False Rumors (from another forum) about Malware

[pvc]

Please note that recent (private messages/false warnings/lies) about malware problems with hearing aid fitting software are fake! You can read more details in the DIY School PDF file named (False Rumors about Malware). This disinformation campaign is flying under the radar of forum owners/moderators because it is being spread within PMs/Private Messages.

Here's a snippet below;

Snippet from DIY School Hearing Aids PDF File: False Rumors about Malware?
Around the second half of 2023, all new members of a popular forum received the following (private message/fictitious warning/lie) about a non-existent malware problem.

Hi there please be very careful about downloading from other sources and “new” forum members, only download from known long term forum members, some have been getting links with virus/melware ← (sic) + corrupt files.

For those of you new to DIY who have received this ubiquitous misinformation/lie, you should know exactly what I'm talking about, right? If there is any truth to that greeting, then show us a victim. Please, just show us a victim. News flash; There are no victims, zero, zip, nada!

Wait, that's not all. There are also forum threads about malware. See multiple links below;

• Forum links; → Link1 → Link2 → Link3

Veteran DIYers, is this how you want to greet new DIYers (by falsely claiming that the required software is contaminated with malware)? This is tantamount to poisoning the Hoh community! I realize that directly questioning such misinformation/lies may make fellow DIYers feel uncomfortable. But consider this: at some point in the future, when enough newbies are told that your forum is a source of malicious/corrupt software, won't this tarnish the reputation of the forum itself?

Please note that not all forums were affected. This "hearingaidtalk" forum was not affected. However, another popular forum was (and still is) severely affected. So please be aware that these (private messages/false warnings/lies) about malware issues are false!

 

[menglxs]

Some security software can incorrectly recognize some internal components of some branded software as viruses and remove them, resulting in the software not being able to complete the installation, or not functioning properly after installation.
I usually recommend turning off security software before unzipping/installing.

 

[pvc]

Hi @menglxs; I don't believe the (false rumors) are related to any security software interference.

I have waited a long time (90+Days) before discussing this issue publicly. Why? Because I waited until after the Edit Capability limit has expired for the three linked forum posts, that's why. Note that after the three linked forum posts, the disinformation campaign was switched to private messages. As a result, it is now flying under the radar of forum owners/moderators. It has also switched wording from sample one below to sample two below.

1. Hi there please be very careful about downloading from other sources and “new” forum members, only download from known long term forum members, some have been getting links with virus/melware + corrupt files.
2. Hi there please be very careful about downloading from other sources and “new” forum members, only download from known long term forum members, you don’t want links with virus/melware + corrupt files.

If this was security-software related, then why use specific words like (downloading from other sources and “new” forum members, only download from known long term forum members, there’s a few malicious former members sending corrupt files). In other words, why would a download from a "self-appointed forum-gatekeeper" fare any better than a download from a "malicious former member"? I can't believe security-software would flag one and not the other?

If you wish to know more about how to view this disinformation campaign yourself, then send me a PM/Private message. Though, future viewing techniques may be curtailed since this went public. Also I repeat: Where is one victim? Please show us a victim.

Newbie DIY forum members. It would be helpful if you could post a copy of what you received as proof this is not a pvc-rant. I'm on your side and have been on your side for approximately one and one-half decades!

 

[menglxs]

Sorry my post yesterday was off topic.

 

[pvc]

No worries, I always enjoy hearing from you. This is a difficult topic to follow because it takes place in private messages.

The basic scam is to use a forum's private messaging feature to provide;

• a friendly greeting to newbie DIYers
• along with an old/outdated version of the fitting software
• and, the warning about non-existing malware

So each newbie DIYer (if they fall for the malware scam) will now rely on the "self-appointed forum-gatekeeper" as their guardian against non-existent malware.

 

[Dave]

Some security software warnings are based on reputation, or lack of reputation.

Windows 11 issues these warnings and offers a run anyway button. If it was truly concerning, Windows would not offer to run it anyway. The nuance here is lost on on the purveyor of rumors.


Here is a forum thread about smart screen, a part of UAC/Windows Defender. https://answers.microsoft.com/en-us...rtscreen/b62888b1-3fee-4739-a2ec-afe8cfadd784

 

[pvc]

Yep, But this issue is not about encountering a security software warning and clicking "Run anyway".

This issue is about a self-appointed forum gatekeeper scamming newbie DIY members into believing they need to obtain fitting-software only from "him" or others that he has deemed safe from the non-existent malware.

There is no fitting software malware problem!

Yes I know this is invisible to most of you because it is hidden in private messages and only to newbie DIYers on another forum.

Are there any newbie DIYers who received this warning (on another forum) willing to speak up? I'm not making this up!

 

[pvc]

Ignore the fictitious Malware rumor. It's not true!

Below is an actual private message quote (from another forum) in November/2023:

• Hi there please be very careful about downloading from other sources and “new” forum members, only download from known long term forum members, some have been getting links with virus/melware + corrupt files.

Below is an actual private message quote (from another forum) in December/2023:

• Hi there please be very careful about downloading from other sources and “new” forum members, only download from known long term forum members, you don’t want links with virus/melware + corrupt files.

 

[Altimis]

Hey there PVC. I want to chime in about what I found. Not sure if this relates to the topic. But I want to warn everyone who tries to search for the software themselves. I tried.

I almost fell into the trap of downloading Malware by searching for the Genie2 program.

I will post a link to the problem download. Feel free to delete it if break the rule or anything but I want everyone to be careful.

***DO NOT DOWNLOAD***

Repeat.

***DO NOT DOWNLOAD***

This is a link I found on Google for Genie2 software... https://colab.research.google.com/drive/14fdPF89w7EKEIHfrQUYV9ujspn39Saka

Again ***DO NOT DOWNLOAD***

It have exp file setup. If this is your first time and you have no idea what the Genie2 software setup file looks like. You will fall for it. When I installed it, my Windows immediately captured a bunch of "Trojan". Luckily, nothing harm on my computer thanks to Windows Defender for doing a good job.

Then I look for other sources inside the forum. Finally get the correct one.

 

[pvc]

Thanks @Altimis for the heads up.

Just FYI I have decided to stop complaining about these (false rumors about malware in fitting software).
See this → Forum Post as to why.
Though, I do appreciate you letting us know about that specific Genie 2 trap.