Solved

Infected Computers - IE tries to open a new page when any link is clicked

Posted on 2010-09-23
3
659 Views
Last Modified: 2013-11-08
I have 2 computers on a network that are experiencing the same problem.
We are on a SBS 2003 network with TrendMicro WorryFree installed. (all updates for Windows and Trend have been installed)

All of a sudden the users are getting "Unauthorized URL Detection" popups from Trend which lists a random URL. This seems to happen when we have IE open and click on any link.

I have turned off System Restore and run MalwareBytes, Spybot, Norton Power Eraser, HiJackThis, stinger, etc.
None of the scans report anything.

During a full Trend scan - it found 3 Virus': TROJ_JAVA.AZ, TROJ_JAVA.BG, TROJ_JAVA.BA - all were cleaned by Trend and have not appeared again but the problem still is happening.

Any other suggestions?

0
Comment
Question by:rheide
  • 2
3 Comments
 
LVL 29

Accepted Solution

by:
Sudeep Sharma earned 500 total points
ID: 33748939
To clean and to check if you system is clean do following:

Run malwarebytes in Safe Mode with Networking and update it before running a full system scan:
http://www.malwarebytes.org/mbam-download.php

Then try HitManpro to make sure anything which might be left behind is clean:
32bit
http://dl.surfright.nl/HitmanPro35.exe
http://download.cnet.com/Hitman-Pro-3/3000-2239_4-10895604.html

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

If issue is not resolved by these tools try TDSSKiller:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Tutorial on TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684

If this does not resolve your issue then try Combofix:

Download Combofix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Tutorial on how to use combofix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post logs here for further analysis.

Sudeep
0
 

Author Comment

by:rheide
ID: 33748966
I will work on those suggestions.

One other consistent thing that I noticed -
If I search for something in the IE search bar, it will automatically popup an alert (everytime).
I tried IE with no add-ons and it did the same thing.
(happens whether I have google or bing as default)

Just an FYI.

I'll get working on the other suggestions.
0
 

Author Closing Comment

by:rheide
ID: 33750757
HitManpro did the job that nothing else could do. Thanks for opening my eyes to it.
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PREFACE The purpose of this guide is to provide information to successfully install the MS SQL client tools for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technology…
Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now