PCMover - Suspicious Download block

[Purity8]

Since the removal of Windows Easy Transfer Tool in Windows 10, Microsoft partnered with LapLink; thus recommending their product "PCMover Express" as an alternate migration tool.

Website blocked due to a suspicious download

Download blocked: pcmoverexp_dl.exe

[1PW]

Hello @Purity8:

Please post the complete URL of the website with the suspicious download.

Thank you.

[Purity8]

My apologies, here's the full link:

https://store.laplink.com/59/purl-20200317-page-PCmExfree-freedl

[Porthos]

10 minutes ago, Purity8 said:

My apologies, here's the full link:

That redirects to

https://lldownload.blob.core.windows.net/pcmover/expresspu/11/pcmoverexp_dl.exe

 

[Purity8]

Oh, sorry; that was the link on the site.

Quote

https://lldownload.blob.core.windows.net/pcmover/expresspu/11/pcmoverexp_dl.exe

I just tried that link & it is indeed blocked.

[Porthos]

1 minute ago, Purity8 said:

I just tried that link & it is indeed blocked.

I am not blocked in Firefox but am with Chromium based browsers.

[Purity8]

That's interesting, I'm blocked on both laptop & desktop with FireFox.

Both are on different versions of Win10, one is 2004 while another is 1909.

[1PW]

@Porthos @Purity8

FWIW - I too am seeing the MBG Suspicious blocks with both Firefox and Chrome.  A Malwarebytes staffer will still need to investigate further.

[gonzo]

Site has been whitelisted.  Please allow 15-30 minutes for changes to take effect.  After that, please let me know if you are still blocked.

EDIT: Verified download works after second whitelist attempt.

Edited September 28, 2020 by gonzo
results