Malwarebytes blocks Balabolka 2.5.0.533 website

Malwarebytes is blocking access to the Balabolka website saying it has "blocked access to a potentially malicious website".

I am using the paid version of Malwarebytes version 1.65.1.1000 with database version 2012.11.11.03. (as of 07:08am CST 11/11/2012).

I don't know if this is a false positive on Malwarebytes, but I thought I would post this in case it is a malicious website.

Dano

http://www.majorgeeks.com/Balabolka_d6587.html

 

False positives are not uncommon. Malwarebytes has an avenue for reporting suspected cases, see:
http://forums.malwarebytes.org/index.php?showforum=42

http://majorgeeks.com/Balabolka_d6587.html has been tested as clean by the Major Geeks (MG) staff. I suggest using MG links whenever you can.

 

Thanks Cipher, I figured it was a false positive, Major Geeks does a real good job of keeping this site clean.

I wish it did have a MG link to the program, unfortunately this one doesn't.

 

The MG link I posted is not the software you need? What program do you need?

Also, take the time to report to Malwarebytes, it will help them improve the product for all...

 

Yes, the MG link you posted to Balabolka was the same MG link I posted in my first message. There is no "Download from MajorGeeks" link, only a link to download from the author's website.

I also clicked on the author's website listed on the MG page for Balabolka and it too was blocked by Malwarebytes.

I was able to download an older version of Balabolka from CNET, but when I clicked on the link to the Balabolka website, Malwarebytes blocked it too.

http://download.cnet.com/windows/ilya-morozov/3260-20_4-10092292.html

http://www.cross-plus-a.com/index.htm <<-- This is the same website listed on MajorGeeks and CNET for Balabolka and Malwarebytes blocked them both.

After downloading Balabolka 2.5.0.532 directly from CNET, I scanned it with Malwarebytes and Avast Internet Security (purchased) and it came up clean.

Thanks for the link you posted to the Malwarebytes forum, I'll report it there.

Also, in the review of Balabolka at CNET, one of the people who reviewed it said it was loaded with malware. I haven't installed it yet, I just scanned it with Malwarebytes and Avast. Here's the article below, you'll have to scroll down to read the reviews.

http://download.cnet.com/Balabolka/3000-2170_4-75182534.html

Thank you again Cipher

 

Also, I just reported it in the False Positives section on the Malwarebytes forum.

 

Just ran it thru Virus Total, clean. Results:
https://www.virustotal.com/file/4cd...e9be1f180f262e32682b6455/analysis/1352660004/

 

Thanks again! I attached a snapshot of the reply I got from the Malwarebytes Forum.

In case the picture is too small to read, I posted this on Malwarebytes:

This same program, Balabolka, is listed on MajorGeeks (http://www.majorgeek...olka_d6587.html) and CNET (http://download.cnet...4-75182534.html) websites. Malwarebytes blocks the authors website http://www.cross-plus-a.com/index.htm saying it is a potentially malicious website, and gives the IP address as 80.93.62.118. It also says Type: Outgoing. Port 50636. Process Avastsvc.exe.

One of the mediators at the MajorGeeks Forum suggested I report this as a possible false positive.

I am using the purchased version of Malwarebytes version 1.65.1.1000 with DataBase version 2012.11.11.03.

I am also using the purchased version of Avast Internet Security version 7.0.1474 with Virus Definition version 121111-0.

The Malwarebytes Staff Members reply said "It's not actually an F/P. The entire range has been housing malicious content since at least 2009. However, there's not currently anything on .118, so I'll get an exception made for the next update."

 

You did the responsible thing, everyone benefits when good anti-malware companies get good feedback. thank you!

 

Thank you for all your help Cipher! It never hurts to be too cautious these days.