.154). DroidWin10MWB100220.txt Link to post Share on other sites More sharing options...
Brunomfc Posted February 10, 2020 ID:1361523 Share Posted February 10, 2020 i just downloaded the latest version of malwarebytes 2 days ago and it is blocking my onedrive for being a phishing website? thing is i don't know if it could be a rogue program disguising itself as one drive or actually one drive and i'd like some clarity or solution thanks in advance, Bruno Link to post Share on other sites More sharing options...
baronfranco Posted February 10, 2020 ID:1361525 Share Posted February 10, 2020 Just booted Windows today and after logging in Malwarebytes blocks an outbound connection (please, see log), searching for domain and IP and I got something related to Microsoft Azure. This happens every time I boot/restart my computer. Do I need to worry about it? log.txt Link to post Share on other sites More sharing options...
Porthos Posted February 10, 2020 ID:1361526 Share Posted February 10, 2020 2 minutes ago, kcarrandale said: Okay, cool! Thanks for the quick reply. (Do you know if there's a way to delete my logs since they aren't relevant? Guess that'd require a moderator...) Only authorized people and you can access them. You should be able to delete the attachments from your control panel possibly. Link to post Share on other sites More sharing options...
unknownguy Posted February 10, 2020 ID:1361527 Share Posted February 10, 2020 I just got a report now too. From http://ipv4.login.msa.akadns6.net/ First I thought that svchost got replaced with malware. But this must be a FP. Link to post Share on other sites More sharing options...
shankly1985 Posted February 10, 2020 ID:1361528 Share Posted February 10, 2020 Yeah I am also getting the same thing, it seems to be released to hotmail webiste that Malwarebytes is now blocking. Glad its all false I completely reset my browser to default lol Link to post Share on other sites More sharing options...
Porthos Posted February 10, 2020 ID:1361532 Share Posted February 10, 2020 12 minutes ago, baronfranco said: Do I need to worry about it? It is a false positive and will be fixed soon. Link to post Share on other sites More sharing options...
Samyoung Posted February 10, 2020 ID:1361534 Share Posted February 10, 2020 Hello, I got 2 blocked website alert while I wasn't trying to open anything. One phishing and one ransom ware. I had chrome open but I wasnt trying to open any websites for a while. I have three plugins on chrome: Privacy Badger, ublock origin and ublock origin extra, HTTps everywhere. I also have AVG Internet security Paid version running. I perform full daily scans on both AVG and malwarebytes. attached is the grab results and two pictures of the block notices. I am running scans now. mbst-grab-results.zip Link to post Share on other sites More sharing options...
Staff Malwarebytes Posted February 10, 2020 Staff ID:1361535 Share Posted February 10, 2020 ***This is an automated reply*** Hi, Thanks for posting in the Malwarebytes for Windows Help forum. If you are having technical issues with our Windows product, please do the following: Spoiler If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply: NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download Malwarebytes Support Tool Once the file is downloaded, open your Downloads folder/location of the downloaded file Double-click mb-support-X.X.X.XXXX.exe to run the program You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next You will be presented with a page stating, "Get Started!" Click the Advanced tab on the left column Click the Gather Logs button A progress bar will appear and the program will proceed with getting logs from your computer Upon completion, a file named mbst-grab-results.zip will be found on your Desktop. Click OK Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so: Click "Reveal Hidden Contents" below for details on how to attach a file: Spoiler To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button. One of our experts will be able to assist you shortly. If you are having licensing issues, please do the following: Spoiler For any of these issues: Renewals Refunds (including double billing) Cancellations Update Billing Info Multiple Transactions Consumer Purchases Transaction Receipt Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help If you need help looking up your license details, please head here: https://support.malwarebytes.com/hc/en-us/articles/360038523934 Thanks in advance for your patience. -The Malwarebytes Forum Team Link to post Share on other sites More sharing options...
Porthos Posted February 10, 2020 ID:1361536 Share Posted February 10, 2020 @Samyoung It is a false positive and will be fixed soon. Link to post Share on other sites More sharing options...
Porthos Posted February 10, 2020 ID:1361538 Share Posted February 10, 2020 14 minutes ago, unknownguy said: But this must be a FP. It was and will be fixed soon. Link to post Share on other sites More sharing options...
Samyoung Posted February 10, 2020 ID:1361539 Share Posted February 10, 2020 Just now, Porthos said: @Samyoung It is a false positive and will be fixed soon. Both are? Is there anything I need to do now? Thank you Link to post Share on other sites More sharing options...
Samyoung Posted February 10, 2020 ID:1361542 Share Posted February 10, 2020 3 minutes ago, Porthos said: @Samyoung It is a false positive and will be fixed soon. Is the ransomware also a false negative? I ran the threat scan and nothing came up Link to post Share on other sites More sharing options...
Staff Dashke Posted February 10, 2020 Staff ID:1361543 Share Posted February 10, 2020 Update for Malwarebytes 3 is out - 1.0.14737 Please try updating and let us know if that helps. Link to post Share on other sites More sharing options...
Samyoung Posted February 10, 2020 ID:1361544 Share Posted February 10, 2020 1 minute ago, Dashke said: Update for Malwarebytes 3 is out - 1.0.14737 Please try updating and let us know if that helps. Is the ransomware I got also a false negative? I'm running version 4 and there are no upgrades for now. Link to post Share on other sites More sharing options...
arbrich Posted February 10, 2020 ID:1361545 Share Posted February 10, 2020 Any ETA on Update for Malwarebytes 4 ?? Getting lots of calls on this. Link to post Share on other sites More sharing options...
Staff Zynthesist Posted February 10, 2020 Staff ID:1361547 Share Posted February 10, 2020 Please update your DBs as we have just sent out new publication for this. Sorry for the inconvenience. Link to post Share on other sites More sharing options...
Samyoung Posted February 10, 2020 ID:1361555 Share Posted February 10, 2020 15 minutes ago, Zynthesist said: Please update your DBs as we have just sent out new publication for this. Sorry for the inconvenience. What is a DB? I also got a ransomware threat from FRST after I tried to gather logs, is that also a false negative? Thank you Link to post Share on other sites More sharing options...
BadgerBadger Posted February 10, 2020 ID:1361557 Share Posted February 10, 2020 i have the updated mentioned in post above, malwarebytes tells me its up to date but i still got that popup when i opened the check for updates page in windows 10 Link to post Share on other sites More sharing options...
Porthos Posted February 10, 2020 ID:1361562 Share Posted February 10, 2020 22 minutes ago, Zynthesist said: Please update your DBs as we have just sent out new publication for this. Sorry for the inconvenience. What database number are we looking for? Link to post Share on other sites More sharing options...
Staff shadowwar Posted February 10, 2020 Staff ID:1361566 Share Posted February 10, 2020 MBAM2 Version: v2020.02.10.09MBAM3 Version: 1.0.14737MBAM4 Version: 1.0.18998 Link to post Share on other sites More sharing options...
Joe_McLeod Posted February 10, 2020 ID:1361570 Share Posted February 10, 2020 ⬆ Is this the most recent update? I am still getting pop-up notifications for: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 2/10/20 Protection Event Time: 1:14 PM Log File: 285ac54e-4c31-11ea-ab92-04ea56216cbc.json -Software Information- Version: 4.0.4.49 Components Version: 1.0.810 Update Package Version: 1.0.18998 License: Premium -System Information- OS: Windows 10 (Build 18362.592) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Windows\System32\svchost.exe, Blocked, -1, -1, 0.0.0 -Website Data- Category: Phishing Domain: ipv4.login.msa.akadns6.net IP Address: 40.90.137.120 Port: 443 Type: Outbound File: C:\Windows\System32\svchost.exe (end) THank you for your prompt replies! Link to post Share on other sites More sharing options...
SWPowell Posted February 10, 2020 ID:1361584 Share Posted February 10, 2020 Getting the same issue. See below: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 2/10/20 Protection Event Time: 10:19 AM Log File: 124f29ee-4c21-11ea-bd15-28f10e346d48.json -Software Information- Version: 4.0.4.49 Components Version: 1.0.810 Update Package Version: 1.0.18996 License: Premium -System Information- OS: Windows 10 (Build 18362.592) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Windows\System32\svchost.exe, Blocked, -1, -1, 0.0.0 -Website Data- Category: Phishing Domain: lgin.msa.trafficmanager.net IP Address: 40.90.137.126 Port: 443 Type: Outbound File: C:\Windows\System32\svchost.exe (end) Link to post Share on other sites More sharing options...
maffeo5 Posted February 10, 2020 ID:1361618 Share Posted February 10, 2020 I’m still having the same problem. I opened mwb -> settings -> about -> Check for updates. It said I was already updated. I restarted the computer and the problem persists. My mwb version is 4.0.49 with update pkg 1.0.18998, component pkg 1.0810. Please help! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now