JRig Posted May 8 ID:1635212 Share Posted May 8 Greetings, I was on V Rising, a videogame, and I was on the server search screen. I had not clicked on any servers, neither did I try to access anything, when I got the notification from MalwareBytes that it blocked a few items. I am not that savvy when it comes to computer security, so could you explain to me what this means? I would like to know how I got this, and what to do to ensure that I have no further problems. Thanks in advance. Here are the logs. The entity/file that got blocked was identified as Crypt.Trojan.MSIL.DDS. If that helps with anything. Malwarebytes Website Blocked Report 2024-05-09 001414.txt Malwarebytes Website Blocked Report 2024-05-09 001422.txt Malwarebytes Website Blocked Report 2024-05-08 211551.txt Link to post Share on other sites More sharing options...
Porthos Posted May 8 ID:1635215 Share Posted May 8 @JRig While we wait for staff to review, I want to pass some info on to you, Staff will check the IP and if not bad anymore they will delist it. It is due to some server(s) the games are trying to connect to. Steam and many others use p2p connections to play online. Link to post Share on other sites More sharing options...
Porthos Posted May 8 ID:1635217 Share Posted May 8 7 minutes ago, JRig said: The entity/file that got blocked was identified as Crypt.Trojan.MSIL.DDS Can we have the log that shows the file detection? Link to post Share on other sites More sharing options...
JRig Posted May 8 Author ID:1635220 Share Posted May 8 Just now, Porthos said: Can we have the log that shows the file detection? These were all the logs involving detections today. I find it weird also that they appear as blocked websites. Two of those by that name were in quarantine, but I am very new to internet security that I deleted them pretty much immediately in my confusion. Link to post Share on other sites More sharing options...
Porthos Posted May 8 ID:1635221 Share Posted May 8 6 minutes ago, Porthos said: identified as Crypt.Trojan.MSIL.DDS Find that log please and attach it. Link to post Share on other sites More sharing options...
JRig Posted May 8 Author ID:1635223 Share Posted May 8 4 minutes ago, Porthos said: Find that log please and attach it. Okay, so, that was the name of the files in quarantine. How do I find the logs you are requesting? Link to post Share on other sites More sharing options...
Porthos Posted May 8 ID:1635232 Share Posted May 8 5 minutes ago, JRig said: How do I find the logs you are requesting? You can find Scan and Protection logs within the Malwarebytes 4 program in the following location RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged If you click on the View option you should get something similar to the following with other options available. Thank you Link to post Share on other sites More sharing options...
JRig Posted May 8 Author ID:1635237 Share Posted May 8 1 minute ago, Porthos said: You can find Scan and Protection logs within the Malwarebytes 4 program in the following location RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged If you click on the View option you should get something similar to the following with other options available. Thank you These are the only reports in that place. None were deleted, I exported those. Malwarebytes Website Blocked Report 2024-05-09 001414.txt Malwarebytes Website Blocked Report 2024-05-09 001422.txt Malwarebytes Website Blocked Report 2024-05-08 211551.txt Link to post Share on other sites More sharing options...
JRig Posted May 8 Author ID:1635238 Share Posted May 8 Basically, the blocked stuff is as the logs say, but in quarantine, they showed as what I mentioned. Link to post Share on other sites More sharing options...
Porthos Posted May 8 ID:1635240 Share Posted May 8 1 minute ago, JRig said: These are the only reports in that place. None were deleted, I exported those. I guess you delete logs often? How long ago was that file quarantined? Link to post Share on other sites More sharing options...
JRig Posted May 8 Author ID:1635241 Share Posted May 8 1 minute ago, Porthos said: I guess you delete logs often? How long ago was that file quarantined? I don't delete logs ever. That file was quarantined approximately 2 hours ago. Link to post Share on other sites More sharing options...
Porthos Posted May 8 ID:1635242 Share Posted May 8 2 minutes ago, JRig said: That file was quarantined approximately 2 hours ago. Did you check under the history tab? Link to post Share on other sites More sharing options...
Porthos Posted May 8 ID:1635243 Share Posted May 8 If you can't find the log do the following. Please do the following so that we may take a closer look at your system. Disable-Fast-Startup https://forums.malwarebytes.com/topic/299350-disable-fast-startup/ Then please restart the computer and then do the following. WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool. The tool also downloads and runs a file called FRSTEnglish. Please allow it to run. In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to the Desktop or on the hidden Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply Thank you Link to post Share on other sites More sharing options...
JRig Posted May 8 Author ID:1635245 Share Posted May 8 19 minutes ago, Porthos said: Did you check under the history tab? I checked under that tab, that's what I saw. I uploaded the three files at the top. I will proceed with what you requested. Link to post Share on other sites More sharing options...
JRig Posted May 8 Author ID:1635247 Share Posted May 8 17 minutes ago, Porthos said: If you can't find the log do the following. Please do the following so that we may take a closer look at your system. Disable-Fast-Startup https://forums.malwarebytes.com/topic/299350-disable-fast-startup/ Then please restart the computer and then do the following. WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool. The tool also downloads and runs a file called FRSTEnglish. Please allow it to run. In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to the Desktop or on the hidden Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply Thank you I believe this is what you requested. mbst-grab-results.zip Link to post Share on other sites More sharing options...
Porthos Posted May 9 ID:1635248 Share Posted May 9 Here is a stupid question, do you still play the game VRising? The first logs you posted were from Version 4 and now you have the new 5 installed. You also correct the logs are not there. Link to post Share on other sites More sharing options...
Staff BjelakovicL Posted May 9 Staff ID:1635294 Share Posted May 9 Hi, Thanks for reporting. The IP blocks will be removed in the next database update. Link to post Share on other sites More sharing options...
JRig Posted May 9 Author ID:1635320 Share Posted May 9 11 hours ago, Porthos said: Here is a stupid question, do you still play the game VRising? The first logs you posted were from Version 4 and now you have the new 5 installed. You also correct the logs are not there. All those logs happened at the same time. When the alert came up, I closed the game and started scanning, updated Malwarebytes because it gave me an alert and scanned again. Link to post Share on other sites More sharing options...
JRig Posted May 9 Author ID:1635321 Share Posted May 9 4 hours ago, BjelakovicL said: Hi, Thanks for reporting. The IP blocks will be removed in the next database update. If I may ask, what happened exactly for that alert to come up? Why did it get flagged and why did it show in quarantine with that name? This is just pure curiosity and need to know for the future. Link to post Share on other sites More sharing options...
Porthos Posted May 9 ID:1635337 Share Posted May 9 3 hours ago, JRig said: If I may ask, what happened exactly for that alert to come up? Why did it get flagged and why did it show in quarantine with that name? This is just pure curiosity and need to know for the future. Back to my first post, 17 hours ago, Porthos said: It is due to some server(s) the games are trying to connect to. Steam and many others use p2p connections to play online. Some IP's are blocked. That does not mean the game is infected depending on the actual source of the game. Link to post Share on other sites More sharing options...
JRig Posted May 9 Author ID:1635340 Share Posted May 9 6 minutes ago, Porthos said: Back to my first post, Some IP's are blocked. That does not mean the game is infected depending on the actual source of the game. I appreciate your help and patience. Thank you very much. 1 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now