1 Reply Latest reply on Jun 8, 2010 4:49 AM by SamSwift

    Please help so I can create a policy to block this type of re director

    MMixer

      I run Mcafee 8.5 / 8.7 and HIP under epolicy orchestrator 4

      I have been getting a lot of calls where users are getting re directed to faulse XP antivirus scans etc

       

      Be careful from this point, I have reported this site to google etc but its still up currently

      On first browse you will get redirected to a false page, when you try and exit it prompts to run a activex control ( this may be down to my security settings )

      It also trys to download and install Packupdate_Build30_2045.exe

      Clearing your temp internet files and browsing again will trigger it again

       

      The site it hxxp://www.companycoltd.com/

       

      I would like to know how I can stop as much as possible, I have blocked the exe with antivirus and im using the protect IE / firefox settings

      We also use websense at work so have blocked the site directly

       

       

      Message was edited by: MMixer on 28/04/10 03:40:33 CDT

       

       

      Message was edited by: Samantha Price - removing link to potentially infected site on 6/8/10 4:49:45 AM CDT