General

WARNING- Uninstall Pando Media Booster - NOW!

Anyone who still has Pando Media Booster (formerly used to download Maplestory) installed on their computers should UNINSTALL it [b]IMMEDIATELY[/b].
Hackers have hijacked the update function of Pando and are using it to trick people into downloading an "update" which is actually a browser hijack ("virus" ).

[b]IF YOU GET A POPUP THAT SAYS YOU NEED TO UPDATE [i]PANDO MEDIA BOOSTER[/i] DO NOT CLICK ON IT! [/b]

Pando Media Booster is no longer being used by Nexon to distribute Maplestory, so it's completely useless anyway, and is just taking up resources from your computer.
[b]To protect yourself from this virus attack, and to help clean up your computer, UNINSTALL Pando from your computer NOW.[/b]

To do that, open the Windows Control Panel and click on "Add or Remove Programs", then find [i]Pando Media Booster[/i] on the list and click on [b]Uninstall[/b]

If you already did accept the "update" from the Pando popup, this site gives instructions on how to remove the browser hijack virus:
http://www.bleepingcomputer.com/virus-removal/remove-sweet-page.com-browser-hijacker

February 28, 2014

60 Comments • Newest first

BobR

[quote=isiah13]i wonder why type of compensation nexon is going to give us for this plunder, i just have the feeling its going to be very good.[/quote]

Nexon hasn't acknowledged there's anything going on with any of this, in fact they're probably completely unaware of it since they don't use Pando any more.
It would be nice if they'd post something warning people to uninstall Pando if it's still on anyone's computers, but I don't expect that to happen any time soon.

Reply March 1, 2014
isiah13

i wonder why type of compensation nexon is going to give us for this plunder, i just have the feeling its going to be very good.

#prots Scrolls

Reply February 28, 2014
BobR

[quote=infinteZero]@BobR: Trend Micro page rating said its a (49) dangerous page and that's pretty high up their
so their has to be some virus/ something on the page or it wouldn't of been blocked[/quote]

I found instructions for removing the "sweet-page" hijack on BleepingComputer so I replaced the link, just in case.
Thanks for spotting that..!

Reply February 28, 2014
infinteZero

@BobR: Trend Micro page rating said its a (49) dangerous page and that's pretty high up their
so their has to be some virus/ something on the page or it wouldn't of been blocked

Reply February 28, 2014
BobR

[quote=infinteZero]your link is a reported dangerous page[/quote]

Reported by what..?
It's WOT rating is "Unknown" because no one has rated this specific page.
There are other sites that give instructions for removing this particular browser hijack, this was just the first one I found.

@GunPowder Yes, it'll be pretty obvious if you were infected. Your browser would be hijacked to a different home page and search engine.
As long as it doesn't act weird, you're OK.

@waterishealthy This virus has nothing to do with Maplestory so it won't affect your game account.
It's a "browser hijack" that takes over how your browser works and sends you to a page the hackers specify.

@DogPukeYellow That's a great idea... well done..!

@sano4444 Check in "All Programs" and see if there's a Pando Media Booster entry there with an "Uninstall" icon. If there is, try using that.
You might have to right-click and use "Run as Administrator" to get it to work.
Also, you might have to use something like this to force the uninstall if nothing else works:
http://www.revouninstaller.com/revo_uninstaller_free_download.html

Reply February 28, 2014 - edited
sano4444

sooooo i want to unistall pando media booster. it got installed 5/13/13 last year when i installed maple. upon coming across this thread, i now wish to uninstall. but its saying "you dont have sufficent access to uninstall this progam. please contact your system admin" which thats me. how can i go about uninstalling this program?

Reply February 28, 2014 - edited
DogPukeYellow

Just added it to the message for Windia's largest family :

http://i.imgur.com/kCLEsBp.jpg

Psst, hi @liquid2k1

Reply February 28, 2014 - edited
jrb75

I always removed it to begin with because I figured it was only needed to install MS, making it useless after I had the game installed. I don't see why Nexon hasn't commented on this though, seeing as they're the ones who made us download Pando in the first place

Reply February 28, 2014 - edited
Liqs

Wow, a friend mentioned getting this popup to me and I knewwww it seemed fishy. Thanks.

