How To Permanently Stop StartPageing (Lucky / FunnySite) Browser Hijackers

StartPageing is a family of browser hijackers which replaces your browser homepage with a fake search engine. This unwanted adware program usually infiltrates your computer by installing itself together with a legitimate software. It is designed to infect as many browsers as possible. When trying to change the homepage it usually comes back since it has its files hidden in the Windows system.

The hijacker has many different variations including startpageing123.com, istartpageing.com, surfpageing.com, mylucky123.com, luckysearch123.com, luckysite123.com, luckypageing123.com, funnysite123.com andluckystarting.com. They all are similar in looks and content. The websites have a search field which redirects to Google or another search, several links and advertisements.

These hijackers act as parasites and their sole purpose is to earn their creators money from the traffic generated by the infected browsers. These search websites do not add any value to your browsing experience. Instead, they might spy on your online activity and steal personal data. Also, clicking on their advertisements might result in further infections.

We strongly advise removing this adware from your computer. We have an automatic removal tool which not only deletes the threat but also protects your computer from possible future infections. We also have a manual removal guide for more experienced Windows operating system users. However, you should consider securing your machine with a proper antivirus in order to avoid similar problems after the removal.


Recommended Method: Download Browser Hijacker Removal Tool

Version:   All Updated:   2 days ago Compatible OS:   All
This is the most suitable program for automatically removing the threat and repairing your PC.
Works with: Windows 10, Windows 8, Windows 7, Windows Vista, Windows XP. Read instructions here
File name Size
mb3-setup.exe 56.5 MB

Click here to download alternative tool

What are StartPageing (Lucky / FunnySite) hijackers?

These hijackers are developed by the same owner and are designed to infiltrate and stay on your system for as long as possible. The hijackers change your browser homepage and various settings in order to generate traffic and earn from advertisements every time you search the internet.

Here is a list of all currently known websites belonging to this browser hijacker family:

funnysite123.com
istartpageing.com
luckypageing123.com
luckysearch123.com
luckysite123.com
luckystarting.com
mylucky123.com
startpageing123.com
surfpageing.com

New ones constantly appear in order to stay undetected. While the older ones like mylucky123.com look suspicious, the new versions like luckystarting.com are more sophisticated and could be mistaken as a legitimate browser speed dial page. This helps the hijacker avoid removal and stay on the system.

Some websites have “About us” sections with a description of the website:

Users benefit from meta-search engines by saving them time and effort 
from having to individually visit multiple search engines to find a desired search result.

While they might look real, these search engines are fake and do not offer any additional value to your browsing experience. Instead, they are parasites designed to make money from your browsing activity. This includes using the search (which usually redirects to custom Google search page), clicking on advertisements and more blackhat methods like cookie stuffing.

According to Alexa, the websites belonging to this family receive around 50 000 – 200 000 daily pageviews each. One website can earn the creators from $150 to $500 per day or even more depending on the generated traffic. As many other such hijackers, this one is probably created in Russia since it uses a yandex.com contact email.

“StartPageing” hijacker infiltrates your browser by utilizing bundling technique. It is attached to various legitimate freeware installation files and installs silently in the backgorund together with the real software. If you quickly skip through the installation steps you might end up not knowing how the adware appeared on your computer. You should always be careful when installing new software from free downloads sites since it is usually bundled with various adware or more dangerous malware: screenlockers, scareware and even ransomware.

You should not ignore this threat being present on your system. Instead, remove it as soon as possible to prevent spying on your personal data. You will also restore a normal browsing experience and will be able to regain control of your browser settings, default search engine and homepage.

Screenshots of the StartPageing (Lucky / FunnySite) browser hijacker virus:

     


 Manual Removal Instructions:

NB: Bookmark this page in order to come back to it after a browser or computer restart. Make sure you are comfortable with editing important Windows settings and system files before proceeding to manual removal guide!

We recommend using the automatic removal tool listed at the beginning of this page instead. It will not only remove the threat easily but will also protect your computer in the future!

Step 1:

Remove suspicious programs containing the adware.

The names might differ in order to hide the traces However, you can detect them by looking at the recently installed unknown software in your Programs and Features list.

Start by opening the Programs and Features window using the following method:

Hold Windows () key and click R key while holding.

Enter the following in the field:

appwiz.cpl

Click OK.

You might have to wait a bit before the list of all programs is loaded as it displays a list of all programs installed on your PC.

We recommend sorting the programs by “Installed On” date column (simply click on the column name in order to sort by this value).

Look for any recently installed suspicious programs that might contain the adware as a bundle or could be the adware itself. If you have never seen or used an app chances are that it is an unwanted software.

Here are some examples:

Search Protect
Browser Protect
Startpageing
Myluckystart
Luckysearch

Uninstall all suspicious programs by right-clicking on them and choosing Uninstall…

Repeat this process until no more suspicious programs are left.

Step 2:

Delete registry values created by this adware.

Press and hold Windows () key and click R key.

Enter the following in the field:

regedit.exe

Click OK.

 

Search for virus entries by pressing keyboard buttons CTRL + F and entering the name of the homepage website which was set by the virus.

Click Find Next.

Delete any registry entries associated with the virus.

Repeat the search until all entries are cleaned.

Make sure you delete only malicious entries as Windows registry is full of important information and deleting a critical entry might result in damaged operating system!

Step 3:

Remove suspicious programs from your startup config so they would not launch as soon as you boot your computer.

Hold Windows () key and click R key.

Enter the following in the field:

msconfig.exe

Click OK.

Go to the Startup tab and uncheck all suspicious entries.

The infected or fake startup items usually have “Unknown” listed as Manufacturer. However, sometimes they might pretend to be legitimate programs.

Check process location by hovering your mouse over the “Command” column. Navigate to the location and scan the file using virustotal.com if it looks suspicious but you are not sure.

Click OK when you are finished unselecting all potentially dangerous processes.

Step 4:

Clean up Windows temporary files.

You can safely remove all temporary files without posing any risk to your computer.

Hold Windows () key and click R key.

Enter the following in the field:

%Temp%

Click OK.

All temporary files will be listed in the directory.

Select all temporary files by simultaneously pressing CTRL + A and delete them.

Step 5:

Restore your system settings to the ones before the infection happened.

Sometimes you might not have restore points or they might be too old so this step might be unsuccessful.

Press and hold Windows () key and click R key.

Enter the following in the field:

rstrui.exe

Click OK.

A System Restore wizard will open.

Click Next.

Check Show more restore points.

If you see any restore points, restore the system. Make sure you select a point that has been created before the attack happened.

If there are no restore points you will see “No restore points have been created…” error.

Step 6:

Delete the shortcuts for all browsers on your computer as they might have been changed by the virus.

Create them again in order to have clean browser start.

Alternatively, you can click Properties on each of the shortcuts and remove any additions made to the Target field by the virus.

Step 7:

IMPORTANT: Now you will have to reset browser settings for each browser individually that you have installed on your computer. Alternativelly, you could simply reinstall them.

 Google Chrome:

Launch the browser and select More Tools, then click Extensions.

Check for any suspicious extensions.

Click Remove From Chrome for each unwanted or suspicious toolbar or extension (the trashcan icon on the right).

Go to Settings.

Scroll to the very bottom of the settings page and click Show advanced settings…

Scroll to the very bottom again and click Reset settings.

Click Reset.

Here are the instructions provided by the adware creators:

Uninstall from Chrome Chrome Homepage and default search
Open Chrome explore.
Click “Customize and control Google Chrome” in the right-top of the page and click "Setting".
Click “Set pages” link of "On startup" ->delete homepage link ->click “OK”.
Click "Change" link of "Apperance" ->delete homepage link ->click "OK".
Restart Chrome explore.
Restart your computer after completing all the above steps.

 Mozilla Firefox:

Launch the browser and go to Add-ons.

Search for any suspicious toolbars and add-ons and Remove them.

We recommend going to Options (input about:preferences in your address field and press Enter) and clicking Restore to Default near the Home Page field.

You can also completely refresh the browser settings by entering the following in the address (URL) field:

about:support

Press Enter.

Click Refresh Firefox… and then click Refresh Firefox again.

Here are the instructions provided by the adware creators:

Uninstall from Firefox
Firefox Homepage and default search
Open Firefox explore.
Click "Open Menu" on the right-top and click “Options” open “Options” panel.
Click “General” tab.
Delete homepage link and set a new homepage link. Or click "Restore to Default".
Click "OK".
Choose “Manage Search Engines” in the search list.
Choose the search engine and click "Remove",then click “OK”.
Restart Firefox explore.

Restart your computer after completing all the above steps.

After removing the virus

When you have finished removing the adware and reverting your browser settings make sure to protect your computer by installing a good antivirus suite that would identify the threats online and in programs you have downloaded. Also, never install suspicious programs. If you are installing a new software, make sure it has nothing bundled in it by following the install wizard as well as searching for user reviews online.


Share your experience with us by leaving a comment!

Leave a comment to tell us about your experience removing this threat!
We can also help you if you run into any problems during the process, just don't hesitate to ask!

Leave a Reply

Your email address will not be published. Required fields are marked *