winstonsmith84 2 Posted November 8, 2021 Share Posted November 8, 2021 Eset keeps sending an alert on one machine in our network saying Module HTTP filter - Threat Alert triggered: hxxp://www.cassiopessa.com/assets/scripts/main.js?1460287547 contains JS/Adware.Agent.R application. The computer in question has no extensions installed in Chrome. The person using the computer says they aren't going to this website. Link to comment Share on other sites More sharing options...
itman 1,659 Posted November 8, 2021 Share Posted November 8, 2021 (edited) 16 minutes ago, winstonsmith84 said: The person using the computer says they aren't going to this website. First, the link posted is a web page containing many scripts. Assume that whatever web site this person is frequenting is redirecting to this cassiopessa.com web site page. Edited November 8, 2021 by itman Link to comment Share on other sites More sharing options...
itman 1,659 Posted November 8, 2021 Share Posted November 8, 2021 Here's an article on cassiopessa.com: https://www.pcrisk.com/removal-guides/8962-cassiopesa-com-redirect . Note: I do not recommend downloading anything from the above web site to remove this browser redirect. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,070 Posted November 9, 2021 Administrators Share Posted November 9, 2021 For a start please provide logs collected with ESET Log Collector from the machine in question. Link to comment Share on other sites More sharing options...
Recommended Posts