NextPreviousHomeTrying to download latest BT version and Malwarebytes blocks it, says there's a

kf_daddy | 2 weeks ago | 12 comments | 211 views

Anyone else seeing this? I clicked the download button for version 14.6.0.3 dated Oct 29th and Malwarebytes is blocking it saying there's a trojan.

MWB is listing the address as 77.94.248.234 port 3225.




Share this on Facebook Share this on Twitter

I have MBAM also Joe and I downloaded the latest version of BluffTitler again without any notification.

The ip address is from vevida.net the web hosting company where BluffTitler runs also nothing to worry about.

If you still don't trust the download from www.outerspace-software.com... then download the Zip file and run that through your security software before installing.

www.outerspace-software.com...

komies, 2 weeks ago


Thank you for the report. We will report this false positive to Malwarebytes.

www.outerspace-software.com...

michiel, 2 weeks ago


komies and michiel,

When I hover over the download button the address that shows in the lower left corner is "www.blufftitler.com/BluffTitlerSetup.exe" without the quotes.

Most everything else uses an address for outerspace-software.com. Is there a legit blufftitler.com website?

Even the zip file is giving the trojan warning. I've been downloading files for BT for around 15 years without any problem. If I'm the only one seeing this then I might have some kind of malware that's trying to redirect me.

Joe

kf_daddy, 2 weeks ago

A direct virus scan with Kaspersky gives all clear on the EXE file

lightads, 2 weeks ago


Again with Norton360 all clear on the exe file.

Pioneer, 2 weeks ago

AVG says:

Looking good!
No threats found.

Tintin, 2 weeks ago

kf_daddy,

Both www.blufftitler.com and www.outerspace-software.com are managed by us. When you type www.blufftitler.com in the URL bar of your browser, you are forwarded to www.outerspace-software.com...

All our app installers are stored on www.blufftitler.com so the URLs are correct.

Both sites are hosted by vevida.com who regularly scans all files on their servers.

I tried to report the false positive to Malwarebytes.com, but they require a log:
forums.malwarebytes.com...

Could you please e-mail your log to us:
www.outerspace-software.com...

Thank you!

michiel, 2 weeks ago


Sent a log file as requested.

btw, I manually typed in just the website and that is what is being blocked. It's not the download file itself.

Joe

kf_daddy, 2 weeks ago

Thank you for the info, we will contact Malwarebytes to fix this.

michiel, 2 weeks ago


Just for info: Norton gave a "SAFE" so there were no issues there.
Upgrade went fine.

SMSgtRod, 2 weeks ago

The only way to report a false positive at Malwarebytes.com is to post it on their public forum.

So that's what we did:
forums.malwarebytes.com...

As you can read, they have promised to remove the block!

forums.malwarebytes.com...

michiel, 2 weeks ago


They removed the threat notice, so thanks for checking into that.

Still curious as to why no one but me seems to have gotten the notice. Oh well.

btw, I removed the image of the notice from my previous post. It looked too ominous ;-)

Joe

kf_daddy, 2 weeks ago

Comment to this article

You must be logged in before you can comment to this article. Login | Register

More by kf_daddy