Malwarebytes detects a Ransomware connection while using VM VirtualBox

[Cottonwoodhill]

Hi @,

Since some days ago, I always get some alerts whils using Oracle VM VirtualBox reg ardind a supposed ransomware. (Please find screenshot below)

The thing is if I scan my computer with Malwarebytes , it doesn't find anything...

Is that something I should care about or is this just an IP blacklisted by Malwarebytes ?

Thank you for your support.

Regards.

[Cottonwoodhill]

Is there no possibility to edit a post on this forum ?!?

Wanted to add one more screenshot...

[Cottonwoodhill]

Would the support team kindly answer my request ?!?

Thank you.

 

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Are yiou trying to contact this IP Address?
https://www.ip-tracker.org/locator/ip-lookup.php?ip=185.8.63.38

I suspect that these notices from MBAM are seen in your System Tray.

Check the Notifications settings.
Change the setting Show Malwarebytes Notifications to Off
https://content.invisioncic.com/Mmalware/monthly_2018_05/2018-05-22_10-28-24.png.a3502457b1398cbb8a3d56e78531dcbd.png

===

How is it now?

[Cottonwoodhill]

Well, I was aware that disabling notification would make the message disapear, thank you very much for that great advice ;)

In fact, I wanted to know if that was possible that a Ransomware would use VM Virtualbox to make my system vulnerable. 

Or is that IP just blacklisted by Malwarebytes because maybe a Ransomware was related to this IP in the past ?

Thank you anyways for your reply.

[nasdaq]

Hi,

I do not think that you want to download something from the IP address.

https://www.ip-tracker.org/locator/ip-lookup.php?ip=185.8.63.38

[Cottonwoodhill]

On 10/22/2018 at 5:21 PM, nasdaq said:

Hi,

I do not think that you want to download something from the IP address.

https://www.ip-tracker.org/locator/ip-lookup.php?ip=185.8.63.38

No, of course not !

[nasdaq]

Stay Safe.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks