NextPreviousHomeTrying to download latest BT version and Malwarebytes blocks it, says there's a

kf_daddy | 5 years ago | 12 comments | 934 views

Anyone else seeing this? I clicked the download button for version 14.6.0.3 dated Oct 29th and Malwarebytes is blocking it saying there's a trojan.

MWB is listing the address as 77.94.248.234 port 3225.




Share this on FacebookShare this on X

I have MBAM also Joe and I downloaded the latest version of BluffTitler again without any notification.

The ip address is from vevida.net the web hosting company where BluffTitler runs also nothing to worry about.

If you still don't trust the download from outerspace-software.com... then download the Zip file and run that through your security software before installing.

outerspace-software.com...

komies, 5 years ago


Thank you for the report. We will report this false positive to Malwarebytes.

outerspace-software.com...

michiel, 5 years ago


komies and michiel,

When I hover over the download button the address that shows in the lower left corner is "www.blufftitler.com/BluffTitlerSetup.exe" without the quotes.

Most everything else uses an address for outerspace-software.com. Is there a legit blufftitler.com website?

Even the zip file is giving the trojan warning. I've been downloading files for BT for around 15 years without any problem. If I'm the only one seeing this then I might have some kind of malware that's trying to redirect me.

Joe

kf_daddy, 5 years ago

A direct virus scan with Kaspersky gives all clear on the EXE file

lightads, 5 years ago


Again with Norton360 all clear on the exe file.

Pioneer, 5 years ago


AVG says:

Looking good!
No threats found.

Tintin, 5 years ago


kf_daddy,

Both blufftitler.com and outerspace-software.com are managed by us. When you type blufftitler.com in the URL bar of your browser, you are forwarded to outerspace-software.com...

All our app installers are stored on blufftitler.com so the URLs are correct.

Both sites are hosted by vevida.com who regularly scans all files on their servers.

I tried to report the false positive to Malwarebytes.com, but they require a log:
forums.malwarebytes.com...

Could you please e-mail your log to us:
outerspace-software.com...

Thank you!

michiel, 5 years ago


Sent a log file as requested.

btw, I manually typed in just the website and that is what is being blocked. It's not the download file itself.

Joe

kf_daddy, 5 years ago

Thank you for the info, we will contact Malwarebytes to fix this.

michiel, 5 years ago


Just for info: Norton gave a "SAFE" so there were no issues there.
Upgrade went fine.

SMSgtRod, 5 years ago

The only way to report a false positive at Malwarebytes.com is to post it on their public forum.

So that's what we did:
forums.malwarebytes.com...

As you can read, they have promised to remove the block!

forums.malwarebytes.com...

michiel, 5 years ago


They removed the threat notice, so thanks for checking into that.

Still curious as to why no one but me seems to have gotten the notice. Oh well.

btw, I removed the image of the notice from my previous post. It looked too ominous ;-)

Joe

kf_daddy, 5 years ago

Comment to this article

You must be logged in before you can comment to this article. Login | Register

More by kf_daddy