Member Avatar for NiTeHaWk4787

For the past 2 or 3 months on my friends computer, about every hour he gets a small pop up box saying "No modF" and when you click ok, it changes to saying "funk" ...lol when you click ok again it goes away for a while. The label for the pop up box is "actulice". Any ideas what it is? I'll tell him to run spyware S&D now.

  • 2 Contributors
  • 2 Replies
  • 128 Views
  • 13 Hours Discussion Span
  • Latest Post Latest Post by DaveSW

Dani AI

Generated

A small, periodic dialog with a garbled title like the one reported by most often means a background program or scheduled task is launching and displaying a window. That can be either an unwanted ad/spyware component or simply a poorly written resident utility. The goal is to identify the exact executable that creates the window before removing anything.

Building on ’s suggestion to remove suspicious autostart items and scan for spyware, the following targeted diagnostic path is recommended:

  • Use Autoruns (Sysinternals) to list every auto-start location and scheduled task. Look for entries with no publisher, odd file paths, or recently created items.
  • Run Process Explorer (Sysinternals) while the popup appears and use the window/target finder to map the popup directly to its process. From the process Properties, record the full image path and publisher.
  • Submit the executable to VirusTotal for a multi-engine check before deletion.

If the file is confirmed unwanted, disable the auto-start entry first (uncheck in Autoruns), then remove or quarantine the file from a minimal environment (boot media or an isolated mode). Follow up with a full scan by a modern antimalware tool (for example, Malwarebytes) and a second-opinion scan. Always create a system restore point or export affected registry keys before manual edits, and do not delete files until the image path is confirmed.

Notes and troubleshooting tips: scheduled tasks and services can also trigger periodic dialogs, so include those in the Autoruns view. If the popup disappears too quickly to catch, set Process Explorer to highlight new processes or capture a short Process Monitor trace filtered for process creation. Recording the executable name, full file path, and any Autoruns entries will make further diagnosis much faster if additional help is needed.

Recommended Answers

All 2 Replies

Member Avatar for DaveSW

Basically you need to go start -> run, type msconfig, and uncheck from the startup tab pg4ds32m if you can find it, but also pup.exe, over.exe etc if present.
Check out:
http://www.computing.net/security/wwwboard/forum/11720.html

I prefer to do this from safe mode but it usually works from normal.

Member Avatar for DaveSW

You could also try lavasoft adaware -

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.