Solved

Infected Computers - IE tries to open a new page when any link is clicked

Posted on 2010-09-23
3
657 Views
Last Modified: 2013-11-08
I have 2 computers on a network that are experiencing the same problem.
We are on a SBS 2003 network with TrendMicro WorryFree installed. (all updates for Windows and Trend have been installed)

All of a sudden the users are getting "Unauthorized URL Detection" popups from Trend which lists a random URL. This seems to happen when we have IE open and click on any link.

I have turned off System Restore and run MalwareBytes, Spybot, Norton Power Eraser, HiJackThis, stinger, etc.
None of the scans report anything.

During a full Trend scan - it found 3 Virus': TROJ_JAVA.AZ, TROJ_JAVA.BG, TROJ_JAVA.BA - all were cleaned by Trend and have not appeared again but the problem still is happening.

Any other suggestions?

0
Comment
Question by:rheide
  • 2
3 Comments
 
LVL 29

Accepted Solution

by:
Sudeep Sharma earned 500 total points
ID: 33748939
To clean and to check if you system is clean do following:

Run malwarebytes in Safe Mode with Networking and update it before running a full system scan:
http://www.malwarebytes.org/mbam-download.php

Then try HitManpro to make sure anything which might be left behind is clean:
32bit
http://dl.surfright.nl/HitmanPro35.exe
http://download.cnet.com/Hitman-Pro-3/3000-2239_4-10895604.html

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

If issue is not resolved by these tools try TDSSKiller:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Tutorial on TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684

If this does not resolve your issue then try Combofix:

Download Combofix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Tutorial on how to use combofix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post logs here for further analysis.

Sudeep
0
 

Author Comment

by:rheide
ID: 33748966
I will work on those suggestions.

One other consistent thing that I noticed -
If I search for something in the IE search bar, it will automatically popup an alert (everytime).
I tried IE with no add-ons and it did the same thing.
(happens whether I have google or bing as default)

Just an FYI.

I'll get working on the other suggestions.
0
 

Author Closing Comment

by:rheide
ID: 33750757
HitManpro did the job that nothing else could do. Thanks for opening my eyes to it.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

HOW TO REMOTELY CLEAN MEROND.O WITH ESET SILENTLY PROBLEM       If you have the fortunate luck to contract the Merond.O virus on your network, it can be quite troublesome to remove as it propagates to network shares on your network. In my case, the …
Use this article to create a batch file to backup a Microsoft SQL Server database to a Windows folder.  The folder can be on the local hard drive or on a network share.  This batch file will query the SQL server to get the current date & time and wi…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now