Win32:StartPage-076

Viruses and worms
1

Hello from Croatia.

One of my colleagues made his computer „sick“. AVAST recognized the intruders but they came back all the time. I switched off “System restore”, manually remove files in temp folder and clean it up but
every time when computer is restarted they are back. I also tried to scan with AVAST virus cleaner but there was no success. Pre boot scan made no success also. Do you have any suggestions? The intruders are:
Win32:HoaxAlarm-C (Adw) and
Win32:StartPage-076

“Start page” was first installed on the computer. I don’t know which websites he visited and what kind of software he installed.

Thank you for your help.

Kind regards from Croatia.

2

Some advice here:

http://www.faqfarm.com/Q/How_do_you_remove_the_Startpage_trojan_horse_virus_from_C_Windows_System32_Notepad_exe

Seems Cool Web Shredder may help:

http://www.intermute.com/spysubtract/cwshredder_download.html

Download and run the program.

There are also many free or free trial anti-spyware programs you can try:

Ad-Aware: http://www.lavasoft.de/
Spybot Search & Destroy: http://www.safer-networking.org/en/download/
Webroot Spy Sweeper: (Free working trial) http://www.download.com/Webroot-Spy-Sweeper/3000-8022_4-10373771.html
MS AntiSpyware: http://www.microsoft.com/downloads/details.aspx?FamilyId=321CD7A2-6A57-4C57-A8BD-DBF62EDA9671&displaylang=en
Yahoo! Anti-Spy: http://toolbar.yahoo.com/
X-Cleaner Free: http://www.xblock.com/download-freeware.php

3

Hello Samwise,

Maybe you get to this thread http://forum.avast.com/index.php?topic=14571.0 and download ToolbarCop. This can help you to. If you still have problems send us a HJT log.

greets/ pozdrawiam,

polonus