Wednesday, September 3, 2008

Doublestartpage.com - new browser hijacker. Removal Instructions

Doublestartpage.com is the latest hijacker that may be installed by Zlob trojan to promote rogue anti-spyware products. It displays fake security warnings to scare users and trick to download and purchase fake removers:
“Warning! W32.Myzor.FK@yf is a virus that infects files with .exe extensions. It attempts to steal passwords and private information from the infected computer. If you are infected with this hijacker you will receive warnings in your task bar stating that you are infected with spyware and to run its special anti-spyware tool.”

Remember that this hijacker may slow your PC and cause critical system errors and data loss. Doublestartpage.com have two versions: Doublestartpage.com/xp and Doublestartpage.com/vista for different Microsoft operational systems. Never visit this dangerous web-sites! We recomend to remove Doublestartpage.com using Spyware Doctor + antivirus with free scan.

Doublestartpage.com screenshots:


Doublestartpage.com automatical remover:

Doublestartpage.com manual removal instructions:

Delete Doublestartpage.com files:
icmntr.exe
icthis.exe
ictun.exe
icun.exe
isfmm.exe
isfmntr.exe
isfun.exe
pmuninst.exe
gtawclv.dll
Online Security Guide.url
Security Troubleshooting.url
Online Security Guide.url
Security Troubleshooting.url
pmmon.exe
Delete Doublestartpage.com registry entries:
{c96395b8-ab09-46a4-b539-7ddf6e061808}
{ba934431-76af-4c99-93c2-c3d21944a72e}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{70d17a5f-ef27-4295-90f5-20ad6f24834f}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\Internet Explorer Secure Bar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\IExplorer Security Plug-in
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{D61D7E1A-6613-49CA-B6F9-51DB248E209D}

No comments: