Not a deal - Malwarebytes reporting UVI site & Portal as being infected with a Trojan / riskware

[JoeGBradford]

Installing all the software managers on my new PC and got a worrying report from Malwarebytes as in title (also came up as an issue in the trial version of Norton I have installed. Has anyone else had the same problem? 

Only reference to it I have found is the link below

Seems to be a long term issue but perhaps nothing to worry about?



https://forums.malwarebytes.com/topic/259296-uvi-portal-going-out-to-trojan-website-blocked/

Edited December 20, 2022 by JoeGBradford

[Brian Lawler]

I have been running Malwarebytes Premium for many years (I got grandfathered in on a permanent license).  It has never balked at UVI software, which I have been using for fewer years.  The IP referenced in that forum is not (currently anyway) UVI.  Maybe someone was victimized by a DNS hack?  At any rate, posts dated 2020.  You can go to https://lookup.icann.org/en and find the registration info for IP addresses and domain names.  If you are suspicious of a download, you can drag it to https://www.virustotal.com/gui/home/upload  (Google service)- free multi AV scanner, but limited file size allowed.

 

 

[JoeGBradford]

Thanks Brian. I had UVI portal & Workstation installed on my old PC and don't recall any issues when I downloaded them. I'll have another look today. Maybe there's an alternative download path to download from 

[simon]

As Brian says, that post is from 2020

Virustotal is showing that site as clean now ?

By default the UVI portal uses the 'torrent' protocol so maybe this flagged a problem - FWIW you can turn the 'torrent' off in the Portal settings

EDIT

Virustotal's report of 'clean' is actually from 2019 - can't seem to find a way to rescan ?

EDIT 2 - found the rescan

came up clean apart from one scanner - assume false positive

EDIT -3

tried doing the check in quttera (the one that returned the positive) - it's insisting there is malware (on 14 files ?)

 

Edited December 20, 2022 by simon

[JoeGBradford]

Thanks - yes it's an old post but only one I could find referencing the issue. I'll try downloading Portal again and see whether MWB and Norton flag it up again. A bit worrying that both picked it up

[simon]

yes - be interested to see what happens

I always have my downloads set to direct ,so I'm hoping to sidestep any potential problem mentioned in that forum post ?