Jump to content

Website Getting Blocked After Endpoint Update


Andreas_Stephen
 Share

Recommended Posts

Hello,

I'm using MBAM endpoint in my server.

After last update from Nebula, some of the website become inaccessible.

For example : http://www.shamelsms.net/

Malwarebytes says it contain riskware, but I need to explain this issue with more details to my clients right ?

Since we are able to access the website before updating endpoint version.

Can I have more information about this ?

 

I have created ticket #3363574 since more than 2 days ago, but I have not received any reply yet.

I do not know whats going on with Malwarebytes, why can they ignore their paying business customer for more than 24 hours.

Anyway, I visited this forum in hope someone can give me more knowledge for this issue.

Please help.

Thank you

mbam3.jpg

Link to post
Share on other sites

  • Staff

Hello,

Sorry for the delay on this with support. The first domain you mentioned, I believe was flagged because of this file: https://www.virustotal.com/gui/file/20e2e2182aab1a24db7b83074599d93681e18d6e28393b1e008a3b556f904426/detection

Which can be downloaded from 

http://www.shamelsms.net/ashrafupdater/MarsoolSMS.exe

However, I think this was a false positive on our part so I'm unblocking it. I'm going to doublecheck with a colleague as well to make sure this should remain unblocked.

__

The other domain you mention, http://abwabalfateh.com/, I'm not seeing a block on this one. Do you have a screenshot or log showing the detection for it?

The unblock for the first domain will occur in our next database update.

Thank you

Link to post
Share on other sites

1 hour ago, thisisu said:

Hello,

Sorry for the delay on this with support. The first domain you mentioned, I believe was flagged because of this file: https://www.virustotal.com/gui/file/20e2e2182aab1a24db7b83074599d93681e18d6e28393b1e008a3b556f904426/detection

Which can be downloaded from 

http://www.shamelsms.net/ashrafupdater/MarsoolSMS.exe

However, I think this was a false positive on our part so I'm unblocking it. I'm going to doublecheck with a colleague as well to make sure this should remain unblocked.

__

The other domain you mention, http://abwabalfateh.com/, I'm not seeing a block on this one. Do you have a screenshot or log showing the detection for it?

The unblock for the first domain will occur in our next database update.

Thank you

Hello,

After accessing http://abwabalfateh.com/, Please click Send SMS For Test button.

It will show Malwarebytes shield or something like that.

Here's the snapshot of it.

Thank you for your time.

blocked.jpg

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.