Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for DriverAssist

- - - - -
Started by Metallica , Nov 10 2020 04:51 AM
SaferBytes

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 10 November 2020 - 04:51 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is DriverAssist?

DriverAssist is a driver updater that triggers our PUP detection rules. By doing so we offer users a choice to consider whether they want to use this software. More information can be found on our Malwarebytes Labs blog.

How do I know if I am affected by DriverAssist?

This is how the main screen of the driver updater looks:

main.png

You will find these icons in your taskbar, your startmenu, and on your desktop:

icons.png

and see this type of windows during install:

warning1.png

warning2.png

warning3.png

You may see this entry in your list of installed programs:

warning4.png

and this task in your list of Scheduled Tasks:

warning5.png

How did DriverAssist get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their website.

website.png

How do I remove DriverAssist?

Our program Malwarebytes can detect this PUP, to completely remove it you can use the built-in uninstaller from the Windows Control Panel.
  • Please download Malwarebytes for Windows to your desktop.
  • Double-click MBSetup.exe and follow the prompts to install the program.
  • When your Malwarebytes for Windows installation completes, the program opens to the Welcome to Malwarebytes screen.
  • Click on the Get started button.
  • Click Scan to start a Threat Scan.
  • When the scan is finished click Quarantine to remove the found threats.
  • Reboot the system if prompted to complete the removal process.
Is there anything else I need to do to get rid of DriverAssist?
  • No, Malwarebytes removes DriverAssist completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
What if I want to keep DriverAssist?

Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Heres how to do it.
  • Open Malwarebytes for Windows.
  • Click the Detection History
  • Click the Allow List
  • To add an item to the Allow List, click Add.
  • Select the exclusion type Allow a file or folder and use the Select a folder button to select the main folder for the software that you wish to keep.
  • Repeat this for any secondary files or folder(s) that belong to the software.
If you want to allow the program to connect to the Internet, for example to fetch updates, also add an exclusion of the type Allow an application to connect to the internet and use the Browse button to select the file you wish to grant access.

How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you in dealing with this registry cleaner.

As you can see below the full version of Malwarebytes would have warned you against the DriverAssist installer.

protection1.png


Technical details for experts

You may see these entries in FRST logs:

Startup: C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DriverAssist.lnk [2020-11-10]
ShortcutTarget: DriverAssist.lnk -> C:\Users\{username}\AppData\Local\DriverAssist\DriverAssist.exe (SB Software Group, LLC -> SB Software Group, LLC)
Task: {CB0AADA3-24E5-4409-A557-A2613F078729} - System32\Tasks\AutoStartTask => C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\DriverAssist.exe [822576 2020-11-10] (SB Software Group, LLC -> SB Software Group, LLC)
C:\Windows\system32\Tasks\AutoStartTask
C:\Users\{username}\AppData\Roaming\DriverAssist
C:\Users\{username}\AppData\Local\DriverAssist
C:\Users\{username}\Desktop\DriverAssist.lnk
C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SB Software Group, LLC
(SB Software Group, LLC) C:\Users\{username}\Desktop\DriverAssist-Setup.exe

