Please help - www.searchnu.com/406 virus has infected my computer

[evilfantasy]

Look in your add-ons in Google Chrome and see if there is anything that shouldn't be there.

Update Malwarebytes' Anti-Malware and run a Full scan
 
* Open Malwarebytes' Anti-Malware
* Select the Update tab
* Click Check for Updates
* After the update have been completed, Select the Scanner tab.
* Select Perform full scan, then click on Scan
* Leave the default options as it is and click on Start Scan
* When done, you will be prompted. Click OK, then click on Show Results
* Checked (ticked) all items and click on Remove Selected
* After it has removed the items, Notepad will open. Please post this log in your next reply.

[wilder5678]

I'm wondering if I did something wrong with the combofix. I dragged the text into the program, but after that, I didn't do anything but uninstall the program. Was I suppose to delete something first to get rid of the virus before uninstalling?

[evilfantasy]

Yes Combofix should have been uninstalled.

[wilder5678]

Ok, so I uninstalled google chrome and reinstalled it and the searchnu.com/406 tab no longer pops up. Do you think it's safe to say the virus is gone??!!

Also, evilfantasy, gave you and the website a shout out on facebook. You guys rock.

[evilfantasy]

Yes I believe it's gone.

If there are no more malware issues we can finish up now.

Use the Secunia Software Inspector to check for out of date software.

* Click Start Scanner
* Check the box next to Enable thorough system inspection.
* Click Start
* Allow the scan to finish and scroll down to see if any updates are needed.
* Update anything listed.

You can also download and use the Secunia Personal Software Inspector (PSI) which is
FREE for Home Users. This will allow Secunia to run in real time and alert you to potential security threats from outdated software installed on your computer.

----------

Go to Microsoft Windows Update and get all critical updates.

----------

If you are using or have installed IE6 you are using an outdated and soon to be unsupported version of Internet Explorer and I strongly suggest you update to the latest version directly from Microsoft Internet Explorer 8: Home page.

----------

I recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no realtime protection so will not interfere with each other. They do not use any significant amount of resources (except a little disk space) until you run a scan.

I also suggest keeping CCleaner Slim. It is an excellent and safe disk cleaner. Running CCleaner on a daily basis helps to protect your privacy and make your computer faster and more  secure.

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

SpywareBlaster - Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy.
* Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

[wilder5678]

After reinstalling google chrome, I restarted my computer for a second time. The searchnu tab is still not appearing, but I cannot change my homepage. I tried through the google wrench, and also the control panel. I ran a quick search through Malwarebytes before reading your reply. Here is the log. I will run a full scan and post again. Should I follow your next steps or wait on that?

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.06.06.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Wilder :: WILDER-PC [administrator]

6/9/2012 3:04:02 PM
mbam-log-2012-06-09 (15-04-02).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 208598
Time elapsed: 2 minute(s), 37 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

[evilfantasy]

What happens when you try to change the Homepage?

[wilder5678]

Nothing. It says that my homepage is whatever I set it to. It doesn't change it. But when I open the brower, it will not go to google.com or hotmail.com or anything different than a reservation page I use for work, which I have never used as my homepage.

[evilfantasy]

I'm not sure what to think about that. I can't find any similar issues or a fix.

[evilfantasy]

Scroll down this page and try the instructions for removing this from Google Chrome.
http://deletemalware.blogspot.ca/2012/04/remove-searchnu-uninstall-guide.html

[wilder5678]

Here is the full malware scan log. I will follow the link you posted and get back to you. Thank you.


Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.06.10.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Wilder :: WILDER-PC [administrator]

6/10/2012 4:13:06 PM
mbam-log-2012-06-10 (16-13-06).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 342755
Time elapsed: 42 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

[wilder5678]

Again, thank you so much for your time.

AND~~I think the problem is finally fixed!

 I ran the Secunia Software Inspector and no updates were needed.

I updated my Microsoft Windows.

I am running on Google Chrome.

I added WOT.

** The SpywareBlaster does not list Google Chrome as a browser it secures, should I still download it??

Is it necessary to have SpyBot-Search and Destroy if I already have SuperAnitSpyware? Does it make my computer slower if it is constantly running in the background?

[evilfantasy]

No at this time SpywareBlaster or SpyBot-Search and Destroy do not support Chrome so using them for their protection features is pointless if you only use Chrome to browse with.

[wilder5678]

Do you suggest not using Chrome?
And can I/should I mark my problem as resolved?!?!?

Thanks again.

[evilfantasy]

Yes using Chrome is fine. It's a secure browser.

I do believe this is resolved. ;-)