Spyware/ Adware Help!
 

Ok,

So I just finished browsing 4chan, and now I am getting popups. I am not new to computers, don't click on popup ads, and I have a current version of Norton Endpoint which says everything is peachy, but I somehow got something.

How can I fix this on the cheap?

I will be happy to provide more information, just don't know what is relevant yet.

Slims
-----Added 14/12/2008 at 02 : 39 : 03-----
www.pantomi.com is the address for the popups. and it then changes to a 'fake' anitvirus/spyware scanner.

The only thing I can think of is that I accidentally permitted someting when I ment to close a screen.

Read:
spywarevoid.com/pantomicom.html
webuser.co.uk/forums/showthreaded.php?Number=415159

Maybe it's time to switch to another antispyware utility. ;)

There are much better alternatives to choose from.

I downloaded and ran Malwarebytes, and then ran it again in safemode. It seems to have taken care of the problem.

I've been using Spybot for years. It is amazing that I rarely have tracking cookies or other problems. I run it about once a month, keep it updated and imunize a few times a year.

For starters, you dont have to click to install anything. Some of these new virus and spyware programs are automatically installed just by visiting a wesite. They are using the Javascript and Active X Windows components to install themselves in the background without your knowledge.

Spybot has been a Godsend for me over the years, but I found a different one that has been keeping even the ones Spybot has missed at bay. Do a search for "Superspyware" I downloaded it when I was the victim of a popup installer that was a self-replicating virus, which attacked your restore files so you couldnt restore to an earlier time, and randomly created a named file that allowed it to reinstall, even after your typical A.V. programs "cleaned" the original. It was a REALLY nasty bugger. But superspyware found ALL instances, even the random file and cleaned everything up. Hope your solution that you used cleared things up for you. I swear I wish you could prosecute the add companies that pop up their nice little antivirus programs for you to buy, when THEY are the ones who put the virus on your computer in the FIRST place...lol.

Malwarebytes is an amazing program. It gets rid of a lot of stuff, especially if you do a full scan in safe mode.

I use Firefox and AdBlock Plus. Cool thing about AdBlock Plus is that you can add these bulk lists of nasty URLS... and it blocks them from even loading.

I need to dig up a link for this... it has been really useful for me.

About a month or so ago I got attacked by one of these Active X/Java trojan things...what a pain in the ass. I forgot what it was called, but when I googled the exact words that were popping up on my taskbar a bunch of info came up about it, including a few solutions to the problem. It kept planting itself on my taskbar and saying I had to update my Windows anti-virus etc., then it started to interfere with all sorts of things. It was the worst computer virus thing I've ever had. And I got this in spite of having Spybot Search & Destroy plus Symantec Norton Anti-virus (imo a piece of crap) running actively. And then they were useless getting rid of it. I finally got PC Tools Spyware Doctor and ran that a couple times, plus ran it in safe mode, and then I finally managed to get rid of it. Only downside is this product cost me a few bucks, it's not free. But I'm happy with it and have it running now, and once in a while it does pop up and ask if a nasty site should be blocked or allowed if I happen to stumble someplace like that.

If anybody organizes a band of armed mercenaries to go after the companies/people who do this kind of thing, count me in.

By the way, make sure you have a good firewall and virus program. There are several. Comcast provides McAfee free with their broadband service.

I would recommend using SandboxIE with your browser. The technical is that it creates something similar to a virtual space where the sandboxed programs can only use copies of important system files, so nothing actually is changed on your computer. Think of Sandboxie as a condom, where anything that would normally get on your computer can't, unless you play dumb. Then when you are done, the sandbox is tied up and thrown away. No muss, no fuss.

[QUOTE=Deltona Couple;2575973]"Superspyware" QUOTE]

This just saved my ass big time! Thanks sooo much :thumbsup:

I have also switched to Opera for my web browser. I like it a lot more then IE, and it seems to be less vulnerable to this sort of nonsense.

All the above have provided good answers. For anyone stuck with a trojan that just won't go away, I'd suggest you visit Geeks to Go. Before you do, though, download Hijack This (just Google it - it's free and readily available) and run it; then start a new thread in the appropriate forum along with an explanation of your problem, and post the HJT log file.

I had a Trojan.Vundo and MS Juan Malware.Trace on my computer, and nothing would get rid of them. It was awful - every time I opened my browser, it would open two or three other windows. The first time I ran Malwarebytes, it found 20 infected files. No matter what I did, there were always two infected files. These guys finally fixed it. When you post a thread, one of their experts will work with you personally until the problem is resolved. Now my computer is as clean as it's ever been - and very well protected now (Goodbye, IE; it's Firefox w/ AdBlock from now on)).

Oh - and it's free, although they appreciate donations (who doesn't?).

BTW - I think I got the trojans from an 'imagevenue-type' site with a .cx domain name.
Just for future reference. Stay away from those Christmas Island domains. Should've known better from the goatse days!!!!!

Question: what's the best way to clean an infected external hard drive. Any difference or no?

FireFox with AdblockPlus AND NoScript. Won't run any Java script unless you allow it.

Is this drive strictly for data?

If so, view the files "by type," and delete any files with extensions that aren't your typical data file extention (exe, cab, dll, bat, etc).

If not, then no - no difference.