Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: What is up with UpdateNowPro.com?


10 Apr 2014   #1

Win7 64Bit Enterprise
 
 
What is up with UpdateNowPro.com?

I keep a pretty clean PC, and for 20 yrs. I've NEVER had a virus, or popup issue like this. Not saying I've never had a virus, or popup, but NEVER like this. What it does is as soon as I open Chrome it pops up a VERY convincing window with a smaller dialog box that has at the bottom UpdateNowPro.com. It is VERY pesky, and it only started coming up in the last few days. I've run SuperAnti-Spyware, and it still comes up. I also just about an hour ago had a msg appear that had a toll free # pop up that started with 855 (Can't remember the rest). It was a legit #, and the very nice guy on the other end said he was a L3 MCSE. What was so weird, and sent red flags up was the way his page popped up, as if to be SOO bogus. He didn't try to sell me any service at all. In fact, he told me I need to take it to GeekSquad (or whatever retail store) and spend $150-200 to clean my PC. Exqueeze ME! I'd rather just reformat the thing. THIS is why I have close to 10 different partitions ASIDE from my C drive.

Anyhoo, I just want to know if anyone has heard of UpdateNowPro.com, and if so, how are you banning them from your life?

My System SpecsSystem Spec
.

10 Apr 2014   #2
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

I've never heard of UpdateNowPro.com but it was odd they didn't try to extort money from you. It was likely bundled, unknowingly, with something you recently installed.

Did SAS say it found anything at all? Do not click anything in the popup window!
How to Get Rid of UpdateNowPro.com Pop-up Virus from Your IE/FF/Chrome?- AnviSoft

Please download AdwCleaner:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Save to the desktop.

Close all open programs.
To run the program, right-click AdwCleaner.exe and select: Run as Administrator

Click on Search and confirm the prompt.
After the program finishes, click the Report button. Please post the contents of the C:\AdwCleaner[Rx].txt in your next reply. In the reply window click the "#" icon at the top and paste the log text between the [code ] Paste Here [ /code] tags.

Do NOT perform the delete part before I or someone else can read the log.



To delete:

Run AdwCleaner once again.
This time click on:Delete, you will be asked to reboot to finish cleaning.
When done, please post the content of the C:\AdwCleaner[Sx].txt in your reply as outlined above.
My System SpecsSystem Spec
10 Apr 2014   #3

Win7 64Bit Enterprise
 
 

GEEZ! I'm getting popups with almost every stroke! Britton, thanks for the quick help. I ran SAS on 2 PC's, both using Windows 7 64Bit Ent. Fortunately, my other one, which is my DAW, and life blood to my biz, hasn't seen the crap this one has. They both had files that I promptly removed. I haven't run the other AdwCleaner just yet, or the AnviSoft remedy. I'll be right back asap.
My System SpecsSystem Spec
.


10 Apr 2014   #4

Win7 64Bit Enterprise
 
 

I ran AdwCleaner and I'm still getting Popups out the wazoo. You should be able to read my report. Quite honestly, I'm scared to run the AnviSoft app for UpdateNowPro.com. I went to the forum where your link sent me, but almost every time I click on the Anvisoft link there it sends me to a different page, so I'm kind of leary to click on anything there. Can you tell me EXACTLY what kind of page I'm supposed to see so I don't go COMPLETELY down the worm hole?


Attached Files
File Type: txt AdwCleaner[R0].txt (4.0 KB, 4 views)
My System SpecsSystem Spec
10 Apr 2014   #5
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Go ahead and run Adwcleaner Delete poart, you may have to download it again, I've marked in red the infections or unwanted prgrams it has found. Conduit is a very bad one.

Code:
 
File Found : C:\Windows\System32\Tasks\Driver Booster Update
File Found : C:\Windows\Tasks\Driver Booster Update.job
Folder Found C:\Program Files (x86)\SearchProtect
Folder Found C:\Users\TRR-Office\AppData\Local\SearchProtect
Folder Found C:\Windows\SysWOW64\SearchProtect
***** [ Shortcuts ] *****

***** [ Registry ] *****
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\installedbrowserextensions
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Found : HKCU\Software\WEDLMNGR
Key Found : [x64] HKCU\Software\installedbrowserextensions
Key Found : [x64] HKCU\Software\Microft\Internet Exploreosr\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : [x64] HKCU\Software\WEDLMNGR
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411901174}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422902274}
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0049074.BHO
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0049074.BHO.1
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0049074.Sandbox
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0049074.Sandbox.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455905574}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466906674}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444904474}
Key Found : HKLM\Software\installedbrowserextensions
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411901174}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Found : HKLM\Software\SearchProtect
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411901174}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422902274}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455905574}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466906674}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Key Found : [x64] HKLM\SOFTWARE\installedbrowserextensions
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411901174}
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16521
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://search.conduit.com/?ctid=CT3321542&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP9FDA5FC1-E6DE-4F23-9BD5-C14F98CC18FA&SSPV=
My System SpecsSystem Spec
10 Apr 2014   #6

Win7 64Bit Enterprise
 
 

Mucho appreciado!
My System SpecsSystem Spec
10 Apr 2014   #7
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

How did it turn out for you?
My System SpecsSystem Spec
11 Apr 2014   #8

Win7 64Bit Enterprise
 
 

It seems to have been fixed. Let me work thru the day just to be sure, then I'll "Mark as Solved".
My System SpecsSystem Spec
11 Apr 2014   #9
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

You need to get rid of all the temporary files that the adware brought with it.


Please download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forum and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.


TFC is an application to keep
My System SpecsSystem Spec
12 Apr 2014   #10

Win7 64Bit Enterprise
 
 

Thanks Jacee. Right now, the problem SEEMS to have gone away. At the very least, as the old southern saying goes "If it ain't broke, don't fix it." However, I WILL keep this thread in my Inbox folder for future reference.
My System SpecsSystem Spec
Reply

 What is up with UpdateNowPro.com?




Thread Tools



Similar help and support threads for2: What is up with UpdateNowPro.com?
Thread Forum
What's Up With UpdateNowPro.com? Browsers & Mail

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 10:02 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33