Jump to content

Discord.com and canary.discord.com blocked by Malwarebytes


Go to solution Solved by JPopovic,

Recommended Posts

I am getting blocked from discord due to malware bytes saying I have a trojan

 

What is this about

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 15/04/2021
Protection Event Time: 12:13
Log File: ac609510-9ddb-11eb-8c01-d45d64d2539e.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1249
Update Package Version: 1.0.39435
Licence: Premium

-System Information-
OS: Windows 10 (Build 19042.928)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Users\justi\AppData\Local\Discord\app-0.0.309\Discord.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: discord.com
IP Address: 162.159.137.232
Port: 443
Type: Outbound
File: C:\Users\justi\AppData\Local\Discord\app-0.0.309\Discord.exe

(end)

Link to post
Share on other sites

Malwarebytes
www.malwarebytes.com

-Détails du journal-
Date de l'événement de protection: 15/04/2021
Heure de l'événement de protection: 12:57
Fichier journal: 64e661e4-9dd9-11eb-a61d-d850e6b9a350.json

-Informations du logiciel-
Version: 4.3.0.98
Version de composants: 1.0.1251
Version de pack de mise à jour: 1.0.39435
Licence: Premium

-Informations système-
Système d'exploitation: Windows 10 (Build 18363.1500)
Processeur: x64
Système de fichiers: NTFS
Utilisateur: System

-Détails du site Web bloqué-
Site Web malveillant: 1
, C:\Users\info\AppData\Local\Programs\franz\Franz.exe, Bloqué, -1, -1, 0.0.0, , 

-Données du site Web-
Catégorie: Cheval de Troie
Domaine: status.discord.com
Adresse IP: 162.159.136.232
Port: 443
Type: En sortie
Fichier: C:\Users\info\AppData\Local\Programs\franz\Franz.exe

(end)

 

I use discord on franz program. It's not a true alert so ?

Link to post
Share on other sites

Hello there,

I am suddenly getting spammed with alerts claiming that Discord is a trojan. I am 100% certain Discord is safe as it is a very popular messaging app with millions of active users. Does this mean my Discord has been hijacked? or is this an error with Malwarebytes? I am very worried.

Many Thanks.

mbam_2MIGMzVxq7.png

Link to post
Share on other sites

i temporarily added the website discord dot com to the allow list while waiting for this to be resolve. but i must also mention that MB is blocking WarGamings WGC application for reason Compromised as well. noticed it about a day ago but havent seen WGC function impacted as of yet.

Link to post
Share on other sites

Malwarebytes
www.malwarebytes.com

-Logboekdetails-
Datum beveiligingsgebeurtenis: 15-04-2021
Tijd beveiligingsgebeurtenis: 13:24

-Software-informatie-
Versie: 4.3.0.98
Versie componenten: 1.0.1249
Update pakketversie: 1.0.39435
Licentie: Premium

-Systeeminformatie-
Besturingssysteem: Windows 10 (Build 18363.1500)
Processor: x64
Bestandssysteem: NTFS
Gebruiker: System

-Details van geblokkeerde website-
Kwaadaardige website: 1
, C:\Users\%username%\AppData\Local\Discord\Update.exe, Geblokkeerd, -1, -1, 0.0.0, , 

-Websitegegevens-
Categorie: Trojaans paard
Domein: discord.com
IP-adres: 162.159.138.232
Poort: 443
Type: Uitgaand
Bestand: C:\Users\%username%\AppData\Local\Discord\Update.exe

(end)

Link to post
Share on other sites
Just now, JPopovic said:

It was fixed with 1.0.39437 version.

You should be able to access the domain now. Please make sure to check for the updates.

Sorry for the inconvenience!

Thanks so much. I love the mb that could fix this issue so fast.

  • Thanks 1
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.