Results 1 to 11 of 11
  1. #1
    New Lounger
    Join Date
    Mar 2005
    Posts
    22
    Thanks
    0
    Thanked 0 Times in 0 Posts

    popuper.startsearches.net hijacker

    Does anyone know what this is? I'm using Spysweeper and it keeps coming up and refuses to go away. I did three sweeps today-with the middle one in 'safe mode' but it was still there after the third sweep. I've also used Lavasoft Adaware and my system has also got a Firewall (Outpost). I haven't noticed anything odd (pop ups or anything like that) but every time I run Spysweeper, it comes up with this result, no matter how many times I click to remove it.

  2. #2
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: popuper.startsearches.net hijacker

    There are removal instructions here.

    You will need to get a copy of HijackThis and post it on one of the help forums if you don't understand these instructions.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  3. #3
    New Lounger
    Join Date
    Mar 2005
    Posts
    22
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: popuper.startsearches.net hijacker

    Thanks for the advice--however, I've just run a 'Hijack this' scan and it's failed to identify 'popuper.startsearches.net ' as far as I can see. What I don't understand is why Sysweeper (usually v. efficient) keeps telling me I've got this thing and why, even after three sweeps with spysweeper, including one in 'safe mode' it still seems to be there. I'd also to know what this thing is, and if it's a real threat!
    'Hijack This' seems difficult to use, since it won't give you any info. about the stuff it finds, and most of the stuff it found seemed to be legitimate, like my anti-spyware and firewall. So I'm afraid I'm still rather stumped!,

  4. #4
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: popuper.startsearches.net hijacker

    Seems to be a Browser Hijacker and I found another set of removal instructions here.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  5. #5
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: popuper.startsearches.net hijacker

    HijackThis is a complicated program and requires an expert to read the log files and determine what to remove and what tools are necessary to do the job. You will find a HijackThis tutorial here, but unless you know what you are looking at you will need to post the log. It does not remove anything itself, <font color=red>Edited by Doc here</font color=red><font color=blue>it simply finds the problems and give you the capability to remove some, but not always all of them.</font color=blue> The things it finds are deeply entrenched in your system and resist removal by normal means, requiring specially developed tools to remove them and the knowledge of where to find and how to use these tools.

    The first link I posted was to the manual removal instructions for your problem and as I stated, if you don't understand the instructions then you will need to post a HijackThis log on their help forums.

    I would suspect that Spysweeper can detect this problem, but is unable to remove all traces and the traces it can't remove are the things that are regenerating the program (yes these things can and do regenerate after an incomplete removal attempt). Post your log and let the nice folks on one of the help forums assist you in removing this thing. I'll see if I can find you some more complete information about what exactly this threat is and post back. But you might want to try a Google search or 2 yourself.
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  6. #6
    New Lounger
    Join Date
    Mar 2005
    Posts
    22
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: popuper.startsearches.net hijacker

    Thank you so much, but I'm afraid that's really too complicated for me! If I tried any of that, I'd probably do more harm than good. When I called myself 'rawamateur' on this forum, I wasn't exaggerating.
    Would it be a good idea for me to turn off 'system restore' when running my spysweeper or any other anti-spyware programmes, and if so at what point in the process and how many times should I shut down/reboot/ run it again/shut down etc before turning system restore on again (assuming I did turn it off.)

  7. #7
    Uranium Lounger
    Join Date
    Mar 2001
    Location
    New Jersey
    Posts
    6,684
    Thanks
    1
    Thanked 11 Times in 11 Posts

    Re: popuper.startsearches.net hijacker

    I'm afraid I can't answer your questions sensibly as they are not relevant to this situation. I appreciate that you are a "raw amateur" when it comes to computers, but if you won't attempt to repair your problem using the only means available to you to do so and want someone to suggest an alternative, then your alternative is to take the machine to someone for service or have a tech come to your home and troubleshoot and repair the problem. Either method is costly and unless you know of a reliable shop or tech, risky to your data.

    We all started out as raw amateurs with these things. If you just get up the nerve to post your log file and then check back and keep bumping yours back to the top until someone picks it up (they are often very busy and all are volunteers, like we are), I'm sure that you will find the process friendly and practically painless. Go for it. You'll be glad you did. HTH. <img src=/S/smile.gif border=0 alt=smile width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/DocWatson_sig.gif>

  8. #8
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Salt Lake City, Utah, USA
    Posts
    9,508
    Thanks
    0
    Thanked 6 Times in 6 Posts

    Re: popuper.startsearches.net hijacker

    Hi, raw.

    Don't take this the wrong way, but the discussion here on the McAfee Forums suggests that your OS patches and AV software are not up-to-date, so you need to take care of that.

    In this McAfee Forum post there appears to be a one step cleaner for the infection you have which may be easier for you to use. Unfortunately, these nasties are not always simple to remove, because of the many settings they change.

    Good luck, and post back if these don't help.
    -John ... I float in liquid gardens
    UTC -7ąDS

  9. #9
    New Lounger
    Join Date
    Mar 2005
    Posts
    22
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: popuper.startsearches.net hijacker

    Oh dear, now I'm all at sea and quite obviously in the wrong place! I'm afraid I haven't a clue what 'post your log file' means or how to do it, and when John talks about OS patches, I don't know what that means either. I do update my spyware definitions on spysweeper and Lavasoft adaware regularly,however.
    The thing is, although spysweeper keeps saying I've got this browser hijacker, my aol spyware protector can't find it, nor can adaware, so I don't know what to believe. And when I've had nasty stuff before, like coolweb, it's been obvious, because the screen has frozen or I've been bombarded with pop-ups. But nothing nasty seems to be happening here at all, so maybe this is all a 'false positive'.
    Sorry to bother all you folks--I'm just not in your league! I think you're right--paying a PC fix man is my only hope.

  10. #10
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Salt Lake City, Utah, USA
    Posts
    9,508
    Thanks
    0
    Thanked 6 Times in 6 Posts

    Re: popuper.startsearches.net hijacker

    OS patches simply means installing all the critical security fixes you will find at Windows Update. You can do that without any technical help. It's puzzling that your antivirus is up-to-date but you still have this infection. Did you try the second McAfee Forum link that I provided?
    -John ... I float in liquid gardens
    UTC -7ąDS

  11. #11
    New Lounger
    Join Date
    Mar 2005
    Posts
    22
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: popuper.startsearches.net hijacker

    Hi, John---thanks for trying to help! I've tried running my spysweeper on all the user's screen names, and this did seem to be useful, and yielded different results each time (i.e different start up alerts etc.) So maybe that's what I ahould have been doing all the time--who knows? And I'm not sure whether I've really got anything seriously wrong anyway--although spysweeper keeps saying I've got this browser hijacker, nothing odd is happening on the computer at all to suggest it.
    So maybe there's no need to panic!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •