1. Forum
  2. Fidonet
  3. SYNCHRONET

  • Malwarebytes reports troj

    From Dumas Walker@1:103/705 to ALL on Sun Jan 21 09:54:00 2024
    As I only have linux machines, I don't have any experience with
    Malwarebytes. Has anyone else run into this -- is it a case of Malwarebytes just not liking BBSes or something else?

    FYI, here is the message one of them is getting when trying to surf over
    via the web (line wraped).

    Location: https://block.malwarebytes.com?lic=Licensed&cat=Trojan&lang=en&prod=MBAM-C&ver=4
    .6.7.301&cpv=1.0.2222&upv=1.0.79814&ldr=290&ip=67.131.57.133&url=capitolcityonli
    ne.net
    Connection: close

    Website blocked due to a Trojan

    Your Malwarebytes Premium blocked this website because it may contain a Trojan.


    The main thing I am concerned about is that any Windows sysop who runs Malwarebytes Premium probably thinks that their connections have "gone
    down" when in reality Malwarebytes is rerouting the outbound traffic to a "127." address, and blocking the inbound traffic, to their hub or node.


    * SLMR 2.1a * AAAAA - American Association Against Acronym Abuse

    ---
    þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Marc Lewis@1:103/705 to alt.bbs.synchronet on Mon Jan 22 15:34:11 2024
    From Newsgroup: alt.bbs.synchronet

    + User FidoNet address: 1:396/45
    Hello All.

    <On 20Jan2024 22:49 Dumas Walker wrote a message to All regarding Malwarebytes reports troj >

    To: MRO
    As I only have linux machines, I don't have any experience with Malwarebytes. Has anyone else run into this -- is it a case of Malwarebytes just not liking BBSes or something else?

    it sounds like he's using the trial version or the paid version
    where you have ore features. honestly it's just overkill unless you
    really ARE infected and u want to try to clean out your system.

    I think it is the paid version.

    i would install it to try on your system bu it's become so convoluted
    i wont w t it on my systems.

    Isn't Malwarebytes a windows program?
    Another useful one I've been using that's really easy on resources and easy to configure is Avast, both the freeware version as well as the professional version. Very little interference with all Windows programs. I am not sure if it is available on other OSes... Not sure. https://www.avast.com

    Best regards,
    Marc
    --
    +++++++++++++++++++++++++++++++++++++++++++++++++++++++
    + The FidoNet News Gate (Huntsville, AL - USA) +
    + The views of this user are strictly his or her own. + +++++++++++++++++++++++++++++++++++++++++++++++++++++++
    --
    This email has been checked for viruses by Avast antivirus software. www.avast.com
    --- Synchronet 3.20a-Linux NewsLink 1.114
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Dumas Walker@1:103/705 to MARC LEWIS on Wed Jan 24 09:45:00 2024
    Isn't Malwarebytes a windows program?
    Another useful one I've been using that's really easy on resources and easy to
    configure is Avast, both the freeware version as well as the professional version. Very little interference with all Windows programs. I am not sure if
    it is available on other OSes... Not sure. https://www.avast.com

    Thanks, I used to use that one when I had a windows machine and it did seem
    to work and play better than others.

    I was curious if maybe malwarebytes doesn't like bbses but it sounded like
    it was only my board that was tripping the alert which makes me think mro
    might be right about the port scanners/blacklists. I have been getting hit
    a lot lately with script bots that tie up / lock up the telnet service, and
    a few that have hit me both there and the web interface at the same time.

    I scanned the system with ClamAV. It did find a bunch of PUAs -- DOS
    programs for download that are compressed with PKlite or were compiled
    using watcomm (not sure why that is an issue) -- but it did not find any trojans or viruses.


    * SLMR 2.1a * In Stereo where available. .elbaliava erehw oeretS nI

    ---
    þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Marc Lewis@1:103/705 to alt.bbs.synchronet on Tue Jan 23 20:34:36 2024
    From Newsgroup: alt.bbs.synchronet

    + User FidoNet address: 1:396/45
    Hello All.

    <On 22Jan2024 05:51 MO wrote a message to All regarding Malwarebytes reports troj >

    From: "MRO" <mro@BBSESINF.remove-olj-this>

    By: Marc Lewis to alt.bbs.synchronet on Mon Jan 22 2024 03:34 pm

    Another useful one I've been using that's really easy on resources
    and easy
    to configure is Avast, both the freeware version as well as the
    professional
    version. Very little interference with all Windows programs. I am
    not sure
    if it is available on other OSes... Not sure. https://www.avast.com

    Best regards,

    wasnt avast caught selling our information?
    i just use the ms security essentials.

    There are specific settings in Avast under settings - personal privacy to turn off sharing. I'm sure that some folks will still not be convinced. I've been satisfied with its performance. I will check further and see. You may in fact be correct.

    Best regards,
    Marc

    .. "Military intelligence" is a contradiction in terms.(Groucho Marx)
    --
    +++++++++++++++++++++++++++++++++++++++++++++++++++++++
    + The FidoNet News Gate (Huntsville, AL - USA) +
    + The views of this user are strictly his or her own. + +++++++++++++++++++++++++++++++++++++++++++++++++++++++
    --
    This email has been checked for viruses by Avast antivirus software. www.avast.com
    --- Synchronet 3.20a-Linux NewsLink 1.114
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)