FFS Phones Home

Discuss new features and functions
Posts: 3
Joined: 17 Mar 2019

hotwheelzffx

I don't have FreeFileSync running but my desktop is trying to hit freefilesync.org every couple of minutes.
Capture.PNG
Capture.PNG (183.01 KiB) Viewed 550 times
Last edited by hotwheelzffx on 18 Mar 2019, 13:29, edited 1 time in total.
User avatar
Site Admin
Posts: 7050
Joined: 9 Dec 2007

Zenju

Hm, sounds scary :D
Maybe your tool also knows where these requests are coming from.
Posts: 3
Joined: 17 Mar 2019

hotwheelzffx

The screenshot is Pi-Hole doing DNS requests/blocking. It only shows the machines, not the process. I do not see any process in the task manager related to freefilesync that would be pinging this domain every two minutes.
User avatar
Site Admin
Posts: 7050
Joined: 9 Dec 2007

Zenju

If you'd use a tool like Process Monitor, it should be easy to find out.
User avatar
Posts: 3
Joined: 17 Mar 2019

Fmslick

Hey guy,

Yeah I am new here to the forum and really just joined to see where this go's due to I have been running FFS for the last 2-4 yrs (I think, its been some time) now and have never see it phone home to freefilesync.org. Now maybe to something like xx.xxx.xxx.xxx.sub-domain.here to see if there is an update or something like that but really what is FFS really going to get from just ping home + its free :) ...

Anyhow I am not saying @hotwheelzffx is wrong or anything but I do thing there is something more going on , on your comput yo! and if I am reading your SS right than FFS is "calling home" every 14 seconds give or take (last 4 from the top: 3-17-19 9:10:55 / 3-17-19 9:10:41 & 3-17-19 9:08:41 / 3-17-19 9:08:55) and I have never seen FFS "phone home" like that in any logs before.

FFS you guys rock <3 lol :p
Posts: 3
Joined: 17 Mar 2019

hotwheelzffx

Following up. I had freefilesync.org whitelisted in MalwareBytes. MBAM continually queries whitelisted domains. Removing the entry in the whitelist kills the constant DNS queries to the domain. Thanks all.
User avatar
Posts: 3
Joined: 17 Mar 2019

Fmslick

hotwheelzffx,

So MalwareBytes was ping freefilesync.org ? That is even more odd to me but it is what it is.. Happy to hear you got it all worked out.
User avatar
Site Admin
Posts: 7050
Joined: 9 Dec 2007

Zenju

Sounds like a DDOS attack by Malwarebytes :D
User avatar
Posts: 3
Joined: 17 Mar 2019

Fmslick

Zenju,

That's funny to think about "Malwarebytes DDoS'n freefilesync.org" lulz :p