Still have yahoo search bar problem after following all MalwareTips steps

ciarank41

New Member
Thread author
Jan 11, 2025
7
I followed all the steps and did all the scans and deleted unrecognised folders in appdata etc, and I still have the problem of searching in my google and it redirects me to yahoo, please help
 

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
636
Thank you..! :)

Before we continue I would like to reset your Chrome browser settings to their original defaults. This will reset your startup page, new tab page, search engine, and pinned tabs. It will also disable all extensions and clear temporary data like cookies. Your favorites, history, and saved passwords will not be cleared.Уou will need to reset Chrome Sync. Here’s how:

  1. On your computer, open Chrome.
  2. At the top right, select Profile
    Profile
    and then
    Sync is on.
  3. Select Turn off.
To delete synced info from your Google Account:
  1. On your computer, open Chrome.
  2. Go to chrome.google.com/sync.
  3. Select Delete data.

You can delete your Chrome browsing history and other browsing data, like saved form entries, or just delete data from a specific date.
  1. On your computer, open Chrome.
  2. At the top right, click More
    More
    and then
    Delete browsing data.
  3. Choose a time range, like Last hour or All time.
  4. Select the types of information you want to remove.
  5. Click Delete data.
    • If you delete cookies while signed in to Chrome, you won't be signed out of your Google Account.

To reset or restore Chrome settings to default in Windows 11, do the following:
  1. Open Chrome.
  2. Type chrome://settings in address bar
  3. Hit Enter.
  4. Scroll towards the end and click on Advanced settings.
  5. Toward the end, you will see Restore settings to their original defaults.
  6. Click on the button to restore to open the Reset settings panel
  7. Click on Reset settings button.


Next ....:

Farbar Recovery Scan Tool - Fix

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone


Please download the attached file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
 

Attachments

  • fixlist.txt
    1.8 KB · Views: 1
  • +Reputation
Reactions: Jack

ciarank41

New Member
Thread author
Jan 11, 2025
7
I believe I followed all of your steps correctly, and it is still happening, even on microsoft edge it redirects me to yahoo when I search in the hotbar.
 

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
636
No problem..!

Run Malwarebytes

Open Malwarebytes you have already installed.
Click the little gear on the top right (Settings) and when it opens, click the General tab. Under the title Windows Security Center, make sure the option is disabled.
Click the Scan and Detections tab and under the Scan options title, enable Scan for rootkits option. Do not change any other option.
Return to the Dashboard and choose Scan.
When finished, you will see the Threat Scan Summary window open.
If threats are not found, click View Report and proceed to the two last steps below.
If threats are found, make sure that all threats are selected, and click on Quarantine/Remove selected.
  • You may need to restart the computer.
  • Open Malwarebytes again, click on the Scanner, and then on the Reports tab.
  • Click on Export and then Copy to Clipboard.
  • Paste its content here, in your next reply.

Malwarebytes AdwCleaner
  • Please download AdwCleaner and save it to your Desktop
  • Close all open programs and browsers
  • Right click on the icon and select Run as administrator
  • Click Scan now
  • Uncheck any detected items you would to keep then click Next
  • If a Preinstalled software was found! screen appears review it if you'd like then click OK
The section at the bottom under Pre-Installed Software is software that was apparently installed when the device was new by your PC manufacturer.Personally, I don't keep anything from this software that I don't use/need. But it's your computer, so the decision is yours.
  • Review the list of Preinstalled software and place a check mark in those you do not wish to keep
  • Click Quarantine, then Continue
  • When completed click View Log File
  • Copy and paste the contents in your reply
  • Close the AdwCleaner window

In your next reply please post:
  1. AdwCleaner report
  2. The Malwarebytes report
 
  • +Reputation
Reactions: Jack

ciarank41

New Member
Thread author
Jan 11, 2025
7
No problem..!

Run Malwarebytes

Open Malwarebytes you have already installed.
Click the little gear on the top right (Settings) and when it opens, click the General tab. Under the title Windows Security Center, make sure the option is disabled.
Click the Scan and Detections tab and under the Scan options title, enable Scan for rootkits option. Do not change any other option.
Return to the Dashboard and choose Scan.
When finished, you will see the Threat Scan Summary window open.
If threats are not found, click View Report and proceed to the two last steps below.
If threats are found, make sure that all threats are selected, and click on Quarantine/Remove selected.
  • You may need to restart the computer.
  • Open Malwarebytes again, click on the Scanner, and then on the Reports tab.
  • Click on Export and then Copy to Clipboard.
  • Paste its content here, in your next reply.

Malwarebytes AdwCleaner
  • Please download AdwCleaner and save it to your Desktop
  • Close all open programs and browsers
  • Right click on the icon and select Run as administrator
  • Click Scan now
  • Uncheck any detected items you would to keep then click Next
  • If a Preinstalled software was found! screen appears review it if you'd like then click OK
The section at the bottom under Pre-Installed Software is software that was apparently installed when the device was new by your PC manufacturer.Personally, I don't keep anything from this software that I don't use/need. But it's your computer, so the decision is yours.
  • Review the list of Preinstalled software and place a check mark in those you do not wish to keep
  • Click Quarantine, then Continue
  • When completed click View Log File
  • Copy and paste the contents in your reply
  • Close the AdwCleaner window

In your next reply please post:
  1. AdwCleaner report
  2. The Malwarebytes report
 

Attachments

  • Malwarebytes Scan Report 2025-01-11 134716.txt
    2 KB · Views: 2
  • Like
Reactions: Jack

ciarank41

New Member
Thread author
Jan 11, 2025
7
AdwCleaner Report

# -------------------------------
# Malwarebytes AdwCleaner 8.4.2.0
# -------------------------------
# Build: 03-04-2024
# Database: 2024-03-04.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-12-2025
# Duration: 00:00:02
# OS: Windows 11 (Build 22631.4602)
# Cleaned: 12
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.WildTangentGamesBundle File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games.lnk
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDTANGENT GAMES
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDTANGENT GAMES\APP
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDTANGENT GAMES\SHORTCUTPROVIDER
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\WildTangent wildgames Master Uninstall
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{80831F60-19D7-43B3-A60C-5CAF8C478DF6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}


*************************

[+] Delete Tracing Keys
[+] Reset Chromium Policies
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4471 octets] - [11/01/2025 15:22:06]
AdwCleaner[C00].txt - [1719 octets] - [11/01/2025 15:22:56]
AdwCleaner[S01].txt - [4473 octets] - [12/01/2025 19:58:38]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
 

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
636
Fresh FRST logs

Please run FRST tool once more, and attach for me fresh logs:
  • Double-click on the FRST icon to run it, as you did before. When the tool opens click Yes to disclaimer.
  • Press Scan button and wait for a while.
  • The scanner will produce two logs on your Desktop: FRST.txt and Addition.txt.
  • Please attach these two logs in your next reply.
In your next reply, please post:
  • Fresh FRST logs
 
  • +Reputation
Reactions: Jack

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
636
Please click on the link below and follow the steps in booting your computer in Safemode.


Once in safemode, your can run a scan using your Anti-Malware scanner or your can use the Microsoft Safety Scanner just to make sure that computer doesn't have any threats.


Do you observe your problem or not..?
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top