Safe Browsing detected browser Internet Explorer has been compromised

HI John , 

Could you share the logs in the location 

C:\ProgramData\HitmanPro.Alert\Logs

Thanks and regards

Aditya Patel 

I've got the same message on 14 PCs on my network, after a deployment last night. a few of them have the variant "Safe Browsing detected browser Google Chrome has been compromised"

AS the day has gone on, this is now appearing on almost every PC

HI Will, 

Could you share the logs in the location 

C:\ProgramData\HitmanPro.Alert\Logs

Thanks and regards

Aditya Patel 

Has anyone found a solution for this? we have just installed intercept x and already have got one of these messages.

Evening Carey,

I managed to resolve this. We were getting false positives on some software we had installed on the PCs. If u open up the system settings section and add a global scanning exception and set it for a PUA, then add the actual PUA name that sophos assigns. (E.g. Generic PUA AA) this will skip the app and clear the warnings

Hi Will thanks. but just to be clear I need to set an exception for internet explorer?

Carey

Hi Carey,

if its the application itself that you are wanting to create an exception for then you'll need to create this under the Exploit Mitigation Exclusions under system settings

We have this issue also on a few machines, but I do not see a solution or a cause.  Can you update this thread with what causes this issue on some machines and not others?  Thanks, Rick

Hi Rick in our case it was a couple of IE add-ons. it was a matter of disable them all then re-enable them as needed until we found what triggered the alerts. luckily the add-ons where  insignificant so we left them disabled and no more alerts.

Carey