RetiredChief

It is not infected, it is possessed. Why, otherwise, would I see that Malwarebytes was running on my Pixel 7 Pro without my having taken any actions thereupon since the last time my password was rejected? It continues to run, so apparently whatever was the problem was exorcised.

It is the Malwarebytes account on an Android phone; that is how it is identified in my password manager. It uses the userid and password that I use on a Windows 11 computer. While doing other things, it suddenly occurred to me that the problem could be special characters in the password, so I took a look and don't see any. I then tried to change my password on the computer, which turns out to be impossible, being told that I cannot do that while logged on from the computer, after I had created a new password, inserted the present one and the new one twice. Gave that up, put the original password back into my password manager, saved it, and found that password is still valid. I then opened the app in the phone, to see if I could log on there despite the refusals from earlier. Turned out that I did not need to log on, I already was, and it just finished a scan, Don't ask, I won't tell (I would not know what to tell.) Just another mystery. Yesterday, my Pixel 7 Pro was delivered, so I tried to set it up, only to be told to try later; I did that, phone was set up. Later that day, I was told to install a rather large update, which eventually finished, whereupon I saw that I was supposed to set up the phone. Some sleuthing found that while I was connected to the Internet through our WiFi router, there was no connection to Verizon. I decided to wait until this morning, to see if that had been corrected. It had not, so I logged on to Verizon, where I found that my Pixel 4 phone was still activated, rather than the Pixel 7, so I made a call to Verizon. After some strange beeps and other pre-Halloween such things, I was speaking with an actual person. I told him what I had found before calling, he agreed with my conclusions, so I hung up. Not really, I waited until he could delve into the system, and he eventually removed the 4 and enabled the 7. I went into the Internet page, where I found that Verizon was still not enabled, but just as I was going to tell him that, it was connected, so I made a phone call to be sure the issue was settled. I did ask him about my having been able to set up the phone yesterday; his reply was what I expected, he did not know. Rather like the answer I gave the firefighters when the walls of a cinder block building caught fire. I had no idea. I issued an order to evacuate, requested our only mutual aid department to respond to assist us, and eventually became the most efficient fire chief around: The post office had been looking for a few years for a location for a new post office; when people asked me why I burned the building down (a rather silly question,) I said I did not do that, I had created a location for not only a new postoffice, but a new office for the local postmaster as well, who was the director of the board of directors of the fire protection district. The state testing lab provided the answer, namely that the cinder blocks really were just that: Unlike what are called cinder blocks now, those were made using cinders from the local coke ovens, which produced coke for a steel manufacturer; thus, the blocks had a high carbon content, making them susceptible to burning.

I have checked three times, and the password i use to log on to the Windows and Android accounts are identical, and it works for the Windows software account. It is, however, rejected when I try to log on to my Android software account, being asked to use a proper password. The chat system is a wonderful way to become frustrated, as it refuses totally, completely, even utterly, to deal with this problem. Perhaps some person who has a better attitude than the "I I am Chat, Please Go Away" whatever it is, can assist me. If so, that would be welcome. Maybe this is related to the FedEx Product Return Program, which recently, as I was attempting to use the on-line form rejected the FedEx tracking number from the shipping tag, as well as my telephone number, calling both of them illegal! I did finally manage to get a pickup arranged through the FedEx phone system, the agent setting that up even repeated everything, including that our home street address ends in "Court." Pickup not made, a voice mail explained why, and even gave the street address, which according to the pickup information ended in "Way," a valid address that is not for our house. Agent quickly fixed that, package picked up, delivery acknowledged by FexEx.

No, I did not take a screenshot, which looked "normal", so to speak. The block, whatever it was, has gone away: I checked the site sometime yesterday afternoon, and it was accessible, and is still okay as of a short while ago.

Is http://www.airliners.net actually infested, or is this a false positive? Site was okay 7June2022 around 0700 hours MDT.

