StartPins redirect

[Santilli]

Hi
Can't get rid of this POS. It hijacks both browsers, IE and Firefox to

http://startpins.com/?

I've blocked it on Firefox with BlockSite 0.7.1.1.

However, it reappears after being cleaned when I restart on IE.

I'ves used Spybot, Nod32, Malwarebytes, TSSbootcleaner.

Topmedia is the producer.

HELP!

 

[CougTek]

Combofix in safe mode. Superantispyware after.

 

[Santilli]

First ran Spybot and Malwarebytes in Safemode.

Startup page is now:

http://startsear.ch/?aff=1

on both browsers.

 

[Santilli]

System Restore worked.

 

[Mercutio]

Does Combofix ever actually fix anything?

 

[Bozo]

What is 'Startpins' anyway?

 

[ddrueding]

Does Combofix ever actually fix anything?

I've had really good luck with it. Rare is the infection that it doesn't at least squash, so proper AV can come in after and clean up. Even not going into safe mode and running from an infected desktop works well for me.

 

[Mercutio]

It's my experience that if MBAM and Spybot from safe mode don't do it, Combofix won't help either.

 

[CougTek]

Then we have very different experience.

 

[Santilli]

Bozo:
Click here to see it:


http://startsear.ch/?aff=1

I just hate browser redirects, or any kind of virus/malware.

I went Mercutio's way, and used both in safe mode. No cigar.

Then system restore sprouted in my head.

 

[LunarMist]

No Ghost, True Image, etc.? Nuke the entire partition from orbit. It's the only way to be sure.

 

[Santilli]

System restore worked.
I have a copy of Acronis around here, but, IIRC it doesn't like 64 bit 7.