WARNING- Uninstall Pando Media Booster - NOW!
Anyone who still has Pando Media Booster (formerly used to download Maplestory) installed on their computers should UNINSTALL it [b]IMMEDIATELY[/b].
Hackers have hijacked the update function of Pando and are using it to trick people into downloading an "update" which is actually a browser hijack ("virus" ).
[b]IF YOU GET A POPUP THAT SAYS YOU NEED TO UPDATE [i]PANDO MEDIA BOOSTER[/i] DO NOT CLICK ON IT! [/b]
Pando Media Booster is no longer being used by Nexon to distribute Maplestory, so it's completely useless anyway, and is just taking up resources from your computer.
[b]To protect yourself from this virus attack, and to help clean up your computer, UNINSTALL Pando from your computer NOW.[/b]
To do that, open the Windows Control Panel and click on "Add or Remove Programs", then find [i]Pando Media Booster[/i] on the list and click on [b]Uninstall[/b]
If you already did accept the "update" from the Pando popup, this site gives instructions on how to remove the browser hijack virus:
http://www.bleepingcomputer.com/virus-removal/remove-sweet-page.com-browser-hijacker
60 Comments • Newest first
[quote=isiah13]i wonder why type of compensation nexon is going to give us for this plunder, i just have the feeling its going to be very good.[/quote]
Nexon hasn't acknowledged there's anything going on with any of this, in fact they're probably completely unaware of it since they don't use Pando any more.
It would be nice if they'd post something warning people to uninstall Pando if it's still on anyone's computers, but I don't expect that to happen any time soon.
i wonder why type of compensation nexon is going to give us for this plunder, i just have the feeling its going to be very good.
#prots Scrolls
[quote=infinteZero]@BobR: Trend Micro page rating said its a (49) dangerous page and that's pretty high up their
so their has to be some virus/ something on the page or it wouldn't of been blocked[/quote]
I found instructions for removing the "sweet-page" hijack on BleepingComputer so I replaced the link, just in case.
Thanks for spotting that..!
@BobR: Trend Micro page rating said its a (49) dangerous page and that's pretty high up their
so their has to be some virus/ something on the page or it wouldn't of been blocked
[quote=infinteZero]your link is a reported dangerous page[/quote]
Reported by what..?
It's WOT rating is "Unknown" because no one has rated this specific page.
There are other sites that give instructions for removing this particular browser hijack, this was just the first one I found.
@GunPowder Yes, it'll be pretty obvious if you were infected. Your browser would be hijacked to a different home page and search engine.
As long as it doesn't act weird, you're OK.
@waterishealthy This virus has nothing to do with Maplestory so it won't affect your game account.
It's a "browser hijack" that takes over how your browser works and sends you to a page the hackers specify.
@DogPukeYellow That's a great idea... well done..!
@sano4444 Check in "All Programs" and see if there's a Pando Media Booster entry there with an "Uninstall" icon. If there is, try using that.
You might have to right-click and use "Run as Administrator" to get it to work.
Also, you might have to use something like this to force the uninstall if nothing else works:
http://www.revouninstaller.com/revo_uninstaller_free_download.html
sooooo i want to unistall pando media booster. it got installed 5/13/13 last year when i installed maple. upon coming across this thread, i now wish to uninstall. but its saying "you dont have sufficent access to uninstall this progam. please contact your system admin" which thats me. how can i go about uninstalling this program?
Just added it to the message for Windia's largest family :
http://i.imgur.com/kCLEsBp.jpg
Psst, hi @liquid2k1
I always removed it to begin with because I figured it was only needed to install MS, making it useless after I had the game installed. I don't see why Nexon hasn't commented on this though, seeing as they're the ones who made us download Pando in the first place
Wow, a friend mentioned getting this popup to me and I knewwww it seemed fishy. Thanks.
[quote=Andzalot55]Will the game still work without pando?[/quote]
Yes maple will still work perfectly fine without it. It doesn't have anything to do with maple at all other than installing.
I just logged onto Maple and had 2 friends tell me about this so searched it up and found this thread. Thanks for the heads up.
i just removed the program, and did not install any updates. i dont know anything on this subject:
1. am i in any danger of getting a virus/ getting hacked
2. what can this program do
Will the game still work without pando?
So all it does is change your browser? You pretty much know if you got infected, right?
Regardless, had it removed.
just saying but that pando media booster was registered dangerous the last time nexon actually used it for the game download...
also
@BobR
your link is a reported dangerous page
Thank you for this.
bump to help the community
[quote=BobR]As long as it's gone, you should be OK.[/quote]
That's good to hear, I haven't gotten that whole pop-up update thing for Pando but seeing this is happening lately its best I get rid of it now before my laptop becomes in great danger! Thanks for the heads up by the way!
[quote=ItsTalegas]Got it removed just now, hope im safe from this.[/quote]
As long as it's gone, you should be OK.
