Slims

Ok,

So I just finished browsing 4chan, and now I am getting popups. I am not new to computers, don't click on popup ads, and I have a current version of Norton Endpoint which says everything is peachy, but I somehow got something.

How can I fix this on the cheap?

I will be happy to provide more information, just don't know what is relevant yet.

Slims
-----Added 14/12/2008 at 02 : 39 : 03-----
www.pantomi.com is the address for the popups. and it then changes to a 'fake' anitvirus/spyware scanner.

The only thing I can think of is that I accidentally permitted someting when I ment to close a screen.

__________________
"Socialism is a philosophy of failure, the creed of ignorance, and the gospel of envy, its inherent virtue is the equal sharing of misery." - Winston Churchill

"All men dream: but not equally. Those who dream by night in the dusty recesses of their minds wake in the day to find that it was vanity: but the dreamers of the day are dangerous men, for they may act out their dream with open eyes, to make it possible." Seven Pillars of Wisdom, T.E. Lawrence

Smuggle

Read:
spywarevoid.com/pantomicom.html
webuser.co.uk/forums/showthreaded.php?Number=415159

Maybe it's time to switch to another antispyware utility.

There are much better alternatives to choose from.

Slims

I downloaded and ran Malwarebytes, and then ran it again in safemode. It seems to have taken care of the problem.

__________________
"Socialism is a philosophy of failure, the creed of ignorance, and the gospel of envy, its inherent virtue is the equal sharing of misery." - Winston Churchill

"All men dream: but not equally. Those who dream by night in the dusty recesses of their minds wake in the day to find that it was vanity: but the dreamers of the day are dangerous men, for they may act out their dream with open eyes, to make it possible." Seven Pillars of Wisdom, T.E. Lawrence

thingstodo

I've been using Spybot for years. It is amazing that I rarely have tracking cookies or other problems. I run it about once a month, keep it updated and imunize a few times a year.

__________________
If you're wringing your hands you can't roll up your shirt sleeves.

Stangers have the best candy.

Deltona Couple

For starters, you dont have to click to install anything. Some of these new virus and spyware programs are automatically installed just by visiting a wesite. They are using the Javascript and Active X Windows components to install themselves in the background without your knowledge.

Spybot has been a Godsend for me over the years, but I found a different one that has been keeping even the ones Spybot has missed at bay. Do a search for "Superspyware" I downloaded it when I was the victim of a popup installer that was a self-replicating virus, which attacked your restore files so you couldnt restore to an earlier time, and randomly created a named file that allowed it to reinstall, even after your typical A.V. programs "cleaned" the original. It was a REALLY nasty bugger. But superspyware found ALL instances, even the random file and cleaned everything up. Hope your solution that you used cleared things up for you. I swear I wish you could prosecute the add companies that pop up their nice little antivirus programs for you to buy, when THEY are the ones who put the virus on your computer in the FIRST place...lol.

__________________
"It is not that I have failed, but that I have found 10,000 ways that it DOESN'T work!" --Thomas Edison

Lasereth

Malwarebytes is an amazing program. It gets rid of a lot of stuff, especially if you do a full scan in safe mode.

__________________
"A Darwinian attacks his theory, seeking to find flaws. An ID believer defends his theory, seeking to conceal flaws." -Roger Ebert

Plan9

I use Firefox and AdBlock Plus. Cool thing about AdBlock Plus is that you can add these bulk lists of nasty URLS... and it blocks them from even loading.

I need to dig up a link for this... it has been really useful for me.

__________________
Whatever you can carry.

"You should not drink... and bake."

BadNick

About a month or so ago I got attacked by one of these Active X/Java trojan things...what a pain in the ass. I forgot what it was called, but when I googled the exact words that were popping up on my taskbar a bunch of info came up about it, including a few solutions to the problem. It kept planting itself on my taskbar and saying I had to update my Windows anti-virus etc., then it started to interfere with all sorts of things. It was the worst computer virus thing I've ever had. And I got this in spite of having Spybot Search & Destroy plus Symantec Norton Anti-virus (imo a piece of crap) running actively. And then they were useless getting rid of it. I finally got PC Tools Spyware Doctor and ran that a couple times, plus ran it in safe mode, and then I finally managed to get rid of it. Only downside is this product cost me a few bucks, it's not free. But I'm happy with it and have it running now, and once in a while it does pop up and ask if a nasty site should be blocked or allowed if I happen to stumble someplace like that.