Reply February 28, 2014 - edited
DarkZaki

[quote=Andzalot55]Will the game still work without pando?[/quote]

Yes maple will still work perfectly fine without it. It doesn't have anything to do with maple at all other than installing.

Reply February 28, 2014 - edited
CrazyHolz

I just logged onto Maple and had 2 friends tell me about this so searched it up and found this thread. Thanks for the heads up.

Reply February 28, 2014 - edited
waterishealthy

i just removed the program, and did not install any updates. i dont know anything on this subject:
1. am i in any danger of getting a virus/ getting hacked
2. what can this program do

Reply February 28, 2014 - edited
Andzalot55

Will the game still work without pando?

Reply February 28, 2014 - edited
GunPowder

So all it does is change your browser? You pretty much know if you got infected, right?

Regardless, had it removed.

Reply February 28, 2014 - edited
infinteZero

just saying but that pando media booster was registered dangerous the last time nexon actually used it for the game download...

also
@BobR
your link is a reported dangerous page

Reply February 28, 2014 - edited
MapleBhav

Thank you for this.

Reply February 28, 2014 - edited
HorrorsLove

bump to help the community

Reply February 28, 2014 - edited
ItsTalegas

[quote=BobR]As long as it's gone, you should be OK.[/quote]

That's good to hear, I haven't gotten that whole pop-up update thing for Pando but seeing this is happening lately its best I get rid of it now before my laptop becomes in great danger! Thanks for the heads up by the way!

Reply February 28, 2014 - edited
BobR

[quote=ItsTalegas]Got it removed just now, hope im safe from this.[/quote]

As long as it's gone, you should be OK.

Reply February 28, 2014 - edited
ItsTalegas

Got it removed just now, hope im safe from this.

Reply February 28, 2014 - edited
SleekandFast

muchas gracias for letting everyone know!

Reply February 28, 2014 - edited
TheBaldAran

Thanks mate.

Reply February 28, 2014 - edited
BobR

[quote=Railgun]Thanks @BobR !
Will this make my internet faster now?[/quote]

Probably not. Since Pando hasn't been used for a while, it shouldn't have been slowing your Internet down, but removing it can't hurt.

Reply February 28, 2014 - edited
Kazno

Thanks boss.

Reply February 28, 2014 - edited
UAPaladin

You should see if you can get mr basil to put this thread in that green section above all the other threads so everybody can see it.

Reply February 28, 2014 - edited
BobR

[quote=Autistic]Yeah thanks for the heads up.
I had a look and the only thing I could see in there was "Nexon Game Manager" and I'm guessing that's 100% safe.[/quote]

Yes, Nexon Game Manager is used to run Nexon games, so it's safe.

@alanliuis Just a little "backup" to make sure everyone knows about it.

Reply February 28, 2014 - edited
alanliuis

[url=http://www.basilmarket.com/forum/2797130/1/45452204Attention_Pando_media_booster_virus.html#45452204]A day too late[/url]

Reply February 28, 2014 - edited
LuckyNinja

[quote=CyanLime]I found a program called rightsurf in my programs list, I didn't see it before so maybe that's one of the "viruses" it installed..
Or I got it somewhere else, idk </3
Anyways also be sure to look for any other programs you did not install, the "update" may have added some of those as well.

I don't know why I haven't learned my lesson, I already screwed up this computer once with viruses[/quote]

[url=http://malwaretips.com/blogs/rightsurf-virus-removal/]Rightsurf[/url]
It's technically not a virus, but the things it does make you feel like its a virus.
If you read the article, you'll know.

Reply February 28, 2014 - edited
CathySenpai

wow thanks. i thought it was troll thread until i saw it was a mod

Reply February 28, 2014 - edited
Noodlebrain

I uninstalled PMB immediately after downloading Maple, because god the strain on my internet from it was intolerable.

Reply February 28, 2014 - edited
Anthoy84

Thanks for the info.

Reply February 28, 2014 - edited
BobR

[quote=LampShadow]Do you think it only downloads if you hit accept for the update? Some viruses will install no matter how you close them so I'm just wanting to be sure[/quote]

I haven't seen anything about whether Malwarebytes Anti-Malware will detect the infection, but it can't hurt to scan your computer with it.

