Regenerating CrossBrowse solved

Discussion in 'Malware Help (A Specialist Will Reply)' started by KGHN, Jul 20, 2015.

  1. KGHN

    KGHN Private E-2

    CrossBrowse was the presenting problem on a customer's Win7pro-64SP1 Lenovo. The machine was completely gunked up with malware. I disconnected from the Internet and cleaned the machine with utilities installed from a DVD (written by one of my machines), running Microsoft's MSERT, Malwarebytes' MBAM, SUPERAntiSpyware, CCleaner, and Microsoft Security Essentials. All scans were the default type. A lot of problems were dealt with and it seemed frisky and fine.

    However, when I reconnected to the Internet, it immediately reinfected itself with many problems, notably CrossBrowse.

    So, I repeated the scans, asking for full scans. As I expected, that took longer. I had to tell the machine to not go to sleep so quickly. MSERT actually reported one item: Adware:Win32/EoRezo. MBAM was run "custom scan" and I choose the entire C: drive. It found 1359 PUP items, including Infonaut.A, AdPeak.A, Multiplug.A, CrossRider.A, ModGoog, Coupoon.A, Tuto4PC.A, PCOptimizerPro, Crossbrowse.C, IndexToolbar.A, CrossBrowse, EORezo, JellySplit.Gen, SearchProtect.A, CheckOffer, Conduit, Imali.SID.A, SmartWeb.A, and OfferInstaller.A .

    I also used the Control Panel Programs utility to remove NCP Link (National Consumer Panel) and nitionto by canortic . NCP had a number of modules including FTDI scanner drivers and is a program for consumers to scan in bar codes of purchases for redeemable "points". I found very little when I searched for nitionto or canortic. Does anyone know what that is and where it comes from?

    When I reconnected again, no malware. It was sucking in a lot of Windows updates, Flash updates, Adobe reader updates etc so it was slow for a few hours, but then fine. I'm posting here hoping to help people looking for a way to deal with a stubborn CrossBrowse infection.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Never heard of it. Probably just another junkware application.

    Thanks! Our normal cleaning process works just fine to remove this.

    You should consider running the below to see if you have any more junk on your PC.

    Please download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Attach the logfile to your next next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds