Popups

[Matzos]

When I load my website AirRecce (http://www.airrecce.co.uk)
I keep getting 'ilead' popup ad. Has anyone else who has visited my site had it? It seems to be a random popup, sometimes its there and sometimes not :confused: I also have a popup blocker switched on!

And does anyone know how to get rid of it. uzi,

Thanks from a hacked off webmaster

[Bombardier]

I have visted your site afew times in the last week and have not had the popup, perhaps you have a bug in your machine ?. Maybe Droney and his good lady can help ? (Y)

[Matzos]

Thanks mate, solthum

[Drone_pilot]

Just had a visit and no popup,
have you tried the old favourits
IE empty temp, clear internet cashe and such.

[Drone_pilot]

just found this

REMOVAL INSTRUCTIONS.

Print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.

No much in your log to indicate an infection. Fix these items.

Close all Windows and Browsers, run HijackThis and fix

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.ht m
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

Reboot normally to reset the registry.

Download CWShredder.exe CoolWebSearch removal tool from this site.
http://www.intermute.com/

Place the download file in it's own folder. Just install the program. Do not run it just yet.

Make sure all browsers and all Windows Explorer windows are closed.
Run the application and be sure to click on the "Fix" button.
When the scan is completed and all files removed, close it.

If still having the same problem do this:

Please download ewido security suite (http://www.ewido.net/en/download/) it is a trial version of the program.
Install ewido security suite
When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido, there should be an icon on your desktop double-click it.
The program will now go to the main screenYou will need to update ewido to the latest definition files.
On the left hand side of the main screen click update
Then click on Start UpdateThe update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update ewido.
http://www.ewido.net/en/download/updates/ (http://www.ewido.net/en/download/updates/)

Once the updates are installed do the following:Reboot in "Safe Mode".
How to: Visual presentation at Symantec.How to. (http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam)
Click on the ewido scanner
Click on Complete System Scan and the scan will begin.
While the scan is in progress you will be prompted to clean files, click OK
When it asks if you want to clean the first file, put a check in the lower left corner of the box that says "Perform action on all infections" then choose clean and click OK.
Once the scan has completed, there will be a button located on the bottom of the screen named Save report
Click Save report.
Save the report .txt file to your desktop.Now close ewido security suite.

Reboot Normally.

Give it a try.

[Matzos]

Thanks DP
I will give it a go solthum

[Sc0rp10n]

it happens on your site...

i'm very sure you're ISP is involved in this...