This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Malware removal

I keep getting this blackbox in upper right hand corner of my screen stating:

Sophos Home Website Blocked

Access blocked to high risk website

noblockingweb.net/wpad.dat

how do I permanently get rid of this notice? I am glad Sophos is blocking access to this site but somehow this malware forces Sophos to send this message

thanks to all

Jerry

This thread was automatically locked due to age.

Parents

0 jak over 6 years ago

If I visit that URL in say Chrome then sure enough it is blocked as Mal/HTMLGen-A which is fine. It's odd that you keep getting it. This suggests to me that maybe your browser has been setup to use it to configure your proxy address? Is this correct?

What version of Sophos are you running? Is it the free Sophos Home for example?

The paid for Sophos Central or maybe the on-premise managed version?

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel
0 Gerald Lucas over 6 years ago in reply to jak

Jak - I am using the free home version (used to use Sophos Central) - I am using Firefox browser - my proxy settings are "Use System Proxy Settings" - should I change this?

thanks

Jerry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Gerald Lucas over 6 years ago in reply to jak

Jak - I am using the free home version (used to use Sophos Central) - I am using Firefox browser - my proxy settings are "Use System Proxy Settings" - should I change this?

thanks

Jerry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 jak over 6 years ago in reply to Gerald Lucas

Looking at the steps to use this service:

http://noblockingweb.net/setup.html

Does your system proxy settings have this url set?

Have you ever knowingly used this service or someone else on the computer has?

You could choose "No proxy" in Firefox to see if it goes away.

Otherwise, it might be worth opening the Dev Tools of Firefox (F12) then click on the Network option.

You could even put:

http://noblockingweb.net

...into the filter to reduce the noise.

When it next happens, do you see the request? It should be a 403 if Sophos is blocking it but the request will still be shown.

The Cause and Stack trace offered on the request might be interesting to understand the origin of the request.

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel
0 Gerald Lucas over 6 years ago in reply to jak

Jak - will try the "No Proxy" setting first and see if that works

thanks much

Jerry
Cancel
Vote Up 0 Vote Down

Cancel
0 Gerald Lucas over 6 years ago in reply to jak

Jak - thanks a lot - I just changed proxy setting to No - I have been using my computer for the last few days intermittently and have not seen that pesty NoBlock box!

again - thanks so much for your help and knowledge - this has been bothering me for the last few months

Jerry
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 6 years ago in reply to Gerald Lucas

Out of interest, if you open Internet Explorer - Settings (cog icon top right) - Internet Options - "Connections" tab "LAN Settings", does that URL appear in the "Address" field.

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel
0 Gerald Lucas over 6 years ago in reply to jak

yes - that address did show up in script address for proxy settings - I deleted it - I do not use Explorer very often - presume delete is the right thing to do
Cancel
Vote Up 0 Vote Down

Cancel
0 Gerald Lucas over 6 years ago in reply to jak

Jak - re prior reply - that was with MS Edge - not Explorer as I do not have that loaded up
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 6 years ago in reply to Gerald Lucas

Yes, the default is just to have automatically detect checked.

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel