BreadmanYan Posted July 25, 2018 ID:1258918 Share Posted July 25, 2018 I've been noticing MWB block this site at least three times in a row, all from when I switched from ethernet to wifi and back. I did a google search to no avail, nor did any other search engine turn up anything. I don't know what this site/address is or if I should be worried about it. Ransomware log.txt Log1.txt Log2.txt Link to post Share on other sites More sharing options...
nasdaq Posted July 26, 2018 ID:1259101 Share Posted July 26, 2018 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Malwarebytes may be working well. These could be just Notifications of it. Check this out. Change the setting Show Malwarebytes Notifications to Off https://content.invisioncic.com/Mmalware/monthly_2018_05/2018-05-22_10-28-24.png.a3502457b1398cbb8a3d56e78531dcbd.png === If the problem persists execute the program. Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File.Click the file you wish to Attach.Click Attach this file.Click the Add reply button. === Please post the logs for my review. Link to post Share on other sites More sharing options...
BreadmanYan Posted July 26, 2018 Author ID:1259146 Share Posted July 26, 2018 (edited) I got the notification today as well. FRST.txt Addition.txt Edited July 26, 2018 by BreadmanYan Link to post Share on other sites More sharing options...
BreadmanYan Posted July 27, 2018 Author ID:1259335 Share Posted July 27, 2018 It's been consistently showing up at the exact same time as well. Link to post Share on other sites More sharing options...
nasdaq Posted July 27, 2018 ID:1259355 Share Posted July 27, 2018 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Your logs are clean. This looks like a Notification issues. Change the setting Show Malwarebytes Notifications to Off https://content.invisioncic.com/Mmalware/monthly_2018_05/2018-05-22_10-28-24.png.a3502457b1398cbb8a3d56e78531dcbd.png === Restart the computer when completed. Let me know if the problem persists. Link to post Share on other sites More sharing options...
BreadmanYan Posted July 27, 2018 Author ID:1259400 Share Posted July 27, 2018 Are you sure it's notification errors? ua1.lunrac.com could be an actual ransomware site/program trying to get my computer for all I know (lest it be a false positive). Link to post Share on other sites More sharing options...
nasdaq Posted July 28, 2018 ID:1259559 Share Posted July 28, 2018 Hi, Yes I know just look at the Notifications as I have suggested. Set it to Off. If you want me to check the status of your computer run this program and post the logs for my review. Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File.Click the file you wish to Attach.Click Attach this file.Click the Add reply button. === Please post the logs for my review. Link to post Share on other sites More sharing options...
BreadmanYan Posted July 29, 2018 Author ID:1259910 Share Posted July 29, 2018 Saw it from a chrome extension, but okay. FRST.txt Addition.txt Link to post Share on other sites More sharing options...
nasdaq Posted July 30, 2018 ID:1260144 Share Posted July 30, 2018 Hi, Is the problem still persisting? Link to post Share on other sites More sharing options...
BreadmanYan Posted July 31, 2018 Author ID:1260335 Share Posted July 31, 2018 It happened right now as a matter of fact. Link to post Share on other sites More sharing options...
BreadmanYan Posted July 31, 2018 Author ID:1260341 Share Posted July 31, 2018 It's not a notification issue. I've searched ua1.lunrac.com, and it's labelled as a "redirect virus", a hijacker of sorts. I don't know where nor why it came from, but I do remember when. Link to post Share on other sites More sharing options...
BreadmanYan Posted July 31, 2018 Author ID:1260351 Share Posted July 31, 2018 Just got two more notifications. I did a run on hitmanpro and I found "Unsafe DNS server address". Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 31, 2018 Root Admin ID:1260423 Share Posted July 31, 2018 I am assisting this user via private messenger now so I will go ahead and close this topic so as not to waste duplicate resources. Thank you Ron Link to post Share on other sites More sharing options...
Recommended Posts