X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

How do I get rid of Starburn browser hijacker

Posted

Unbelievably, I haven't seen this posted on a legitimate forum anywhere, nor can I find answers unless I want to pay for a removal tool from sites that I don't trust. My computer is infected with "Starburn" browser hijacker. No Antivirus tool detects it nor removes it. I've tried Malware Bytes, Ad Aware, and AVG antivirus. I cannot find anything in add-ons or extensions indicating that it's there at all but my computer is 50% slower and my CPU usage is outrageously high even with only one tab open. I've allowed upload of my add-on information below.

I've checked Task Manager and, admittedly, normally have many windows open. There are numerous processes running but when I search the web for what they are, they all seem to be legitimate. I've also used Rootkit Revealer looking for a couple of registry files I've seen commonly posted that people "SAY" are associated with Starburn, but they don't appear in my registry that I can see. There is nothing to uninstall in Control Panel "Add and Remove". There are no visible add-ons or extensions relating to this browser hijacker.

If anyone has ANY help or suggestions please post them. This hijacker affects ALL browsers. So if I switch to IE or Chrome, it's the same thing, which tells me it's not a Firefox problem but possible something deeply imbedded in the system. So resetting Firefox to its defaults (which I have not done) would almost certainly not resolve the problem. Thanks for your time.

Chosen solution

Giedrius...I can't find the words to thank you for your time and help! Adwcleaner "DID" detect the hijacker but unfortunately wasn't able to delete it. It tried and said it was successful twice but the hijacker was extremely insidious and nasty. While I was waiting on Hitman Pro I visited your blog that you linked me to and followed the about:config steps and that worked. The hijacker may still be in the system somewhere but it no longer redirects me. And Adwcleaner sped up the computer tremendously.

Once again, I cannot thank you enough. I can use my computer again with no problems. I'm not very spiritual but I've always thought that what goes around, comes around...karma, in other words. And I hope that your help is repaid to you a thousand times. I'm extremely grateful! Thank you again for your time and reply to my problem.

Read this answer in context 0

Additional System Details

Installed Plug-ins

  • Next Generation Java Plug-in 10.17.2 for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Shockwave Flash 11.6 r602
  • np-mswmp
  • Google Update
  • FreeCorder NPAPI
  • Adobe PDF Plug-In For Firefox and Netscape 10.1.3
  • Windows Presentation Foundation (WPF) plug-in for Mozilla browsers
  • DRM Netscape Network Object
  • Npdsplay dll
  • DRM Store Netscape Plugin

Application

  • Firefox 20.0.1
  • User Agent: Mozilla/5.0 (Windows NT 5.1; rv:20.0) Gecko/20100101 Firefox/20.0
  • Support URL: http://support.mozilla.org/1/firefox/20.0.1/WINNT/en-US/

Extensions

  • A Youtube Downloader Free 3.0.0.0 (14xRm@skywebsearch.com)
  • Autofill Forms 0.9.9.0 (autofillForms@blueimp.net)
  • Freecorder 7.0.0.13 (addon@freecorder.com)
  • Freecorder Community Toolbar 3.18.0.7 ({1392b8d2-5c05-419f-a8f6-b9f15a596612})
  • Microsoft .NET Framework Assistant 0.0.0 ({20a82645-c095-46ed-80e3-08825760534b})
  • Troubleshooter 1.1a (troubleshooter@mozilla.org)
  • Babylon 1.2.0 (ffxtlbr@babylon.com) (Inactive)
  • iWinGames Plugin 1.7 ({98e34367-8df7-42b4-837b-20b892ff0849}) (Inactive)
  • Nero Toolbar 3.15.1.22229 (toolbar@ask.com) (Inactive)
  • Oberon GamesBar 1.2.1.112 (gamesbar@oberon-media.com) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: RADEON 9250
  • adapterDescription2:
  • adapterDeviceID: 0x5960
  • adapterDeviceID2:
  • adapterDrivers: ati2dvag
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterVendorID: 0x1002
  • adapterVendorID2:
  • direct2DEnabled: False
  • direct2DEnabledMessage: [u'tryNewerDriver', u'10.6']
  • directWriteEnabled: False
  • directWriteVersion: 0.0.0.0
  • driverDate: 5-3-2006
  • driverDate2:
  • driverVersion: 8.252.0.0
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'cairo', u'AzureFallbackCanvasBackend': u'none', u'AzureContentBackend': u'none'}
  • isGPU2Active: False
  • numAcceleratedWindows: 0
  • numAcceleratedWindowsMessage: [u'tryNewerDriver', u'9.6']
  • numTotalWindows: 2
  • webglRendererMessage: [u'tryNewerDriver', u'9.6']
  • windowLayerManagerType: Basic

