Malware removal

If I visit that URL in say Chrome then sure enough it is blocked as Mal/HTMLGen-A which is fine.  It's odd that you keep getting it.  This suggests to me that maybe your browser has been setup to use it to configure your proxy address? Is this correct?

What version of Sophos are you running? Is it the free Sophos Home for example?

The paid for Sophos Central or maybe the on-premise managed version?

Regards,

Jak

If I visit that URL in say Chrome then sure enough it is blocked as Mal/HTMLGen-A which is fine.  It's odd that you keep getting it.  This suggests to me that maybe your browser has been setup to use it to configure your proxy address? Is this correct?

What version of Sophos are you running? Is it the free Sophos Home for example?

The paid for Sophos Central or maybe the on-premise managed version?

Regards,

Jak

Jak - I am using the free home version (used to use Sophos Central)  - I am using Firefox browser - my proxy settings are "Use System Proxy Settings" - should I change this?

thanks

Jerry

Looking at the steps to use this service:

http://noblockingweb.net/setup.html

Does your system proxy settings have this url set? 

Have you ever knowingly used this service or someone else on the computer has?

You could choose "No proxy" in Firefox to see if it goes away.

Otherwise, it might be worth opening the Dev Tools of Firefox (F12) then click on the Network option.

You could even put:

http://noblockingweb.net

...into the filter to reduce the noise.

When it next happens, do you see the request?  It should be a 403 if Sophos is blocking it but the request will still be shown.

The Cause and Stack trace offered on the request might be interesting to understand the origin of the request.

Regards,

Jak

Jak - will try the "No Proxy" setting first and see if that works

thanks much

Jerry

Jak - thanks a lot - I just changed proxy setting to No - I have been using my computer for the last few days intermittently and have not seen that pesty NoBlock box!

again - thanks so much for your help and knowledge - this has been bothering me for the last few months

Jerry

Out of interest, if you open Internet Explorer - Settings (cog icon top right) - Internet Options - "Connections" tab "LAN Settings", does that URL appear in the "Address" field.

Regards,

Jak

yes - that address did show up in script address for proxy settings - I deleted it - I do not use Explorer very often - presume delete is the right thing to do

Jak - re prior reply - that was with MS Edge - not Explorer as I do not have that loaded up

Yes, the default is just to have automatically detect checked.

Regards,

Jak