This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Website blocked (new undetected malware)

On one PC I am getting constant messages (from the sophos system tray notifier box) that a website is being blocked.  Looking at the console it shows the following websites are being accessed over and over again:

sysmain.cc

store-main.su

e-statistic.cc

e-protections.cc

I assume I have something nasty on the PC and have dealt with it as such.  Any ideas on what is causing it and getting a sample for sophos to examine etc.

:33407


This thread was automatically locked due to age.
Parents
  • Hello occadmin,

    what's the detailed alert - i.e. the reason? Do you have a browser open? Did you receive other alerts besides the website blocked?

    It's hard to tell whether some application makes these attempts "on its own" (BTW: all these names resolve to the same set of addresses) - if you keep getting the messages Sysinternal's TCPView might help to identify the process which tries to connect.

    Christian

    :33413
Reply
  • Hello occadmin,

    what's the detailed alert - i.e. the reason? Do you have a browser open? Did you receive other alerts besides the website blocked?

    It's hard to tell whether some application makes these attempts "on its own" (BTW: all these names resolve to the same set of addresses) - if you keep getting the messages Sysinternal's TCPView might help to identify the process which tries to connect.

    Christian

    :33413
Children
No Data