Win32/Startpage.NBS

[sk]

Ako sa da zbavit tohto viru. Nepomohli ani AD-Dware ani Spybot atd.

[mISHA]

a) nepis double!!!
b) nepis do INFORMACNICH THREADU!!!


C) SPYBOT a ADAWARE NEJSOU ANTIVIRY!!!!!!!!!!!!!!!!

[dekon]

Ako sa da zbavit tohto viru. Nepomohli ani AD-Dware ani Spybot atd.

Zkus nejakej antivir (AVG, NOD 32 ....).
Popripade muzes postupovat podle tohohle:

Before following this sequence please make sure Windows restore is OFF, and delete recycle bin, temp files and temp. internet files with the cleanmgr.

This is exactly how i fixed it for anyone reading this thread with same issue:

1) Booted up in safe mode.

2) Removed the known virus manually by deleting it. "Msmsgsui.exe"

3) Ran NOD32 full system scan to make sure there was nothing else.

4) Ran Ad-Aware SE, picked up 872 new items. (Where as in normal mode it only picked up about 20.)

5) Ran Spy Bot S&D, *apprantly my system is clean*, yeah right.

6) Ran CWSweeper, picked up about 20 IE infections in registry.

7) Ran HiJackThis, exported the log to my work computer and analyzed it with the link that sweetie show me. (See above, post #4 i think).
Have you downloaded MSN plus? , it contains the LOP hijacker.
Sweetie
You can copy your HJT log HERE (http://hijackthis.de/index.php?langselect=english) it's an automated analyzer.

MSMSGSVC.exe is a BHO

8 ) With a list of 21 nasties, removed them all with HiJackThis except the MSMSGSVC.exe i had to manually delete.

9) Performed another Virus scan to double check.

10) Rebooted the computer back into normal mode.

11) Went into IE options, Reset IE. Goto programs, "Reset Web Settings", ensured that the tick was on for reset default hompage aswell. Close out of IE options and IE if you were in it.

Nejdriv, zkus normalne antivir, nejak moc s tim nadelaji ....

[Harry]

NOD32 by ho mel znat (videl jsem ho ve vypisu znamych viru).