Cant Load Housecall.trendmicro.com

Discussion in 'other security issues & news' started by Zolio, Dec 26, 2005.

Thread Status:
Not open for further replies.
  1. Zolio

    Zolio Guest

    I have a trojan or downlaoder that prevents me from loading houseall page at trendmicro. I have been searching feverishly for a fix, removal tool, or instructions to no avail.
    Any ideas, anybody?
     
  2. Tassie_Devils

    Tassie_Devils Global Moderator

    Joined:
    May 8, 2002
    Posts:
    2,514
    Location:
    State Queensland, Australia
    It maybe put a 'host' entry into your hosts file and it's resolving to 127.0.0.1 which is your *own* computer, thereby stopping you from going to that site.

    Check that first.

    close any browsers, hit Ctrl E to bring up your Windows Explorer and if XP:
    Navigate to: C:\WINDOWS\system 32\drivers\etc [etc. is a folder] in there you will see some entries called 'lmhosts.sam' and just 'hosts' with NO extensions.

    Select the 'hosts' ONLY file by right clicking on it. Select OPEN or Open with..... option, and choose 'Notepad'

    The file will open in Notepad.

    Now, look for any entries that has any Anti-virus programs listed and has the very first thing listed in front of them as: 127.0.0.1 trendmicro.com

    Sample of mine, these are to BLOCK bad sites from redirects.
    127.0.0.1 localhost NOTE: THIS entry is NEEDED, DO NOT DELETE IT!!!!!

    Code:
    #start of lines added by WinHelp2002
    # [Misc Add-ons][A - Z]
    127.0.0.1  downloads.aaa1screensavers.com #[Bargin Buddy] 
    127.0.0.1  abcsearch.com
    IF you see any entries belonging to any antivirus companies and ONLY anti-virus companies like:
    Trendmicro-housecall/Norton-symantec/panda/eset nod/ etc. and they have 127.0.0.1 in front of them. REMOVE THEM

    Just simply highlight to select and then hit delete.

    Now just close Notepad via the X top right, it will ask if you want to save changes, click OK/YES

    Do NOT add any extension to the 'host' file itself, just close via the X

    Then try to see if you can go to the site.

    Do not try a reboot before going to site, as the virus/trojan would in all likelihood rewrite those entries back in the 'hosts' file.

    HTH, Cheers, TAS :)
     

    Attached Files:

  3. Vikorr

    Vikorr Registered Member

    Joined:
    May 1, 2005
    Posts:
    662
    Apart from the host file thingy, there are a number of good free programs you could try.

    CWShredder and Aboutbuster to remove CWS trojans

    Ewido (very good removal abilities, good detection rate but not perfect)

    Other free online scans include :
    Kaspersky
    Webroot Spyweeper

    There's more of course, but I can never remember them all
     
Loading...
Thread Status:
Not open for further replies.