|
Malwarebytes blocking progettosnaps
#385833 - 04/07/20 02:23 PM
|
|
|
Website blocked due to a Trojan
Your Malwarebytes Premium blocked this website because it may contain a Trojan.
We strongly recommend you do not continue.
Huh?
|
Just broke my personal record for number of consecutive days without dying!
|
|
| Foxhack |
|
Furry guy
|
|
|
|
|
Reged: 01/30/04
|
|
Posts: 2409
|
|
Loc: Spicy Canada
|
|
|
|
Send PM
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: URherenow]
#385838 - 04/07/20 07:06 PM
|
|
|
> Website blocked due to a Trojan
> Your Malwarebytes Premium blocked this website because it may contain a Trojan.
>
> We strongly recommend you do not continue.
>
>
> Huh?
Someone needs to report the site as a false positive on their forum.
|
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: Foxhack]
#385845 - 04/08/20 08:54 AM
|
|
|
Might not be a false positive - for years Progetto-Emma was serving malware.
|
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: URherenow]
#385853 - 04/09/20 02:43 PM
|
|
|
At least a couple of times a year I get these reports (by the way, why not warn me directly instead of making a post? I don't understand...); in any case, every time I do tests (better be sure) and everything is negative.
Any more information? Which country do you connect to? Which pages do you visit?
To me, here in Italy, there is no criticality regarding the security of my site (if not some somewhat obsolete HTTP line).
Here are the tests I did:
01. https://sitecheck.sucuri.net/
02. https://www.ssllabs.com/
03. https://www.virustotal.com/
04. http://www.drweb.com/
05. https://scanner.pcrisk.com/
|
Site: https://www.progettosnaps.net/
Board: progetto-SNAPS Official Board
Twitter: @progettosnaps
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: AntoPISA]
#385856 - 04/09/20 03:20 PM
|
|
|
I meant no offense, and was already sure it was a false positive. That’s why I ended my post with “huh?”. It was intended to be a jab at MBAM, not your site.
I live in Japan, but often have VPN running for various reasons. Cali or Colorado if I’m doing something on Steam, or GoG or something, and France or Bucharest if I’m running torrents.
I was trying to figure out where to find several samples for HBMAME (never used hbmame before), which I still haven’t found and don’t know the story behind them...
|
Just broke my personal record for number of consecutive days without dying!
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: URherenow]
#385857 - 04/09/20 03:25 PM
|
|
|
I'm not offended, it often happens.
Some check every time isn't negative.
I didn't understand Vas Craab's speech on progettoemma.net... I have never been aware of what he says (but maybe I'm misinformed).
|
Site: https://www.progettosnaps.net/
Board: progetto-SNAPS Official Board
Twitter: @progettosnaps
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: AntoPISA]
#385858 - 04/09/20 06:00 PM
|
|
|
Try to remove the Flag Counter from the mainpage and re-test the page with malwarebyte. Maybe it's the problem. I see no other reason.
|
See my collection: here
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: AntoPISA]
#385868 - 04/10/20 01:03 AM
|
|
|
> I didn't understand Vas Craab's speech on progettoemma.net... I have never been aware
> of what he says (but maybe I'm misinformed).
Sorry, I was tired and said the wrong site – it was emulab.it that was serving malware. Something/someone attacked the Wordpress installations on the site and made them serve malware, but only to known vulnerable clients. If you connected with Safari or Konqueror browser it would not serve the malware for example. Probably designed to stop scanners from detecting the malware as easily. Remember when all the blogs on mamedev.emulab.it had to be rebuilt? That was because of the malware infestation.
MAWS was also compromised.
I’m not saying your site is compromised, just saying that one shouldn’t jump to the conclusion that it’s a false positive. You should probably check for malware with a server-side scan as well.
|
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: Vas Crabb]
#385874 - 04/10/20 02:51 PM
|
|
|
Quote:
I’m not saying your site is compromised, just saying that one shouldn’t jump to the conclusion that it’s a false positive. You should probably check for malware with a server-side scan as well.
I will definitely do it soon, thanks!
|
Site: https://www.progettosnaps.net/
Board: progetto-SNAPS Official Board
Twitter: @progettosnaps
|
|
|
Re: Malwarebytes blocking progettosnaps
[Re: AntoPISA]
#387539 - 08/17/20 04:41 PM
|
|
|
Was this ever resolved? I'm getting this same message today. All of those sites say there is a TLS Certificate mismatch and scanner.pcrisk.com says there are 5 Potentially Suspicious files.
|
|
|
Index 
Threaded 
Malwarebytes blocking progettosnaps
Reply
[Re: 
