Windows Forum

Ask something
Discussion Locked

Resiliant Popup

0 helpful
4 replies

by keys95

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,

I know popups are common and should be solved easily but I got one that I just cant get rid of. There are no obvious tasks, tried running adaware, spybot, pop up washer and cwshredder with no luck.

Everytime my user closes IE he gets a popup with this URL: http:\\www.pshnw6510990nmo-34nue7700.net/go.php?l=0019

Anyone have any ideas?

Thanks,

N

4 replies

by rcom

This comes from a previously patched exploit in Windows IE and or Media PLayer. Go to Microsoft and update your system. The file Adodb stream object is what is exploited so this can be done.

http://support.microsoft.com/default.aspx?kbid=870669

There are a couple of viruses that use this exploit. So make sure you hav erecent dat files. Disable system restore. Boot into sfafe mode and do a full system scan.

First perm-block this IP address 64.68.92.149 at least the page can't load.

This discussion is closed to new replies.