Removing iStartSurf.com browser hijacker from your computer

STEP 1

Download and run Norton Power Eraser

  1. Download Norton Power Eraser.

  2. Click Save.

  3. Select the location as Desktop, and then click Save.

  4. To run Norton Power Eraser, double click the NPE.exe file.

    If the User Account Control window prompts, click Yes or Continue.

  5. Read the license agreement, and click Accept.

  6. In the Norton Power Eraser window, click the Scan for Risks icon.

  7. By default, Norton Power Eraser performs a Rootkit scan and requires a system restart. When you see a prompt to restart the computer, click Restart. If you do not want to include the Rootkit scan, go to Settings, and uncheck the option Include Rootkit scan (Requires a system restart).

  8. After the computer is restarted, the scan starts automatically. Follow the on-screen instructions.

STEP 2

Run the Norton Power Eraser - Unwanted Application scan

  1. Double click the NPE.exe file.

    If the User Account Control window prompts, click Yes or Continue.

  2. Read the license agreement, and click Accept.

  3. In the Norton Power Eraser window, click the Unwanted Application Scan icon.

    When Norton Power Eraser completes the scan, the results are displayed in the Unwanted Apps Scan Complete window.

  4. In the Unwanted Apps Scan Complete window, next to the unwanted application or toolbar, click Uninstall.

  5. Follow the on-screen instructions.

  6. When the uninstall completes, restart the computer.

STEP 3

Uninstall the application manually

    If Norton Power Eraser does not remove the unwanted application, then manually remove them by using the Add/Remove Programs or Uninstall a Program in the Control Panel.

  1. Press the Windows + R to open the Run dialog box.

  2. Type in the following text, and then press Enter.

    appwiz.cpl

  3. In the list of currently installed programs, search for iStartSurf.

  4. Click Remove or Uninstall.

  5. Follow the on-screen instructions.

  6. After the uninstall completes, restart the computer.

STEP 4

Cleanup browser shortcuts manually

    This infection even hijacks the browser shortcuts. You need to manually remove the argument from the browser shortcut.

  1. Locate your browser shortcuts which you normally use (Desktop, Taskbar, or Start Menu).

  2. Right-click on the shortcut and select Properties.

  3. In the Shortcut tab, in the Target field, remove http://iStartSurf.com/xxxx url argument.

    The Target field should contain the path to the browser executable file only.

    Following are the default shortcut paths that should be present in Target field.

    Browser

    Target

    Internet Explorer

    "C:\Program Files\Internet Explorer\iexplore.exe"

    Google Chrome

    32 Bit - "C:\Program Files\Google\Chrome\Application\chrome.exe"

    64 Bit - "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

    Mozilla Firefox

    32 Bit - "C:\Program Files\Mozilla Firefox\firefox.exe"

    64 Bit - "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

STEP 5

Reset your browser settings

  • Depending on your browser, reset the browser settings to completely remove the unwanted toolbar and search engine.

Thank you!

Thank you for using Norton Support.

< Back

Was this information helpful?

DOCID: v115998597_EndUserProfile_en_us
Operating System: Windows
Last modified: 11/25/2015