1 Reply Latest reply on Jun 8, 2010 4:49 AM by SamSwift

    Please help so I can create a policy to block this type of re director


      I run Mcafee 8.5 / 8.7 and HIP under epolicy orchestrator 4

      I have been getting a lot of calls where users are getting re directed to faulse XP antivirus scans etc


      Be careful from this point, I have reported this site to google etc but its still up currently

      On first browse you will get redirected to a false page, when you try and exit it prompts to run a activex control ( this may be down to my security settings )

      It also trys to download and install Packupdate_Build30_2045.exe

      Clearing your temp internet files and browsing again will trigger it again


      The site it hxxp://www.companycoltd.com/


      I would like to know how I can stop as much as possible, I have blocked the exe with antivirus and im using the protect IE / firefox settings

      We also use websense at work so have blocked the site directly



      Message was edited by: MMixer on 28/04/10 03:40:33 CDT



      Message was edited by: Samantha Price - removing link to potentially infected site on 6/8/10 4:49:45 AM CDT