Infected Computers - IE tries to open a new page when any link is clicked

I have 2 computers on a network that are experiencing the same problem.
We are on a SBS 2003 network with TrendMicro WorryFree installed. (all updates for Windows and Trend have been installed)

All of a sudden the users are getting "Unauthorized URL Detection" popups from Trend which lists a random URL. This seems to happen when we have IE open and click on any link.

I have turned off System Restore and run MalwareBytes, Spybot, Norton Power Eraser, HiJackThis, stinger, etc.
None of the scans report anything.

During a full Trend scan - it found 3 Virus': TROJ_JAVA.AZ, TROJ_JAVA.BG, TROJ_JAVA.BA - all were cleaned by Trend and have not appeared again but the problem still is happening.

Any other suggestions?

Who is Participating?
Sudeep SharmaConnect With a Mentor Technical DesignerCommented:
To clean and to check if you system is clean do following:

Run malwarebytes in Safe Mode with Networking and update it before running a full system scan:

Then try HitManpro to make sure anything which might be left behind is clean:


If issue is not resolved by these tools try TDSSKiller:

Tutorial on TDSSKiller:

If this does not resolve your issue then try Combofix:

Download Combofix

Tutorial on how to use combofix:

Post logs here for further analysis.

rheideAuthor Commented:
I will work on those suggestions.

One other consistent thing that I noticed -
If I search for something in the IE search bar, it will automatically popup an alert (everytime).
I tried IE with no add-ons and it did the same thing.
(happens whether I have google or bing as default)

Just an FYI.

I'll get working on the other suggestions.
rheideAuthor Commented:
HitManpro did the job that nothing else could do. Thanks for opening my eyes to it.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.