DriverAssist (HKCU\...\DriverAssist) (Version: 5.0.0-retail0017 - SB Software Group, LLC)
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist
       Adds the file app.ico"="11/10/2020 10:48 AM, 198935 bytes, A
       Adds the file CefSharp.BrowserSubprocess.exe"="11/10/2020 10:48 AM, 201520 bytes, A
       Adds the file DriverAssist.exe"="11/10/2020 10:48 AM, 401200 bytes, A
       Adds the file DriverAssist.Install.exe"="11/10/2020 10:48 AM, 202032 bytes, A
       Adds the file DriverAssist.Upgrade.exe"="11/10/2020 10:48 AM, 199984 bytes, A
       Adds the file Update.exe"="8/5/2020 11:42 AM, 1834288 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017
       Adds the file cef.pak"="11/10/2020 10:48 AM, 3699714 bytes, A
       Adds the file cef_100_percent.pak"="11/10/2020 10:48 AM, 726296 bytes, A
       Adds the file cef_200_percent.pak"="11/10/2020 10:48 AM, 857138 bytes, A
       Adds the file CefSharp.BrowserSubprocess.Core.dll"="11/10/2020 10:48 AM, 1232688 bytes, A
       Adds the file CefSharp.BrowserSubprocess.exe"="11/10/2020 10:48 AM, 16688 bytes, A
       Adds the file CefSharp.Core.dll"="11/10/2020 10:48 AM, 1861424 bytes, A
       Adds the file CefSharp.dll"="11/10/2020 10:48 AM, 224048 bytes, A
       Adds the file CefSharp.WinForms.dll"="11/10/2020 10:48 AM, 35120 bytes, A
       Adds the file chrome_elf.dll"="11/10/2020 10:48 AM, 876848 bytes, A
       Adds the file concrt140.dll"="11/10/2020 10:48 AM, 323376 bytes, A
       Adds the file crypto.dll"="11/10/2020 10:48 AM, 6094128 bytes, A
       Adds the file debug.log"="11/10/2020 10:49 AM, 959 bytes, A
       Adds the file DeltaCompressionDotNet.dll"="11/10/2020 10:48 AM, 12080 bytes, A
       Adds the file DeltaCompressionDotNet.MsDelta.dll"="11/10/2020 10:48 AM, 13104 bytes, A
       Adds the file DeltaCompressionDotNet.PatchApi.dll"="11/10/2020 10:48 AM, 12592 bytes, A
       Adds the file DriverAssist.Core.dll"="11/10/2020 10:48 AM, 82224 bytes, A
       Adds the file DriverAssist.exe"="11/10/2020 10:48 AM, 822576 bytes, A
       Adds the file DriverAssist.exe.config"="11/10/2020 10:48 AM, 2474 bytes, A
       Adds the file DriverAssist.Install.exe"="11/10/2020 10:48 AM, 62256 bytes, A
       Adds the file DriverAssist.Sdk.dll"="11/10/2020 10:48 AM, 289584 bytes, A
       Adds the file DriverAssist.Upgrade.exe"="11/10/2020 10:48 AM, 58672 bytes, A
       Adds the file DriverAssist.Upgrade.exe.config"="11/10/2020 10:48 AM, 338 bytes, A
       Adds the file FluentValidation.dll"="11/10/2020 10:48 AM, 331056 bytes, A
       Adds the file icudtl.dat"="11/10/2020 10:48 AM, 10410272 bytes, A
       Adds the file InfExtractor.dll"="11/10/2020 10:48 AM, 77104 bytes, A
       Adds the file InfParser.dll"="11/10/2020 10:48 AM, 100656 bytes, A
       Adds the file INIFileParser.dll"="11/10/2020 10:48 AM, 33584 bytes, A
       Adds the file libcef.dll"="11/10/2020 10:48 AM, 112725808 bytes, A
       Adds the file Microsoft.Deployment.WindowsInstaller.dll"="11/10/2020 10:48 AM, 191792 bytes, A
       Adds the file Microsoft.Experimental.IO.dll"="11/10/2020 10:48 AM, 21296 bytes, A
       Adds the file Microsoft.Owin.Diagnostics.dll"="11/10/2020 10:48 AM, 158000 bytes, A
       Adds the file Microsoft.Owin.dll"="11/10/2020 10:48 AM, 98608 bytes, A
       Adds the file Microsoft.Owin.FileSystems.dll"="11/10/2020 10:48 AM, 18224 bytes, A
       Adds the file Microsoft.Owin.Host.HttpListener.dll"="11/10/2020 10:48 AM, 84784 bytes, A
       Adds the file Microsoft.Owin.Hosting.dll"="11/10/2020 10:48 AM, 63280 bytes, A
       Adds the file Microsoft.Owin.StaticFiles.dll"="11/10/2020 10:48 AM, 63792 bytes, A
       Adds the file Microsoft.Win32.TaskScheduler.dll"="11/10/2020 10:48 AM, 334640 bytes, A
       Adds the file Mono.Cecil.dll"="11/10/2020 10:48 AM, 288048 bytes, A
       Adds the file Mono.Cecil.Mdb.dll"="11/10/2020 10:48 AM, 52528 bytes, A
       Adds the file Mono.Cecil.Pdb.dll"="11/10/2020 10:48 AM, 89392 bytes, A
       Adds the file Mono.Cecil.Rocks.dll"="11/10/2020 10:48 AM, 31024 bytes, A
       Adds the file msvcp140.dll"="11/10/2020 10:48 AM, 618800 bytes, A
       Adds the file msvcp140_1.dll"="11/10/2020 10:48 AM, 22320 bytes, A
