Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help required


  • Please log in to reply
12 replies to this topic

#1 d0ug

d0ug

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 10 October 2014 - 10:19 AM

2 problem first unable to get rid of a start up web page

http://istart.webssearches.com/?type=sc&ts=1412866911&from=adks&uid=ST750LM022XHN-M750MBB_S31PJ9FF410321

I have removed it many times from my reg files and it rewrites itself back.

 

second firefox usng youtube it freezes the computer and the only way out is to reboot.

I do not have the same problem with other browsers

 

If anyone knows the answer I would love to hear it.


Edited by hamluis, 10 October 2014 - 12:06 PM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,802 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:34 PM

Posted 10 October 2014 - 11:02 AM

Go to the Control Panel and open Programs and Features and uninstall istart.webssearches.
 
 
Please run AdwCleaner
 
Please download AdwCleaner and install it.
 
When AdwCleaner opens you will see an image like the one below.
 
adwcleaner11_zps48314883.png
 
Click on Scan to start the scan.
 
Once the search is complete a list of the pending items will be displayed.  If you see any which you do not want removed, remove the check mark next to it.  
 
Click on Clean to remove the selected items.  If you have any questions about any items in the list please copy and paste the list in your topic so we can review it.  
 
You will receive a message telling you that all programs will be closed so that the infections can be removed.  Click on OK.  The computer will be restarted to complete the cleaning process.
 
When the cleaning process is complete a log of what was removed will be presented.  Please copy and the paste this log in your topic.
 
 
 

Please download Junkware Removal Tool.
 
Open your browser and go to Downloads, then click on the Junkware Removal Tool to install it.  
 
Click on Run to initiate the installation.
 
To avoid potential conflicts, temporarily disable your antivirus and firewall.  You will want to be offline when you do this.
 
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select Run as Administrator.
 
The tool will open and start scanning your system.
 
Please be patient as this can take a while to complete depending on your system's specifications.
 
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.  Copy and this and then post this in your topic.
 
 
Remove istart.webssearches from your browsers.
 

Remove from Internet Explorer
 
Press Alt+T and click Internet Options.
Open the General tab.
Change the home page and click OK.
Press Alt+T and click Manage Add-ons.
Click Toolbars and Extensions and remove unwanted extension.
Click Search Providers and set a new default search engine.
 
Remove from Google Chrome
 
Press Alt+F and point to Tools.
Click Extensions.
Remove unwanted extensions.
Click Settings.
Under On startup, select the last option and click Set pages.
Set a new startup page.
Under Search, click Manage search engines and click enter the URL of your new default search provider. Click Ok.
 
Remove from Mozilla Firefox
 
Press Alt+T and click Options.
Open the General tab and change the home page.
Click OK.
Press Ctrl+Shift+A and click Extensions.
Remove unwanted extensions.
Close the tab.
Click the search engine icon next to the search box and select a new search provider.
 
 
 

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 d0ug

d0ug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 10 October 2014 - 12:37 PM

Thank you very very much I worked on this for a week and it kept rewritting itself back in.

Now I have to find out why firefox crashes my computer on youtube. maybe it is fix I have not checked.

Thanks again



#4 d0ug

d0ug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 10 October 2014 - 12:51 PM

The computer is still crashing when using firefox and youtube but youtube on other browers are no problem.



#5 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,802 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:34 PM

Posted 10 October 2014 - 12:58 PM

Have you run the scans I suggested?

 

If you have, please post the logs as I requested.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#6 d0ug

d0ug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 10 October 2014 - 03:06 PM

Sorry I did not save the logs is there any way of getting them



#7 d0ug

d0ug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 10 October 2014 - 03:22 PM

# AdwCleaner v3.311 - Report created 10/10/2014 at 14:09:12
# Updated 30/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Doug - DOUG-HP
# Running from : C:\Users\Doug\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : BackupStack
Service Found : {55dce8ba-9dec-4013-937e-adbf9317d990}w64
Service Found : {c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64

***** [ Files / Folders ] *****

File Found : C:\Users\Doug\AppData\Roaming\Mozilla\Firefox\Profiles\yticrio8.default-1406761201502\invalidprefs.js
File Found : C:\Users\Doug\Documents\uninstaller.exe
Folder Found : C:\Program Files (x86)\Application Updater
Folder Found : C:\Program Files (x86)\IObit Apps Toolbar
Folder Found : C:\Program Files (x86)\SiteLookup
Folder Found : C:\Users\Doug\AppData\Local\FileTypeAssistant
Folder Found : C:\Users\Doug\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen
Folder Found : C:\Users\Doug\AppData\Local\Slick Savings
Folder Found : C:\Users\Doug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup

