Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 8 subscribers
  • Views 206098 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Malware removal

Gerald Lucas

I keep getting this blackbox in upper right hand corner of my screen stating:

 

Sophos Home Website Blocked

Access blocked to high risk website

noblockingweb.net/wpad.dat 

 

how do I permanently get rid of this notice? I am glad Sophos is blocking access to this site but somehow this malware forces Sophos to send this message

thanks to all

Jerry



This thread was automatically locked due to age.
Parents
  • 0

    If I visit that URL in say Chrome then sure enough it is blocked as Mal/HTMLGen-A which is fine.  It's odd that you keep getting it.  This suggests to me that maybe your browser has been setup to use it to configure your proxy address? Is this correct?

    What version of Sophos are you running? Is it the free Sophos Home for example?

    The paid for Sophos Central or maybe the on-premise managed version?

    Regards,

    Jak

  • 0 in reply to jak

    Jak - I am using the free home version (used to use Sophos Central)  - I am using Firefox browser - my proxy settings are "Use System Proxy Settings" - should I change this?

     

    thanks

     

    Jerry

  • 0 in reply to Gerald Lucas

    Looking at the steps to use this service:

    http://noblockingweb.net/setup.html

    Does your system proxy settings have this url set? 

    Have you ever knowingly used this service or someone else on the computer has?

    You could choose "No proxy" in Firefox to see if it goes away.

    Otherwise, it might be worth opening the Dev Tools of Firefox (F12) then click on the Network option.

    You could even put:

    http://noblockingweb.net

    ...into the filter to reduce the noise.

    When it next happens, do you see the request?  It should be a 403 if Sophos is blocking it but the request will still be shown.

    The Cause and Stack trace offered on the request might be interesting to understand the origin of the request.

    Regards,

    Jak

  • 0 in reply to jak

    Jak - will try the "No Proxy" setting first and see if that works

     

    thanks much

     

    Jerry

Reply Children
No Data
Unfiltered HTML