• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Repeated blocked attacks

Hello. I already posted this issue before, but it hasn't been resolved.

Recently NIS has been blocking attacks on a daily basis. Here's the descriptions.

Web Attack: Malicious Exploit Kit Website 4

Web Attack: Suspicious Browser Fingerprinting 3.

What's curious is the blocked attacks come in a specific pattern. They only happen in the morning. They never happen any other time of the day. Secondly, they appear to happen only on my user profile.

Is this the sign of a virus and if so, what should I do?

Replies

Kudos0

Re: Repeated blocked attacks

Hello. I already posted this issue before, but it hasn't been resolved.

Recently NIS has been blocking attacks on a daily basis. Here's the descriptions.

Web Attack: Malicious Exploit Kit Website 4

Web Attack: Suspicious Browser Fingerprinting 3.

What's curious is the blocked attacks come in a specific pattern. They only happen in the morning. They never happen any other time of the day. Secondly, they appear to happen only on my user profile.

Is this the sign of a virus and if so, what should I do?

Kudos0

Re: Repeated blocked attacks

Is this on more than one browser, or on more than one website?  If you use a different user, do you test the same websites with the same browser?

There should be entries in the Intrusion prevention log.  If you click on those entries, it tells you if the attack is in HARDDISKVOLUMExx/Internet Explorer or Firefox etc or a system file such as svchost.

We need to look at those entries. 

Under certain circumstances profanity provides relief denied even to prayer.Mark Twain
Kudos0

Re: Repeated blocked attacks

You mean the blocked attacks? We only use one browser: Internet explorer. They used to happen around same same websites, but now it's appearing to be a little random. I prefer not testing suspicious websites on purpose, but once before there was a blocked attack on my brother's user profile that I later encountered on my profile on the same website.

I found the entries in the Intrusion prevention log. But I don't know what information I need to post. What section in the entry should I look for?

Kudos0

Re: Repeated blocked attacks


caleb89sw wrote:

Secondly, they appear to happen only on my user profile.


Ok. Scratch that. It appears there was a blocked attack on my brother's profile just recently. It was this.

Web Attack: Suspicious Browser Fingerprinting 3

I still don't know exactly what information to post. Can someone tell me? Thanks.
 

This thread is closed from further comment. Please visit the forum to start a new thread.