Hello.
This past Monday, I logged on to WileyPLUS to do an online assignment for an
accounting class. The weird thing is, I got a pop up. I've been on that site
for a whole semester and I've never got a pop up until yesterday. And it's
wasn't just one time. When I submited my assignment, another pop up appeared.
I just ignored the issue, but today, when I clicked on a link to upgrade
some of my Microsoft Office components, i.e. powerpoint, excel, I got a pop
up. (It was a Microsoft site.)
Also, on google, after I clicked on the first link(site) the search brought
up, a pop up appeared. (I was just on that same site yesterday using a
school's computer and there were no pop ups.)
I just got another pop up when I refreshed this page.
I'm not an expert, but I think something is wrong with my computer. Is it
being attacked by a virus? I would appreciate it if someone would tell me
what is up and how to handle it.
(My pop up blocker is on. Always has been.)
Traci
The Max - 10 Dec 2008 08:11 GMT
>Hello.
>
[quoted text clipped - 20 lines]
>
>Traci
Same popup every time or different? What are the popups?
You might run a couple of malware scanners like Malwarebytes and
SUPERantispyware to be on the safe side.
--
Max
icart89 - 10 Dec 2008 08:25 GMT
Hi Max, it appears to be the same pop up everytime.
> >Hello.
> >
[quoted text clipped - 28 lines]
> --
> Max
icart89 - 10 Dec 2008 08:35 GMT
(I can't seem to edit my last post.)
I've managed to read in the address bar, it says: pantomi.com (with a bunch
of numbers and symbols after it. Then it changes to: shop.forless.com/(some
letters and numbers after that as well)
It's not the exact same ads but it's always asking me to purchase microsoft
products.
> >Hello.
> >
[quoted text clipped - 28 lines]
> --
> Max
Randem - 10 Dec 2008 08:13 GMT
You can try this to see if it helps http://www.randem.com/virusproblems.html

Signature
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
http://www.rndem.com/installerproblems.html
http://www.randem.com/vistainstalls.html
http://www.financialtrainingservices.org
> Hello.
>
[quoted text clipped - 25 lines]
>
> Traci
Mick Murphy - 10 Dec 2008 08:15 GMT
Use the 2 Programs below to scan your System, and look for Spyware/Malware.
All info below.
http://www.spybot.info/en/index.html
Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.
http://www.malwarebytes.org/mbam.php
Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com
Download, install, and update.
Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.

Signature
Mad Mike
> Hello.
>
[quoted text clipped - 20 lines]
>
> Traci
nass - 10 Dec 2008 10:48 GMT
> Hello.
>
[quoted text clipped - 20 lines]
>
> Traci
Run a thorough scan by doing the following steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
Download and Update both SuperAntispyware and Malwarebytes then run a
complete scan - Free
http://www.superantispyware.com/superantispywarefreevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html
If you wish to send me your Hijackthis log I will be happy to help you
further or send to one of many forums on the internet!
Download Hijackthis and send me the log.
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
my address is : to_you_ross(at remove this and repalce with the
obvious)yahoo.co.uk ( _ is underscore)
Run disk clean up on your Drive.
You can download this tool o run clean up:
http://www.ccleaner.com/download/builds/downloading-slim
HTH,
nass
---
http://www.nasstec.co.uk
icart89 - 11 Dec 2008 11:06 GMT
> > Hello.
> >
[quoted text clipped - 68 lines]
> ---
> http://www.nasstec.co.uk
Hi nass,
Is it okay if I only downloaded from the first 2 links you provided? because
that's what I did.
I downloaded and updated SuperAntispyware and Malwarebytes. Malwarebytes
updated fine, but SuperAntispyware gave me 3 alerts on the top left corner of
my screen that I couldn't 'x' out. One alert told me that it blocked a
potentially harmful... "(something, I forgot)", and I think another alert
asked if it could check for updates. It eventually froze my computer.
I shut my computer down since there was no other way, and turned it back on.
Then I was able to update SuperAntispyware.
I couldn't follow your directions exactly, because one add-on would not stay
disabled, in fact, it is enabled right now. It's called: lakutufo.dll and the
type is 'Browser Helper Object' and file is 'lakutufo.dll'. I think it's
what's causing the pop ups but I'm no expert.
I've just scanned with SuperAntispyware. It detected some things and
rebooted my computer. So far I haven't ran into pop ups.
Is your email: to_you_ross(@)yahoo.com? (without parentheses?) I plan to
send my log.