I am in the process of downloading the blockchain. I am 90% finished but it is going very slowly. I started 2 days ago. Hopefully it will download fully. I have the Monerod application as an exception in my Bitdefender and MalwareByte programs. I have checked the Monerod application with Bitdefender and it came back "clean". However, MalwareByte blocked 20+ websites because of Trojans and quarantined 3 suspicious malwares. Here are some of the IP addresses, all outbound, if it's any help: IP address 22.214.171.124 Port 51538 IP address 126.96.36.199 Port 50881 IP address 188.8.131.52 Port 59114
Trojans and generic suspicious malware blocked by MalwareByte while downloading blockchain
Those ports have nothing to do with monerod.
It is likely that your computer is infected with some kind of malware.
You should avoid using a spend wallet on this computer, keep it as a read-only/audit wallet here at best.
You may lose a bit of privacy but not your money doing so.
Anyway, I strongly advise you to format your disks & reinstall your operating system.
I've used MalwareBytes and Bitdefender for years without problem. I would know if my computer were infected. It has to do with the downloading of the Monero blockchain somehow.– CJreefNov 14, 2018 at 21:54
If those ports are destination ports, they are unlikely to be monerod connection to peers. And the blockchain itself is a bunch of raw bytes, no av or sandbox could have found a malware with them. Where did you download the monero binaries? getmonero.org? Github? Did you check the file signature? Nov 14, 2018 at 22:10
I downloaded the binaries from "getmonero.org". The last Trojan blocked was incoming, all the others were outgoing. I'm not that computer savvy but wouldn't the IP address tell more than the port? Here are the blocked website details from Malwarebytes: Category=Trojan IP address=184.108.40.206 Port=18080 Type= Inbound Connection File=C:\Users\CJ\Downloads\monero-gui-win-x64-V.0.13.04\monero-gui-v 0.13.0.4\monero.exe– CJreefNov 14, 2018 at 22:45
1Ok this inbound connection is indeed monerod. Port is often more relevant than IP, and 18080 is monero P2P. This is a false positive from your av. It may think that because an incoming connection arise the software is a trojan. Nov 15, 2018 at 5:35