Website blocked from PUP in C:\Windows\SysWOW64\rundll.exe

[nickybee]

I tried searching first and I came across a forum post that was closed due to inactivity.

This is a fairly new computer but I appear to have gotten some nasty that Malwarebytes "notices" but doesn't seem to find.

All protection are on (Web Protection, Exploit Protection, Malware Protection and Ransomware protection)

Under the SCAN tab - Threat Scan is selected.

Under the Settings tab - (Protection sub-tab) - Scan for rootkits and Scan within archives are both ON.

Nothing is found on the scans.

Yet every 4-5 hours I see a green pop-up notifying me that a website is blocked from a PUP in C:\windows\sysWOW64\rundll.exe

The website it's trying to open is technologietazo.com (IP address 217.182.14.103)

I can force the same popup by manually opening the website - however what concerns me is what evil beast is hiding inside rundll.exe and how to excise it

Anyone got any suggestions?

Thanks

Nick

[kevinf80]

Hello nickybee and welcome to Malwarebytes, Run the following: Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status...   Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans"   Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Thank you, Kevin

[kevinf80]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks