Solved How do I completely remove startsearcher

[Monarch8d]

Someone has put this browser hijacker on my computer and it's not showing up in add/remove programs. Also, my McAfee Pro antivirus doesn't detect it. Any suggestions?

 

[DBone]

The standard starting point would be to download, update and run a full scan with Malwarebytes and HitMan Pro. I would run MBAM first, followed by HMP.

 

[Layback Bear]

Here is a great program offered by Microsoft.

https://connect.microsoft.com/systemsweeper
I like Dbone also recommend Malware Anti Malware.

http://www.malwarebytes.org/products/malwarebytes_free

 

[Jacee]

Did you download a 'free' facebook theme? See this bit of info Remove Startsearcher.com - PC HelpSoft

 

[Monarch8d]

No one in my house uses facebook. I noticed start search in the programs list and I notice in my searches using all of my web browsers. I've removed the program but it's affecting my browsers. McAfee didn't pick up so I'm going to try malware bytes and hmp when I get home. If this doesn't work I'll try system restore or uninstalling/reinstalling the browsers I guess.

 

[Jacee]

Let's flush the DNS cache and restore MS's Hosts file ....

Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Right click on the flush.bat file to run it as Administrator. Your computer will reboot itself.

Now reset your preferred search page. Let me know if this works.

 

[Monarch8d]

Didn't work. Trying malware bytes again and hmp....

EDIT: this is what comes up in the address bar h ttp://startsear.ch/?aff= 1

 

[DBone]

If MBAM and HMP don't work, give SUPERAntiSpyware's portable scan a shot:

SUPERAntiSpyware.com - SUPERAntiSpyware Portable Scanner

 

[Monarch8d]

Trying now. I used revo uninstaller to uninstall chrome and Firefox, there were odd registry keys they were associated with the browser, some weird blue icon. I re installed them and the issue is gone... worried it's still lurking around though

 

[Monarch8d]

I uninstalled all browsers, reinstalled, and went through the registry and deleted everything associated with his hijacker and everything seems to be working fine now.

 

[DBone]

That's good to hear. Have you chased the uninstalls / registry work with an MBAM and HMP scan? I would, just to double check.

 

[Layback Bear]

Here is another little trick. When you remove something it normally go to $Recycle Bin; which means it can be wrote over but its still on you computer. I use Ccleaner to wipe free space which cleans out $Recycle Bin. Takes some time to do this.