FFS Phones Home

[hotwheelzffx]

I don't have FreeFileSync running but my desktop is trying to hit freefilesync.org every couple of minutes.

Capture.PNG (183.01 KiB) Viewed 607 times

[Zenju]

Hm, sounds scary :D
Maybe your tool also knows where these requests are coming from.

[hotwheelzffx]

The screenshot is Pi-Hole doing DNS requests/blocking. It only shows the machines, not the process. I do not see any process in the task manager related to freefilesync that would be pinging this domain every two minutes.

[Zenju]

If you'd use a tool like Process Monitor, it should be easy to find out.

[Fmslick]

Hey guy,

Yeah I am new here to the forum and really just joined to see where this go's due to I have been running FFS for the last 2-4 yrs (I think, its been some time) now and have never see it phone home to freefilesync.org. Now maybe to something like xx.xxx.xxx.xxx.sub-domain.here to see if there is an update or something like that but really what is FFS really going to get from just ping home + its free :) ...

Anyhow I am not saying @hotwheelzffx is wrong or anything but I do thing there is something more going on , on your comput yo! and if I am reading your SS right than FFS is "calling home" every 14 seconds give or take (last 4 from the top: 3-17-19 9:10:55 / 3-17-19 9:10:41 & 3-17-19 9:08:41 / 3-17-19 9:08:55) and I have never seen FFS "phone home" like that in any logs before.

FFS you guys rock <3 lol :p

[hotwheelzffx]

Following up. I had freefilesync.org whitelisted in MalwareBytes. MBAM continually queries whitelisted domains. Removing the entry in the whitelist kills the constant DNS queries to the domain. Thanks all.

[Fmslick]

hotwheelzffx,

So MalwareBytes was ping freefilesync.org ? That is even more odd to me but it is what it is.. Happy to hear you got it all worked out.

[Zenju]

Sounds like a DDOS attack by Malwarebytes :D

[Fmslick]

Zenju,

That's funny to think about "Malwarebytes DDoS'n freefilesync.org" lulz :p