Modified Preferences

  • accessibility.typeaheadfind.flashBar: 0
  • browser.cache.disk.capacity: 358400
  • browser.cache.disk.smart_size.first_run: False
  • browser.cache.disk.smart_size.use_old_max: False
  • browser.cache.disk.smart_size_cached_value: 358400
  • browser.display.background_color: #C0C0C0
  • browser.display.use_system_colors: True
  • browser.history_expire_days.mirror: 20
  • browser.places.importBookmarksHTML: False
  • browser.places.importDefaults: False
  • browser.places.leftPaneFolderId: -1
  • browser.places.migratePostDataAnnotations: False
  • browser.places.smartBookmarksVersion: 4
  • browser.places.updateRecentTagsUri: False
  • browser.startup.homepage: http://apype.com
  • browser.startup.homepage_override.buildID: 20121128204232
  • browser.startup.homepage_override.mstone: ignore
  • dom.max_script_run_time: 20
  • dom.mozApps.used: True
  • dom.w3c_touch_events.expose: False
  • extensions.lastAppVersion: 20.0.1
  • keyword.URL: http://apype.com/results.php?q=
  • network.cookie.cookieBehavior: 1
  • network.cookie.prefsMigrated: True
  • network.http.proxy.version: 1.0
  • places.database.lastMaintenance: 1366487772
  • places.history.expiration.transient_current_max_pages: 26786
  • places.history.expiration.transient_optimal_database_size: 42857266
  • places.last_vacuum: 1300898204
  • plugin.disable_full_page_plugin_for_types: application/pdf
  • privacy.sanitize.migrateFx3Prefs: True
  • security.warn_viewing_mixed: False

Misc

  • User JS: No
  • Accessibility: No

Question owner

One added note...I did see that my browser start-up homepage is redirected to some site called apype.com which I guess is a clever way of saying AP Wipe or something similar. I've tried changing my homepage but it always changes back. I've also searched for help regarding this "APYPE" thing but haven't found anything useful. Most places I've seen regarding manual removal of this hijacker instruct to look for certain files in registry editor. I've searched for them but if they're there, I can't find them. Not sure if this helps but the additional info can't hurt.

Modified by bls1954

Tyler Downer
  • Administrator
  • Moderator
1165 solutions 6641 answers

Helpful Reply

Hello,

The Reset Firefox feature can fix many issues by restoring Firefox to its factory default state while saving your essential information. Note: This will cause you to lose any Extensions, Open websites, and some Preferences.

To Reset Firefox do the following:

  1. Go to Firefox > Help > Troubleshooting Information.
  2. Click the "Reset Firefox" button.
  3. Firefox will close and reset. After Firefox is done, it will show a window with the information that is imported. Click Finish.
  4. Firefox will open with all factory defaults applied.

Further information can be found in the Reset Firefox – easily fix most problems article.

Did this fix your problems? Please report back to us!

Thank you.

Question owner

Unfortunately, it was as I suspected...not a problem with Firefox, in particular, but something else extremely nasty embedded in the system files. The reset was a good idea and didn't hurt to do but the browser hijacker is still there. I appreciate the effort and the reply, though. Thank you/

Giedrius_M 18 solutions 157 answers

Helpful Reply

  1. Go to control panel. Check out which programs got installed in the last days (or around the point you started seeing starburn infection). Uninstall ALL.
  2. Run hitman pro - it will detect and remove (30 days free) most of trojan-based hijackers.
  3. Run Adwcleaner (free) it will remove most of plugin -based hijackers from all browsers
  4. Alternatively - about:config, go through settings and reset everything search/new page related.

Modified by Tyler Downer

Chosen Solution

Giedrius...I can't find the words to thank you for your time and help! Adwcleaner "DID" detect the hijacker but unfortunately wasn't able to delete it. It tried and said it was successful twice but the hijacker was extremely insidious and nasty. While I was waiting on Hitman Pro I visited your blog that you linked me to and followed the about:config steps and that worked. The hijacker may still be in the system somewhere but it no longer redirects me. And Adwcleaner sped up the computer tremendously.

Once again, I cannot thank you enough. I can use my computer again with no problems. I'm not very spiritual but I've always thought that what goes around, comes around...karma, in other words. And I hope that your help is repaid to you a thousand times. I'm extremely grateful! Thank you again for your time and reply to my problem.

mike100 0 solutions 4 answers

This is NOT a solution but MY question as I cannot find the ASK QUESTION form. In FF20 when I am using the web site I opened, another unwanted web site usually based on related content, appears. When I try to "X" out the page and revert to the previous wanted page, I find multiple pages stacked up as I get back to the desk top, which is NOT where I want to be. The pop up blocker is enabled and the "MOVE PAGE" box under CONTENT is UNCHECKED. The issue persists. I have RESET FF a number of times. It helps for awhile but not for this issue. It seems to work for SEARCH ENGINE hijacks, DELTA, CONDUIT, AVG are typical. At this point the FF home page is shown as it should be. The issue also applies to pop up ads, with or without entire web pages attached. Solutions please.

[Personal information removed by moderator. Please read Forum rules and guidelines, thanks.]

Modified by Chris Ilias

jscher2000
  • Top 10 Contributor
2365 solutions 20926 answers

Hi mike100, you can start a new question here:

https://support.mozilla.org/questions/new/desktop/fix-problems

It would be helpful if you could use the new add-on that extracts your list of extensions and custom settings and includes them with your post, in case the problem is easily spotted there.

If Reset helps for a while, there probably is active external software modifying Firefox. If you think it might be common malware or spyware, try these three highly regarded (and free) supplemental scanners:

You may want to run those before starting your new thread and include a mention of the results (if any).