Got it removed just now, hope im safe from this.
muchas gracias for letting everyone know!
Thanks mate.
[quote=Railgun]Thanks @BobR !
Will this make my internet faster now?[/quote]
Probably not. Since Pando hasn't been used for a while, it shouldn't have been slowing your Internet down, but removing it can't hurt.
Thanks boss.
You should see if you can get mr basil to put this thread in that green section above all the other threads so everybody can see it.
[quote=Autistic]Yeah thanks for the heads up.
I had a look and the only thing I could see in there was "Nexon Game Manager" and I'm guessing that's 100% safe.[/quote]
Yes, Nexon Game Manager is used to run Nexon games, so it's safe.
@alanliuis Just a little "backup" to make sure everyone knows about it.
[url=http://www.basilmarket.com/forum/2797130/1/45452204Attention_Pando_media_booster_virus.html#45452204]A day too late[/url]
[quote=CyanLime]I found a program called rightsurf in my programs list, I didn't see it before so maybe that's one of the "viruses" it installed..
Or I got it somewhere else, idk </3
Anyways also be sure to look for any other programs you did not install, the "update" may have added some of those as well.
I don't know why I haven't learned my lesson, I already screwed up this computer once with viruses[/quote]
[url=http://malwaretips.com/blogs/rightsurf-virus-removal/]Rightsurf[/url]
It's technically not a virus, but the things it does make you feel like its a virus.
If you read the article, you'll know.
wow thanks. i thought it was troll thread until i saw it was a mod
I uninstalled PMB immediately after downloading Maple, because god the strain on my internet from it was intolerable.
Thanks for the info.
[quote=LampShadow]Do you think it only downloads if you hit accept for the update? Some viruses will install no matter how you close them so I'm just wanting to be sure[/quote]
I haven't seen anything about whether Malwarebytes Anti-Malware will detect the infection, but it can't hurt to scan your computer with it.
You could also use Windows Search to search for [b]sweet-page[/b]. If nothing turns up then you're probably safe.
The virus that's being distributed by this current attack has that name.
@Autistic Apparently Pando stopped operations sometime last year, so it's likely that's when Nexon stopped distributing Pando with its downloads.
I seldom have to redownload the entire game so I haven't noticed Pando reappearing on my computer lately, but I hadn't thought anything about it until the reports of people being infected by this update thing started appearing.
You should check in the "Add or Remove Programs" section of the Windows Control Panel and uninstall Pando if it shows up on the list.
Otherwise you should be OK.
thanks for the heads up.
just uninstalled it
I had a similar virus by sweetIM (might be the same people) and all it did was change my default homepage to their crappy search engine as well as install some toolbar. I used a program called AdwCleaner which removed it easily. After that I did a full computer scan with malwarebytes and my antivirus software.
I'm pretty sure your MS accounts will be fine, but you should probably change your password to be safe once you remove the virus.
I found a program called rightsurf in my programs list, I didn't see it before so maybe that's one of the "viruses" it installed..
Or I got it somewhere else, idk </3
Anyways also be sure to look for any other programs you did not install, the "update" may have added some of those as well.
I don't know why I haven't learned my lesson, I already screwed up this computer once with viruses
I thought it was strange that even though I was declining the update it kept popping up 5 mins later...I've uninstalled Pando and haven't had it come up since, so thank you
Do you think it only downloads if you hit accept for the update? Some viruses will install no matter how you close them so I'm just wanting to be sure
This has been going on since late November of last year at least the updates seem to come randomly to different people. I myself got it in December and had to spend a few hours trying to get rid of any malware it installed.
I used malwarebytes and rkill on safemode then used system restore. That got rid of most of the problems.
[quote=BobR]To do that, open the Windows Control Panel and click on "Add or Remove Programs", then find [i]Pando Media Booster[/i] on the list and click on [b]Uninstall[/b][/quote]
If you can't do that you need to manually run uninstall.exe in your Pando folder.
Thanks for letting us know! I'll make sure everyone I know has it uninstalled.
Well I won't be surprised if tomorrow I get hacked, oh well; I have nothing good on my account jokes on them haha
Lol gg
These hackers are low
Thanks!
This should be one of those green post on top of the forum.
Thanks for the helpful tip!
Thanks for the head's up
Thanks person
Thanks for the warning
whatever you say boss ^
[quote=CherryTigers]It's sad that each thread posted about this gets less than 3 pages of comments. I wish more people would comment on it so the thread would be seen by more people..[/quote]
They should just merge the threads together.
It's sad that each thread posted about this gets less than 3 pages of comments. I wish more people would comment on it so the thread would be seen by more people..
[quote=Crowhogan33]Glad I uninstalled it a long time ago.[/quote]
I second this, call me odd, but I thinked that program gived more problems than "benefits".
Good thing i listened myself in a long time.