[nav.startnow error] -


nav.startnow error

Discuss nav.startnow error


Posted by: akki

hi

the webpage [url]http://nav.startnow.com/error.html[/url] keeps popping up when im surfing. i think its a spyware/adware but im not really sure. im using Spybot S&D, but i cant really get rid of it. also, there's this DSO Exploit that comes up when i search for probs using Spybot, but it comes back up every time.

i think you can see by now that im not really good at this sort of thing, so there's a really high chance that im not doing something properly. i would really appreciate all the the help. thanks


Posted by: intercodes

akki,

First download, ad-aware se personal , install , update and do a full scan. And i also assume that you updated your Spybot before performing the scan.
Next, download 'hijackthis' , run it and post a log in here


Posted by: akki

here's the log.


Posted by: intercodes

akki,

Okay, here we go
* Download these tools cwshredder,spybot S&D, adaware SE personal [Dont run them yet..]
* Turn off system restore [url]http://www.pchell.com/virus/systemrestore.shtml[/url]
* Close all windows except hijackthis.
* Select and fix the following entries.

------------------
C:\WINDOWS\ALCXMNTR.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url]http://aqi-sparkles.blogspot.com/[/url]

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url]http://minisearch.startnow.com/[/url]

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = [url]http://minisearch.startnow.com/[/url]

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [url]http://minisearch.startnow.com/[/url]

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [url]http://www.startnow.com/[/url]

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = [url]http://minisearch.startnow.com/[/url]

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [url]http://minisearch.startnow.com/[/url]

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = [url]http://minisearch.startnow.com/[/url]

R3 - URLSearchHook: HyperSearchHook - {76558587-31E8-48BC-95D0-8F8513E2B089} - C:\Program Files\Common Files\Hyperbar\HyperbarSS3.dll

O2 - BHO: HyperBHO - {4B2F5308-2CB0-40E2-8030-59936ED5D22C} - C:\Program Files\Common Files\Hyperbar\Hyperbar.dll

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)

-----------------------------------

* Reboot into safe mode , and in folder options enable 'shows hidden files' and 'show Operaing system files', then try to search and delete the following files if found

C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Common Files\Hyperbar\HyperbarSS3.dll
C:\Program Files\Common Files\Hyperbar\Hyperbar.dll

* Delete all the internet temporary files,cache,cookies,history and also the[COLOR=red] files in the windows temp folder[/COLOR] [in windows/temp and also in Documents and Settings/%user%/Local Settings/Temp ]

*Next log in into normal mode, install the three software that you downloaded before. Update them and scan your computer thorughly.

Good luck


Posted by: southernlady

Closing thread due to inactivity. Liz