This morning Malwarebytes Premium v4.1 decided to block the update website flagging it as Trojan

-Website Data-
Category: Trojan
Domain: update.aerosoft.com.dedi2593.your-server.de
IP Address: 78.47.8.81

Easily remedied by adding website to exclusion but thought people might like to know

RonH

No, it didn't flag the updater itself as malware but the update you were downloading. Can you tell me which one it was, so we can contact MWB and get it whitelisted?

 

Bitdefender also had issues (I was updating EDDF).

 

https://www.virustotal.com/gui/file/86660e252c1a25fd47347b40ce6251c43329786c684c72e300f3e44d144d8df5/relations

 

Randy

I was simply running the Updater but the running was blocked in progress. When I allowed access to the blocked IP address, the Updater ran. Neither it, nor any products required updating. So it was blocking the website as far as I can tell.

I just removed the Exclusion from MB and the problem is still showing. Forgive the info. below if it is of no value, but if it helps determine what is going on, then great.

RonH

 

ASUpdater version info: An error occured!
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdaterLib.CUpdaterInfo.GetAvailableVersion(String server)
Prepar3D 5.x (5.0.31.35253) found: (C:\Program Files\Lockheed Martin\Prepar3D v5\)
Prepar3D 4.x (4.5.14.34698) found: (C:\Program Files\Lockheed Martin\Prepar3D v4\)

Aerosoft A318-A319 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a318_a319_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A318-A319 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a318_a319_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A320-A321 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a320_a321_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A320-A321 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a320_a321_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A330 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a330_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A330 Pro V5:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a330_prof_p3dv5/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft CRJ Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_crj_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Gibraltar Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_gibraltar_prof_p3dv5/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
London Heathrow Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_london-heathrow_prof_p3dv5/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
 

Well, it complains that there's an unknown token "doctype" in the asupdater.xml files. But there isn't. If you click the links in your own post (no worries, they're all legit), you can see that yourself.

 

The only solution I see is to disable MWB Premium before you run the updater. I'm sorry, but we really can't take care of every anti-virus program whose messed up so-called "AI" thinks that something is a threat. I'm pretty sure that most of the anti-virus tools have a "false positive" detection rate of 50 or more percent by now.

Agreed. Adding the IP to the exclusions is the easiest fix.

Thanks Hans

Ron

I'm also flagging this at MB

I apologize upfront for piggybacking.  I have the same issue with MB.  I also tried to exclude the files and IP and it refused to take.  Keeps saying it is a Trojan.

Report it to MB, although I'm sure you will never get a response.

What else you can do is to exclude every sim related folder from being scanned.

And you might look for another AV software.