[169.55.71.151 - sur.ly/o/tradesite.jet2holidays.com/AA000014 - Why has this been blocked?]

We are not sure why this has been blocked is it because it is a shorted URL?

sur.ly/o/tradesite.jet2holidays.com/AA000014 

 

many thanks

 

[ORGCHART]

This has come up as a Ransom.Crysis Malware this morning, and also appeared on Redit by another user about the same time.
https://www.reddit.com/r/techsupport/comments/50rxb3/malwarebytes_found_something_called_ransomcrysis/

MBAM-log-2016-09-02 (09-00-49).txt

ORGCHART.zip

[PUM.Optional.NoDispScrSavPage? What is this?]

Sorry another question:  Is this a acceptable use of the * in the ignore list?  Or is this allowing to much passed?

 

HKEY_USERS\*\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM|NoDispScrSavPage

[PUM.Optional.NoDispScrSavPage? What is this?]

I have found my answer on another search - Many thanks :-)

[PUM.Optional.NoDispScrSavPage? What is this?]

Hello All,

 

We are currently trailing Malwarebytes Endpoint for Business - I have deployed to my first machine :-) and have run a FULL scan I had just one issue found.

 

PUM.Optional.NoDispScrSavPage

 

Which is flagged as Anti-Malware?  However I am confused to see where there is a list defining what type of malware this is?  From the research I have done it looks like it is a reg key from our group policy to block the use of screen savers on our domain.  What would happen if I deleted this would it not come back due to group policy?  _ Should I be looking at excluding this type of threat as a false-positive?

 

But I need to be sure so hence my question on here - Also how can I found out the detail about this security log like a wiki/kb on each threat name?

 

Many thanks

 

John