How do I get rid of "istartsurf"

:-[ It’s impossible to uninstall! I was looking for some torrents when I got it!

Attach your basic logs. (MBAM, FRST and aswMBR…!!)
Instructions: https://forum.avast.com/index.php?topic=53253.0

Thank you very much!

You’re welcome, but we need your logs if you want help.

How do I get the logs? Sorry I am really blur about all this!

See Asyn’s first reply with the link that says instructions.

Oh managed to get it. What do you think?

that log is malwarebytes protection log, we dont need that …
we need malwarebytes scan log + Farbar recovery scan logs ( farbar will produce two logs)

and please dont change the default log names before you attach them :wink:

Let me take care of it.

Hi ugeane!
Skip the rest of instructions and from now on, until I will declare that you’re all clean, stick with me & follow my instructions.

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/Minion%20Welcome.jpg

My name’s Naathim and I’m a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat :slight_smile:

Before we start please note the following:

http://forum.programosy.pl/images/smilies/icon_arrow.gif
Analysis and research take some time, also sometimes real life gets in the way, please be patient.

http://forum.programosy.pl/images/smilies/icon_arrow.gif
Limit your internet access to posting here, some infections just wait to steal typed-in passwords.

http://forum.programosy.pl/images/smilies/icon_arrow.gif
Don’t run any scripts or tools on your own, unsupervised usage may cause more harm than good.

http://forum.programosy.pl/images/smilies/icon_arrow.gif
Stay with me to the end, the absence of symtoms doesn’t mean that your machine is fully operational.

http://forum.programosy.pl/images/smilies/icon_arrow.gif
Note that we may live in totally different time zones, what may cause some delays between answers.

http://forum.programosy.pl/images/smilies/icon_idea.gif
I can’t foresee everything, so if anything unexpected happens, please stop and inform me!

http://forum.programosy.pl/images/smilies/icon_idea.gif
There are no silly questions. Never be afraid to ask if in doubt!

Let’s start and enjoy the fight! :slight_smile:

Please run the programs listed below and attach the logs for my review.

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[
]In the main box please paste in the following script:

createsrpoint;
process;
services-list;
systemspecs;
startupall;
skipfix-iedefaults;
firefoxlook;
chromelook;
filesrcm;
installedprogs;

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Attach its content to your next reply.

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/aswMBR.png
Scan with aswMBR

Please download aswMBR by Avast! & Gmer and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on the
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/aswMBR.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[*]Allow virtualisation if offered.
[*]If you are prompted to download the latest anti-virus definitions from avast!, click No.
[*]Select Scan.
[*]Upon completion, you will see Scan finished successfully. Click Save log.

Do NOT click Fix or FixMBR!
A file (MBR.dat) will be created on your desktop. Do NOT click or delete it!

Attach the logfile to your next reply.
Do not forget to re-enable your previously switched-off protection software!

Ok done!

Hi ugeane!

Very good job with providing the logs.
http://www.geekstogo.com/forum/public/style_emoticons/default/spoton.gif

Now please give me some time to estimate your situation. Please also provide me the ZOEK report from my previous post :slight_smile:

Cheers,
Naat :slight_smile:

Hi Naathim,

Thank you for your message…but there are too many scans to do. I got to go for dinner now!

Not a problem. I will be around :slight_smile:

Skip my aswMBR instructions. ZOEK will be enough for me :slight_smile:

Naat, OP won’t be back. See: https://forum.avast.com/index.php?msg=1114906

Thanks for notifying!

Cheers,
Naat :slight_smile:

You’re welcome.

Hi,
I also have a problem with “istartsurf”.
I tried to remove it with Malwarebytes but it didn’t work, and in repeated scan Malwarebytes does not find any problems.
What should I do?
Thanks.

hey goran3 and welcome to the avast forum please start anew topic and follow this guide.

https://forum.avast.com/index.php?topic=53253.0

we need the logs from mbam,frst+addiotion, aswmbr (does not work on win 8 and win8.1)

a malware expert will help you from there.

good luck.

Hi mikaelrask,
thank you for your answer.
I managed to solve it on my own.
Actually only problem that was left after run this Malwarebytes’ Anti-Malware was corrupted shortcuts for web browser.
I fix that, and now is ok.
Best regards!