notabug.org

[TimBones 0]

I keep getting the message that this is a Trojan and that the connection has been blocked. This can actually only be an error. Can someone help me. The logfile for the message is attached.

notabug.org Logfile.txt

[TeMerc 27]

16 minutes ago, TimBones said:

I keep getting the message that this is a Trojan and that the connection has been blocked. This can actually only be an error. Can someone help me. The logfile for the message is attached.

notabug.org Logfile.txt 756 B · 1 download

Hello-

This domain is blocked as malicious by Google Safe Browsing on URLscanio:

https://urlscan.io/result/2bd58762-ef86-41a7-9619-559cee68ba8e/

And an IP is blacklisted at RiskIQ:

https://community.riskiq.com/search/176.9.32.93

And our reporting here:

https://blog.malwarebytes.com/cybercrime/2020/10/fake-covid-19-survey-hides-ransomware-in-canadian-university-attack/

[TimBones 0]

Okay, I see that there seems to be no malwarebyte error here. What should I do?

[TeMerc 27]

59 minutes ago, TimBones said:

Okay, I see that there seems to be no malwarebyte error here. What should I do?

If it's a site you frequently visit try using either a sandbox type browser, VMWare or similar product that won't allow you to get infected. Also be assured you have all your security software updated that they have current databases. Or find another site for the information which you seek.

[CuppaJoe 0]

Hey There!

Was having this issue myself for the last few days without rhyme or reason, and created an account SPECIFICALLY to address this issue.

It looks like the browser extension "uBlock Origin" is the culprit here.

This post is how I figured it out: 

 

The LATVIAN LIST that uBlock uses for international blocking is hosted at notabug.org - hence everytime it attemps to update, an outbound connection is created over port 443 and it tries to connect back to that Git service. 

 

Turn off the list if you are using it, or remove the extension all together if you don't feel comfortable.

Best of luck