Let me try for the third time to get the forum to save/post my report, which is that the update to Paint.net has now been installed with no anomalous behavior.

The download for the free version, found at https://www.getpaint.net/download.html , contains this file, paint.net.4.3.install.anycpu.web.exe ; when that is opened, Malwarebytes intercepts it.

I may have gotten the forum's attention finally: On the fifth try, the message just before this one was posted almost immediately, so I tried again to upload the zip file, which also was nearly instantaneous. I wonder if this will also post quickly....

Original: 19,293,468 Zip file that I cannot, so far, upload, 636,590 (So far, I have tried four times to upload this reply. Forum continues, at least for me, to be quite unusable.)

I give up: I have tried to upload replies, I tried to upload the file here, which failed after quite a few minutes, I have tried to upload the requested file in a private message (that failed after a few minutes), I did manage to post one very small reply elsewhere which took ten minutes. Until the forums are fixed so as to be usable, I am not going to waste anymore time.

"That zip was to be sent to @gonzo in a PM": You even quote his telling me "...to send it me here...", which I could only interpret as a reply, which is why I tried to do what he said to do. I've never sent a PM on this site, just found out how to so, so I will try after posting this.

I have noticed over the past few days that submitting replies to messages in a thread I started take much longer than I would expect. Today, it is even worse: I wrote a 406-word reply, and attached a 621 KB .zip file of the requested Browser Guard log; this failed for an unknown reason. I then removed the file upload information and tried to submit the text file; after perhaps five minutes, instead of seeing my reply as a posted message, I saw the "Submit Topic" again. To add to my aggravation, I submitted basically the same text as just above to support@mail.malwarebytes.com . This resulted in "The recipient's mailbox is full and can't accept messages now. Please try resending your message later, or contact the recipient directly." Total waste of my time.

Second try: First time, message never saved, and when i refreshed the page to try again, Submit button did nothing. Thanks for the explanation. I shall see if I can get the log to you in the near future. I used to live in Crested Butte, Colorado, the 9000 MSL entry; now we are outside of Santa Fe, NM, and the USGS topo map shows a 7000 MSL contour line running through our garage; as the floor of the house is only a few feet lower, I think my claim of being at 7K MSL is close enough. Alma, Colorado, 10,578 feet, population 270 at the 2010 census, is considered to be he highest incorporated municipality in the United States when considering only areas with permanent residents.

I venture to guess that you are at a low-enough altitude that the block did not occur, unlike me at 7000 MSL (and that is well below my previous elevation of 9000 MSL.) So be it. I just clicked my posted URL, which worked properly, and even tried (for the first time) the link to the same video from inside PaintShop Pro with no interception. Why it happened once for me and not again, and never for you, shall forever be unknown.

The issue is rather simple, when I clicked on the link, Browser Guard intercepted it and warned me not to go there, a false interception, as stated in the title to this thread. Yes, the page loaded correctly when I told Browser Guard to let me go there, but BG ought not to have warned me of a threat that does not exist.

This was to a "What’s New in PaintShop Pro 2022" https://learn.corel.com/tutorials/whats-new-in-paintshop-pro/?utm_medium=email&utm_source=1686726&utm_campaign=21-07-29%7CAuto%7CPSP%7CPSPWelcome2%7CNA%7CInt&x-vehicle=em_dm_psp22_wel

Thank you: That setting had been changed, not by me but by the well-known setting changer. I don't know how nor why it was changed, but the setting has now been reverted to the way I have always had it set.

As I was doing other things, I got a Malwarebytes popup informing me that I needed to restart the computer to finish installing an update. I have seen that popup before, but always and only after having been notified of the availability of an update and accepting that. This normal sequence of events did not take place today; the only contact I had with the update was when I was told to restart. There was an update installed today, according to MWB Settings/About: Version 4.2.3.96, update Package Version 1.0.33104, Component Package Version 1.0.1112. If you have any unused notifications of the availability of this update, perhaps you could send one to me for my collection of whatever a collection of such things might be....

