Solved help removing yahoo commnunity smarrt bar

[bigkahuna]

Google chrome defaults to yahoo after I downloaded imgburn and got what I believe is the yahoo toollbar ad malware


I began to follow the instructions on the thread below.

http://malwaretips.com/blogs/yahoo-toolbar-removal/

However on step 1 when it comes to uninstall 'yahoo community smartbar' I get a pop up saying 'please choose the browser you would like to remove yahoo community smartbar from' then an option of next or 'custom'. I have not procededd further than this because I am unsure of whether it would be wise to do so.
Also there is 'yahoo community smartbar engine' when I go to uninstall this it comes up with 'uninstall/change'. when I click this a dialogue box comes up saying 'do you want to allow the following programme to make changes to your computer? It is BrowserHelp by Resoft Ltd. Si I have not proceeded further.
I also have a 'yula' file on there and am not sure if this is malware.

 

[TwinHeadedEagle]

Hello,


Before we start please note the following:

Analysis and research take some time, also sometimes real life gets in the way, please be patient.

Limit your internet access to posting here, some infections just wait to steal typed-in passwords.

Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.

Do not paste the logs in your posts, attachments make my work easier. There is a Upload a File button which you can use to attach your reports. Attach all reports.

Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.

Note that we may live in totally different time zones, what may cause some delays between answers.

I can't foresee everything, so if anything unexpected happens, please stop and inform me!

There are no silly questions. Never be afraid to ask if in doubt!

Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool x64 and save it to your Desktop.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• When the tool opens click Yes to disclaimer.
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please copy and paste their content into your next reply.

 

[bigkahuna]

Thank you. I have run the scan and upload both the files here.

 

[TwinHeadedEagle]

First, go to Control Panel and uninstall following (skip lines that cannot be uninstalled):
- Firefox Packages
- Yahoo Community Smartbar
- Yahoo Community Smartbar Engine
- Yahoo! Toolbar

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.




Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

• Click on the Scan button.
• After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Post logfile will also be saved in the C:\AdwCleaner folder.

 

[bigkahuna]

I cant seem to remove any of the four files mentioned using uninstall. Should I carry on with the rest of the instructions anyway?

 

[bigkahuna]

First, go to Control Panel and uninstall following (skip lines that cannot be uninstalled):
- Firefox Packages
- Yahoo Community Smartbar
- Yahoo Community Smartbar Engine
- Yahoo! Toolbar

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.




Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

• Click on the Scan button.
• After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Post logfile will also be saved in the C:\AdwCleaner folder.

 

[bigkahuna]

Hi I re read your instructions and went on and ran the two scans and have attached the files. With the Adware cleaner scan there were a number of tabs including services/folders etc. There was something that showed up in files so I pressed clean and it did the reboot and log file generated -hope that was the right thing to do

 

[TwinHeadedEagle]

Do you still have the problem?

 

[bigkahuna]

Hi although those programme files are still showing as being there (apart from Yahoo! Toolobar which was uninstalled), the problem seems to have gone from all three browsers (firefox, chrome and explorer). So I am very hopeful - thank you. Does it matter that those programme files show up as still there?

 

[TwinHeadedEagle]

These are just remnants, you can delete them by clicking uninstall, and then pressing Yes when it asks you to delete.



For future protection I can recommend you:
- Adblock --> https://adblockplus.org/en/chrome
- Unchecky --> http://unchecky.com/


Something to read --> Simple and easy ways to keep your computer safe and secure on the Internet



• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

 

[bigkahuna]

These are just remnants, you can delete them by clicking uninstall, and then pressing Yes when it asks you to delete.



For future protection I can recommend you:
- Adblock --> https://adblockplus.org/en/chrome
- Unchecky --> http://unchecky.com/


Something to read --> Simple and easy ways to keep your computer safe and secure on the Internet



• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

 

[bigkahuna]

Thanks much appreciated!