HotShot Posted September 20 ID:1662097 Share Posted September 20 What am I seeing here, and what actions should I take? Link to post Share on other sites More sharing options...
Porthos Posted September 20 ID:1662099 Share Posted September 20 @HotShot Please provide the detection log. Link to post Share on other sites More sharing options...
HotShot Posted September 20 Author ID:1662107 Share Posted September 20 Which one, specifically, and where do I find it in Win10? A web search did not get me there. Thanks for responding, and I see my post was moved to a better location I presume. Link to post Share on other sites More sharing options...
Staff BjelakovicL Posted September 20 Staff ID:1662111 Share Posted September 20 Hi, The IP is blocked due to this file communicating with it: https://www.virustotal.com/gui/file/3aaeb5470e6b95f31c180d3f55a0e68ca470dcb18aa4ec5ac962c2f87323d235/behavior Link to post Share on other sites More sharing options...
HotShot Posted September 20 Author ID:1662260 Share Posted September 20 @BjelakovicL Good to know, I guess. But I have never seen MWB flag another MWB product file or function (Privacy) before. What do I do with your information? 🤷♂️ @Porthos, Let me know where the file is that you need, and the name, so I can get it for you. Thanks! Link to post Share on other sites More sharing options...
Staff Solution BjelakovicL Posted September 20 Staff Solution ID:1662263 Share Posted September 20 This will be fixed in the next database update. Link to post Share on other sites More sharing options...
HotShot Posted September 20 Author ID:1662298 Share Posted September 20 1 hour ago, BjelakovicL said: This will be fixed in the next database update. Great! What will be fixed? A threat? Bug? MWB? Privacy? I am not feeling informed as to my situation. Can you help me/us with that? Link to post Share on other sites More sharing options...
David H. Lipman Posted September 20 ID:1662308 Share Posted September 20 32 minutes ago, HotShot said: Great! What will be fixed? ... 13 hours ago, BjelakovicL said: The IP is blocked due... Link to post Share on other sites More sharing options...
HotShot Posted September 20 Author ID:1662331 Share Posted September 20 Thank you, and it appears (below) it is saying client.exe is malicious? MWB nor WindowsDefender did not flag it as such, only that MWB Tunnel was blocked using it? Is my system infected? From my first post: 20 hours ago, HotShot said: What am I seeing here, and what actions should I take? Thank you Link to post Share on other sites More sharing options...
David H. Lipman Posted September 21 ID:1662425 Share Posted September 21 (edited) Danke I'm sorry, a clipped ScreenShot provides scant information. What is the Virus Total Report URL for that file? What is the fully qualified name and path to the file in question (noting the is the False Positive Web sub-forum) ? Edited September 21 by David H. Lipman Edited for content, clarity, spelling and/or grammar Link to post Share on other sites More sharing options...
HotShot Posted September 21 Author ID:1662513 Share Posted September 21 9 hours ago, David H. Lipman said: I'm sorry, a clipped ScreenShot provides scant information. It is a clip of the report linked above by @BjelakovicL, here. 9 hours ago, David H. Lipman said: What is the Virus Total Report URL for that file? URL report here. 9 hours ago, David H. Lipman said: What is the fully qualified name and path to the file in question I do not know, but there are many files opened, closed, changed, etc, in @BjelakovicL's linked report above. A search of my drive returns no finds of that name. A log file was requested, and I asked where to find it and the name, but no response. I do not know where to find the file you are asking about, in order to assist with the answer your question. Can you help guide me to get the info you request, please? 9 hours ago, David H. Lipman said: (noting the is the False Positive Web sub-forum) ? I am noted, but I did not post it here. It was posted in Privacy-Windows as it was a block of that MWB program fuction, by a MWB program. It was moved for some reason, and I do not know what your note should mean to me or what actions I should or should not take? I am here for expertise I do not have. I am happy to help however I can. My concerns over MWB Privacy being blocked for a 'malicious file' were answered with "This will be fixed…". Great! But no further information of if I am exposed by this 'malicious' file, if it's a false positive and no worries … nothing. Do I assume my MWB paid subscriptions are protecting me, or not? I believe reasonable questions should have reasonable answers. Are they, should I have concern, or is there anything I should be doing about it? Thank you Link to post Share on other sites More sharing options...
Porthos Posted September 21 ID:1662514 Share Posted September 21 4 minutes ago, HotShot said: but I did not post it here. It was posted in Privacy-Windows as it was a block of that MWB program fuction, by a MWB program. It was moved for some reason It was moved because the block looked like it might be a false positive. In this case, after further review, it was a false positive. And the block on the IP that the VPN connected to was removed. Link to post Share on other sites More sharing options...
HotShot Posted September 22 Author ID:1662590 Share Posted September 22 Thank you, and I assume by your response there is no risk on my end with the client.exe or other file, and I am fully protected. Unless I need to know more, I assume this topic is solved and closed. Link to post Share on other sites More sharing options...
Porthos Posted September 22 ID:1662593 Share Posted September 22 6 minutes ago, HotShot said: I assume by your response there is no risk on my end with the client.exe or other file, and I am fully protected. That is correct. Link to post Share on other sites More sharing options...
Recommended Posts