This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Website blocked (new undetected malware)

On one PC I am getting constant messages (from the sophos system tray notifier box) that a website is being blocked.  Looking at the console it shows the following websites are being accessed over and over again:

sysmain.cc

store-main.su

e-statistic.cc

e-protections.cc

I assume I have something nasty on the PC and have dealt with it as such.  Any ideas on what is causing it and getting a sample for sophos to examine etc.

:33407


This thread was automatically locked due to age.
Parents
  • The web control events just show the same sites being blocked.  Not take off web control to see if anything else happens.

    These attempts only appear when starting a browser (internet explorer, chome and firefox)

    TCPview shows these connections and then being killed off by sophos.  Doesnt give me any more detail as to where this is coming from.  I have tried process explorer too!

    Have got a machine isolated now and running some other venders software to see if that sees anything

    :33429
Reply
  • The web control events just show the same sites being blocked.  Not take off web control to see if anything else happens.

    These attempts only appear when starting a browser (internet explorer, chome and firefox)

    TCPview shows these connections and then being killed off by sophos.  Doesnt give me any more detail as to where this is coming from.  I have tried process explorer too!

    Have got a machine isolated now and running some other venders software to see if that sees anything

    :33429
Children
No Data