Trend Micro Internet Security has blocked these websites - pop-up

  • 1
  • Question
  • Updated 3 weeks ago
  • In Progress
Did Trend make a major change to the Mac Security since around May 15, 2018? Since around that time I have been bugged by a constant pop-up message that says "Trend Micro Internet Security has blocked these websites" Lists a long name and every one of them starts with the same 1.2.3.4/cserver...... it even popped up on a page for the Trend Micro community which makes me wonder what might be causing this to repeatedly pop up for many sites. My product is up to date and all scans are clean.
 
Photo of Mustlovedogs

Mustlovedogs

  • 140 Points 100 badge 2x thumb
  • a bit annoyed

Posted 3 weeks ago

  • 1
Photo of TM_Malik

TM_Malik, Employee

  • 7,002 Points 5k badge 2x thumb
Welcome to the Home Users Community, Mustlovedogs!

Sorry if you are receiving this repeated pop up messages from the Trend Micro Antivirus for Mac. Are you using Mac OS High Sierra? It's possible that there's an installed potentially unwanted program on your Mac and may have changed/configured your Host File.

Can we check the Host File on your Mac?
  • Open Terminal
  • Type in sudo nano /etc/hosts and press Return
  • Enter your administrator password and then hit return

When you see a window that has a phrase "Host Database", that's the Host File... please send a screenshot of that window as well.

Go back to Terminal, enter sudo killall -HUP mDNSResponder. This is to flush your Mac's DNS cache (contains records of all the recent visits and attempted visits to websites and other internet domains), same as doing a DNS flush in Windows.

Kindly check you installed apps too by accessing the Applications folder and remove any unnecessary folders.

Thanks!
Photo of Mustlovedogs

Mustlovedogs

  • 140 Points 100 badge 2x thumb
Using El Capitan
Photo of TM_Malik

TM_Malik, Employee

  • 7,002 Points 5k badge 2x thumb
Thank you for the inputs, Mustlovedogs!

Your local host seems to be fine.

Please reset your browsers (Safari /and Google Chrome or Firefox, etc.) and kindly go to this folder ~Library\Caches. You can backup the "Caches" folder on your desktop then delete "Caches" folder from the Library folder. After that, empty your trash and restart your Mac so that a new Caches folder will be created.

Best Regards :)
(Edited)
Photo of Mustlovedogs

Mustlovedogs

  • 140 Points 100 badge 2x thumb
Thanks for the suggestions but I still get the messages on some sites. My guess is there has been an increase in security. On another note, after all these changes I can no longer successfully sign into my Trend Community account from that computer. I had to log on with my phone.
Photo of TM_Malik

TM_Malik, Employee

  • 7,002 Points 5k badge 2x thumb
Thanks for your reply, Mustlovedogs!

Hmmm. I think the issue is just within our Community Site. You may try clearing your browsing history and attempt to login again.

Just to confirm, by the way, you are experiencing this issue whenever you open Safari browser. Correct?

We can try further troubleshooting steps. Open terminal then type these commands dscacheutil -flushcache and sudo killall -HUP mDNSResponder. It's the same as doing DNS flush, we just added another command.

On the Apple menu bar, click Safari and then do the following:
 
1. DELETE SUSPICIOUS EXTENSIONS:
  • Choose Preferences
  • On the Extensions tab, look for any suspicious plug-ins
  • If you find any suspicious extension in the list, click Uninstall to remove it

2. RESET SAFARI:
  • While Safari is selected/open > click on Safari > choose Preferences > go to Privacy tab > Manage Website Data... > Remove all
  • Go to folder ~Library\Safari > Drag all files except “Bookmarks.plist” to Trash
  • Go to folder ~Library\Preferences
                           Locate files and drag them to trash and restart Safari: 
                           “com.apple.Safari.plist” 
                           “com.apple.internetconfigpriv.plist” 
                           “com.apple.internetconfig.plist”

NOTE: If “com.apple.internetconfigpriv.plist” does not exist, ignore it and just trash the other two files.

 I hope this helps but just in case, please know that you can contact our support for realtime assistance.

Thanks! :)
Photo of Mustlovedogs

Mustlovedogs

  • 140 Points 100 badge 2x thumb
There must be something wrong within Community as I cleared the history and still can't login, even though it indicates login successful. Also, my issue is likely due to a change in Trends web filtering security as I just checked my PC running the latest version of Trend and the web filtering log shows the same info (not likely the user of that device downloaded the same junk to cause the same message). Could Trend please work on "muting" for MACs like they have done for PCs? As a side note I am using Chrome and Firefox.
Photo of TM_Phebs

TM_Phebs, Official Rep

  • 1,942 Points 1k badge 2x thumb
Thank you Mustlovedogs, 

We can add that as a feature request for the release of our latest version for Mac. As for your concern, are you still getting the pop ups?

Regards
Photo of Mustlovedogs

Mustlovedogs

  • 140 Points 100 badge 2x thumb
Yes I am but like I said I have another PC in my house used by a different user and if I visit the same pages I can see them on the filter log.
Photo of TM_Phebs

TM_Phebs, Official Rep

  • 1,942 Points 1k badge 2x thumb
Can you provide me a screenshot of the logs for both Trend Micro program? Or you can check in which Category they are being detected, like Security Threat, Parental Controls.


Thanks!
Photo of Mustlovedogs

Mustlovedogs

  • 140 Points 100 badge 2x thumb
Screenshot from Mac at start of my thread. From my PC. Both generated from web filtering.
Photo of TM_Kiko

TM_Kiko, Employee

  • 9,598 Points 5k badge 2x thumb
Thank you for your response.

We will be escalating this case to our level 2 Engineers. I have sent you an email where in I am requiring some details where we can reach you. Please respond to the email so we can setup a call back from our supports.

All the best