       Adds the file msvcp140_2.dll"="11/10/2020 10:48 AM, 196912 bytes, A
       Adds the file natives_blob.bin"="11/10/2020 10:48 AM, 83237 bytes, A
       Adds the file Newtonsoft.Json.dll"="11/10/2020 10:48 AM, 675120 bytes, A
       Adds the file NLog.dll"="11/10/2020 10:48 AM, 824624 bytes, A
       Adds the file NuGet.Squirrel.dll"="11/10/2020 10:48 AM, 518448 bytes, A
       Adds the file Owin.dll"="11/10/2020 10:48 AM, 12080 bytes, A
       Adds the file OwinFileHost.dll"="11/10/2020 10:48 AM, 11440432 bytes, A
       Adds the file SafeBytes.Core.dll"="11/10/2020 10:48 AM, 113968 bytes, A
       Adds the file Salar.DpiAware.dll"="11/10/2020 10:48 AM, 19760 bytes, A
       Adds the file SharpCompress.dll"="11/10/2020 10:48 AM, 461616 bytes, A
       Adds the file SharpRaven.dll"="11/10/2020 10:48 AM, 100144 bytes, A
       Adds the file snapshot_blob.bin"="11/10/2020 10:48 AM, 295040 bytes, A
       Adds the file Splat.dll"="11/10/2020 10:48 AM, 53552 bytes, A
       Adds the file Squirrel.dll"="11/10/2020 10:48 AM, 246576 bytes, A
       Adds the file System.Net.Http.Formatting.dll"="11/10/2020 10:48 AM, 176944 bytes, A
       Adds the file System.Runtime.InteropServices.RuntimeInformation.dll"="11/10/2020 10:48 AM, 24368 bytes, A
       Adds the file System.Threading.Tasks.Dataflow.dll"="11/10/2020 10:48 AM, 168752 bytes, A
       Adds the file System.ValueTuple.dll"="11/10/2020 10:48 AM, 70448 bytes, A
       Adds the file v8_context_snapshot.bin"="11/10/2020 10:48 AM, 709496 bytes, A
       Adds the file vccorlib140.dll"="11/10/2020 10:48 AM, 357680 bytes, A
       Adds the file vcruntime140.dll"="11/10/2020 10:48 AM, 76592 bytes, A
       Adds the file ZetaLongPaths.dll"="11/10/2020 10:48 AM, 69936 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\7z
       Adds the file 7z.dll"="11/10/2020 10:48 AM, 1000240 bytes, A
       Adds the file 7z.exe"="11/10/2020 10:48 AM, 252208 bytes, A
       Adds the file 7-zip.dll"="11/10/2020 10:48 AM, 57648 bytes, A
       Adds the file history.txt"="11/10/2020 10:48 AM, 2435 bytes, A
       Adds the file License.txt"="11/10/2020 10:48 AM, 1142 bytes, A
       Adds the file readme.txt"="11/10/2020 10:48 AM, 4375 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\7z\Far
       Adds the file 7-ZipEng.hlf"="11/10/2020 10:48 AM, 2365 bytes, A
       Adds the file 7-ZipEng.lng"="11/10/2020 10:48 AM, 2943 bytes, A
       Adds the file 7-ZipFar.dll"="11/10/2020 10:48 AM, 211760 bytes, A
       Adds the file 7-ZipFar64.dll"="11/10/2020 10:48 AM, 355120 bytes, A
       Adds the file 7-ZipRus.hlf"="11/10/2020 10:48 AM, 2190 bytes, A
       Adds the file 7-ZipRus.lng"="11/10/2020 10:48 AM, 3027 bytes, A
       Adds the file 7zToFar.ini"="11/10/2020 10:48 AM, 2784 bytes, A
       Adds the file far7z.reg"="11/10/2020 10:48 AM, 2987 bytes, A
       Adds the file far7z.txt"="11/10/2020 10:48 AM, 2487 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\7z\x64
       Adds the file 7z.dll"="11/10/2020 10:48 AM, 1429808 bytes, A
       Adds the file 7z.exe"="11/10/2020 10:48 AM, 291632 bytes, A
       Adds the file 7-zip.dll"="11/10/2020 10:48 AM, 93488 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\de
       Adds the file DriverAssist.resources.dll"="11/10/2020 10:48 AM, 10544 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\es
       Adds the file DriverAssist.resources.dll"="11/10/2020 10:48 AM, 10544 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\fr
       Adds the file DriverAssist.resources.dll"="11/10/2020 10:48 AM, 10544 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\locales
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\nl
       Adds the file DriverAssist.resources.dll"="11/10/2020 10:48 AM, 10544 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\pt
       Adds the file DriverAssist.resources.dll"="11/10/2020 10:48 AM, 10544 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\app-5.0.0-retail0017\ru
       Adds the file DriverAssist.resources.dll"="11/10/2020 10:48 AM, 10544 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\downloads
