Malware

[DuoDriver]

I've been running PT on my collection and I'm getting constant warnings from MalwareBytes about trojans. I'm at a loss as to why PT is attempting to talk to the websites shown in the warnings. Here a just a few:

-Website Data-
Category: Trojan
Domain: i.gtimg.cn
IP Address: 203.205.158.50
Port: [60085]
Type: Outbound
File: C:\Program Files\PerfectTUNES\AlbumArt.exe

-Website Data-
Category: Trojan
Domain: bos.pgzs.com
IP Address: 103.254.191.59
Port: [60654]
Type: Outbound
File: C:\Program Files\PerfectTUNES\AlbumArt.exe

-Website Data-
Category: Trojan
Domain: judaica-bookstore.0catch.com
IP Address: 66.219.202.10
Port: [54943]
Type: Outbound
File: C:\Program Files\PerfectTUNES\AlbumArt.exe


What's happening?

[Dat Ei]

Re: Malware

Maybe to collect album arts to offer you? Look at the port range and it is outgoing traffic.


Dat Ei

[DuoDriver]

Re: Malware

What about the port range? And why talk to suspect sites in the first place?

[Spoon]

Re: Malware

If you go into google and do an image search then it presents results from all sites from around the world. There should be no issues with these sites even if they have been giving malware out, because only JPG images are read from the sites.