Need help with Comcast scamware browser popup

timberwolf · ‎06-17-2012

A couple days ago, I started getting this annoying "popup" in my IE browser. It looks more like an image than a popup and there is no way to close it. It will go away on its own sometimes, but will return. It shows up in Firefox and Chrome too. Firefox would block it like it was a popup at first, but doesn't anymore. I have a good knowledge of computers, but this one is putting me to the test. I have Norton Internet Security and MalwareBytes Anti-Malware. I talked to Comcast and it's not from them. The number goes to "MarketLink" and I got a recording to call back M-F from 8-5. I've tried Norton, Malwarebytes, MS Security Essentials, HiJackThis, SpyBot Search & Destroy, Kaspersky, and SuperAntiSpyware in regular & safe modes. Nothing catches it. One interesting detail is that if I switch to a proxy server in my browser, the "popup" goes away immediately and doesn't return. Obviously, I can't run through a proxy all the time, so I need my normal IP to work normally again. I'll try to post a screenshot of the "popup". Really trying to avoid a windows reinstall, so hopefully someone can help! I'm running XP, service pack 3.

HarryP · ‎07-23-2010

Hi Timberwolf,

Welcome to Norton Community Forums!!

Did you run a scan with Norton Power Eraser tool? If not, try that first:

1. Delete internet temporary files/cookies

2. Download and run Norton Power Eraser tool:

http://www.norton.com/npe

3. If the problem persists, try to contact Comcast Support, reset your modem and re-add your IP Address.

Let us know how it goes.

Thanks,

HarryP

SendOfJive · ‎02-07-2009

Hi timberwolf,

There is a thread on the Comcast forum that you may want to follow to see if this gets resolved. It does appear to be a phishing attempt. One poster reported that Kaspersky found a trojan in the Java cache (although it is not clear that it was directly related to the popup). You may want to try clearing your Java cache to see if that eliminates the popups.

http://forums.comcast.com/t5/Connectivity-and-Modem-Help/Help-with-Message-concerning-Subscription-t...

timberwolf · ‎06-17-2012

Thanks for the replies! I already checked out the link you mentioned on the comcast forum. I read another post someone had about it and they said their's just went away, which is odd. There isn't much info. about this one online. I tried the Norton Power Eraser as well and it didn't pick up anything. I also dumped the Java cache, and even uninstalled Java, then reinstalled it. I did the same thing with Internet Explorer as well. Cleared all history, tracking cookies, and ran CCleaner, but it still persists. I would like to think it has to be something simple, since changing to a proxy immediately gets rid of it. I'll try calling Comcast and see if they can reset my modem. I'll post again if I make any progress.

timberwolf · ‎06-17-2012

I called Comcast and got them to assign me a new IP address, which solved the "popup" issue. I know this thing is sill on my PC, but unable to work properly. I would like to get rid of it, but I guess I'll just have to wait for Norton to get it one day. Hopefully it's not doing any other damage.

dickevans · ‎04-08-2008

timberwolf wrote:
I called Comcast and got them to assign me a new IP address, which solved the "popup" issue. I know this thing is sill on my PC, but unable to work properly. I would like to get rid of it, but I guess I'll just have to wait for Norton to get it one day. Hopefully it's not doing any other damage.

Hi,

Have you tried a scan with Malwarebytes free scanner?

http://www.malwarebytes.org/products/malwarebytes_free

It's Norton compatible so you can keep it on your desktop and run it from time to time.

Hope this helps

Dick
Win7x64 SP1 current NIS V20

timberwolf · ‎06-17-2012

Hi,
Have you tried a scan with Malwarebytes free scanner?
http://www.malwarebytes.org/products/malwarebytes_free
It's Norton compatible so you can keep it on your desktop and run it from time to time.
Hope this helps

Yes, I have MBytes' full verion. I run it along with Norton Internet Security. I've also tried MS Security Essentials, HiJackThis, SpyBot Search & Destroy, Kaspersky, BitDefender, and SuperAntiSpyware in regular & safe modes. Nothing catches it.