Infected Computers - IE tries to open a new page when any link is clicked

I have 2 computers on a network that are experiencing the same problem.
We are on a SBS 2003 network with TrendMicro WorryFree installed. (all updates for Windows and Trend have been installed)

All of a sudden the users are getting "Unauthorized URL Detection" popups from Trend which lists a random URL. This seems to happen when we have IE open and click on any link.

I have turned off System Restore and run MalwareBytes, Spybot, Norton Power Eraser, HiJackThis, stinger, etc.
None of the scans report anything.

During a full Trend scan - it found 3 Virus': TROJ_JAVA.AZ, TROJ_JAVA.BG, TROJ_JAVA.BA - all were cleaned by Trend and have not appeared again but the problem still is happening.

Any other suggestions?

rheideAsked:
Who is Participating?
 
Sudeep SharmaConnect With a Mentor Technical DesignerCommented:
To clean and to check if you system is clean do following:

Run malwarebytes in Safe Mode with Networking and update it before running a full system scan:
http://www.malwarebytes.org/mbam-download.php

Then try HitManpro to make sure anything which might be left behind is clean:
32bit
http://dl.surfright.nl/HitmanPro35.exe
http://download.cnet.com/Hitman-Pro-3/3000-2239_4-10895604.html

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

If issue is not resolved by these tools try TDSSKiller:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Tutorial on TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684

If this does not resolve your issue then try Combofix:

Download Combofix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Tutorial on how to use combofix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post logs here for further analysis.

Sudeep
0
 
rheideAuthor Commented:
I will work on those suggestions.

One other consistent thing that I noticed -
If I search for something in the IE search bar, it will automatically popup an alert (everytime).
I tried IE with no add-ons and it did the same thing.
(happens whether I have google or bing as default)

Just an FYI.

I'll get working on the other suggestions.
0
 
rheideAuthor Commented:
HitManpro did the job that nothing else could do. Thanks for opening my eyes to it.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.