Not what you are looking for? Ask the experts!
Web Attack NIS Alerts
Hey guys first time poster here
Just wondering if anyone can help with some semi recent NIS alerts ive been getting.
Occasionally maybe twice or 3 times a week ill get an NIS alert saying
Web Attack: Fake can web page 39 BLOCKED
Is there anyway i can stop this? Do i have malware on my pc?
Any help would be much appreciated
ill post the log if that helps
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
28/01/2016 2:05:38 PM,High,An intrusion attempt by MACCASPC was blocked.,Blocked,No Action Required,Web Attack: Fake Scan Webpage 39,No Action Required,No Action Required,"MACCASPC ",www . offersfortheday . com /masdterdoesd/11545amsndfaster/gferoopgad.html?cid=wJ5TNM75F5139J9Q0LOK24DG,"www. offersfortheday . com (220.127.116.11, 80)",MACCASPC ,"TCP, PCP"
Network traffic from <b>www . offersfortheday . com/masdterdoesd/11545amsndfaster/gferoopgad.html?cid=wJ5TNM75F5139J9Q0LOK24DG</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.