Hi,
This afternoon a number of endpoints have started displaying the following balloon notification from the system tray:
High risk website blocked
Access has been blocked to "d.tracksrv.com" as Mal/HTMLGen-A has been found at this website.
When end users are visiting websites they are seeing banner adverts being placed on the webpages such as bbc news, which should not be there. I have run scans on the end users machines but nothing has come back so my question:
Has anyone else had something along these lines and whats the best thing to do? something has hijacked the end users machines as its displaying banner adverts inline on websites that would not have banners
Here is a screenprint from one end user:
This thread was automatically locked due to age.
