ast Posted July 19, 2020 ID:1395487 Share Posted July 19, 2020 I have repeated messages because the program Portal.exe from UVI contacts Trojan sites by itself. https://www.uvi.net/de/uvi-portal The company UVI claims that this contact search of Portal.exe has to do with my PC because other users would not deliver messages. My question now is, could it be my PC that Portal.exe contacts Trojan sites, so it is my own fault? Note: My PC is protected by Malwarebytes and ESET Antivirus. Portal.exe is the only installed program where Malwarebytes alarms. Portal.exe is often open for hours while downloading UVI because the downloaded files are often very large. The alarm often appears only after a long time and sometimes not at all. -------------- New Trojan Message -protocol details- Date of the protection event: 19.07.20 Time of the protection event: 11:46 Log file: c955e960-c9a4-11ea-beba-0a0027000007.json -Software data- version: 4.1.0.56 component version: 1.0.979 Version of the update package: 1.0.27031 License: Premium -System data- Operating system: Windows 10 (Build 19041.329) CPU: x64 File system: NTFS User: System -details of blocked websites- Malicious website: 1 C:\Program Files (x86)\UVI Portal\UVI Portal.exe, Blocked, -1, -1, 0.0.0 -Website Data- Category: Trojans Domain: IP address: 200.119.1.19 port: 53832 Type: Outgoing File: C:\Program Files (x86)\UVI Portal\UVI Portal.exe -------------- Last UVI Support Response A. S. (UVI Support) Jun 11, 2020, 11:45 AM GMT+2 Hi Andres, Our team is still investigating the issue but we are unable to reproduce the problem at the moment, Since we have not received any other tickets reporting a similar problem, my guess is that we are facing an isolated case related somehow to your system. We do not know what could have triggered these alerts in your antivirus but as mentioned we will continue to investigate and keep you posted as soon as we have new information regarding this problem. Have a nice day and feel free to ask if you have any questions. All the best from Paris, Support Team malwarebytes-Trojaner-Message-19-07-2020.txt Link to post Share on other sites More sharing options...
Staff Solution Dashke Posted July 19, 2020 Staff Solution ID:1395490 Share Posted July 19, 2020 Since the IP is clean now, the block will be removed. Link to post Share on other sites More sharing options...
Recommended Posts