You could also use Windows Search to search for [b]sweet-page[/b]. If nothing turns up then you're probably safe.
The virus that's being distributed by this current attack has that name.

@Autistic Apparently Pando stopped operations sometime last year, so it's likely that's when Nexon stopped distributing Pando with its downloads.
I seldom have to redownload the entire game so I haven't noticed Pando reappearing on my computer lately, but I hadn't thought anything about it until the reports of people being infected by this update thing started appearing.

You should check in the "Add or Remove Programs" section of the Windows Control Panel and uninstall Pando if it shows up on the list.
Otherwise you should be OK.

Reply February 28, 2014 - edited
LoneSwordsman

thanks for the heads up.
just uninstalled it

Reply February 28, 2014 - edited
LlamaKisses

I had a similar virus by sweetIM (might be the same people) and all it did was change my default homepage to their crappy search engine as well as install some toolbar. I used a program called AdwCleaner which removed it easily. After that I did a full computer scan with malwarebytes and my antivirus software.
I'm pretty sure your MS accounts will be fine, but you should probably change your password to be safe once you remove the virus.

Reply February 28, 2014 - edited
CyanLime

I found a program called rightsurf in my programs list, I didn't see it before so maybe that's one of the "viruses" it installed..
Or I got it somewhere else, idk </3
Anyways also be sure to look for any other programs you did not install, the "update" may have added some of those as well.

I don't know why I haven't learned my lesson, I already screwed up this computer once with viruses

Reply February 28, 2014 - edited
LampShadow

I thought it was strange that even though I was declining the update it kept popping up 5 mins later...I've uninstalled Pando and haven't had it come up since, so thank you

Do you think it only downloads if you hit accept for the update? Some viruses will install no matter how you close them so I'm just wanting to be sure

Reply February 28, 2014 - edited
GeneralStore

This has been going on since late November of last year at least the updates seem to come randomly to different people. I myself got it in December and had to spend a few hours trying to get rid of any malware it installed.

I used malwarebytes and rkill on safemode then used system restore. That got rid of most of the problems.

Reply February 28, 2014 - edited
NeverAddAPlayer

[quote=BobR]To do that, open the Windows Control Panel and click on "Add or Remove Programs", then find [i]Pando Media Booster[/i] on the list and click on [b]Uninstall[/b][/quote]

If you can't do that you need to manually run uninstall.exe in your Pando folder.

Reply February 28, 2014 - edited
silverphoenix

Thanks for letting us know! I'll make sure everyone I know has it uninstalled.

Reply February 28, 2014 - edited
vBlaze

Well I won't be surprised if tomorrow I get hacked, oh well; I have nothing good on my account jokes on them haha

Reply February 28, 2014 - edited
ScuXxMuji

Lol gg

These hackers are low

Reply February 28, 2014 - edited
LuckyNinja

Thanks!
This should be one of those green post on top of the forum.

Reply February 28, 2014 - edited
QuackOutLoud

Thanks for the helpful tip!

Reply February 28, 2014 - edited
dashflare

Thanks for the head's up

Reply February 28, 2014 - edited
JumpUpdate

Thanks person

Reply February 28, 2014 - edited
Simcaz

Thanks for the warning

Reply February 28, 2014 - edited
jonnyaizik

whatever you say boss ^

Reply February 28, 2014 - edited
lovesupport

[quote=CherryTigers]It's sad that each thread posted about this gets less than 3 pages of comments. I wish more people would comment on it so the thread would be seen by more people..[/quote]

They should just merge the threads together.

Reply February 28, 2014 - edited
CherryTigers

It's sad that each thread posted about this gets less than 3 pages of comments. I wish more people would comment on it so the thread would be seen by more people..

Reply February 28, 2014 - edited
IsGamer

[quote=Crowhogan33]Glad I uninstalled it a long time ago.[/quote]

I second this, call me odd, but I thinked that program gived more problems than "benefits".

Good thing i listened myself in a long time.

Reply February 28, 2014 - edited
Load more comments