Author Topic: Every minute or so...starsdoors dot com appears  (Read 2609 times)

0 Members and 1 Guest are viewing this topic.

Abeille

  • Guest
Every minute or so...starsdoors dot com appears
« on: April 11, 2008, 05:20:50 PM »
It's a while since it started.

I've been searching on the web but I didn't find anything really helpful.

I'd like to know why Avast! can't help with this one and what to do to ban it.

Thanks for any advice...

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89015
  • No support PMs thanks
Re: Every minute or so...starsdoors dot com appears
« Reply #1 on: April 11, 2008, 05:40:23 PM »
I take it that this is some sort of pop-up that says your are unprotected, etc. ?
See http://www.precisesecurity.com/adware-spy/strdrs.htm adware/spyware.

If you haven't already got this software (freeware), download, install, update and run it, preferably in safe mode.
1.  If using winXP or Vista SUPERantispyware On-Demand only in free version. Or Spyware Terminator Resident scanner (if you use this don't install the toolbar or crawler or the anti-virus module). Or a-Squared free On-Demand only with free version(if using win98/ME).
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: Every minute or so...starsdoors dot com appears
« Reply #2 on: April 11, 2008, 08:49:23 PM »
1. Temporarily disable System Restore (Windows Me/XP), how see:
http://www.precisesecurity.com/how-to/ht-srxp.htm
2. Download  SAS from here: http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE

- save it to a desired location on your Hard Drive.

 3. After downloading, browse where the file was saved and double click to install it.

4. After installation, connect to internet and download all necessary updates.

5. Reboot your computer in SafeMode [how to: http://www.precisesecurity.com/how-to/ht-smode.htm ]

6. Run SAS and do a thorough scan. Delete all infected files.
Install it and double-click the icon on your desktop to run it.
· It will ask if you want to update the program definitions, click Yes.
· Under Configuration and Preferences, click the Preferences button.
· Click the Scanning Control tab.
· Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Scan for tracking cookies
o Terminate memory threats before quarantining.
o Please leave the others as they were.
o Click the Close button to leave the control center screen.
· On the main screen, under Scan for Harmful Software click Scan your computer.
· On the left check C:\Fixed Drive.
· On the right, under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan. Please be patient while it scans your computer.
· After the scan is complete a summary box will appear. Click OK.
· Make sure everything in the white box has a check next to it, then click Next.
· It will quarantine what it found and if it asks if you want to reboot, click Yes.
· To retrieve the removal information for me please do the following:
o After reboot, double-click the SUPERAntispyware icon on your desktop.
o Click Preferences. Click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o It will open in your default text editor (such as Notepad/Wordpad).
o Please highlight everything in the notepad, then right-click and choose copy.
· Click close and close again to exit the program.
· Please paste that information here for me regardless of what it finds with a new HijackThis log. and attach it to your reply...
Hijackthis 2.0 can be downloaded from here: http://www.filehippo.com/download/58170ee6e58bba306c943f5b6d745c99/download/

This will take some time!!!!!!!!


Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!