NordVPN Identified as Malware

[pwberndt]

Product: Malwarebytes Premium, v4.1.0.56

Scheduled scan ran and is reporting NordVPN Registry & Files as a problem. NordVPN has not been updated for a few weeks and has not been a problem. Malwarebytes was updated just before the scheduled scan and is on Update package version 1.0.26653.

I Googled this and no recent problems, so wondering if it is there a NordVPN  or Malwarebytes problem?

Thanks, Paul B

[Porthos]

2 hours ago, pwberndt said:

Malwarebytes Premium, v4.1.0.56

Is not the current version. Please check for updates manually.

[pwberndt]

Thanks Porthos,

Updated, now v4.1.2. Still getting the same report when I scan, I was hoping it was as simple as an update. Any other ideas?

Appreciate your response, Paul B

 

[Porthos]

16 minutes ago, pwberndt said:

Still getting the same report when I scan, I was hoping it was as simple as an update. Any other ideas?

Please zip and attach the log from the detection's and staff will investigate as a false positive and fix if needed.

[shadowwar]

Please zip and attach the files detected also. 

[pwberndt]

I've attached the zip file of the log.

Again, Thank you for your assistance, Paul B

Malwarebytes 10-Jul-2010.zip

[pwberndt]

Hi Shadow War,

You got in while I was sending the above. Here are both files. Not sure how to zip a screenshot or to download the files.

Thanks, Paul B

Malwarebytes 10-Jul-2010 (2).zip

[IamMrRobot]

Hello, I as well am experiencing the same issue. I have attached my logs as well as screenshot in the zip folder.

Nord VPN.7z

[cli]

Thanks for the logs. We will need the following files:

C:\PROGRAM FILES (X86)\NORDVPN\NORDVPN.EXE

C:\PROGRAM FILES (X86)\NORDVPN\NORDVPN-SERVICE.EXE

 

[neils123]

Just chiming in that I'm seeing the same problem (just upgraded MWB and still getting it).  I'm not attaching logs because it seems you already have multiple sets (though I'm happy to if you need), but want to make it clear this seems widespread.

 

As I was typing this, I was notified that cli responded requesting some NordVPN executables, so I'll go ahead and attach those.  Hopefully that helps get this resolved quickly.  Thanks all!

 

 

NordVPN.rar nordvpn-service.rar

[IamMrRobot]

6 minutes ago, cli said:

Thanks for the logs. We will need the following files:

C:\PROGRAM FILES (X86)\NORDVPN\NORDVPN.EXE

C:\PROGRAM FILES (X86)\NORDVPN\NORDVPN-SERVICE.EXE 

 

Attached is a new zip folder containing the exes in question. Thanks for the help

Nord VPN EXEs.7z

[neils123]

And of course the files I posted weren't current, because there was a Nord update I wasn't aware of because MWB blocked it from running.  I've added NordVPN to my allow list and updated, here are the most recent Nord files.

 

 

nordvpn-service.rar NordVPN.rar

[cli]

@neil_123 to clarify, were the files attached to this post the one being detected or the ones posted here? 

 

[pwberndt]

1 hour ago, cli said:

Thanks for the logs. We will need the following files:

C:\PROGRAM FILES (X86)\NORDVPN\NORDVPN.EXE

C:\PROGRAM FILES (X86)\NORDVPN\NORDVPN-SERVICE.EXE

 

Attached are the two files.

Paul B

nordvpn-service.zip

[cli]

Thanks for reporting, this has been fixed for the files included in this thread. You should see the fix within 10 minutes.

[neils123]

12 minutes ago, cli said:

@neil_123 to clarify, were the files attached to this post the one being detected or the ones posted here? 

 

The first post thanks.  I think those are the ones that have been fixed.  Thanks for your help.

[IamMrRobot]

5 minutes ago, cli said:

Thanks for reporting, this has been fixed for the files included in this thread. You should see the fix within 10 minutes.

 

Awesome! Thank you!

[pwberndt]

11 minutes ago, cli said:

Thanks for reporting, this has been fixed for the files included in this thread. You should see the fix within 10 minutes.

Thanks to all who helped, the problem is fixed.

Paul B