ComboFix.org

[bbOhio]

I saw an option to Add web extension for combofix.org when opening malwarebytes premium 4.2.1 today and clicked by accident. Is this Malwarebytes browserguard? Is see no Combofix in my browser extensions.

[exile360]

combofix.org is actually blocked by Malwarebytes Browser Guard, and as far as I know, it is not an official domain affiliated with sUBs (creator of Combofix, who also happens to be a member of Malwarebytes' Research team, writing threat signatures for Malwarebytes' database) and is not an authorized/official host for Combofix.

If you saw a promotional pop-up for Malwarebytes Browser Guard, then that's normal, however if you saw an advert for combofix.org I'm pretty sure it didn't come from Malwarebytes.

[bbOhio]

It was not a pop up.It was an option on the taskbar tray menu selection for Malwarebytes  

Check for Updates:

Web Protection:On

Malware Protection:On

Ransomware Protection:On

Exploit Protection:ON

<IT WAS HERE> Add web extension for combofix.org

Open Malwarebytes

Quit Malwarebytes

 

Thanks

 

 

 

 

[Porthos]

13 minutes ago, bbOhio said:

<IT WAS HERE> Add web extension for combofix.org

That was there as will all other blocked sites singly after each time you get a web block. It is there for a user yo "override" the block per detected site. Not recommended.

It is exclusion not extension.

 

First you will see this.

Then if you right click the icon right after you see the option to allow whatever the site my  be at your own risk.

Edited September 30, 2020 by Porthos

[bbOhio]

Yea I saw it on another pc just now for a different site. I thought it said Add Extension. I removed it from the allow list. Just being paranoid ....too many days in Covid land........................Thank you.

 

 

[Porthos]

2 minutes ago, bbOhio said:

I removed it from the allow list. Just being paranoid

No problem, Glad to assist.

[exile360]

Ah, that explains it, I can see the reason for the error; at a glance it's easy to mistake 'Web Exclusion' for 'Web Extension' as they only differ by a few letters.

Anyway, I'm glad that it's solved, and if there is anything else we can help with please let us know.

Thanks