startsear.info virus - help ASAP! menu

Shout-Out

User Tag List

Results 1 to 7 of 7
  1. #1
    QwEEErtzu's Avatar Master Sergeant
    Reputation
    10
    Join Date
    Oct 2010
    Posts
    106
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    startsear.info virus - help ASAP!

    When I tried to download a torrent of a TV show I'm watching there was some codec I had to instal so I could watch it. So I downloaded it (unfortunately) and apparently it changed my Firefox homepage to startsear.info. I am unable to change the settings back to my original home page because it resets every time I exit Firefox. Not sure what's with IE, the one my father uses for paying bills. I'm really an amateur so please guide me through this or if there is some special antivirus which can remove this. Please help me!
    I'm using Windows 7 if that information is helpful.

    startsear.info virus - help ASAP!
  2. #2
    Xalah's Avatar Contributor CoreCoins Purchaser
    Reputation
    219
    Join Date
    May 2012
    Posts
    241
    Thanks G/R
    2/11
    Trade Feedback
    1 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    I would follow the guide over on the forums, tends to clean out most of whats problematic
    Feel free to post the HJT log here after (pastebin link) and i can look trough it.
    http://eu.battle.net/wow/en/forum/topic/1820913657

  3. #3
    Unholyshaman's Avatar ★ Elder ★
    Reputation
    1517
    Join Date
    Jun 2007
    Posts
    2,827
    Thanks G/R
    20/20
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    This really isn't the place to ask this kind of question. This is for World of Warcraft General Discussion. We do have an Off-Topic Discussion Forum as well as a Back Room Discussion Forum which would be more relevant.

    With that said I understand your concern and desire to find a solution to your problem. Good luck getting it fixed and the virus removed.

  4. #4
    QwEEErtzu's Avatar Master Sergeant
    Reputation
    10
    Join Date
    Oct 2010
    Posts
    106
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    @Xalah Thank you for the link. I will follow the guide then link my log here as soon as possible.

    @Unholyshaman Yes, sorry about that. When I found out how bad this is I couldn't wait to ask for helpful solution so in all that rush I've came here first without checking other more appropriate topics. If you wish I will start another thread on one of those 2 you linked and paste a link here.

  5. #5
    QwEEErtzu's Avatar Master Sergeant
    Reputation
    10
    Join Date
    Oct 2010
    Posts
    106
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 1:59:36, on 2.11.2012.
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v9.00 (9.00.8112.16421)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\Explorer.EXE
    C:\Users\Public\Conduit\ConduitHelper\ConduitHelper.exe
    C:\Program Files\Microsoft Security Client\msseces.exe
    C:\Program Files\MyPlayer\visual.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Users\Igor\AppData\Local\Apps\2.0\VCNAK2P1.OHB\ZGCZ5YJ9.G93\curs..tion_9e9e83 ddf3ed3ead_0005.0001_161f1f0e4761792c\CurseClient.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Windows\system32\wuauclt.exe
    C:\Users\Igor\Desktop\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Startsear.info - The harmony of fire and water
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    R3 - URLSearchHook: (no name) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
    R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo0.dll
    R3 - URLSearchHook: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: NCH EN - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo0.dll
    O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo0.dll
    O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    O3 - Toolbar: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll
    O4 - HKLM\..\Run: [ConduitHelper] "C:\Users\Public\Conduit\ConduitHelper\ConduitHelper.exe"
    O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
    O4 - HKLM\..\Run: [MyPlayer] "C:\Program Files\MyPlayer\visual.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - Startup: CurseClientStartup.ccip
    O4 - Startup: Igor.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O15 - Trusted Zone: *.clonewarsadventures.com
    O15 - Trusted Zone: *.freerealms.com
    O15 - Trusted Zone: *.soe.com
    O15 - Trusted Zone: *.sony.com
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Usluga Google ažuriranje (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Usluga Google ažuriranje (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --
    End of file - 7551 bytes

  6. #6
    QwEEErtzu's Avatar Master Sergeant
    Reputation
    10
    Join Date
    Oct 2010
    Posts
    106
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    After half day of downloading scanning and deleting bad staff from my PC here's my log. I still need your help to guide me further and answer some of my questions.
    1. Tell me if there's something in here that I should remove from a post which could compromise some of my personal information (sorry I'm amateur so I have to ask).
    2. Does those 8-9 programs I downloaded slowing my PC? ... If are, can I delete them ?
    3. I've read a few things about this startsear.info on time, gladly I didn't clicked on their adds in my browser because they can steal my personal information and money. My father is using IE for paying bank bills so you probably understand my concern and need of fixing this ASAP. So my question is, will I be safe after you help me remove it and is it possible to remove it 100% ?

    If I think something else about this I will ask. Hope to see your reply tomorrow Xalah and thanks in advance
    Last edited by QwEEErtzu; 11-01-2012 at 08:27 PM.

  7. #7
    QwEEErtzu's Avatar Master Sergeant
    Reputation
    10
    Join Date
    Oct 2010
    Posts
    106
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    >>>>PROBLEM SOLVED<<<< thanks anyway.
    Last edited by QwEEErtzu; 11-04-2012 at 04:06 PM.

Similar Threads

  1. Need Help Asap Please
    By dabaddest in forum WoW EMU Guides & Tutorials
    Replies: 2
    Last Post: 01-07-2008, 04:08 AM
  2. Having DB problem need help asap
    By Tankotron in forum World of Warcraft Emulator Servers
    Replies: 0
    Last Post: 09-15-2007, 07:44 PM
  3. Help asap please
    By k0mb0_2007 in forum World of Warcraft Emulator Servers
    Replies: 0
    Last Post: 09-14-2007, 11:19 AM
  4. Need help ASAP (regards scammed account)
    By uberhak3r in forum World of Warcraft General
    Replies: 7
    Last Post: 06-21-2007, 12:01 AM
  5. some virus help needed ><
    By boblikes in forum World of Warcraft General
    Replies: 2
    Last Post: 08-21-2006, 08:18 PM
All times are GMT -5. The time now is 01:13 AM. Powered by vBulletin® Version 4.2.3
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Google Authenticator verification provided by Two-Factor Authentication (Free) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search