Malicious Label by Malwarebytes

[millsdmb]

I emailed support, anybody else seeing the same behavior? Disabled the web filter and no problems.

https://i.imgur.com/gZSE4FX.png

[1715068099]

1715068099

[1715068099]

1715068099

[theymos]

I've heard about that. Please post MalwareBytes' response here if you get one. My guess is that they don't like that there are links to stealth miners here.

[millsdmb]

Tom Mercado, Nov 22 06:26 am (PST):
Hello and welcome to the Malwarebytes consumer helpdesk. Thank you for choosing Malwarebytes Anti-Malware as your malware security solution, my name is Tom Mercado and I'll be assisting you today.

Our IT investigative team has re-evaluated the IP in question and the block will be removed for the next update, sometime within the next hour or two. After that time please update and try to access the site.

Please reply only to this ticket, do not create new tickets for the same issue. Support requests which have received no customer response within 7 days will be closed automatically.


Nov 21 05:28 pm (PST):
Name: **** ******
Product: Malwarebytes Anti-Malware
Version: 1.75
Operating System: Windows 8.1 - 64 bit
-------------

bitcointalk.org is being incorrectly blocked by the live protection module. Below is a link to the screen shot with supportive information.

https://i.imgur.com/gZSE4FX.png

[BitcoinFX]

I've heard about that. Please post MalwareBytes' response here if you get one. My guess is that they don't like that there are links to stealth miners here.

I've just scanned bitcointalk.org

http://sitecheck.sucuri.net/scanner/ - Clean

https://www.virustotal.com/en/url/7354af8427d7b8d4236356d0bca680ad3186fce415cb51971f3793cee59e4291/analysis/1385144339/ - Clean

However, I found that hpHosts is currently listing bitcointalk.org - i.e. 'Malwarebytes'.

See: http://hosts-file.net/?s=bitcointalk.org this is probably an error and the admin. should contact 'Request removal' for more info.

Not 100% sure how ads are being served here, but it might be to do with temporarily hijacked 3rd party content and/or in relation to linked content.

This report, I suspect is actually a 'false positive'.

[theymos]

Our IT investigative team has re-evaluated the IP in question and the block will be removed for the next update, sometime within the next hour or two. After that time please update and try to access the site.

Great, thanks for contacting them!

[millsdmb]

Our IT investigative team has re-evaluated the IP in question and the block will be removed for the next update, sometime within the next hour or two. After that time please update and try to access the site.

Great, thanks for contacting them!

You're welcome, Theymos.