If anybody organizes a band of armed mercenaries to go after the companies/people who do this kind of thing, count me in.

thingstodo

By the way, make sure you have a good firewall and virus program. There are several. Comcast provides McAfee free with their broadband service.

__________________
If you're wringing your hands you can't roll up your shirt sleeves.

Stangers have the best candy.

Hain

I would recommend using SandboxIE with your browser. The technical is that it creates something similar to a virtual space where the sandboxed programs can only use copies of important system files, so nothing actually is changed on your computer. Think of Sandboxie as a condom, where anything that would normally get on your computer can't, unless you play dumb. Then when you are done, the sandbox is tied up and thrown away. No muss, no fuss.

savmesom11

[QUOTE=Deltona Couple;2575973]"Superspyware" QUOTE]

This just saved my ass big time! Thanks sooo much

__________________
* I do not believe that struggles are a sign of life falling apart, but rather a step of life falling into place. *

Slims

I have also switched to Opera for my web browser. I like it a lot more then IE, and it seems to be less vulnerable to this sort of nonsense.

__________________
"Socialism is a philosophy of failure, the creed of ignorance, and the gospel of envy, its inherent virtue is the equal sharing of misery." - Winston Churchill

"All men dream: but not equally. Those who dream by night in the dusty recesses of their minds wake in the day to find that it was vanity: but the dreamers of the day are dangerous men, for they may act out their dream with open eyes, to make it possible." Seven Pillars of Wisdom, T.E. Lawrence

yournamehere

All the above have provided good answers. For anyone stuck with a trojan that just won't go away, I'd suggest you visit Geeks to Go. Before you do, though, download Hijack This (just Google it - it's free and readily available) and run it; then start a new thread in the appropriate forum along with an explanation of your problem, and post the HJT log file.

I had a Trojan.Vundo and MS Juan Malware.Trace on my computer, and nothing would get rid of them. It was awful - every time I opened my browser, it would open two or three other windows. The first time I ran Malwarebytes, it found 20 infected files. No matter what I did, there were always two infected files. These guys finally fixed it. When you post a thread, one of their experts will work with you personally until the problem is resolved. Now my computer is as clean as it's ever been - and very well protected now (Goodbye, IE; it's Firefox w/ AdBlock from now on)).

Oh - and it's free, although they appreciate donations (who doesn't?).

BTW - I think I got the trojans from an 'imagevenue-type' site with a .cx domain name.
Just for future reference. Stay away from those Christmas Island domains. Should've known better from the goatse days!!!!!

__________________
If you want to avoid 95% of internet spelling errors:
"If your ridiculous pants are too loose, you're definitely going to lose them. Tell your two loser friends over there that they're going to lose theirs, too."
It won't hurt your fashion sense, either.

Jozrael

Question: what's the best way to clean an infected external hard drive. Any difference or no?

Push-Pull

FireFox with AdblockPlus AND NoScript. Won't run any Java script unless you allow it.

__________________
"No laws, no matter how rigidly enforced, can protect a person from their own stupidity." -Me-

"Some people are like Slinkies..... They are not really good for anything, but they still bring a smile to your face when you push them down a flight of stairs." -Unknown-

DAMMIT! -Jack Bauer-

yournamehere

Is this drive strictly for data?

If so, view the files "by type," and delete any files with extensions that aren't your typical data file extention (exe, cab, dll, bat, etc).

If not, then no - no difference.

__________________
If you want to avoid 95% of internet spelling errors:
"If your ridiculous pants are too loose, you're definitely going to lose them. Tell your two loser friends over there that they're going to lose theirs, too."
It won't hurt your fashion sense, either.