| | |
Starware removal
![]() |
•
•
Join Date: Apr 2006
Posts: 5
Reputation:
Solved Threads: 0
•
•
•
•
Originally Posted by ChiQuitaPeKita
Can anyone help me get starware off my PC?
Below are step by step instructions to remove Starware from your computer.
Note: This process is difficult and is not recommend unless you are an expert in this field. The manual process is also dangerous as the removal process requires you to access and edit sensitive files in the registry of your machine and run the risk of totally destroying your computer.
An important point to remember when removing Starware is to delete all parts of the Starware code. This is a must as Starware will rebuild itself and will result in further spreading of the spyware parasite.
On the right is a link to a simple tool that you can download to remove Starware or any other spyware that your machine may have simply picked up.
CLICK HERE TO GET THE FREE SCANNER NOW.
Starware Removal Instructions
If you find "Starware" in Add/Remove Programs, begin your removal by uninstalling there. Kill these running processes with Task Manager:
programfilesdir+\common files\oe\uninstall.exe
programfilesdir+\common files\oe\uninstallwa.exe
programfilesdir+\orbit\ad.exe
programfilesdir+\orbit\update.exe
programfilesdir+\orbit\view.exe
systemroot+\bobsaver.exe
systemroot+\downloaded program files\conflict.1\oeloader.exe
systemroot+\downloaded program files\oeloader.exe
Remove AutoRun Reference:
If you find the value
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cc2kui HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitupdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitview
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\sswplauncher
Unregister these DLLs with Regsvr32, then reboot:
programfilesdir+\common files\oe\msbb.dll
programfilesdir+\common files\oe\redirector.dll
programfilesdir+\common files\oe\search.dll
programfilesdir+\common files\oe\toolbar.dll
systemroot+\downloaded program files\conflict.1\oeloader.dll
systemroot+\system\redirector.dll
systemroot+\system32\redirector.dll
Remove these registry items (if present) with RegEdit:
HKEY_CLASSES_ROOT\clsid\{702ad576-fddb-4d0f-9811-a43252064684}
HKEY_CLASSES_ROOT\clsid\{d48f2e28-68e2-4920-9848-d6e6c7ab3eb7}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{702ad576-fddb-4d0f-9811-a43252064684}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{d48f2e28-68e2-4920-9848-d6e6c7ab3eb7}
HKEY_CLASSES_ROOT\typelib\{c3e17d0d-593a-457b-a1da-6d082e29323a}
HKEY_CURRENT_USER\clsid\{0fda4d2b-7975-405d-8d7c-f5e2247eae80}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser\{fe6bc4ef-5676-484b-88ae-883323913256}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser\{fe6bc4ef-5676-484b-88ae-883323913256}
HKEY_LOCAL_MACHINE\software\classes\appid\{bac984c9-78c8-4105-9e97-1675a4052686}
HKEY_LOCAL_MACHINE\software\classes\appid\dmserver.exe\appid
HKEY_LOCAL_MACHINE\software\classes\bho.csbho
HKEY_LOCAL_MACHINE\software\classes\bho.csbho.1
HKEY_LOCAL_MACHINE\software\classes\bho.csbho\clsid
HKEY_LOCAL_MACHINE\software\classes\bho.csbho\curver
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{702ad576-fddb-4d0f-9811-a43252064684}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{fe6bc4ef-5676-484b-88ae-883323913256}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{702ad576-fddb-4d0f-9811-a43252064684}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d48f2e28-68e2-4920-9848-d6e6c7ab3eb7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\
c:/windows/downloaded program files/conflict.1/oeloader.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\
c:/windows/downloaded program files/oeloader.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cc2kui
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitupdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitview
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\sswplauncher
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\
c:\windows\downloaded program files\conflict.1\oeloader.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\
