[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

Infected Computers - IE tries to open a new page when any link is clicked

Posted on 2010-09-23
3
Medium Priority
?
668 Views
Last Modified: 2013-11-08
I have 2 computers on a network that are experiencing the same problem.
We are on a SBS 2003 network with TrendMicro WorryFree installed. (all updates for Windows and Trend have been installed)

All of a sudden the users are getting "Unauthorized URL Detection" popups from Trend which lists a random URL. This seems to happen when we have IE open and click on any link.

I have turned off System Restore and run MalwareBytes, Spybot, Norton Power Eraser, HiJackThis, stinger, etc.
None of the scans report anything.

During a full Trend scan - it found 3 Virus': TROJ_JAVA.AZ, TROJ_JAVA.BG, TROJ_JAVA.BA - all were cleaned by Trend and have not appeared again but the problem still is happening.

Any other suggestions?

0
Comment
Question by:rheide
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 30

Accepted Solution

by:
Sudeep Sharma earned 2000 total points
ID: 33748939
To clean and to check if you system is clean do following:

Run malwarebytes in Safe Mode with Networking and update it before running a full system scan:
http://www.malwarebytes.org/mbam-download.php

Then try HitManpro to make sure anything which might be left behind is clean:
32bit
http://dl.surfright.nl/HitmanPro35.exe
http://download.cnet.com/Hitman-Pro-3/3000-2239_4-10895604.html

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

If issue is not resolved by these tools try TDSSKiller:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Tutorial on TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684

If this does not resolve your issue then try Combofix:

Download Combofix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Tutorial on how to use combofix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post logs here for further analysis.

Sudeep
0
 

Author Comment

by:rheide
ID: 33748966
I will work on those suggestions.

One other consistent thing that I noticed -
If I search for something in the IE search bar, it will automatically popup an alert (everytime).
I tried IE with no add-ons and it did the same thing.
(happens whether I have google or bing as default)

Just an FYI.

I'll get working on the other suggestions.
0
 

Author Closing Comment

by:rheide
ID: 33750757
HitManpro did the job that nothing else could do. Thanks for opening my eyes to it.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For those of you actively in the Malware fightling business, we now have available an amazing new tool in the malware wars (first recommended to me by rpggamergirl (http://www.experts-exchange.com/M_3598771.html), the Zone Advisor for the Virus and …
Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question