Author Topic: Malwarebytes blocks site as Trojan  (Read 278 times)

0 Members and 1 Guest are viewing this topic.

Offline bvanevery

  • Emperor of the Tanks
  • Librarian
  • *
  • Posts: 3320
  • €480
  • View Inventory
  • Send /Gift
  • Allows access to AC2's quiz & chess sections for 144 hours from time of use.  You can't do without Leadship  Must. have. caffeine. -Ahhhhh; good.  
  • Planning for the next 20 years of SMACX.
  • AC Text modder Author of at least one AAR
    • View Profile
    • Awards
Malwarebytes blocks site as Trojan
« on: July 07, 2019, 10:58:27 PM »
Was informed by a Reddit /r/4Xgaming post today:

Quote
Malwarebytes blocks your link. "Website blocked due to trojan".


The link in question being the SMACX AI Growth mod thread home page.  I responded:

Quote
I don't typically use Malwarebytes myself. I have access to a machine that does, and I confirm that the website is blocked. I am not the site owner. I do not know how Malwarebytes makes decisions about such things. I will say, the site contains game binaries that have been hacked / patched to fix or enhance various things about the game. These aren't trojans, but it wouldn't shock me if Malwarebytes is too stupid and uninterested to care about the difference.

In any event, my link itself does not contain any Trojans nor any immediate access to any .exe files for that matter. My mod is simply a collection of 16 .txt files that you drop into your SMAC game folder. Nothing's gonna happen. You can verify the contents of the .txt files yourself with any text editor.

I can bring the Malwarebytes issue to the attention of the site's main admin. However, if Malwarebytes simply categorizes anyone distributing 'illicit' binaries as a bad evildoer, well that site policy is not going to change. I don't know if there's some mechanism by which the site could plead withe Malwarebytes "for legitimacy". I would hope not, because that would pretty much invalidate any legitimate purpose on Malwarebytes making such a distinction. More than likely, Malwarebytes will believe what it wants to believe, and in the case of this site they will be wrong.

I personally would list an exception in Malwarebytes and be done with it. But of course, I've been around this site for a few years now. I'm biased.


Offline bvanevery

  • Emperor of the Tanks
  • Librarian
  • *
  • Posts: 3320
  • €480
  • View Inventory
  • Send /Gift
  • Allows access to AC2's quiz & chess sections for 144 hours from time of use.  You can't do without Leadship  Must. have. caffeine. -Ahhhhh; good.  
  • Planning for the next 20 years of SMACX.
  • AC Text modder Author of at least one AAR
    • View Profile
    • Awards
Re: Malwarebytes blocks site as Trojan
« Reply #1 on: July 09, 2019, 12:04:20 AM »
Further info from that Reddit thread:
Quote
Norton Safeweb and Google safe browsing find no problems, Avast's online scanner doesn't show any problems wither, and Virus Total scans it with 70 engines and only Dr Web finds a problem (not Malwarebytes interestingly). Also searching for it in different ways on different search engines shows no signs of problems but does get hits on discussions about using the site on GoG, Reddit, and a lot at civfanatics.com It seems like a likely false positive. Whether its a straight out false positive, or Malwarebytes making some determination that the content is "illegitimate" (if its the later they should give some warning other than "trojan" so I'm thinking more the former).

Online Buster's Uncle

  • Through art, I
  • Transcend
  • *
  • Posts: 45574
  • €1022
  • View Inventory
  • Send /Gift
  • Someone thinks a Winrar is You!  Because there are times when people just need a cute puppy  Soft kitty, warm kitty, little ball of fur  
  • AC2 is my instrument, my heart, as I play my song.
  • Planet tales writer Smilie Artist Custom Faction Modder Downloads Contributor AC2 Wiki contributor
    • View Profile
    • My Custom Factions
    • Awards
Re: Malwarebytes blocks site as Trojan
« Reply #2 on: July 09, 2019, 12:14:52 AM »
Quote from: t_ras
If the reason is the downloadable bineries, then there is nothing we can do.
[shrugs]

Offline Lorizael

Re: Malwarebytes blocks site as Trojan
« Reply #3 on: July 21, 2019, 02:00:48 AM »
Just got this today. I semi-accidentally activated a trial of premium malwarebytes. (I usually just use the free version.)


Offline DrazharLn

Re: Malwarebytes blocks site as Trojan
« Reply #4 on: August 21, 2019, 10:29:39 PM »
I think this is a false positive. I have sent a message to malware bytes via twitter about it to try and find out more.

Edit: I've put the admin hat on so that they can check and see that an admin has said that they would contact twitter

Offline Vidsek

Re: Malwarebytes blocks site as Trojan
« Reply #5 on: August 22, 2019, 02:27:49 AM »
 I'm using Firefox as my browser and Bitdefender as my AV (with a little of Win10's security on the side). 

 They have never flagged our site for anything except a non-secure login.  If there was really a trojan here, I'm pretty certain they would have detected it.
All this talk of fungus and worms makes me hungry...


Offline Petek

Re: Malwarebytes blocks site as Trojan
« Reply #7 on: September 30, 2019, 06:38:53 PM »
Malwarebytes blocks AC2 again, for the same reason.

Online Buster's Uncle

  • Through art, I
  • Transcend
  • *
  • Posts: 45574
  • €1022
  • View Inventory
  • Send /Gift
  • Someone thinks a Winrar is You!  Because there are times when people just need a cute puppy  Soft kitty, warm kitty, little ball of fur  
  • AC2 is my instrument, my heart, as I play my song.
  • Planet tales writer Smilie Artist Custom Faction Modder Downloads Contributor AC2 Wiki contributor
    • View Profile
    • My Custom Factions
    • Awards
Re: Malwarebytes blocks site as Trojan
« Reply #8 on: September 30, 2019, 07:45:03 PM »
Oh, for pete's sake.

I'll alert sisko and the other tech guys.  Thanks for letting me know.

Offline DrazharLn

Re: Malwarebytes blocks site as Trojan
« Reply #9 on: October 01, 2019, 07:20:07 AM »
Requested unblock. Anyone else can do this, btw. https://forums.malwarebytes.com/topic/252192-unblock-alphacentauri2info/

 

* User

Welcome, Guest. Please login or register.
Did you miss your activation email?


Login with username, password and session length

Select language:

* Community poll

SMAC v.4 SMAX v.2 (or previous versions)
-=-
17 (6%)
XP Compatibility patch
-=-
8 (3%)
Gog version for Windows
-=-
69 (28%)
Scient (unofficial) patch
-=-
24 (9%)
Kyrub's latest patch
-=-
14 (5%)
Yitzi's latest patch
-=-
85 (34%)
AC for Mac
-=-
2 (0%)
AC for Linux
-=-
5 (2%)
Gog version for Mac
-=-
10 (4%)
No patch
-=-
12 (4%)
Total Members Voted: 246
AC2 Wiki Logo

* Random quote

Each individual pipe contains a hot slurry of minerals drawn from Planet's crust and makes a sound like rain falling on a tin roof. When they converge on the trunkline the sound is a terrifying thunder, a thunder of untold wealth, and power.
~Captain Ulrik Svensgaard 'Tending the Sea'

* Select your theme

*