swarfega Posted December 27, 2020 ID:1429394 Share Posted December 27, 2020 I would like to report the above domain as a false positive block by MBM. The website owner has told me that there is nothing his end and he gets around 100,000 visits a month. Quote Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 27/12/2020 Protection Event Time: 10:45 Log File: b0db1ee0-4830-11eb-8934-d45d64d5ff83.json -Software Information- Version: 4.3.0.98 Components Version: 1.0.1130 Update Package Version: 1.0.34855 Licence: Premium -System Information- OS: Windows 10 (Build 19041.685) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Trojan Domain: worldofspectrum.org IP Address: 77.68.76.140 Port: 443 Type: Outbound File: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (end) It has been doing this for about a month. Link to post Share on other sites More sharing options...
Staff Solution Dashke Posted December 27, 2020 Staff Solution ID:1429395 Share Posted December 27, 2020 Hello swarfega, The block will be reviewed. If you need additional help, please let us know. Link to post Share on other sites More sharing options...
swarfega Posted December 27, 2020 Author ID:1429396 Share Posted December 27, 2020 Thanks for your reply. Do you know roughly how long this takes? Link to post Share on other sites More sharing options...
Staff Dashke Posted December 27, 2020 Staff ID:1429420 Share Posted December 27, 2020 The update should be already out. 1 Link to post Share on other sites More sharing options...
swarfega Posted December 27, 2020 Author ID:1429430 Share Posted December 27, 2020 wow thats quick work. Thanks. I can access the site now. Do you know what the cause was? Link to post Share on other sites More sharing options...
Staff Dashke Posted December 28, 2020 Staff ID:1429475 Share Posted December 28, 2020 13 hours ago, swarfega said: wow thats quick work. Thanks. I can access the site now. Do you know what the cause was? You are always welcome. Seems that this file raised the suspicions - https://worldofspectrum.net/pub/sinclair/emulators/pc/windows/kjspeccy.zip Link to post Share on other sites More sharing options...
swarfega Posted December 28, 2020 Author ID:1429484 Share Posted December 28, 2020 Thanks, I have passed the info on to the site owner. Happy new year! Link to post Share on other sites More sharing options...
swarfega Posted December 28, 2020 Author ID:1429493 Share Posted December 28, 2020 As an addendum, the site that was being blocked and shows on my MBM logs was https://worldofspectrum.org but the file you showed earlier is from https://worldofspectrum.net which is a fake site that is not owned by the owner of https://worldofspectrum.org. Link to post Share on other sites More sharing options...
fogartylee Posted December 28, 2020 ID:1429495 Share Posted December 28, 2020 Hi, I am the owner of worldofspectrum.org Firstly, thank you for looking at this as it appears to have been an issue for some time now. I can confirm that the .net site is a fake website and nothing at all to do with us. Link to post Share on other sites More sharing options...
Staff Dashke Posted December 28, 2020 Staff ID:1429509 Share Posted December 28, 2020 (edited) I apologize for the incorrect file, this was meant to be the correct one - http://worldofspectrum.org/files/download/c8c7ef2d41a6e38 If you need additional help, please let us know. Happy Holidays and all the best! Edited December 28, 2020 by Dashke Link to post Share on other sites More sharing options...
fogartylee Posted December 28, 2020 ID:1429511 Share Posted December 28, 2020 Just now, Dashke said: I apologize for the incorrect file, this was meant to be the correct one - http://worldofspectrum.org/files/download/c8c7ef2d41a6e38 Thank you for the update. I'm not sure what to do with this? It's a false positive. I'll have to dig back through our forums several years, but it was due to some of the code in the files being reported as malicious. Link to post Share on other sites More sharing options...
Staff Dashke Posted December 28, 2020 Staff ID:1429513 Share Posted December 28, 2020 I was just referring you to a file that raised the suspicions. We have already removed the block so you should be all set. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now