I need help sorting a problem. When I go online a Rundhll32 pop up window appears with allow message. When I click on websites it takes me to different websites usually advertising something. My scans aren't picking anything up. McAfee think its probably spyware so not sure best way to remove it so any advice would be greatky appreciated
Ok best to follow the below link and try the software mentioned there
If any give you a name post it here.
Malwarebytes but do NOT use the registered version when it suggests you try it
SuperantispywareMessage was edited by: Peacekeeper on 9/08/11 7:26:54 PM
Thanks for advice - ran scans
Getsup found 2 suspicious files in iplayer and itunes doesn't really give any more info or what I should do
Superantispware found some tracking cookies and removed them nothing else
nothing else detected!!!
still getting the pop up window when online
Pop up above
Also I realised I hadnt ran the other fake stinger scan so tried to upload it but it couldnt upload. Then my computer went crazy and opened interent explorer about 16 times, they were all flashing and moving about. I had to shut my computer down to sort it.
thanks for your help
The popup is a IE protected mode warning
Have you run the fake alert stinger yet? The redirects is my worry point. Did you use malwarebytes?
Also do what hemant above suggests
yes sorry I've had some difficulties with this as I'm not sure how to access the logs so my friend was going to help me this weekend.
I brought up task manager and listed all the processes but there was no way of saving it - so I assume it does this automatically?.
I'm at work at the moment so on a different PC, but if you can advise me where to find the logs, I will post it up for you later
Please download Process Explorer from below link
Run the tool on affected system & wait for the Issue to get reoccured & then save the Process Explorer Logs(u'll find the save option on top left of Process Explorer)
Also i'll suggest u to run HiJackthis tool & sent the logs..