Removal of Trojan Virus Startpage

Removal of Trojan Virus Startpage

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Removal of Trojan Virus Startpage Dave G 06-27-2005
Posted by Dave G on June 27, 2005, 12:25 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I used AVG anti-virus from Grisoft to detect the StartPage21.AS,
Startpage.21.AR, & Startpage.BW hijacking Trojan viruses and Now I can not
completely
boot to the OS(WinXP home SP2) and have tried safe mode boot too. No Luck
they both get to where you receive the sign on screen and you select user
but next window it appears to just stop with just the desktop picture
showing, no icons no taskbars, no start button. I can use CTL/ALT/DEL to get
to Task manager to run, I got AVG to run from start new task and went into
virus vault where it put the culprits. TROJAN Startpage.BW, in
C:Windows\XMLIBUI.exe, Startpage.21.AS in C:Windows\xmllib.dll primary file
and in (3) backup copies as well, startpage.21.AR found in
C:Windows\System32\Tmntsvr32.EXE, C:Windows\msxmidi.exe,
C:Windows\system32\SMSSU.EXE, C:Windows\iexplore_dbg.exe,
C:Windows\explorer32dbg.exe. I tried to restore the said files to no avail.
I ran adaware not updated since no internet connectivity, and found
Coolwebsearch malware & removed the 14 instances of it. Still o luck. Any
help at this point would be greatly appreciated.

TIA,

Dave



Posted by Chek on June 27, 2005, 7:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
FYI Dave,
that command isn't available in XP Home Edition, even with
SP2 applied.


Chek

>
> | I used AVG anti-virus from Grisoft to detect the
> StartPage21.AS,
> | Startpage.21.AR, & Startpage.BW hijacking Trojan viruses
> and Now I can not
> | completely
> | boot to the OS(WinXP home SP2) and have tried safe mode
> boot too. No Luck
> | they both get to where you receive the sign on screen
> and you select user
> | but next window it appears to just stop with just the
> desktop picture
> | showing, no icons no taskbars, no start button. I can
> use CTL/ALT/DEL to get
> | to Task manager to run, I got AVG to run from start new
> task and went into
> | virus vault where it put the culprits. TROJAN
> Startpage.BW, in
> | C:Windows\XMLIBUI.exe, Startpage.21.AS in
> C:Windows\xmllib.dll primary file
> | and in (3) backup copies as well, startpage.21.AR found
> in
> | C:Windows\System32\Tmntsvr32.EXE, C:Windows\msxmidi.exe,
> | C:Windows\system32\SMSSU.EXE,
> C:Windows\iexplore_dbg.exe,
> | C:Windows\explorer32dbg.exe. I tried to restore the said
> files to no avail.
> | I ran adaware not updated since no internet
> connectivity, and found
> | Coolwebsearch malware & removed the 14 instances of it.
> Still o luck. Any
> | help at this point would be greatly appreciated.
> |
> | TIA,
> |
> | Dave
> |
>
> In Task Manager se if you can execute;
> %windir%\system32\lusrmgr.msc
>
> Ad then create a new account and then try logging on with
> that new account.
>
> Report back and we'll continue from thre.
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Posted by Dave G on June 27, 2005, 7:47 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I got the command to run but am using XP home which says it is not a valid
snapin for, says to use user accounts in control panel. How do I get there?

>
> | I used AVG anti-virus from Grisoft to detect the StartPage21.AS,
> | Startpage.21.AR, & Startpage.BW hijacking Trojan viruses and Now I can
> not
> | completely
> | boot to the OS(WinXP home SP2) and have tried safe mode boot too. No
> Luck
> | they both get to where you receive the sign on screen and you select
> user
> | but next window it appears to just stop with just the desktop picture
> | showing, no icons no taskbars, no start button. I can use CTL/ALT/DEL to
> get
> | to Task manager to run, I got AVG to run from start new task and went
> into
> | virus vault where it put the culprits. TROJAN Startpage.BW, in
> | C:Windows\XMLIBUI.exe, Startpage.21.AS in C:Windows\xmllib.dll primary
> file
> | and in (3) backup copies as well, startpage.21.AR found in
> | C:Windows\System32\Tmntsvr32.EXE, C:Windows\msxmidi.exe,
> | C:Windows\system32\SMSSU.EXE, C:Windows\iexplore_dbg.exe,
> | C:Windows\explorer32dbg.exe. I tried to restore the said files to no
> avail.
> | I ran adaware not updated since no internet connectivity, and found
> | Coolwebsearch malware & removed the 14 instances of it. Still o luck.
> Any
> | help at this point would be greatly appreciated.
> |
> | TIA,
> |
> | Dave
> |
>
> In Task Manager se if you can execute; %windir%\system32\lusrmgr.msc
>
> Ad then create a new account and then try logging on with that new
> account.
>
> Report back and we'll continue from thre.
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Posted by David H. Lipman on June 28, 2005, 8:50 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| I got the command to run but am using XP home which says it is not a valid
| snapin for, says to use user accounts in control panel. How do I get there?
|

Execute; control

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by Dave G on June 28, 2005, 4:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
huh?

Dave
Dave1ee@yahoo.com

>
> | I got the command to run but am using XP home which says it is not a
> valid
> | snapin for, says to use user accounts in control panel. How do I get
> there?
> |
>
> Execute; control
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Similar ThreadsPosted
Trojan.StartPage.N November 10, 2005, 1:34 pm
Removal of Virus/Trojan DLLs ? November 25, 2007, 12:13 am
Removal of Virus/Trojan DLLs ? (more decom tips) November 28, 2007, 9:32 am
PSGuard - Win32.StartPage.he Whiipped! September 7, 2005, 6:17 pm
Win 32 Trojan removal help... April 13, 2007, 12:58 am
Re: Trojan Removal Help July 21, 2008, 6:20 am
Vundo/Virtumonde trojan removal February 24, 2008, 10:04 pm
RE: Virus removal help please! September 21, 2005, 8:42 pm
Virus removal help please! September 21, 2005, 8:39 pm
virus removal December 4, 2005, 4:51 am

The site map in XML format XML site map

Contact Us | Privacy Policy