boinc.exe Phishing detection

Message boards : Questions and problems : boinc.exe Phishing detection
Message board moderation

To post messages, you must log in.

AuthorMessage
archeye

Send message
Joined: 7 Jul 19
Posts: 1
Austria
Message 95699 - Posted: 5 Feb 2020, 10:22:46 UTC

This has happened 3 times now over the last 2 weeks.

Not sure if my Malwarebytes program is now detecting more than it did before or something has crept into boinc.exe.

Anyway having looked into the web service that provides bounceme.net domains it does not look like something I want to allow.

Anyone else having similar detection messages?

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 2/5/20
Protection Event Time: 10:54 AM
Log File: 8bd44ec0-47fd-11ea-adf8-448a5b9ad7dc.json

-Software Information-
Version: 4.0.4.49
Components Version: 1.0.810
Update Package Version: 1.0.18732
License: Premium

-System Information-
OS: Windows 10 (Build 18362.592)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files\BOINC\boinc.exe, Blocked, -1, -1, 0.0.0

-Website Data-
Category: Phishing
Domain: tomasbrod-loc0tcom.bounceme.net

Type: Outbound
File: C:\Program Files\BOINC\boinc.exe
ID: 95699 · Report as offensive
Profile Dave
Help desk expert

Send message
Joined: 28 Jun 10
Posts: 2533
United Kingdom
Message 95700 - Posted: 5 Feb 2020, 11:53:39 UTC - in response to Message 95699.  

It only requires a very small amount of code to match something suspicious to do this. If the false positive is reported by enough sources then a subsequent update will resolve this. On and off various security programs have falsely identified quite a few files from various projects as being dodgy as well. On the CPDN forums users are advised to exclude boinc program and data folders from scans as locking a file at a critical time can cause errors as well as the false flagging of files.
ID: 95700 · Report as offensive
Profile Joseph Stateson
Volunteer tester
Avatar

Send message
Joined: 27 Jun 08
Posts: 641
United States
Message 95701 - Posted: 5 Feb 2020, 13:37:53 UTC - in response to Message 95699.  

have same malwarebytes version but not seeing any problem with boinc. what projects are you subscribed to?
ID: 95701 · Report as offensive
Profile Keith Myers
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 17 Nov 16
Posts: 867
United States
Message 95711 - Posted: 5 Feb 2020, 20:17:50 UTC

Have you visited Tomas Brod's project website? He recently reconfigured it and maybe he let something in he shouldn't.
ID: 95711 · Report as offensive

Message boards : Questions and problems : boinc.exe Phishing detection

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.