iStartSurf

[maurylen]

anyone heard of "iStartSurf" - Firefox & I.E. have been overtaken by this browser - I've tried a few suggestions to clear it but to no avail, my thoughts are now on the Registry, ie delete any entry with the subject words - a real solution would be appreciated before I head into the unknown

 

[Golden]

See if this helps:
How to remove iStartSurf.com virus (Removal Guide)

 

[maurylen]

thanks for that, i've been through that process without success e.g there is no reference to "iStartSurf" in the "add/remove " section, neither does "Reva Uninstaller Pro" show it. After making the changes to I.E. and F.F. the rogue page still dominates - any thoughts on my thoughts about deleting any iStartSurf entries in the registry? I've made changes to the registry before without any problems but this seems to be more complicated, and if I stuffed up I could always use my OS disc to repair but that would still include any of the problem entries I suppose

 

[A Guy]

Follow Jacee's instructions to download and run AdwCleaner (ignor the title of the thread)

http://www.sevenforums.com/system-s...lware-trojon-infecting-my-pc.html#post2876868

A Guy

 

[maurylen]

I hope I've done this right


AdwCleanAdwCleaner[R1].txter[RAdwCleaner[S1].txt1].txt

 

[A Guy]

Indeed, I have looked through it, go ahead and do the clean

Step 2.
Using AdwCleaner v3: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder

A Guy

 

[maurylen]

# AdwCleaner v3.310 - Report created 14/09/2014 at 21:56:41
# Updated 12/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : user-000 - MAURYJAN
# Running from : C:\Users\user-000\Downloads\AdwCleaner(1).exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\user-000\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v32.0.1 (x86 en-US)

[ File : C:\Users\user-000\AppData\Roaming\Mozilla\Firefox\Profiles\s875hp01.default-1410669824518\prefs.js ]


-\\ Google Chrome v

[ File : C:\Users\user-000\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [5317 octets] - [03/08/2014 10:07:49]
AdwCleaner[R1].txt - [4369 octets] - [14/09/2014 20:39:19]
AdwCleaner[R2].txt - [1323 octets] - [14/09/2014 21:55:44]
AdwCleaner[S0].txt - [4980 octets] - [03/08/2014 10:12:35]
AdwCleaner[S1].txt - [3639 octets] - [14/09/2014 20:40:17]
AdwCleaner[S2].txt - [1246 octets] - [14/09/2014 21:56:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1306 octets] ##########

 

[A Guy]

Great, does the problem appear fixed? I'd suggest you run some more scans just to be sure. Follow Jacee's instructions to run JRT

http://www.sevenforums.com/system-s...-scan-failed-no-admin-rights.html#post2799077

Also suggest you d/l and run Malwarebytes if you don't already have it (Chose to decline the free trial of premium unless you wish to try it)

Malwarebytes | Free Anti-Malware Detection & Removal Software

Superantispyware free is also very good

SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Eset online is another good scanner

http://www.sevenforums.com/system-s...icious-error-message-program.html#post2771089

If you picked up that one little nasty, best to be sure it's big brother isn't hanging around as well

3am, so I'm off to zzz...

A Guy

 

[maurylen]

problem appears to be fixed I have my home pages back again - NZ Herald.co.nz -
I have MWB and use it regularly, also SuperAntiSpyware and I'll download Eset - I can't thank you enough, sweet dreams, cheers from downunder

 

[A Guy]

Great, glad you got it sorted. Our pleasure

A Guy