Can't delete Yelloader and wmcagent folder

[ThomasN]

While running Malwarebytes, I've encountered a virus called Yelloader that can't be quarantined or deleted. It is located in my AppData/Local folder, which also is incapable of being touched by any trojan or virus tool I run. I am certain that the issue stemed from my now uninstalled version of Utorrents (completely uninstalled as per the rules). I would really appreciate help with this- thank you!

 

[TwinHeadedEagle]

Hello,


Please download Farbar Recovery Scan Tool x64 and save it to a flash drive.

• Plug the flashdrive into the infected PC.
• Boot to windows recovery by using one of the methods on this link: Boot to Advanced Startup Options in Windows 10
• If you're unable to boot to recovery you will need to create a recovery drive. You can do it by following this guide: https://support.microsoft.com/en-us/help/4026852/windows-create-a-recovery-drive
  Make sure to uncheck Back up system files to the recovery drive box, so that process goes faster.

• Now you should get a window like this where you need to click Troubleshoot.

• In the next window, click Advanced options and select Command Prompt.
• Now you should log in into your account and after that Command Promptwindow.

Access the notepad and identify your USB drive

In the Command Prompt please type in:

notepad

and press Enter.

• When the notepad opens, go to File menu.
• Select Open.
• Go to Computer and search there for your USB drive letter.
• Note down the letter and close the notepad.

Scan with Farbar Recovery Scan Tool

Once back in the command prompt window, please do the following:

• Type in e:\frst64.exe and press Enter.
  You need to replace e with the letter of your USB drive taken from notepad!
• FRST will start to run. Give him a minute or so to load itself.
• Click Yes to Disclaimer.
• In the main console, please click Scan and wait.
• When finished it will produce a logfile named FRST.txt in the root of your pendrive and display it. Close that logfile.

Transfer it to your clean machine and include it in your next reply.

 

[ThomasN]

Hello, TwinHeadedEagle. I am unsure if this is related to the malware or not, but my computer seems to be incapable of booting into advanced startup. I've tried all the possible methods I could.

 

[TwinHeadedEagle]

Did you follow every step on that link I provided?

 

[ThomasN]

Yes, I'm finding I'm even incapable of making a recovery drive.

 

[TwinHeadedEagle]

Can you try to make it from a clean computer?