Every time I try to go to trend micro I am blocked by a virus which redirects me. How does the virus do this?

2 responses so far ↓

• 1 irishman76m // Jul 11, 2008

  Possibly a host file edit or else a browser modification,
  download and run superantispyware
  http://www.superantispyware.com/
  clean what it finds, if this doesn't work then it is probably a host file edit

  find your host file at %SystemRoot%\system32\drivers\etc\
  (copy and paste to location bar in my computer) open the file labeled "hosts"
  should look something like this

  # Copyright (c) 1993-1999 Microsoft Corp.
  #
  # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
  #
  # This file contains the mappings of IP addresses to host names. Each
  # entry should be kept on an individual line. The IP address should
  # be placed in the first column followed by the corresponding host name.
  # The IP address and the host name should be separated by at least one
  # space.
  #
  # Additionally, comments (such as these) may be inserted on individual
  # lines or following the machine name denoted by a '#' symbol.
  #
  # For example:
  #
  # 102.54.94.97 rhino.acme.com # source server
  # 38.25.63.10 x.acme.com # x client host

  127.0.0.1 localhost

  if it has an entry for trend micro's website then you should download a clean hosts file from here http://www.mvps.org/winhelp2002/hosts.htm
  also right click on the new hosts file and in options make it read only to protect from future attacks.

• 2 Mcgoo // Jul 11, 2008

  This could also be a spyware, rather than a virus.

  Download Spybot: Search & Destroy

  http://www.safer-networking.org/en/mirrors/index.html

  Install with all updates.

  Re-boot - hit the F8 key once every second while booting. When the Boot Menu loads, select Safe Mode with Networking.

  Wait for Safe Mode to load. Takes a long time and will look very different than normal windows.

  Open and run the Spybot scanner.

  Fix any problems it finds.

  Open and run your anti-virus program.

  Fix any problems it finds.

  Re-boot into normal windows.

  Open Spybot and run the Immunize program listed on the left side of the menu. It will protect you from about 75,000 known bad programs by preventing them from loading on your machine.

  The problem you are having is because the Malware program that is causing your trouble is loading into live memory, before you AV can load. Then anytime you try to go to Trend Micro, it takes control of the browser. In safe mode, it can not load into memory, so it will not be able to stop you from killing it.

Leave a Comment