I appreciate your continuing to watch this thread. Please define "it"....As I have had nothing to report, that is what I have not reported. Maybe that is an "it". Seriously, ytr.email has disappeared. I may never know what it was, where it came from, nor where it went.

I wonder if Browser Guard's phishing license has expired? When I encountered the block earlier today, I chose only to go to the site, not to remove the block permanently. Since then, I have returned to dbstalk.com a few times with no block, and have tried to access the site with MS Edge and Google Chrome, where I have encountered no block. I did get the request to turn off the ad blocker in Chrome, but not in the other two browsers, even though I do have an ad blocker extension in Firefox (which I failed to mention is where I encountered the block, as it is my default broser.) If no further blocking, then the block today was just a minor impediment. although what a pediment has to do with any of this, that I do not know. (Just my usual playing with words. "Pediment" is a valid word, and putting an apparent prefix, `im' on it does not change one into the other.)

https://www.dbstalk.com/community/index.php I installed Browser Guard yesterday, was faced with a phishing block on this site this morning. I only visit the DirecTV forums there, where I have never noticed any phishing attempts, so it is possible that this block is valid for other forums on the site. I bypassed the block, encountered no phishing messages on the two subforums that had a few new messages. Any information as to the validity of the block?

Please explain "...normal balanced life"; I am not familiar with that concept.... I would click on the "Reports" if there were one, but I don't see any. I am sending you the log report; the PUP is an Amazon extension for Firefox, and is not malicious and in fact popped up a short while ago. MWB updated. It is not registered. I did see one block earlier today (at least I think it was today, perhaps yesterday.) AdwCleaner[S00].txt

First name John is fine. Please permit me to tease you a little bit: You state that, as a volunteer, you are not on 24 x 7. I am not sympathetic: As a volunteer firefighter and volunteer fire chief, I was for many years *always* "on", as it were. I am not sure that my wife has ever quite understood why I left the house one Christmas morning to respond to an emergency, with a boy no more than six years old in the house enjoying his special day, but as volunteer fire chief I had no choice. mbst-grab-results.zip

This is a copy of the message I posted in the general forum, which elicited a reply to post various files in this forum: "I am starting here, as I really don't know what this is about. Perhaps a false positive, perhaps a non-false, perhaps something else. "Starting several weeks ago, Malwarebytes starting blocking ytr.email. A search of my computer found that in Firefox.exe, but a search on-line found no relevant information. I did find that ytr.com itself is blocked by MWB, which may in fact be a correct blocking, but if not, then perhaps a post in the false positive module would be appropriate. "There was then a period of perhaps two weeks with no MWB blocking, and the computer search did not turn up anything, so I surmised that whatever ytr.email might be had gone away, only to have it reappear yesterday, but now in Thunderbird.exe rather than in Firefox.exe. Adding further to the curious nature of this, the computer search still does find any such entry. It has arisen once so far today. "Thus, I think you can understand why I started in this forum, given that I cannot find out what ytr.email on my computer is nor where it comes from, nor much of anything else. That led me to start here, to see if anyone knows about or can find anything about this oddity." This is in response to the above text.FRST.txt Three files uploaded, but one log file is a .json, not a permissible file type, so instructions for that requested. Not at all sure what has caused one link in wrong place, another expanded, but then not being sure is a specialty.... Addition.txt MBAMSERVICE.LOGhttps://forums.malwarebytes.com/applications/core/interface/file/attachment.php?id=310967 MBAMSERVICE.LOG

Thanks, exile360 (of a total of how many?) Precisely the information I was seeking; I shall post the logs, etc., after this. FYI: 1. MWB runs a scan automatically every day, and I often see the popup result information, which is rarely other than 'nothing found'; ytr.email is among the things not found. 2. I forgot to state that there is nothing quaranteened by MWB.