Karaoke Forums

Yesterday I received an Email with an attachment 'April releases.7z (307 KB)' from Brian at PEP. I attempted to open it, but since it was a .7z extension I eventually let it go. My Malwarebytes later ran a scan and it came back with Machine Learning/Anomalous.100% as the Name of the type of Malware located in 2 different areas pointing to this attachment.

I do not know if it worthy of a main concern, but I do not like that, nonetheless. I went ahead and Quarantined it to be on the safe side. I am not unusually computer savvy so I do not totally understand what that means to Malwarebytes and am in hopes someone can explain this to me on this board.

An early Thanks to you guys that write and understand code.

_________________
You can never argue with a crazy mi-mi-mi-mi-mi-mind ----B. Joel
I have great faith in fools; My friends call it self-confidence ---- E.A. Poe
I became insane, with long intervals of horrible sanity ----E.A. Poe
I don't know, I don't care, and it doesn't make any difference! ----A. Einstein
Double bubble, toil and trouble ----W. Shakespeare & Walt Disney
I hate it when I get on FaceBook ----Me
Karaoke might be Groundhog Day ----?
Of All the Martial Arts, Karaoke Inflicts the Most Pain ----?

Did you expand the complete header of the email to see if it actually came from a PEP email address? As a first line of defense safety measure, you should always have your email header in expanded view which allows you to see the complete email address of the sender.

Multi layer zipping of actual good files can often flag as possible malware.

Machine Learning/Anomalous is a heuristic check (meaning it looks for code and/or file composition that is similar to known attack vectors) It does not identify an actual already known bad guy. It just returns a % of code or processes that Malwarebytes has seen as problems in the past. Walks like a duck, talks like a duck, it might be a duck.

Double packing and unpacking ie 7-zip unpacking to a tarball and then to a zip can give false positives as many bad guys obfuscate their payloads in the unzipping process and Malwarebytes is triggering off those possibilities.

First step in any Malware result is to google the attack name followed by the word malware ie type in BadGuy2zip7 and then type in Malware.
You will find many descriptions if it is a known problem and many fixes(DO NOT RUN any of the the "I'll fix it for you" stuff you find)
Read up on the problem and then go to the actual sites of the anti-malware and anti-virus sites and see if they have any fixes.

Thanks dsm2000.

Yes, the email was from Brian P at PEP. That was the only reason why I opened the attachment. Personally, I don't like dealing with .7z files and rarely have ever opened any, but because it was from Brian I thought maybe I would. For me it is always more than 1 step and I shy away from it. I loathe having to go through so many clicks to get a download from KV, even.

The only other att's I ever open are the ones I am expecting to receive from someone who has already told me they are going to send some.

There was nothing I found on the web following your advice on how to check so I guess it was an OK attachment. Still, I will not be opening any more such files from PEP. Maybe just an email notifying me to go to their site and check would be sufficient, though I am not in any market for streaming nor leasing services.

_________________
You can never argue with a crazy mi-mi-mi-mi-mi-mind ----B. Joel
I have great faith in fools; My friends call it self-confidence ---- E.A. Poe
I became insane, with long intervals of horrible sanity ----E.A. Poe
I don't know, I don't care, and it doesn't make any difference! ----A. Einstein
Double bubble, toil and trouble ----W. Shakespeare & Walt Disney
I hate it when I get on FaceBook ----Me
Karaoke might be Groundhog Day ----?
Of All the Martial Arts, Karaoke Inflicts the Most Pain ----?

Brian posted on Facebook SC site yesterday that he was hacked and it sent out a virus attachment and do not open!

_________________
LIKE Lonman on Facebook - Lonman Productions Karaoke & my main site via my profile!

Maybe it's spyware to make sure yall's stuff is on the up and up.. We are talking about Phoenix after all..

_________________
A fool thinks himself to be wise, but a wise man knows himself to be a fool.
"William Shakespeare"

Yeah....HIGHLY doubt that.

_________________
LIKE Lonman on Facebook - Lonman Productions Karaoke & my main site via my profile!

first clue that it was bogus should have been "April Releases".

_________________
Paradigm Karaoke, The New Standard.......Shift Happens

Seriously, people need to lighten up. Does nobody get sarcasm anymore? Maybe I should have added a jk or ..

_________________
A fool thinks himself to be wise, but a wise man knows himself to be a fool.
"William Shakespeare"

The question is... Does anybody really care about SC's new releases?

_________________
Electro-Voice Evolve 50... Taking Sound To The Next Level.

Of course some still care.. My dad still has a VHS player too. Bless his heart..

_________________
A fool thinks himself to be wise, but a wise man knows himself to be a fool.
"William Shakespeare"

No, many of us don't care about SC's new obscure releases. Many of SC's loyal supporters have been given the shaft. Many of us will not pay for a subscription and monthly fees to get those releases.

SC's new releases should be made available for download (like everyone else does) with no strings attached. And you can no longer sell SC on quality that sets them apart from the rest. Zoom, Karaoke Version, SBI, Sunfly, etc. all produce tracks with outstanding quality. There is no longer an SC advantage.

So my boy, as I've said, most of us don't give a sh!t about SC's new releases. We've gotten by just fine for the past 10 years without them.

_________________
Electro-Voice Evolve 50... Taking Sound To The Next Level.

SC will likely NEVER release their new stuff to the public as there would undoubtedly be people who would pirate it out of spite after all the crap SC has pulled in recent years.

_________________
DJ Don

I still care but even I am starting to care less and less each month. if they don't come up with a release more people want soon the program is going to die

They will release to anyone who wants to purchase a HELP license.

_________________
LIKE Lonman on Facebook - Lonman Productions Karaoke & my main site via my profile!

Soon? I haven't seen ONE yet that i've needed (that wasn't already available yet anyway).

_________________
LIKE Lonman on Facebook - Lonman Productions Karaoke & my main site via my profile!

Seriously, and I say this as a former big booster, a singer with a decided manufacturer preference:

At this point, other manufacturers are doing the new stuff just as well as SC did the old stuff.

_________________
Co-host of The Greatest Song Ever Sung (Poorly), a karaoke-themed podcast

And, you don't need a yearly subscription in order to download them.

_________________
Electro-Voice Evolve 50... Taking Sound To The Next Level.

This is the reason I will never buy another SC song again. The other manus are doing a great job at putting out what my singers want and as Alan pointed out, "you don't need a yearly subscription in order to download them." They missed the boat and burnt every bridge with the people who supported them from the beginning.