Sunday, 2 January 2011

Remove Adware.StartPage (Uninstall Guide)

Adware.StartPage pretends to be a valid program but actually it is an adware that modifies the Internet Explorer home page without the user's permission. This adware changes certain Windows registry values so that it starts automatically when the user logins to Windows. It may modify Windows Hosts file and add a list of URLs to the Favorites folder, some of which may contain adult content as well. Basically, Adware.StartPage is designed to deliver various advertisements to the users' systems. I'm sure you know how to change the home page in Internet Explorer. Unfortunately, Adware.StartPage changes Internet Explorer's behavior, so you won't be able to change your home page through Internet Explorer settings as you would normally do. To remove Adware.StartPage from your computer, please follow the removal instructions below.

Alias: Trojan.Win32.StartPage.agxj [Kaspersky Lab]

Here's an example of the modified home page in Internet Explorer: tt265(dot)net.


Adware.StartPage removal instructions:

1. Download free anti-malware software from the list below and run a full system scan.
NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe With all of these tools, if running Windows 7 or Vista they MUST be run as administrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.

2. New threats appear every day. In order to protect your PC from such (new) infections we strongly recommend you to use ESET Smart Security.


Adware.StartPage associated files and registry values:

Files:
  • C:\Documents and Settings\All Users\Desktop\Internat Explorar.oc
  • C:\Documents and Settings\[UserName]\Local Settings\Temp\temp_tmp.bat
  • C:\Program Files\Microsoft\Internat Explorer\Desktop.ini
  • C:\Program Files\Microsoft\Internat Explorer\target.lnk
  • C:\Windows\System32\winproc32.exe
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.oc "ocfile"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile\DefaultIcon "%1"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile\shell
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile\shell\open
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ocfile\shell\open\command "explorer "%ProgramFiles%\Microsoft\Internat Explorer"
Share this information with other people:

No comments:

Post a Comment