nav.startnow

[Steve]

about 2 weeks ago i had to rebuild my PC with my original
CD of XP pro and me being an idle git havn't upgraded to
SP2 unfortunatly in that period I have managed to get my
browser hi-jacked by somthing called "nav.startnow" every
time i try to use one of my bookmarked URL's i get page
not found and at the start of the URL is (all the W's etc)
nav.start.com... I have checked my internet connection
from another O/S on a partitioned drive and it works ..any
ideas how i get rid of it ?? I have tried spybot
spysweeper and ad-aware..also scanned with Norton AV

 

[chiefboats]

about 2 weeks ago i had to rebuild my PC with my original
CD of XP pro and me being an idle git havn't upgraded to
SP2 unfortunatly in that period I have managed to get my
browser hi-jacked by somthing called "nav.startnow" every
time i try to use one of my bookmarked URL's i get page
not found and at the start of the URL is (all the W's etc)
nav.start.com... I have checked my internet connection
from another O/S on a partitioned drive and it works ..any
ideas how i get rid of it ?? I have tried spybot
spysweeper and ad-aware..also scanned with Norton AV

Manual Removal
Follow these steps to remove StartNow.HyperBar from your machine.
Begin by backing up your registry and your system, and/or setting a
Restore Point, to prevent trouble if you make a mistake.


Unregister DLLs: Unregister these DLLs with Regsvr32, then reboot:

systemroot+\system\hyperbar.dll
systemroot+\system32\hyperbar.dll


Clean Registry:

Remove these registry items (if present) with RegEdit:

HKEY_CLASSES_ROOT\clsid\{1bc1fc4b-b0d2-4d8d-9307-2e40e2a8c257}
HKEY_CLASSES_ROOT\clsid\{4b2f5308-2cb0-40e2-8030-59936ed5d22c}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser
helper objects\{4b2f5308-2cb0-40e2-8030-59936ed5d22c}
HKEY_LOCAL_MACHINE\software\classes\clsid\{1bc1fc4b-b0d2-4d8d-9307-2e40e2a8c257}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4b2f5308-2cb0-40e2-8030-59936ed5d22c}
HKEY_LOCAL_MACHINE\software\microsoft\internet
explorer\toolbar\{1bc1fc4b-b0d2-4d8d-9307-2e40e2a8c257}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser
helper objects\{4b2f5308-2cb0-40e2-8030-59936ed5d22c}



Remove Files:

Remove these files (if present) with Windows Explorer:

systemroot+\system\hyperbar.dll
systemroot+\system32\hyperbar.dll

 

[Ron Kinner]

Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. Put Hijack in the subject
so I'll know it's not spam.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)