Avatar of lianne143
lianne143
Flag for United States of America asked on

when opening companys website Windows Antivirus 2012 has found critical process activity

Hi

We have window 2003R2 and IIS6 installed
When i open my companys website   from home i get a dialog box which says Message from web page.

Windows  Antivirus 2012 has found critical process activity on your PC and will perform fast scan of  system files!

If i close  the window it opens the  below link with a window security alert and scans my PC

http://infectiondatadefender.pl/a9ssf/f6661e708d05be68/js2/1/

I am doing a  virus scan on my companys Internet server. If i find any virus  i wll post.

But some of the users reported that when this dialog  box appeared they said ok and it installed   this software.

Please help how to  remove this virus warning .
Microsoft SharePointWindows Server 2003Microsoft IIS Web Server

Avatar of undefined
Last Comment
Rovastar

8/22/2022 - Mon
SOLUTION
Neil Russell

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
SOLUTION
Neil Russell

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
lianne143

ASKER
Do i need to remove on the server.Please suggest me  a safe method to remove this.
SOLUTION
Neil Russell

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
SOLUTION
Neil Russell

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
lianne143

ASKER
I did a online scan and  the below are the results.

This site is safe.  
AVG say's: Service not available.  
SiteTruth say's: This site is safe.  
Google Safe Browsing say's: This site is safe.  
Threat Name: No Threat FOUND
Threat Definitions: 1270502
Engine Version: 0.97.5
Host IP: X.X.X.X
Link Status: Clean
File Size: 27.71 KB
Time Finished: 5.02 secs
Overall result: This site is secure.
lianne143

ASKER
Please guys help me !!

I need to sort this. Many users needs to access information from the companys  website .

How do i remove this  Windows  Antivirus 2012 from the server. Bit worried if i  find and remove through malware bytes  and if the server stops working.I remember  simmilar program installed  on my friends laptop , when he removed through malware bytes the laptop became completely unstable.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
lianne143

ASKER
Hi Guys

I observed something now ie from my home if i type the school address directly into the web browser it takes into the company wesite without  any virus warning .

But if i google and type  the company wesite and  click the company wesite , that where i get the Windows  Antivirus 2012 alert.
SOLUTION
Justin Smith

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
lianne143

ASKER
I did this romotely connecting to my home computer and testing.
I mean to say ie from my home if i type the company address directly into the web browser it takes into the company website without  any virus warning .

But if i google   the company website and  click the company website , that where i get the Windows  Antivirus 2012 alert. Is there any redirection happening from the google link to http://infectiondatadefender.pl/a9ssf/f6661e708d05be68/js2/1/

But why  this is happening only if i go through google .If i directly type the website link  on the web browser it works fine without any virus popup.


We have Sophos antivirus  installed on the server.
ASKER CERTIFIED SOLUTION
Rovastar

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.