sswarin Posted January 30, 2021 ID:1435549 Share Posted January 30, 2021 I have been a Malwarebytes user for many years. But this week my laptop became infected with Easy News Now. And Malwarebytes has not detected it or removed it. Any suggestions as to manual removal? Easy News Now does not show up in my list of installed programs and apps, so it must be hidden in some other program or app. Thank you. Steve Link to post Share on other sites More sharing options...
Staff Malwarebytes Posted January 30, 2021 Staff ID:1435550 Share Posted January 30, 2021 ***This is an automated reply*** Hi, Thanks for posting in the Malwarebytes for Windows Help forum. If you are having technical issues with our Windows product, please do the following: Malwarebytes Support Tool - Advanced Options This feature is designed for the following reasons: For use when you are on the forums and need to provide logs for assistance For use when you don't need or want to create a ticket with Malwarebytes For use when you want to perform local troubleshooting on your own How to use the Advanced Options: Spoiler Download Malwarebytes Support Tool Double-click mb-support-X.X.X.XXXX.exe to run the program You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next Navigate to the Advanced tab The Advanced menu page contains four categories: Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand. Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot. Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent. Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program. To provide logs for review click the Gather Logs button Upon completion, click OK A file named mbst-grab-results.zip will be saved to your Desktop Please attach the file in your next reply. To uninstall all Malwarebytes Products, click the Clean button. Click the Yes button to proceed. Save all your work and click OK when you are ready to reboot. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows. Select Yes to install Malwarebytes. Malwarebytes for Windows will open once the installation completes successfully. Screenshots: Spoiler Spoiler If you are having licensing issues, please do the following: Spoiler For any of these issues: Renewals Refunds (including double billing) Cancellations Update Billing Info Multiple Transactions Consumer Purchases Transaction Receipt Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help If you need help looking up your license details, please head here: Find my premium license key Thanks in advance for your patience. -The Malwarebytes Forum Team Link to post Share on other sites More sharing options...
Maurice Naggar Posted January 30, 2021 ID:1435577 Share Posted January 30, 2021 Hello. My name is Maurice. I will be guiding you. Step 1 is to gather a set of diagnostic reports. Please save the Support tool download to the Desktop. Then run it to just "Gather logs". Download Malwarebytes Support Tool Double-click mb-support-X.X.X.XXXX.exe to run the program You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next Navigate to the Advanced tab The Advanced menu page contains four categories: Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand. To provide logs for review click the Gather Logs button Upon completion, click OK A file named mbst-grab-results.zip will be saved to your Desktop Please attach the file in your next reply. To upload attachments please click the link as shown below. Then browse to where your file is located and select it and click the Open button. Once you are tottaly ready, and all set with the attachment & also with your message content in the main body, then you can click on the button marked "Submit Reply" Link to post Share on other sites More sharing options...
sswarin Posted January 30, 2021 Author ID:1435589 Share Posted January 30, 2021 Thank you Maurice. I have attached the file. mbst-grab-results.zip Link to post Share on other sites More sharing options...
Solution Maurice Naggar Posted January 30, 2021 Solution ID:1435605 Share Posted January 30, 2021 Hi Steve. Thanks for the ZIP file. Just did a quick look. The last Threat scan with Malwarebytes for Windows reported no malware. and there were some recent I P block notices while Edge was in use (on the 29th & 27th). The diagnostic report shows that Edge has an 'extension' that has a name like the one you mentioned Edge Extension: (Easy News Now) You can remove 'Easy News Now". while you have Microsoft Edge running, do the following. Click the 3-dot ... at top right-most corner of the Edge address bar, to see the drop-down list of options ( settings options) Select Settings > Extensions, and then select Remove under the extension you want to remove. Select Remove again to confirm. { on some versions of Edge, you will see "Extensions" listed as a choice for selection near the middle of the first list of choices.} Link to post Share on other sites More sharing options...
sswarin Posted January 30, 2021 Author ID:1435608 Share Posted January 30, 2021 Hi Maurice, I followed your directions, but do not see "Extensions" on my Settings list. I have the follwing options under Settings: Profiles Privacy, search, and services Appearance On startup New tab page Share, copy, and paste Cookies and site permissions Default browser Downloads Family safety Languages Printers System Reset settings Phone and other devices About Mic Link to post Share on other sites More sharing options...
sswarin Posted January 30, 2021 Author ID:1435612 Share Posted January 30, 2021 Hi Maurice, I found the "Extensions" option under the 3-dot main menu. And indeed the Easy News Now extension was there, so now I have removed it. I hope this works. Thank you for your help. Steve Link to post Share on other sites More sharing options...
Maurice Naggar Posted January 30, 2021 ID:1435613 Share Posted January 30, 2021 (edited) Hi Steve. So glad you found it & took care to remove the extension. Allow me to suggest a follow-up check with another tool, an anti-adware tool from Malwarebytes. Be sure you close all web browsers before you click on the "Scan" button on this next procedure. I would suggest to download, Save, and then run Malwarebytes ADWCLEANER. Please close Chrome and all other open web browsers after you have saved the Adwcleaner and before you start Adwcleaner scan. Adwcleaner detects factory Preinstalled applications too! Please download Malwarebytes AdwCleaner https://downloads.malwarebytes.com/file/adwcleaner Be sure to Save the file first, to your system. Saving to the Downloads folder should be the default on your system. Go to the folder where you saved Adwcleaner. Double click Adwcleaner to start it. At the prompt for license agreement, review and then click on I agree. You will then see a main screen for Adwcleaner. ( if you do not see it right away, minimized the other open windows, so you can see Adwcleaner). Then click on Dashboard button. Click the blue button "Scan Now". allow it a few minutes to finish the Scan. Let it remove what it finds. NOTE: When it comes to the section " Pre-installed applications You can skip that. Please find and send the Adwcleaner "C" clean report. In Adwcleaner, click the "Reports" button. Look at the list of reports for the latest date & type "Clean". Double Click that line & it will open in Notepad. Save the file to your system and then Attach that with your reply. That C clean report will be the one with the most recent Date and time at folder C:\AdwCleaner\Logs Edited January 30, 2021 by Maurice Naggar Link to post Share on other sites More sharing options...
sswarin Posted January 30, 2021 Author ID:1435624 Share Posted January 30, 2021 Hello again, I have followed your directions. I didn't find the "Reports" button, but did find the "Log Files". I have attached the latest one. Thank you. Steve AdwCleaner[C00].txt Link to post Share on other sites More sharing options...
Maurice Naggar Posted January 30, 2021 ID:1435650 Share Posted January 30, 2021 (edited) OK. Good run with Adwcleaner. No malicious items. Just a pc-manufacturer bundled game, Wildtangent, that is considered unwanted type. You may keep Adwcleaner & run it on-demand as needed. Is there anything else that you may need help on ? Edited January 30, 2021 by Maurice Naggar Link to post Share on other sites More sharing options...
sswarin Posted January 30, 2021 Author ID:1435656 Share Posted January 30, 2021 Thank you for your help Maurice. I am good for now. Steve Link to post Share on other sites More sharing options...
Maurice Naggar Posted January 31, 2021 ID:1435687 Share Posted January 31, 2021 You are welcome. My best to you. Link to post Share on other sites More sharing options...
Maurice Naggar Posted January 31, 2021 ID:1435688 Share Posted January 31, 2021 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts