BillH99999 Posted December 8, 2020 ID:1425818 Share Posted December 8, 2020 (edited) I use Thunderbird as my mail client. Starting today I've been getting a popup saying that an outgoing connection to www.ojrq.net is being blocked when I open various emails. They are emails from legitimate companies such as Marriott, Alaska Airlines, and others. I did a scan with Malwarebytes and with Adwcleaner and nothing is found. Any idea what might be causing this? Is www.ojrq.net really a site that needs to be blocked and why did it just start getting blocked today? Thanks, Bill Edited December 8, 2020 by BillH99999 Link to post Share on other sites More sharing options...
Porthos Posted December 8, 2020 ID:1425823 Share Posted December 8, 2020 @BillH99999I will ask for your post to be moved to the correct section. Link to post Share on other sites More sharing options...
BillH99999 Posted December 8, 2020 Author ID:1425825 Share Posted December 8, 2020 @Porthos Thanks, I didn't realize I needed to post it somewhere else. Thanks for moving getting it moved. Bill Link to post Share on other sites More sharing options...
TF4 Posted December 8, 2020 ID:1425912 Share Posted December 8, 2020 I have this same message. How can I resolve this? Link to post Share on other sites More sharing options...
Porthos Posted December 8, 2020 ID:1425913 Share Posted December 8, 2020 3 minutes ago, TF4 said: I have this same message. How can I resolve this? We need to wait for research to evaluate the address. Link to post Share on other sites More sharing options...
DawgFan Posted December 8, 2020 ID:1425934 Share Posted December 8, 2020 Same issue and IP. Started 12/7/2020. Link to post Share on other sites More sharing options...
jerry6665 Posted December 8, 2020 ID:1426045 Share Posted December 8, 2020 Same issue... is Ojrq.net malware or can I use the websites using Ojrq.net safely? Thanks, Jerry Link to post Share on other sites More sharing options...
thisisu Posted December 8, 2020 ID:1426057 Share Posted December 8, 2020 Hello, This should only be blocked by BrowserGuard for ad server redirects. The unblock for MB3/MB4 is in progress and will be resolved shortly with a database update. Sorry for the inconvenience. 2 Link to post Share on other sites More sharing options...
BillH99999 Posted December 8, 2020 Author ID:1426059 Share Posted December 8, 2020 @thisisu Thanks! Bill Link to post Share on other sites More sharing options...
TJLR Posted December 8, 2020 ID:1426079 Share Posted December 8, 2020 My team has clients running MWB on an RDS and we got the same notification for ojrq.net. We weren't sure so we ran scans as clean per user, running Full Scan on RDS. Blocked the IP of that site inbound/outbound on our Firewall. Also, this one just came up as well. Can your team let us know if this issue is related? Are these false positives or are these threats supposed to be blocked silently without notification? Please advise. Link to post Share on other sites More sharing options...
Porthos Posted December 8, 2020 ID:1426087 Share Posted December 8, 2020 35 minutes ago, TJLR said: Also, this one just came up as well. Can your team let us know if this issue is related? It is a different site being blocked. I will ask @thisisu to evaluate it for you. Link to post Share on other sites More sharing options...
jerry6665 Posted December 9, 2020 ID:1426318 Share Posted December 9, 2020 What was decided about ojrc? Link to post Share on other sites More sharing options...
Porthos Posted December 9, 2020 ID:1426322 Share Posted December 9, 2020 1 hour ago, jerry6665 said: What was decided about ojrc? That it should not be blocked in Malwarebytes Premium any longer but it is an ad server that would be blocked in Browser Guard. On 12/8/2020 at 2:09 PM, thisisu said: Hello, This should only be blocked by BrowserGuard for ad server redirects. The unblock for MB3/MB4 is in progress and will be resolved shortly with a database update. Sorry for the inconvenience. 1 Link to post Share on other sites More sharing options...
Porthos Posted December 10, 2020 ID:1426351 Share Posted December 10, 2020 5 hours ago, jerry6665 said: What was decided about ojrc? From one Jerry to another best wishes and happy holidays.🙂 Link to post Share on other sites More sharing options...
jerry6665 Posted December 10, 2020 ID:1426353 Share Posted December 10, 2020 4 hours ago, Porthos said: That it should not be blocked in Malwarebytes Premium any longer but it is an ad server that would be blocked in Browser Guard. Thanks for taking the time to check this out and form an explanation and improve our knowledge Link to post Share on other sites More sharing options...
jerry6665 Posted December 10, 2020 ID:1426355 Share Posted December 10, 2020 6 minutes ago, Porthos said: From one Jerry to another best wishes and happy holidays.🙂 Back atcha! ✌️ Link to post Share on other sites More sharing options...
thisisu Posted December 10, 2020 ID:1426360 Share Posted December 10, 2020 On 12/8/2020 at 3:50 PM, TJLR said: My team has clients running MWB on an RDS and we got the same notification for ojrq.net. We weren't sure so we ran scans as clean per user, running Full Scan on RDS. Blocked the IP of that site inbound/outbound on our Firewall. Also, this one just came up as well. Can your team let us know if this issue is related? Are these false positives or are these threats supposed to be blocked silently without notification? Please advise. Hello, This one is a valid block, not related to the one mentioned in the OP. Low detection ( https://www.virustotal.com/gui/domain/spottoplunch4.live/detection ) but also rather new. ~2 days old Link to post Share on other sites More sharing options...
Itcharus Posted December 19, 2020 ID:1428041 Share Posted December 19, 2020 Malwarebytes version: 4.6.12 MacOS Catalina version: 10.15.7 Thunderbird version: not sure because now I cannot open it, but I installed an update (I assume the latest version) a few days ago. I installed Malwarebytes for Mac yesterday (December 17th). Did an initial Malwarebytes scan, which detected and quarantined "Adware.IronCore". See attached file.Screen Shot 2020-12-19 at 8.45.23 AM.pdf The time I used Thunderbird, I got a popup about 2 or 3 quarantined files in a pop-up. I did not screenshot it. I was able to continue on to Thunderbird. The next time I tried to open Thunderbird, I got a pop-up with the Finder icon that said "The application "Thunderbird.app" can't be opened (see attached file). Screen Shot 2020-12-19 at 8.34.45 AM.pdf Is this the same issue as this thread? If not, is a new thread required and/or the opening of a support ticket? Link to post Share on other sites More sharing options...
Staff JPopovic Posted December 20, 2020 Staff ID:1428162 Share Posted December 20, 2020 (edited) Hello Itcharus, Unfortunately, we wouldn't be able to help you out since this is a Web Protection section of the forum. You would need to contact technical support - https://support.malwarebytes.com/hc/en-us Thank you! Edited December 20, 2020 by Dashke Link to post Share on other sites More sharing options...
Itcharus Posted December 20, 2020 ID:1428183 Share Posted December 20, 2020 Thanks Jpopovic! I will open a support ticket. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now