c:\windows\downloaded program files\oeloader.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\cc2k\displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\cc2k\uninstallstring
HKEY_USERS\s-1-5-21-1409082233-1390067357-1801674531-500\clsid\{0fda4d2b-7975-405d-8d7c-f5e2247eae80}
Remove these files (if present) with Windows Explorer:
addremove.htm
addremove.js
addremove_cc.js
administrator.txt
adzap.lic
adzap_0001.js
autosrch.js
azunins.js
band.js
bobsaver.exe-2b87f43a.pf
bobsaver.scr-3492b408.pf
cars.xsl
cnfmgr.js
completedjobs.xml
context.js
controlpanel.js
csres.dat
dmfilemap.xml
dmserver.exe-375d1fbc.pf
hotels.xsl
inst43.exe-233e3ddf.pf
inst9753.exe-222ff47c.pf
license.js
logging.js
masterconfig.xml
oeuninstaller.exe-06b5e4b2.pf
pestpatrolcl.exe-32de342c.pf
productinfo.xml
programfilesdir+\common files\oe\msbb.dll
programfilesdir+\common files\oe\redirector.dll
programfilesdir+\common files\oe\search.dll
programfilesdir+\common files\oe\toolbar.dll
programfilesdir+\common files\oe\uninstall.exe
programfilesdir+\common files\oe\uninstallwa.exe
programfilesdir+\orbit\ad.exe
programfilesdir+\orbit\update.exe
programfilesdir+\orbit\view.exe
publickey.pbk
refbutton.js
related.js
related.xml
related.xsl
request.xml
response.xml
rundll32.exe-333c496f.pf
scr_adzap.js
settings.xml
smileytown.xml
sslaunch.exe-12da0b03.pf
sstbinst.exe-18a1b725.pf
sys_except.xml
systemroot+\bobsaver.exe
systemroot+\bobsaver.scr
systemroot+\downloaded program files\conflict.1\oeloader.dll
systemroot+\downloaded program files\conflict.1\oeloader.exe
systemroot+\downloaded program files\oeloader.exe
systemroot+\downloaded program files\oeloader.inf
systemroot+\system\redirector.dll
systemroot+\system32\redirector.dll
tbmgr.js
tbproducts.js
toolbar.js
travel.js
travel_0001.js
travel_context.xml
un_screensaver.xml
un_searchassist.xml
un_smileytown.xml
un_travel.xml
update.js
utillauncher.js
winutil.js
xupiter.orbitexplorer.txt
Remove these directories (if present) with Windows Explorer:
programfilesdir+\common files\oe
programfilesdir+\oe
programfilesdir+\orbit
Restore Settings:
Start Microsoft Internet Explorer. In Internet Explorer, click Tools -> Internet Options. Click the Programs tab -> Reset Web Settings.
•
•
Join Date: Apr 2006
Posts: 5
Reputation:
Solved Threads: 0
•
•
•
•
Originally Posted by ChiQuitaPeKita
Are there certain programs required to remove those? I can't find starware under "add/remove", but its still on my PC.
But this is highly complicated and can screw up your computer if you mess up.
If you haven't messed with your registry before.....I would take it to someone and have them fix it.
![]() |
Similar Threads
- free virus scan/removal (Viruses, Spyware and other Nasties)
- Internet Explorer Fails After Registry Removal (Viruses, Spyware and other Nasties)
- After Spyware removal, more problems (Windows 95 / 98 / Me)
- anyone recommend spyware scanner and removal tools? (Windows NT / 2000 / XP)
- Bios,display,pixels problems (Windows NT / 2000 / XP)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: browser popup and redirection
- Next Thread: PC justr keeping on rebooting
| Thread Tools | Search this Thread |
adware anti-malware anti-virussitesaccessissue antivirus attack audio avg backtoschoolspeech bar blackhat botnet botnets censorship china commercial commercials conficker connect control crosssitescripting cyber cybercrime cyberwarfare ddos domains e-mafia education email europe exam exploit facebook fake fancheckvirus gaming gumblar halloween herss.exe hijack hosting internet iphone kaspersky legal logfiles mail malware mcafee mega-d messagelabs microsoft mobile nazi news obama onlinethreats paedophile panel parents patch phishing police policeprovirusmba-mblockedinternetaccess president privacy pro problem redirect redirecting reliability report research risk rogueantivirus samhain sans scareware school search security seopoisoning software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec trojan unwanted update usa virus viruses vista war warning windows worm yahoo zeroday





