Jump to content
Sign in to follow this  
siddhartha@tsplindia.net

AD Server Genrating traffic to Suspicious URL

Recommended Posts

Hi

I am facing issue with Kaspersky Security for Server as my server is trying to open suspicious url ngme.yourwebfind.com which is blocked at my firewall.

I am unable to find the exe which is generating the traffic

Attached GSI and Screen Shots

One Drive link as the limit of 4 MB

https://1drv.ms/u/s!Ah8aJNv9Dq-_gYojPzO4WincK-TvMg

 

attack.thumb.png.52099c5b47ac6ad592c45c1da83f76f7.png

 

 

 

GSI6_SG-HO-DC01_administrator_07_09_2018_18_08_13.zip

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.