Problem with Yahoo Hijack of Search Bar

[MaidenJane]

I was looking for excel templates and downloaded several. I must have accepted 3rd party software and this has been the worst I have ever experienced as it has taken two days and I still have not repaired it. My computer functions fine, but when I perform a search in the browser bar, it redirects to a Yahoo page.

 

[TwinHeadedEagle]

Hi,


First, go to Control Panel and uninstall following:
- BrowserSafeguard with RocketTab
- Java 7 Update 45

***** NEXT *****​

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Open FRST, and click Fix. Attach me that report after it is finished.

***** NEXT *****​

Please download zoek.zip or zoek.rar by smeenk (

) from here or here and save it to your Desktop.
Unpack the archive...

• Close any open browsers
• Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
  
  

  createsrpoint;
  gpt.ini;z 
  C:\Windows\System32\GroupPolicy;v
  C:\Windows\SysWOW64\GroupPolicy;v
  Yahoo;a
  Yahoo;z 
  StandardSearch; 
  emptyfolderscheck; 
  installer-list; 
  installedprogs; 
  uninstall-list;

• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

[MaidenJane]

Thank you! Here is the fixlog. I am working through the rest.

 

[MaidenJane]

Here are the zoek-results

 

[TwinHeadedEagle]

> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

autoclean;
emptyalltemp;
emptyclsid;
ipconfig /flushdns;b
emptyfolderscheck;delete
C:\Program Files (x86)\Online Services\Yahoo_icon;fs
pbcgnkmbeodkmiijjfnliicelkjfcldg;chr
ajfflhghpobhpaobcgeefoindmagbdki;chr

 

[MaidenJane]

Results

 

[TwinHeadedEagle]

Is Yahoo still there...

 

[MaidenJane]

Yes, unfortunately.

 

[TwinHeadedEagle]

In which browser...

 

[MaidenJane]

I use chrome. I have not tried other browsers. I've removed all extensions and made sure all the settings are for google.

 

[TwinHeadedEagle]

Try this

https://support.google.com/chrome/answer/95426?hl=en

https://support.google.com/chrome/answer/95314?hl=en

 

[MaidenJane]

Tried those tips- multiple times. I have all extensions disabled - haven't even seen anything unusual. Have been through the Chrome Group forums and it seems like many others have the same problem unresolved.

 

[TwinHeadedEagle]

> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Yahoo;a
Yahoo;z

 

[MaidenJane]

Results

 

[TwinHeadedEagle]

> Re-run zoek with the script below and attach here fresh zoek log results.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

C:\Users\Jane\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk;fs
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK];r
"YahooMusicEngine.exe"=-;r

 

[MaidenJane]

Results

 

[TwinHeadedEagle]

Is situation changed or the same?

 

[MaidenJane]

It is still same.

 

[TwinHeadedEagle]

Can you make a ScreenShot for me to see how this looks like...

 

[MaidenJane]

Even if I type in the search bar on google.com, it jumps up to the omnibox and then changes the search to yahoo