Threat Blocked: http://sso.anbtr.com/domain/wpad.work

[dbrisendine]

1)  If you go to Start > Control Panel > Internet Options > Connections > LAN Settings, is there a setting enabled to use a Proxy?  If so, what proxy is it?

2)  Have you tried resetting your Modem/router?  I see you are using that as a DNS server; resetting the router will clear the saved DNS settings which could have the malware redirect in it.

[REDACTED]

I thought I had already posted a reply, I apologize to keep you waiting.

1) There is no proxy enabled
2) We are on a shared modem/router and I am the only one having the issue, my boss seems to think this wouldn't be possible if the issue was the router.

[dbrisendine]

Well, that should eliminate the proxy and / or modem as a source of the issue.


Go to Emsisoft and download the Emsisoft Free Emergency Kit from here.

• Double click on the EmsisoftEmergencyKit.exe file and then click on Extract to unpack the files (the default directory of C:\EEK is fine).
• Go to the new directory and right click on Start Emergency Kit Scanner.exe and choose 'Run as Administrator'.
• Once the scanner loads, click on 1.Update to check for and load the current updates.
• When the updates are finished, click on Malware Scan in the 2. Scan box.
• Please enable the PUP detection option.  (The Kit may ask about this after it is loading updates or right when the scan starts; it will only ask once, so enable it when the Kit asks.)
• If the scan finds anything, it will open a scan finding window.  Please click on View Report; copy this report and paste it here in reply post.
• Please close the Emergency Kit Scanner program now.