Starware removal

[ChiQuitaPeKita]

Can anyone help me get starware off my PC?

[Richard Hollis]

Can anyone help me get starware off my PC?

from the internet.....read through this first and see if you can do it.....pretty complicated....

Below are step by step instructions to remove Starware from your computer.
Note: This process is difficult and is not recommend unless you are an expert in this field. The manual process is also dangerous as the removal process requires you to access and edit sensitive files in the registry of your machine and run the risk of totally destroying your computer.
An important point to remember when removing Starware is to delete all parts of the Starware code. This is a must as Starware will rebuild itself and will result in further spreading of the spyware parasite.

On the right is a link to a simple tool that you can download to remove Starware or any other spyware that your machine may have simply picked up.

CLICK HERE TO GET THE FREE SCANNER NOW.

Starware Removal Instructions

If you find "Starware" in Add/Remove Programs, begin your removal by uninstalling there. Kill these running processes with Task Manager:

programfilesdir+\common files\oe\uninstall.exe
programfilesdir+\common files\oe\uninstallwa.exe
programfilesdir+\orbit\ad.exe
programfilesdir+\orbit\update.exe
programfilesdir+\orbit\view.exe
systemroot+\bobsaver.exe
systemroot+\downloaded program files\conflict.1\oeloader.exe
systemroot+\downloaded program files\oeloader.exe

Remove AutoRun Reference:

If you find the value
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cc2kui HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitupdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitview
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\sswplauncher

Unregister these DLLs with Regsvr32, then reboot:

programfilesdir+\common files\oe\msbb.dll
programfilesdir+\common files\oe\redirector.dll
programfilesdir+\common files\oe\search.dll
programfilesdir+\common files\oe\toolbar.dll
systemroot+\downloaded program files\conflict.1\oeloader.dll
systemroot+\system\redirector.dll
systemroot+\system32\redirector.dll

Remove these registry items (if present) with RegEdit:

HKEY_CLASSES_ROOT\clsid\{702ad576-fddb-4d0f-9811-a43252064684}
HKEY_CLASSES_ROOT\clsid\{d48f2e28-68e2-4920-9848-d6e6c7ab3eb7}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{702ad576-fddb-4d0f-9811-a43252064684}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{d48f2e28-68e2-4920-9848-d6e6c7ab3eb7}
HKEY_CLASSES_ROOT\typelib\{c3e17d0d-593a-457b-a1da-6d082e29323a}
HKEY_CURRENT_USER\clsid\{0fda4d2b-7975-405d-8d7c-f5e2247eae80}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser\{fe6bc4ef-5676-484b-88ae-883323913256}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser\{fe6bc4ef-5676-484b-88ae-883323913256}
HKEY_LOCAL_MACHINE\software\classes\appid\{bac984c9-78c8-4105-9e97-1675a4052686}
HKEY_LOCAL_MACHINE\software\classes\appid\dmserver.exe\appid
HKEY_LOCAL_MACHINE\software\classes\bho.csbho
HKEY_LOCAL_MACHINE\software\classes\bho.csbho.1
HKEY_LOCAL_MACHINE\software\classes\bho.csbho\clsid
HKEY_LOCAL_MACHINE\software\classes\bho.csbho\curver
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{702ad576-fddb-4d0f-9811-a43252064684}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{fe6bc4ef-5676-484b-88ae-883323913256}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{702ad576-fddb-4d0f-9811-a43252064684}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d48f2e28-68e2-4920-9848-d6e6c7ab3eb7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\
c:/windows/downloaded program files/conflict.1/oeloader.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\
c:/windows/downloaded program files/oeloader.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cc2kui
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitupdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\orbitview
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\sswplauncher
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\
c:\windows\downloaded program files\conflict.1\oeloader.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls\
c:\windows\downloaded program files\oeloader.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\cc2k\displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\cc2k\uninstallstring
HKEY_USERS\s-1-5-21-1409082233-1390067357-1801674531-500\clsid\{0fda4d2b-7975-405d-8d7c-f5e2247eae80}

Remove these files (if present) with Windows Explorer:

addremove.htm
addremove.js
addremove_cc.js
administrator.txt
adzap.lic
adzap_0001.js
autosrch.js
azunins.js
band.js
bobsaver.exe-2b87f43a.pf
bobsaver.scr-3492b408.pf
cars.xsl
cnfmgr.js
completedjobs.xml
context.js
controlpanel.js
csres.dat
dmfilemap.xml
dmserver.exe-375d1fbc.pf
hotels.xsl
inst43.exe-233e3ddf.pf
inst9753.exe-222ff47c.pf
license.js
logging.js
masterconfig.xml
oeuninstaller.exe-06b5e4b2.pf
pestpatrolcl.exe-32de342c.pf
productinfo.xml
programfilesdir+\common files\oe\msbb.dll
programfilesdir+\common files\oe\redirector.dll
programfilesdir+\common files\oe\search.dll
programfilesdir+\common files\oe\toolbar.dll
programfilesdir+\common files\oe\uninstall.exe
programfilesdir+\common files\oe\uninstallwa.exe
programfilesdir+\orbit\ad.exe
programfilesdir+\orbit\update.exe
programfilesdir+\orbit\view.exe
publickey.pbk
refbutton.js
related.js
related.xml
related.xsl
request.xml
response.xml
rundll32.exe-333c496f.pf
scr_adzap.js
settings.xml
smileytown.xml
sslaunch.exe-12da0b03.pf
sstbinst.exe-18a1b725.pf
sys_except.xml
systemroot+\bobsaver.exe
systemroot+\bobsaver.scr
systemroot+\downloaded program files\conflict.1\oeloader.dll
systemroot+\downloaded program files\conflict.1\oeloader.exe
systemroot+\downloaded program files\oeloader.exe
systemroot+\downloaded program files\oeloader.inf
systemroot+\system\redirector.dll
systemroot+\system32\redirector.dll
tbmgr.js
tbproducts.js
toolbar.js
travel.js
travel_0001.js
travel_context.xml
un_screensaver.xml
un_searchassist.xml
un_smileytown.xml
un_travel.xml
update.js
utillauncher.js
winutil.js
xupiter.orbitexplorer.txt

Remove these directories (if present) with Windows Explorer:

programfilesdir+\common files\oe
programfilesdir+\oe
programfilesdir+\orbit

Restore Settings:

Start Microsoft Internet Explorer. In Internet Explorer, click Tools -> Internet Options. Click the Programs tab -> Reset Web Settings.

[ChiQuitaPeKita]

Are there certain programs required to remove those? I can't find starware under "add/remove", but its still on my PC.

[Richard Hollis]

Are there certain programs required to remove those? I can't find starware under "add/remove", but its still on my PC.

Regedit is reaced by clicking on Start, click on Run and type regedit, click ok and will open up a screen for changing registry.

But this is highly complicated and can screw up your computer if you mess up.

If you haven't messed with your registry before.....I would take it to someone and have them fix it.