Jump to content
Due to inclement weather in Southwest Florida, our Clearwater support team is offline. Our other offices are available to assist you, however their responses may be delayed. We appreciate your patience and understanding during this time. ×

Ramson "detected" - but no process listed?


hza
 Share

Recommended Posts

I hope this is not kind of built in Easter Egg :)

Something new happens this morning... several times in a row pop ups appear telling he some ransomware was detected and moved to quarantine, but no process name is given and the quarantine folder is empty (btw: does this feature already work? never had any process listed there?)

Even while writing this message a new detection note (Screenshot2703-004.jpg) appeared. I already have included the log files.

FYI: The reason for this (false) alarm might be caused by "Advanced Renamer 3.70" which I used before the alarm popped up and which was closed for a second when the alarm went on. My computer was scanned using the "fast scan" of Kaspersky Internet Security and the file seems to be ok, too https://www.virustotal.com/en/file/9976c9b78985a9d243877eb7b157edb8bd3f9dd8fc2767f833d9a20ccb4015a9/analysis/1459069281/

 

Another possible software causing these false alarms (the notes still appear!) might be Bath Purifier which I used before the popup appeared... but this file is clean, too  https://www.virustotal.com/en/file/c628eb9995c44340884947f1f770ff2fdccd8c9403ee8f957b8aa9d4f3a1e3f6/analysis/1459069485/

 

Since the messages still appear I have to reboot the  computer,now :(

 

Screenshot2703-002.jpg

Screenshot2703-003.jpg

Screenshot2703-004.jpg

Malwarebytes Anti-Ransomware.zip

MBAMService.zip

Link to post
Share on other sites

Hello hza:

The available data from the archives is inconclusive. It would be interesting to see if the system restart has an effect.

If similar MBARW Beta notices reoccur after the system restart, please repeat the identical archive gathering/posting process, but you may exclude the excellent JPEGs as the ones above are quite adequate for now.

Thank you hza.

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.