***** [ Scheduled Tasks ] *****

Task Found : Driver Booster Scan
Task Found : Driver Booster Update
Task Found : ProgramRefresh-ATFST
Task Found : ProgramUpdateCheck

***** [ Shortcuts ] *****

Shortcut Found : C:\Users\Public\Desktop\Mozilla Firefox.lnk ( hxxp://istart.webssearches.com/?type=sc&ts=1412866911&from=adks&uid=ST750LM022XHN-M750MBB_S31PJ9FF410321 )
Shortcut Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk ( hxxp://istart.webssearches.com/?type=sc&ts=1412866911&from=adks&uid=ST750LM022XHN-M750MBB_S31PJ9FF410321 )
Shortcut Found : C:\Users\Doug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk ( hxxp://istart.webssearches.com/?type=sc&ts=1412866911&from=adks&uid=ST750LM022XHN-M750MBB_S31PJ9FF410321 )
Shortcut Found : C:\Users\Doug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk ( hxxp://istart.webssearches.com/?type=sc&ts=1412866911&from=adks&uid=ST750LM022XHN-M750MBB_S31PJ9FF410321 )
Shortcut Found : C:\Users\Doug\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk ( hxxp://istart.webssearches.com/?type=sc&ts=1412866911&from=adks&uid=ST750LM022XHN-M750MBB_S31PJ9FF410321 )
Shortcut Found : C:\Users\Doug\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk ( hxxp://istart.webssearches.com/?type=sc&ts=1412866911&from=adks&uid=ST750LM022XHN-M750MBB_S31PJ9FF410321 )

***** [ Registry ] *****

Key Found : HKCU\Software\FileTypeAssistant
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\UpdateStar
Key Found : [x64] HKCU\Software\FileTypeAssistant
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\UpdateStar
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\DealKeeper_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\DealKeeper_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\updateDealKeeper_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\updateDealKeeper_RASMANCS
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Mozilla Firefox v32.0.3 (x86 en-US)

[ File : C:\Users\Doug\AppData\Roaming\Mozilla\Firefox\Profiles\yticrio8.default-1406761201502\prefs.js ]

Line Found : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
Line Found : user_pref("extensions.quick_start.enable_search1", false);
Line Found : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [5037 octets] - [10/10/2014 14:09:12]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [5097 octets] ##########

 

 

# AdwCleaner v3.311 - Report created 10/10/2014 at 17:04:17
# Updated 30/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Doug - DOUG-HP
# Running from : C:\Users\Doug\Desktop\utilities\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found : C:\Users\Doug\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Mozilla Firefox v32.0.3 (x86 en-US)

[ File : C:\Users\Doug\AppData\Roaming\Mozilla\Firefox\Profiles\yticrio8.default-1406761201502\prefs.js ]


-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [5209 octets] - [10/10/2014 14:09:12]
AdwCleaner[R1].txt - [1115 octets] - [10/10/2014 17:04:17]
AdwCleaner[S0].txt - [4532 octets] - [10/10/2014 14:10:52]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1235 octets] ##########


 



#8 d0ug

d0ug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 10 October 2014 - 03:47 PM

Sorry I can not find the first one so I did it again

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.2 (10.09.2014:1)
OS: Windows 7 Home Premium x64
Ran by Doug on 10/10/2014 at 17:23:50.90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}



~~~ Files

Successfully disinfected: [Shortcut] C:\Users\Doug\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10/10/2014 at 17:38:13.58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 



#9 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,802 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:34 PM

Posted 11 October 2014 - 11:40 AM

Did this resolve your problem?


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#10 d0ug

d0ug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 12 October 2014 - 09:18 AM

Yes it resolved the problem of the web site and thanks. The second problem with the computer crashing when I use Firefox and youtube still is there. when I use a different browser it does not happen.

 

Thanks for helping me with that problem with that d*m web site.



#11 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,802 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:34 PM

Posted 12 October 2014 - 09:59 AM

I get a headache just reading about this problem.  There doesn't seem to be any specific fix for this problem, and it is wide spread.  It seems that the majority of suggestion are to use another browser.

 

There is an article posted in ghacks.net which has some suggestion which you might try.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#12 d0ug

d0ug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:07:34 PM

Posted 12 October 2014 - 12:10 PM

Thank again I will do that and thanks again for solving the other problem



#13 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,802 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:34 PM

Posted 12 October 2014 - 12:21 PM

You are most welcome, good luck with the other problem.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users