1 2 Previous Next 13 Replies Latest reply on Jan 22, 2010 4:18 PM by k2nnj1

    trojan.win32.startpage.fw

      Does McAfee have a removal tool for the above?

       

      I can't seem to find anything but removal tools from other companies.

       

      Thanks,

        • 1. Re: trojan.win32.startpage.fw
          Dinz

          Have you done a full scan with mcafee ? Was the above trojan quarantined in the scan result.

           

           

           

           

           

           

           

           

          Regards,

          Dinesh K

          • 2. Re: trojan.win32.startpage.fw

            McAfee didn't catch it.

            • 3. Re: trojan.win32.startpage.fw
              Dinz

              Hi,

              It seems that the infections could be present in any system files,

              Restart the computer & start tapping F8 key, from the advanced boot menu selct safe mode with networking,

              Download the stinger from http://vil.nai.com/vil/stinger/ and run a full scan.

               

               

               

               

               

               

               

              Regards,

              Dinesh K

              • 4. Re: trojan.win32.startpage.fw

                Stinger found nothing.  It is not desined to find the type of "virus" I have, according to it's virus list.

                • 5. Re: trojan.win32.startpage.fw

                  Hello,

                   

                  What named your detection "trojan.win32.startpage.fw"? Did it not have a removal process?

                   

                  About Stinger - It now uses Artemis technology to find many suspicious malware based on internet detections. This means it can potentially find more malware than listed. If you have an up-to-date McAfee AntiVirus, Stinger shouldn't be needed.

                   

                  About virus names - Many of the antivirus companies have different names for specific and generic detections. McAfee might detect "trojan.win32.startpage.fw" as something like "Generic.dx" (for example).

                   

                  About Virus Alerts - Be careful what generates a virus alert. Malware can show you that you are infected with the "sasser.worm" just to throw you off track.

                   

                  If your detection of "trojan.win32.startpage.fw" is correct, you may be able to remove it using MalwareBytes; a free malware repair tool. http://www.malwarebytes.org/mbam-download.php

                   

                  You can also try removing the bad code/program files manually by opening an Administrator Command Prompt and typing the following commands.

                   

                  Close all programs, including Internet Explorer.

                   

                  XP: Click Start, Run, Type in CMD.EXE, click OK

                  Vista/7: Click the Start Orb, Type in CMD, Hold the left SHIFT and CTRL keys, and press ENTER. Confirm the security prompt.

                   

                  WARNING: Mistyping the following commands even by 1 character will cause this method to fail. Incorrect use of these commands may also damage your system. These commands will have no effect if the 2 bad files "MRHOP.DLL" and "MFPLAY.DLL" do not exist.

                   

                  REGSVR32 /U %SYSTEMROOT%\SYSTEM32\MRHOP.DLL

                   

                  DEL %SYSTEMROOT%\SYSTEM32\MRHOP.DLL


                  SHUTDOWN /R /T 0 /F

                   

                   

                  Message was edited by: Mark (secured2k) - Removed MFPlay.dll Reference (Vista/7 Media Foundation) on 1/22/10 7:54:15 AM EST
                  • 6. Re: trojan.win32.startpage.fw

                    McAfee is up to date and I have the latest version via comcast.  What found the malware is a free program from CA called "Pest Patrol".  Comcast gives that to customers for free.

                     

                    I will try the malware bytes removal tool and see if that works, and report back.  I am hesitant to use a command prompt removal, but I might do it as a last resort.

                     

                    Thanks,

                    Bob

                     

                     

                    Message was edited by: k2nnj1 on 1/21/10 3:46:50 PM GMT-05:00
                    • 7. Re: trojan.win32.startpage.fw

                      I thought I mentioned it in my first post, but I am running Windows 7 x64.  Will those commands work?

                      • 8. Re: trojan.win32.startpage.fw

                        Yes.

                        • 9. Re: trojan.win32.startpage.fw

                          The Malware progam you linked to found 2 threats.

                           

                          Trojan.backdoor

                          Hijack.DisplayProperties

                           

                          Not the one I wanted.  I will try the commands now.

                          1 2 Previous Next