Help Identifying and Removing Malware

[TwinHeadedEagle]

First, go to Control Panel and uninstall following (skip lines that cannot be uninstalled):
- Adobe Reader 9.5.5
- File Type Assistant
- Final Media Player
- Java(TM) 6 Update 17
- Media Buzz
- Media View
- Media Watch
- Muvic Smartbar
- Muvic Smartbar Engine
- Re-markit
- Spybot - Search & Destroy Free Download Packages
- suRfKeepit
- Yahoo! Software Update
- Yahoo! Toolbar

Latest versions of Java and Adobe Reader available here --> http://www.java.com/en/ and here http://get.adobe.com/uk/reader/
Make sure to uncheck optional offers.

***** NEXT *****​

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.

 

[Sweetness_cw]

First, go to Control Panel and uninstall following (skip lines that cannot be uninstalled):
- Adobe Reader 9.5.5
- File Type Assistant
- Final Media Player
- Java(TM) 6 Update 17
- Media Buzz
- Media View
- Media Watch
- Muvic Smartbar
- Muvic Smartbar Engine
- Re-markit
- Spybot - Search & Destroy Free Download Packages
- suRfKeepit
- Yahoo! Software Update
- Yahoo! Toolbar

Latest versions of Java and Adobe Reader available here --> http://www.java.com/en/ and here http://get.adobe.com/uk/reader/
Make sure to uncheck optional offers.

***** NEXT *****​

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.

Ok this is what I got

 

[Sweetness_cw]

Ok this is what I got

It also would not allow me to uninstall yahoo toolbar or the muvic smartbar or muvic smartbar engine

 

[TwinHeadedEagle]

Very good


> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

createsrpoint;
emptyfolderscheck;delete
autoclean;
emptyclsid;
emptyalltemp;
ipconfig /flushdns;b

 

[Sweetness_cw]

I re

Very good


> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

createsrpoint;
emptyfolderscheck;delete
autoclean;
emptyclsid;
emptyalltemp;
ipconfig /flushdns;b

i reran Zoek. It is still getting stuck on the line I quoted you earlier. :/ I have disabled my antivirus, don't have any browsers open or anything. When I went to remove the two muvic things you asked me to, it let me click on the uninstall button, but took no action. It was as if I had not clicked on it at all. And when I attempted to uninstall yahoo toolbar it looked as if it was doing nothing, but it wouldn't let me attempt to uninstall anything else. It popped up telling me to wait while it uninstalled the current task. But had nothing showing any uninstall status as it normally does.

 

[Sweetness_cw]

Very good


> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

createsrpoint;
emptyfolderscheck;delete
autoclean;
emptyclsid;
emptyalltemp;
ipconfig /flushdns;b

Ok so, looking online to see if I could figure out why it wouldn't let me remove the muvic files or my yahoo toolbar, I found a forum that advised my to use Revo Uninstaller. I didn't want to use i until I asked you if You felt it would help. I did download it in case you said to use it. and I also saw something that advised me to use malwarebytes antimalware program for protection against it in the future. I am sorry all of this is taking so much of your time. Thank You so much for being patient with me

 

[TwinHeadedEagle]

Here is how we're going to do


> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

createsrpoint;
gpt.ini;z 
C:\Windows\System32\GroupPolicy;v
C:\Windows\SysWOW64\GroupPolicy;v 
StandardSearch; 
emptyfolderscheck; 
installer-list; 
installedprogs; 
uninstall-list;

 

[Sweetness_cw]

Here is how we're going to do


> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

createsrpoint;
gpt.ini;z
C:\Windows\System32\GroupPolicy;v
C:\Windows\SysWOW64\GroupPolicy;v
StandardSearch;
emptyfolderscheck;
installer-list;
installedprogs;
uninstall-list;

Here you are

 

[TwinHeadedEagle]

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.

***** NEXT *****​

Run FRST, check Addition.txt, press Scan and attach both reports.

 

[Sweetness_cw]

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.

***** NEXT *****​

Run FRST, check Addition.txt, press Scan and attach both reports.

Ok here you are

 

[TwinHeadedEagle]

You did wrong fixlist, i need latest one. Delete old and download this. Then follow full instructions.

 

[Sweetness_cw]

You did wrong fixlist, i need latest one. Delete old and download this. Then follow full instructions.

Sorry. Ok this is what I got

 

[TwinHeadedEagle]

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.



Run FRST again, check Addition.txt press Scan and attach both reports. Tell me is Control Panel now ok?

 

[Sweetness_cw]

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.



Run FRST again, check Addition.txt press Scan and attach both reports. Tell me is Control Panel now ok?

The muvic programs have been removed. Here is the fixlog and the frst and addition. The yahoo toolbar is still showing for some reason, but it isn't on any of my browsers. I've opened them all to see if it was an option and it doesn't show as one... I'm also not getting any popups on my chrome either. I haven't gone to a lot of websites that it always interfered with, but it looks ok now. I did go to the main website that it effected us most on and I got no popups at all. Thank you so much.

 

[TwinHeadedEagle]

Let's try to remove Yahoo

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.

 

[Sweetness_cw]

Let's try to remove Yahoo

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.

It is still In the uninstall list.

 

[TwinHeadedEagle]

> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Yahoo Toolbar;u

 

[Sweetness_cw]

> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Yahoo Toolbar;u

Yahoo toolbar is still showing in my control panel uninstall or change programs list.

 

[TwinHeadedEagle]

I really don't know why Zoek won't work on your PC. Something must block it.


Once again we shall use FRST for additional checks. Re-run FRST/FRST64 by double-clicking:

• Type Yahoo into the Search: field in FRST then click the Search Registry button.
• FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
• Please attach it to your reply.

 

[Sweetness_cw]

I really don't know why Zoek won't work on your PC. Something must block it.


Once again we shall use FRST for additional checks. Re-run FRST/FRST64 by double-clicking:

• Type Yahoo into the Search: field in FRST then click the Search Registry button.
• FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
• Please attach it to your reply.

I have attached the search.txt