PCMover - Suspicious Download block

[Purity8 0]

Since the removal of Windows Easy Transfer Tool in Windows 10, Microsoft partnered with LapLink; thus recommending their product "PCMover Express" as an alternate migration tool.

Website blocked due to a suspicious download

Download blocked: pcmoverexp_dl.exe

[1PW 5]

Hello @Purity8:

Please post the complete URL of the website with the suspicious download.

Thank you.

[Purity8 0]

My apologies, here's the full link:

https://store.laplink.com/59/purl-20200317-page-PCmExfree-freedl

[Porthos 129]

10 minutes ago, Purity8 said:

My apologies, here's the full link:

That redirects to

https://lldownload.blob.core.windows.net/pcmover/expresspu/11/pcmoverexp_dl.exe

 

[Purity8 0]

Oh, sorry; that was the link on the site.

Quote

https://lldownload.blob.core.windows.net/pcmover/expresspu/11/pcmoverexp_dl.exe

I just tried that link & it is indeed blocked.

[Porthos 129]

1 minute ago, Purity8 said:

I just tried that link & it is indeed blocked.

I am not blocked in Firefox but am with Chromium based browsers.

[Purity8 0]

That's interesting, I'm blocked on both laptop & desktop with FireFox.

Both are on different versions of Win10, one is 2004 while another is 1909.

[1PW 5]

@Porthos @Purity8

FWIW - I too am seeing the MBG Suspicious blocks with both Firefox and Chrome.  A Malwarebytes staffer will still need to investigate further.

[gonzo 35]

Site has been whitelisted.  Please allow 15-30 minutes for changes to take effect.  After that, please let me know if you are still blocked.

EDIT: Verified download works after second whitelist attempt.

Edited September 28 by gonzo
results