    Adds the folder C:\Users\{username}\AppData\Local\DriverAssist\packages
       Adds the file .betaId"="11/10/2020 10:49 AM, 39 bytes, A
       Adds the file DriverAssist-5.0.0-retail0017-full.nupkg"="8/5/2020 11:39 AM, 68502044 bytes, A
       Adds the file RELEASES"="11/10/2020 10:48 AM, 93 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\DriverAssist
    Adds the folder C:\Users\{username}\AppData\Roaming\DriverAssist\cache\blob_storage\19753a62-89d1-41a2-8844-72de514c4d8f
    Adds the folder C:\Users\{username}\AppData\Roaming\DriverAssist\cache\Cache
    Adds the folder C:\Users\{username}\AppData\Roaming\DriverAssist\cache\Code Cache\js
       Adds the file 0e140f98c119e9f4_0"="11/10/2020 10:49 AM, 188 bytes, A
       Adds the file 2b564551aa0652ae_0"="11/10/2020 10:49 AM, 185 bytes, A
       Adds the file index"="11/10/2020 10:49 AM, 24 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\DriverAssist\cache\Code Cache\js\index-dir
       Adds the file the-real-index"="11/10/2020 10:49 AM, 96 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\DriverAssist\cache\GPUCache
       Adds the file data_0"="11/10/2020 10:49 AM, 8192 bytes, A
       Adds the file data_1"="11/10/2020 10:49 AM, 270336 bytes, A
       Adds the file data_2"="11/10/2020 10:49 AM, 8192 bytes, A
       Adds the file data_3"="11/10/2020 10:49 AM, 8192 bytes, A
       Adds the file index"="11/10/2020 10:49 AM, 262512 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\DriverAssist\config
    Adds the folder C:\Users\{username}\AppData\Roaming\DriverAssist\logs
       Adds the file DriverAssist.exe.log"="11/10/2020 10:49 AM, 992 bytes, A
       Adds the file DriverAssist.Install.exe.log"="11/10/2020 10:48 AM, 531 bytes, A
       Adds the file DriverAssist.Upgrade.exe.log"="11/10/2020 10:49 AM, 2324 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SB Software Group, LLC
       Adds the file DriverAssist.lnk"="11/10/2020 10:48 AM, 2604 bytes, A
    In the existing folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
       Adds the file DriverAssist.lnk"="11/10/2020 10:48 AM, 2634 bytes, A
    In the existing folder C:\Users\{username}\Desktop
       Adds the file DriverAssist.lnk"="11/10/2020 10:48 AM, 2590 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file AutoStartTask"="11/10/2020 10:49 AM, 3526 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\DriverAssist]
       "DisplayIcon"="REG_SZ", "C:\Users\{username}\AppData\Local\DriverAssist\app.ico"
       "DisplayName"="REG_SZ", "DriverAssist"
       "DisplayVersion"="REG_SZ", "5.0.0-retail0017"
       "EstimatedSize"="REG_DWORD", 66896
       "InstallDate"="REG_SZ", "20201110"
       "InstallLocation"="REG_SZ", "C:\Users\{username}\AppData\Local\DriverAssist"
       "Language"="REG_DWORD", 1033
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "SB Software Group, LLC"
       "QuietUninstallString"="REG_SZ", ""C:\Users\{username}\AppData\Local\DriverAssist\Update.exe" --uninstall -s"
       "UninstallString"="REG_SZ", ""C:\Users\{username}\AppData\Local\DriverAssist\Update.exe" --uninstall"
       "URLUpdateInfo"="REG_SZ", ""
Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 11/10/20
Scan Time: 11:08 AM
Log File: a13ac17a-233c-11eb-bbf1-080027235d76.json

-Software Information-
Version: 4.2.3.96
Components Version: 1.0.1104
Update Package Version: 1.0.32696
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 232341
Threats Detected: 3
Threats Quarantined: 3
Time Elapsed: 2 min, 50 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 2
PUP.Optional.DriverAssist, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverAssist_RASAPI32, Quarantined, 3541, 345024, 1.0.32696, , ame, , , 
PUP.Optional.DriverAssist, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverAssist_RASMANCS, Quarantined, 3541, 345024, 1.0.32696, , ame, , , 

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
PUP.Optional.DriverAssist, C:\USERS\{username}\DESKTOP\DRIVERASSIST.LNK, Quarantined, 3541, 334855, 1.0.32696, , ame, , E4BA0F5F043EEE6653A4181C9B077CB3, 9773A9FC4BA988A5CF4C28BDE32CC7670BE992F0F9E2E852E90D7B8942433742

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.