Forum Home |  MWR University |  New to the Board? |  IRC Chatroom |  Who Runs This Site? |  ASAP Members |  Microsoft MVP Members |  Downloads |  Good & Bad P2P Programs |  Our Rules

MalWare Removal Forum

Malware Removal University - Teaching people how to support those with infected computers - Teaching them to never give up untill your computer is clean and secure.

Tutorials (etc.) : Boot to Safe Mode - Safely - What to do if your Computer's running slowly
It is currently Sat 25 May, 2013 12:52 pm

All times are UTC [ DST ]


Forum rules


Please read > >THIS ANNOUNCEMENT< < before posting your NEW topic about your problem.

Please do NOT reply to your topic until a staff member has responded as they are looking for topics that have ZERO replies.

Paste your logs into your post. DO NOT USE ATTACHMENTS! Logs posted as attachments will be ignored and the topic will be closed.

If no expert has replied after 3 days, and you still require assistance, please post in our 72 hour bump room > > CLICK HERE < < Please do NOT reply to your own topic in an attempt to "bump" it. Bumped topics will be closed, requiring you to start again from the beginning.

If you are being helped and you haven't replied to your helper within 3 days of their last post, your topic will be closed as inactive. If that happens, you will need to start a new topic when you have the time available to promptly complete all instructions.

If your topic has been closed due to inactivity, do NOT request that your topic be reopened - we do NOT reopen topics unless they have been closed in error - you will need to start a NEW topic with NEW DDS logs. Do NOT attempt to start a new topic with a post that is essentially a reply to your closed topic.



Post new topic This topic is locked, you cannot edit posts or make further replies.  [ 21 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: StartNow Virus Round 2
New postPosted: Thu 26 Jul, 2012 5:58 pm 
Offline
MRU Expert
MRU Expert
User avatar

Joined: Fri 25 Jul, 2008 9:25 pm
Posts: 3582
Location: UK
Hi

khgamer17 wrote:
Should I remove Malwarebytes from my computer? I ask because you said not to run more than one Antivirus and right now I have that and the Avira. I'm just not sure if Malwarebytes really counts as an antivirus. Also it says the trial is going to expire in 6 days anyway. I guess I'm just not sure if I should keep it around or get rid of it. Anyway, above I posted the two logs you requested. As of right now, StartNow is still coming up with the browser.


You can leave Malwarebytes - it is not an antivirus. You can continue to use it as a free on-demand scanner for the detection and removal of malware after the trial of the pro version ends.


Change Google Chrome Settings

  • Click the wrench icon Image on the browser toolbar.
  • Select Settings and find the "Search" section.
  • Click Manage search engines.
  • Select the search engine that you'd like to use & click the Make default button that appears at the end of the row.
  • Select StartNow and click the X that appears at the end of the row.
  • Close and restart Google Chrome

Let me know if that works and if you have any further problems.

Top
 Profile  
 
 Post subject: Re: StartNow Virus Round 2
New postPosted: Fri 27 Jul, 2012 12:10 am 
Offline
Active Member

Joined: Wed 18 Jul, 2012 3:35 am
Posts: 14
Okay so I had went to the setting, I chose Google as my search engine and deleted StartNow (along with Bing and Yahoo). I then exited and restarted Chrome as you suggested. Upon reopening Chrome I get two tabs that launch. The first tab is normal, Google, as expected. The other tab is StartNow, but it just gives the following error message:

Unable to access the network
Google Chrome is having trouble accessing the network.

This may be because your firewall or antivirus software wrongly thinks Google Chrome is an intruder on your computer and is blocking it from connecting to the Internet.
Here are some suggestions:
Add Google Chrome as a permitted program in your firewall's or antivirus software's settings. If it is already a permitted program, try deleting it from the list of permitted programs and adding it again.
Error 138 (net::ERR_NETWORK_ACCESS_DENIED): Unable to access the network

StartNow is still removed from my Manage Search Engines list, but this tab remains persistent even after multiple restarts of Chrome.
_________________


Top
 Profile E-mail  
 
 Post subject: Re: StartNow Virus Round 2
New postPosted: Fri 27 Jul, 2012 7:07 pm 
Offline
MRU Expert
MRU Expert
User avatar

Joined: Fri 25 Jul, 2008 9:25 pm
Posts: 3582
Location: UK
Hi

Change Google Chrome Settings

  • Click the wrench icon Image on the browser toolbar.
  • Select Settings and find the "On start-up" section.
  • Select Open the following pages:
  • Select StartNow and click the X that appears at the end of the row.
  • Close and restart Google Chrome

Let me know if that works and if you have any further problems.

Top
 Profile  
 
 Post subject: Re: StartNow Virus Round 2
New postPosted: Sat 28 Jul, 2012 7:05 pm 
Offline
Active Member

Joined: Wed 18 Jul, 2012 3:35 am
Posts: 14
Looks good now. Starting up Chrome no longer brings up the startnow tab. But I have to ask, was it really so simple as a launch setting? I mean this thing was a virus or malware of some sort, right? I know I never selected it or chose to have it appear, but I feel like you had me do a bunch of tests and scans and then in the end it was just a setting in chrome. Furthermore, what steps can I take to keep my PC clean, since I've never been very good with using antivirus software.
_________________


Top
 Profile E-mail  
 
 Post subject: Re: StartNow Virus Round 2
New postPosted: Sun 29 Jul, 2012 5:04 pm 
Offline
MRU Expert
MRU Expert
User avatar

Joined: Fri 25 Jul, 2008 9:25 pm
Posts: 3582
Location: UK
khgamer17 wrote:
But I have to ask, was it really so simple as a launch setting? I mean this thing was a virus or malware of some sort, right?

