I don't use Malwarebytes, and possibly their forum could help interpret the warning messages. But my first thought is:

Does this problem only occur when your VPN is active?

Does it make any difference if you change servers in the VPN settings? See: How do I choose my server on Mozilla VPN?

Mr. J. Scher --

Thank you for your helpful response.

Malwarebytes is blocking regularly-repeating-timed efforts to reach my PC from IP address 45.134.142.193.

I have therefore used the command prompt "nslookup" at the black box screen and found that this IP address is DataPacket.com, an international company based in London and Prague, that advertises itself as a "VPN service provider." You can check it yourself at the DataPacket.com website.

So my study of the problem points to the Mozilla VPN as the source and I am in the process of removing the Mozilla VPN program from my PC and canceling my subscription with Mozilla.

Please feel free to check my work and to let me know if you think there is a better solution.

Mark Lloyd

Mr. J. Scher --

Thank you for your response.

Malwarebytes is blocking regularly-timed efforts to gain access from IP # 45.134.142.193

Since my e-mail of earlier today, I've opened the command prompt black box and used the "nslookup" command to find the source of this IP address. The IP address is DataPacket.com, an international VPN service provider, based in London and Prague.

That seems to me to be very good evidence that the Trojan being blocked is closely associated with the Mozilla VPN I subscribe to. Mozilla VPN may not be the actual source of the problem, but I have concluded that Mozilla VPN is most likely the unwitting cause of the problem. I therefore plan to remove the Mozilla VPN program from my PC and cancel my subscription to Mozilla VPN.

Please feel free to check my discovery and if you find that I am mistaken, please let me know. I'm always open to better solutions.

Mark Lloyd

Since you have Malwarebytes, do you by chance have the Malwarebytes Browserguard extension installed? as that has done things like causing websites to break for example.

Also this is the first time I have seen any claim of Mozilla VPN being associated with a trojan in any way.

Before you decided to give up on using Mozilla VPN you can try to get support for it at https://support.mozilla.org/en-US/questions/new/firefox-private-network-vpn/form

Mr. J. Scher and Moderator James --

Thank you both for your thoughtful responses.

I think you will both be interested to know the following:

First. A look back over the log Malwarebytes was creating on my machine revealed that the "Trojan" being blocked was coming in from the DataPacket.com IP address precisely every thirty minutes.

Second. When I removed the Mozilla VPN.exe file from my list of programs, the Malwarebytes warnings ceased. There have been no "Trojan blocked" warnings from Malwarebytes in the past two hours and the Malwarebytes log does not show any other warnings from any source.

My conclusions, both tentative and actual:

First: I have no idea if a third party can create a program that mimics a real IP address like that of DataPacket.com, so I cannot be certain that the Trojan was really coming from DataPacket.com. My identification of DataPacket.com as the source of the Trojan is tentative only.

Second: There is no doubt, however, that by eliminating the Mozilla VPN program from my PC, I have put an end to the repeated efforts to plant a Trojan coming from the IP address Malwarebytes identified for me.

Third: I am therefore disappointed, to say the least, in Mozilla which I have always valued as a trusted partner. When I canceled my subscription to Mozilla VPN, I was prompted to take an exit survey and I took the time to explain carefully that my cancellation was due to my deep concern about the experience I have just had with the Trojan emanating from the DataPacket.com IP address. I even provided my name and e-mail address to the reviewers of the exit surveys to enable them to contact me directly if they so choose.

Fourth: I would be very interested in learning if Mozilla VPN has a business relationship with DataPacket.com.

Fifth: Thank goodness for Malwarebytes!

Sixth: With regard to the very reasonable suggestion from James that I reach out to Mozilla VPN support, I am hoping that if my detailed exit survey is taken seriously, the issue will be brought to the attention of Mozilla VPN support.

Again, I thank you both for your interest in my call for assistance and for your thoughtful suggestions about how best to proceed.

Mark Lloyd

It looks like the IP address is assigned to a Mullvad VPN server in Miami, FL.

• https://ipinfo.io/45.134.142.193
• https://www.ip2location.com/demo/45.134.142.193

Mullvad is Mozilla's technology partner for the VPN. People with Malwarebytes should test another server to see whether the objectionable behavior is specific to Miami.

J. Scher --

Thank you for your very informative post. I appreciate it greatly.

Mark Lloyd