Jump to content

Malwarebytes flags ASUpdater


Recommended Posts

This morning Malwarebytes Premium v4.1 decided to block the update website flagging it as Trojan

-Website Data-
Category: Trojan
Domain: update.aerosoft.com.dedi2593.your-server.de
IP Address: 78.47.8.81

Easily remedied by adding website to exclusion but thought people might like to know

RonH

Link to comment
Share on other sites

  • Developer

No, it didn't flag the updater itself as malware but the update you were downloading. Can you tell me which one it was, so we can contact MWB and get it whitelisted?

 

Link to comment
Share on other sites

I was simply running the Updater but the running was blocked in progress. When I allowed access to the blocked IP address, the Updater ran. Neither it, nor any products required updating. So it was blocking the website as far as I can tell.

I just removed the Exclusion from MB and the problem is still showing. Forgive the info. below if it is of no value, but if it helps determine what is going on, then great.

RonH

 

ASUpdater version info: An error occured!
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdaterLib.CUpdaterInfo.GetAvailableVersion(String server)
Prepar3D 5.x (5.0.31.35253) found: (C:\Program Files\Lockheed Martin\Prepar3D v5\)
Prepar3D 4.x (4.5.14.34698) found: (C:\Program Files\Lockheed Martin\Prepar3D v4\)

Aerosoft A318-A319 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a318_a319_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A318-A319 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a318_a319_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A320-A321 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a320_a321_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A320-A321 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a320_a321_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A330 Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a330_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft A330 Pro V5:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_a330_prof_p3dv5/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Aerosoft CRJ Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_crj_prof/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
Gibraltar Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_gibraltar_prof_p3dv5/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
London Heathrow Professional:
The server version file could not be loaded!
http://update.aerosoft.com.dedi2593.your-server.de/asupdater/as_london-heathrow_prof_p3dv5/asupdater.xml
System.Xml.XmlException: 'doctype' is an unexpected token. The expected token is 'DOCTYPE'. Line 1, position 3.
   at System.Xml.XmlTextReaderImpl.Throw(Exception e)
   at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
   at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)
   at System.Xml.XmlTextReaderImpl.ParseDoctypeDecl()
   at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   at System.Xml.XmlTextReaderImpl.Read()
   at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
   at System.Xml.XmlDocument.Load(XmlReader reader)
   at System.Xml.XmlDocument.Load(String filename)
   at ASUpdater.MainWindow.GetProductList()
*** This product will be ignored! ***
 

Link to comment
Share on other sites

  • Developer

Well, it complains that there's an unknown token "doctype" in the asupdater.xml files. But there isn't. If you click the links in your own post (no worries, they're all legit), you can see that yourself.

 

The only solution I see is to disable MWB Premium before you run the updater. I'm sorry, but we really can't take care of every anti-virus program whose messed up so-called "AI" thinks that something is a threat. I'm pretty sure that most of the anti-virus tools have a "false positive" detection rate of 50 or more percent by now.

Link to comment
Share on other sites

I apologize upfront for piggybacking.  I have the same issue with MB.  I also tried to exclude the files and IP and it refused to take.  Keeps saying it is a Trojan.

Link to comment
Share on other sites

  • Deputy Sheriffs

Report it to MB, although I'm sure you will never get a response.

What else you can do is to exclude every sim related folder from being scanned.

And you might look for another AV software. ;)

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. Privacy Policy & Terms of Use