It was just a change of settings required. These settings can be changed by malware, but they can also be changed when you install some software. For example a toolbar may be bundled with a download (usually freeware), and you either agree to the change under the terms of the EULA, or it is referred to whilst installing. Always read the EULA and pay attention when installing software, unchecking any unwanted extras that may be offered during the install.

Your log now appears to be clean. Congratulations!
This is my general post for when your logs show no more signs of malware ;) - Please let me know if you still are having problems with your computer and what these problems are.


OTL by OldTimer

  • Double-click OTL.exe
  • Click the CleanUp! button
  • Select Yes when the Begin cleanup Process? Prompt appears
  • If you are prompted to Reboot during the cleanup, select Yes
  • The tool will delete itself once it finishes, if not delete it by yourself



Create a new, clean System Restore point

  1. Click on Start > Control Panel.
  2. Double click on System.
  3. On the left, click on the System Protection link.
  4. At the bottom right hand corner, click on the Create... button.
  5. Give this System Restore point a descriptive name and click on Create.
  6. You should receive a prompt that a System Restore point is created successfully. Click OK to confirm.
  7. Click OK again to close the System Protection window. Then close Control Panel.

Warning: Do not clear infected System Restore points before creating a new System Restore point first!

Please read the above to create a new System Restore point first, then clear out the infected System Restore points.


Clear infected System Restore points

  1. Click on Start > All Programs > Accessories > System Tools.
  2. Right click on Disk Cleanup and select Run As Administrator to run it. UAC will prompt. Allow it.
  3. Select your C drive and click OK.
  4. Select the More Options tab.
  5. Under System Restore and Shadow Copies, click on the Clean up... button.
  6. You will receive a prompt. Click on Delete to delete the old System Restore points.
  7. When done, click OK. You will receive another prompt. Click Delete Files to confirm.
  8. When done, Disk Cleanup will automatically close.


==================================


General Security and Computer Health
Below are some steps to follow in order to dramatically lower the chances of reinfection. You may have already implemented some of the steps below, however you should follow any steps that you have not already implemented.


Enable UAC

The User Account Control (UAC) helps protect your PC against malicious software. http://windows.microsoft.com/en-US/wind ... nt-control

  1. Click on Start > Control Panel.
  2. In the search box, type uac, and then click Change User Account Control settings.
  3. Move the slider to choose when you want to be notified (I recommend at least the Default level).
  4. Click OK.

  • Make sure that you keep your antivirus updated
    New viruses come out every minute, so it is essential that you have the latest signatures for your antivirus program to provide you with the best possible protection from malicious software.
    Note: You should only have one antivirus installed at a time. Having more than one antivirus program installed at once is likely to cause conflicts and may well decrease your overall protection as well as impairing the performance of your PC.
  • Security Updates for Windows, Internet Explorer & Microsoft Office
    Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC. Manually check for Windows updates via Start > All Programs > Windows Update > In the left pane, click Check for updates, and then wait while Windows looks for the latest updates for your PC, or visit the Microsoft Update site on a regular basis.
    Note: The update process uses ActiveX, so you will need to use internet explorer for it and allow the ActiveX control to install.
  • Update Non-Microsoft Programs
    Microsoft isn't the only company whose products can contain security vulnerabilities. To check whether other programs running on your PC are in need of an update, you can use the Secunia Software Inspector - I suggest that you run it at least once a month.


Recommended Programs

I would recommend the download and installation of some or all of the following programs (if not already present), and the updating of them on a regular basis.

  • WinPatrol
    As a robust security monitor, WinPatrol will alert you to hijackings, malware attacks and critical changes made to your computer without your permission. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge. For more information, please visit HERE.
  • Malwarebytes' Anti-Malware
    Malwarebytes' Anti-Malware is an anti-malware application that can thoroughly remove even the most advanced malware. You can find a tutorial HERE. As you already have Malwarebytes' Anti-Malware on board I would keep it regularly updated and run regular quick scans with it. The Full version can be used as an addition to an anti-virus & includes a number of features, including a built in protection monitor that blocks malicious processes before they even start. It's IP Protection provides an additional layer of security for your computer, by preventing access to known malicious IP addresses and IP ranges. You can now trial the full versions features within the program. Click the Protection Tab to see.
  • Hosts File
    For added protection you may also like to add a host file. A simple explanation of what a Hosts file does is HERE and for more information regarding host files read HERE.


Finally I am trying to make one point very clear. It is absolutely essential to keep all of your security programs up to date.

Also please read this great article by Tony Klein So How Did I Get Infected In First Place

I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Happy surfing and stay clean!

Top
 Profile  
 
 Post subject: Re: StartNow Virus Round 2
New postPosted: Wed 01 Aug, 2012 7:24 pm 
Offline
Administrator
Administrator
User avatar

Joined: Wed 23 Feb, 2005 12:08 pm
Posts: 25103
Location: California
As this issue appears to be resolved, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.

Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic This topic is locked, you cannot edit posts or make further replies.  [ 21 posts ]  Go to page Previous  1, 2

All times are UTC [ DST ]


Who is online

Users browsing this forum: No registered users and 7 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.

Member site: Alliance of Security Analysis Professionals | UNITE Against Malware

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group