Help Removing Startpage Virus

  • Thread starter Thread starter David
  • Start date Start date
D

David

Does anyone know how to remove the Startpage virus? I have a Windows XP
machine. Every time I open Internet Explorer, my AVG antivirus program
pops up and tells me that it detects the Startpage.16.BD Trojan. I can
delete the file, but it
keeps reappearing whenever I re-open explorer. My spam removal program,
Ad-Aware, will remove any malicious Startpage files from my computer
including from the registry, but again, the virus keeps re-generating itself
whenever I open Explorer. My browser start page reads "about:blank" and I
can't change it. This pesky little virus is driving me bananas! Anyone
have any ideas?

Thanks,

Dave
 
If you already have Adaware SE v1.05, just follow the directions on its use.

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt410.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html




| Does anyone know how to remove the Startpage virus? I have a Windows XP
| machine. Every time I open Internet Explorer, my AVG antivirus program
| pops up and tells me that it detects the Startpage.16.BD Trojan. I can
| delete the file, but it
| keeps reappearing whenever I re-open explorer. My spam removal program,
| Ad-Aware, will remove any malicious Startpage files from my computer
| including from the registry, but again, the virus keeps re-generating itself
| whenever I open Explorer. My browser start page reads "about:blank" and I
| can't change it. This pesky little virus is driving me bananas! Anyone
| have any ideas?
|
| Thanks,
|
| Dave
|
|
 
I appreciate the help.. Thanks... I downloaded the programs, shutdown
System Restore, ran both programs in safe mode until no viruses/spyware were
detected, restarted the machine and ran both programs again in normal mode.
Unfortunately, I still have the virus. Every time I open Explorer, it
re-appears. Maybe my iexplore.exe file is corrupted? If it is, I wonder if
there is a way that I can replace it?

Dave
 
I appreciate the help.. Thanks... I downloaded the programs, shutdown
System Restore, ran both programs in safe mode until no viruses/spyware were
detected, restarted the machine and ran both programs again in normal mode.
Unfortunately, I still have the virus. Every time I open Explorer, it
re-appears. Maybe my iexplore.exe file is corrupted? If it is, I wonder if
there is a way that I can replace it?
Click to expand...

Download autoruns and process explorer from sysinternals
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

Run process explorer first and close down any offending running
processes, then run autoruns which monitors automatic startups. Be
sure you select "show explorer addons" from the view menu.

If you don't close down all the malware's running processes first you
might find that when you uncheck boxes in autoruns (to stop the
program loading next time) it is immediately changed back again by the
running process.


Jim.
 
Back
Top