Why Is "||files1.majorgeeks.com^$document" On The Ublock Malware Detector?

Beats the shit outta me. Just double-checked Spamhaus, and all is good. Trying to download anything in particular?

 

Well, that took quite a bit of digging.

Looks like Origin uses and service out of Switzerland abuse.ch (oddly, yes Switzerland is .ch )
They picked up this file as a false positive that we host
https://www.majorgeeks.com/files/details/ps1_to_exe.html
Nice little freeware program that turns PowerShell scripts into exe.
https://www.virustotal.com/gui/file...618ff2eae01e9adb099ff4343303487975a/detection

Likely 2 things, since the file hasn't has been updated since 2018, it may be a certificate issue that some of the lesser antivirus will pick up on because they suck. OR an actual piece of malware used the script to compile ps1's to exe, which would then list that program's hash in a database. This is why most AV products suck.

Origin - instead of blocking the file, block the server. Because, of course, that makes sense (sarcasm intended) > I mean, I got spam today in my email, so why not detect Outlook as a virus - then you 100% wouldn't get spam, right?? OK, I'm crawling off my high horse now.

Mistakes happen. I reported the information as a false positive, and I'm sure it will be cleaned up quickly. Thanks for letting us know.

 

100% appreciate, otherwise we wouldn't have known.