Help! I'm infected. (Now all cured) Thanx all!

Boomyal

Supreme Mariner
Joined
Aug 16, 2003
Messages
12,072
I keep getting pop-ups from (www.sandbox.com) It repeatedly opens as a blank window which often times will not close immediately. Then it is followed by a bunch of of other pop-up ads.<br /><br />I have Panicware Pop-up stopper and that does not stop it. I also have Lavaware-Adaware to clean out spyware. I use it when opening and closing the IE browser.<br /><br />A few days ago I had a "search bar" install itself above my my task bar and had to go thru h*ll trying to uninstall it.<br /><br />Also my internet page response time has slowed way down.<br /><br />Any one have any Ideas?
 

Stratosfied

Ensign
Joined
Mar 14, 2003
Messages
915
Re: Help! I'm infected. (Now all cured) Thanx all!

Hey Boom, what kind of OS are you running?
 

Boomyal

Supreme Mariner
Joined
Aug 16, 2003
Messages
12,072
Re: Help! I'm infected. (Now all cured) Thanx all!

Stratosfied, running XP Pro
 

mellowyellow

Vice Admiral
Joined
Jun 8, 2002
Messages
5,327
Re: Help! I'm infected. (Now all cured) Thanx all!

check start menu programs. it may have installed itself there.
 

roscoe

Supreme Mariner
Joined
Oct 30, 2002
Messages
21,745
Re: Help! I'm infected. (Now all cured) Thanx all!

Update your AdAware and PopupStopper.<br /><br />There is a link in your Popup Stopper that allows you to report the unstoppable popup to Panicware. Send it to them so they can work on a fix.<br /><br />Go to "Add/Delete Software", and look for software that should not be there, delete them.<br />(such as ncase, ist toolbar, etcetera.<br /><br />Delete all cookies and TIFiles.<br /><br />Then run Ad-Aware and Popup Stopper again. Reboot, then run them again.<br /><br />I think I got mine under control now. It appears I got hit with something (?) that installed a DOS program a couple days ago. Wreaking havoc with everything. Still not sure if I got it all.
 

Stratosfied

Ensign
Joined
Mar 14, 2003
Messages
915
Re: Help! I'm infected. (Now all cured) Thanx all!

Ditto the above also you may want to run the restore program to an earlier date. This would also fix the problem. I HATE those Search Bars!! :mad:
 

Xcusme

Commander
Joined
Apr 21, 2003
Messages
2,888
Re: Help! I'm infected. (Now all cured) Thanx all!

Sounds like your browser got hijacked...<br /><br />Go here: HijackThis
 

Boomyal

Supreme Mariner
Joined
Aug 16, 2003
Messages
12,072
Re: Help! I'm infected. (Now all cured) Thanx all!

Sratosfied, how do I run the restore program. Do I specify a date to restore from?<br /><br />Roscoe, what are TIFiles?<br /><br />MY, I have nothing showing in 'startup' in "programs"<br /><br />xcusme, I'll download the program but it looks like it may give a lot of info that I may not be able to determine it's validity.<br /><br />I have deleted tons of stuff in add/remove. One of the offenders seems to be ezula.<br /><br />Does anyone have a link for an online virus scan?
 

Xcusme

Commander
Joined
Apr 21, 2003
Messages
2,888
Re: Help! I'm infected. (Now all cured) Thanx all!

Online Virus scanner...free:<br /> TrendMicro <br /><br />Online trojan Scanner....free<br /> GFI Online Trojan Scanner <br />You should see a popup activex control asking permission to do the scan.
 

Boomyal

Supreme Mariner
Joined
Aug 16, 2003
Messages
12,072
Re: Help! I'm infected. (Now all cured) Thanx all!

Thanks Xcuseme, I found one trojan with GFI and 22 infected files with Trendmicro.<br /><br />I guess some protection would be a good Idea. I don't open suspicious emails so I guess that's not how I got these problems. I use broadband internet, so I'm technically always online. <br /><br />Is there any preferred products to keep viruses, trojans, etc etc from getting in in the first place. Do you need multiple products or can one do it all?<br /><br />ps. my browser is even responding more rapidly now.! :)
 

Xcusme

Commander
Joined
Apr 21, 2003
Messages
2,888
Re: Help! I'm infected. (Now all cured) Thanx all!

It's pretty much a multiple program solution for a blended threat. Are you on cable internet or PPPOE?? either way, a router/firewall is a must have. Run a soft firewall too. The router helps you to keep a low profile on the Web. The router watches what comes in, the soft firewall watches inbounds AND watches what tries to get out of your machine.<br /><br />Programs like Spybot Search and Destroy (free) can scan for a bunch of bad stuff and also can inocculate your browser against hijacks.<br /><br />Goto Blackviper.com, do some reading. Turn off any and all unused processes you don't use per the suggested settings.<br />Goto GRC.com and do a Shields Up scan to see what ports you have open and do some reading.<br /><br />This is only the tip on the iceberg on the subject of securing your machine.
 

WoodRust

Seaman
Joined
Jan 12, 2004
Messages
63
Re: Help! I'm infected. (Now all cured) Thanx all!

Buy a Mac and end your problems once & for all.
 

roscoe

Supreme Mariner
Joined
Oct 30, 2002
Messages
21,745
Re: Help! I'm infected. (Now all cured) Thanx all!

TIF files, Temporary Internet Files.<br /><br />WoodRust, be quiet please, I hear that all the time from my nephews. One is working on his Masters in Human Computer Interface Designs, and working at GM. The other is in charge of an online marketing company's marketing design department, he is responsible for some 3400+ webpages. I asked them about my recent pc problems and all one of them could do was laugh and tell me about his new G4 Titanium? Powerbook. The other said:<br />
Have I sent you a picture of my new 55 lb. Dual 1.8 G5 wonderbox? No? Oh, well I wouldn’t want to be accused of tooting Macs too much.<br /><br />Next... Apple Cinema Display! yummy.
I'm the guy that bought them their first computer, taught one of them to read, changed their shotty diapers, showered them with gifts for the last 25 years, and this is all the help they can offer me? :mad:
 

Bob in Calif.

Senior Chief Petty Officer
Joined
Nov 4, 2002
Messages
653
Re: Help! I'm infected. (Now all cured) Thanx all!

Hey Boom.......<br /><br />Go to Roscoe's posting...PC Bug???.... and read my response. It might work for you.<br /><br /> ...Bob in Calif...
 

18rabbit

Captain
Joined
Nov 14, 2003
Messages
3,202
Re: Help! I'm infected. (Now all cured) Thanx all!

You can kill those pesky pop up windows that won’t close with [ctrl][alt][del] and specifying that window as the process to kill.
 

roscoe

Supreme Mariner
Joined
Oct 30, 2002
Messages
21,745
Re: Help! I'm infected. (Now all cured) Thanx all!

Control w<br /> or <br />alt f4<br /><br />will close the top window on your desktop.
 

Boomyal

Supreme Mariner
Joined
Aug 16, 2003
Messages
12,072
Re: Help! I'm infected. (Now all cured) Thanx all!

Thanks all, everything seems to be under control now. I've gotten all the crap cleaned out and I keep running various programs to keep it that way.<br /><br />I use:<br />Panicware Popup Stopper<br />TrendMicro online virus scan(keeps finding Sandbox.exe)<br />GFI online trojan scan<br />Lavasoft Adaware<br /><br />My system is now running up to speed when I page thru the urls
 
Top