Malwarebytes 3.0 Blocking epicunitscan.info

[RogerDog]

I keep getting this message: "Website blocked epicunitscan.info." Malwarebytes 3.0 scan doesn't detect anything. See attached detection message. Any guidance?

 

[TwinHeadedEagle]

Hello and

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button. button.

  

• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  

• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[Magy]

Hey, I have the exact same problem which occured today (strange tho) and here are the logs. Thank you for trying to solve this issue!

Addition.txt

FRST.txt

[mrayb999]

SaAddition.txtme issue for me.

FRST.txt

[Vic52]

This has got me baffled. This is hidden very well. The trick is to find this ( what appears to be a Browser hijacker) and then delete it...if you can find it! Hope you can. I have no idea how this got on my machine. 

Addition (1).txt

Addition.txt

[Tai2323]

Here are mine.

Addition.txt

FRST.txt

[cjgranda]

the download in twin eagles post does not exist anymore but I still get the pop up what is the cure?

[RowanScnider]

Same problem.

These are mine.

Addition.txt

FRST.txt

[MadDog]

Hello

Well, I too have apparently been infected by epicunitscan and keep getting the above listed pop up warnings.  I downloaded, installed and ran the Farbar Recovery Scan Tool, and still have the same issue.  The logs from the scan are attached.

Thank you for your help.

MadDog

 

Addition.txt

FRST.txt

[digbyn1]

Same issue, here are mine

 

Addition.txt

FRST.txt

[MadDog]

Given the incidence of this piece of software, perhaps a Malwarebytes update is in order to deal with it.  Just a thought.

[amildheadache]

same problem, here are my files

 

Addition.txt

FRST.txt

[DaveLeBlanc]

I have the same issue, with the same pop up and it just started yesterday afternoon and it's only on Chrome. Firefox is okay. I cannot find any program anywhere or browser extension in Chrome that is causing it.  

There is no IP address 127.0.0.11 out there according to an IP check I did.

I think we have a false positive issue with Chrome, maybe? 

Addition.txt

FRST.txt

[Smitherines]

127.0.0.11 is "you", your localhost loopback IP address. It's blocking you from sending out.

Here are my files. I had to switch to firefox because the popup was constant at times

FRST.txt

Addition.txt

[nitrozeus]

Same s@#! same IP, another pc....

6 hours ago, MadDog said:

Given the incidence of this piece of software, perhaps a Malwarebytes update is in order to deal with it.  Just a thought.

And so what do you think this is all about?? Not the sharpest bulb in the drawer, are we?

[nitrozeus]

same....

FRST.txt

Addition.txt

[doopadoop]

This happened to me too: I have two different computers, both with Malwarebytes and the notifications started ath the same time. Couldn't be a problem of MB itself ? 
I'm looking for those two files but I can't find them ,,

[Dashke]

Hello RogerDog,

Thank you very much for your message, this has been resolved in the next update. 

[consoky]

Could we have some more details on this? Is it a false positive from some random thing or do we actually have something on our computer that is triggering this?

[Zentus]

Same here.

Addition.txt

FRST.txt

[Fysus]

Same here.

FRST_12-02-2017 14.49.28.txt

Addition_12-02-2017 14.49.28.txt

[RowanScnider]

It does seem like it has been resolved. I had to reinstall MalwareBytes though, because it would immediately finish scanning after clicking "start scan" (not even 1 second scanning). I just did a Scan and it came out clean; I opened several Chrome tabs and so far haven't seen the "epicunitscan.info" alert.

Thanks, everyone!

[consoky]

5 hours ago, RowanScnider said:

It does seem like it has been resolved. I had to reinstall MalwareBytes though, because it would immediately finish scanning after clicking "start scan" (not even 1 second scanning). I just did a Scan and it came out clean; I opened several Chrome tabs and so far haven't seen the "epicunitscan.info" alert.

Thanks, everyone!

What version of Malwarebytes are you currently using if I may ask?

[Zentus]

5 hours ago, consoky said:

What version of Malwarebytes are you currently using if I may ask?

Verison 3.0.6.

However the epicunitscan.info has been blocked no longer pop up, so i guess it has been solved

[fewze]

22568    1493.047459    192.168.29.1    192.168.29.139    DNS    93    Standard query response 0x6669 A epicunitscan.info A 127.0.0.11

I see this in Wireshark so it looks like it isn't being detected by the latest version of Malwarebytes?