yoog removal doesnt work

[Hellashot]

I used your malwarebyes program because yoog search hijacked my browsers today. I ran your malwarebyes program and it found a hijack item and it removed it but after rebooting yoog continues to hijack my searches. Using vista64 and it happens in both 64 and 32bit IE7 browswers.

And from other posts, there is no "prefs.js" file on my computer.

[Tigger93]

Hello and Welcome to Malwarebytes.org

If you're having Malware related issues with your computer that you're unable to resolve.

1. Please read and follow the instructions provided here: I'm infected - What do I do now?
2. If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
   
3. When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.
   

• Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  
• Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  
• Using these other tools often makes the cleanup task more difficult and time consuming.
  
• If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  
• Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  
• There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review
  

• NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.
  

[Hellashot]

Thanks for not offering any help.

[Tigger93]

Excuse me? I clearly pointed out where you can get help, its quite clear you didn't read what I posted.

[GT500]

Excuse me? I clearly pointed out where you can get help, its quite clear you didn't read what I posted.

Big post = "I don't want to read."

[Hellashot]

Anyone give any other help??

[Hellashot]

The "help" that was given says to run their program which I did previously to posting here. I am an advanced computer users not some newbie who just uses email and web.

There is nothing in the "log" anymore because the first time I ran their program it found a hijack, but when the program is run now it finds nothing so there's no point in posting a blank log. Spybot, Adaware, and superantispyware found nothing. Neither did a virus scan from my AVG program. Yet yoog hijacks both IE and now FoxFire. FireFox was initially fine. I installed it becaue IE was hijacked and I found out Microsoft has censoreded up Vista so bad that IE cannot be uninstalled because it's "part" of vista. What a load of crap.

[Hellashot]

I guess this site is all about trying to get people to buy the full version of their program. Sad.

[Insomniac]

Yes, the instructions say to run MBAM and post a log, but they also tell you to run HiJackThis and make a new topic with both the MBAM and HJT logs in the HJT analysis forum. For several reasons logs arn't worked on in the general forum.

The HJT log will show what's going on 'behind the scenes' in your pc, and one of the members qualified to analyze HJT logs will look them over and tell you what to do. This is the standard procedure they use here to help people with stuff their program struggles to remove, and you should get help in a couple of days if you post there. Include both logs and describe what's happening, even if MBAM finds nothing.

[AdvancedSetup]

You mean like I posted here: http://www.malwarebytes.org/forums/index.p...ost&p=61118

If you can take enough time out of your precious life and relax a bit and post the requested information we'll be more than happy to help you get rid of it. If you would rather insist on how good you are with computers then there isn't much we can do to help you. We need logs to look at even if YOU think there is nothing. If the current logs are of no use then we'll ask for others but if you just give attitude instead of providing the requested information then we won't be able to help you.

The Malwawarebytes program is 100% FREE to use for Home Users. We also offer FREE assistance removing Malware that the program may not currently detect. IF - that is a BIG IF - you want some added features such as automated daily updates, scheduled scanning, LIVE continous protection, THEN you can pay for the program. If you don't feel you need or want those features then you don't have to purchase the program and you can still use it for free and we'll still help you. There are not too many other sites out there that sell a product that offer such a good deal so you decide how you want to proceed.

[Hellashot]

they also tell you to run HiJackThis

I'm sorry but a program with that name looks like spyware/malware itself to me!

[AdvancedSetup]

No problem. There are dozens of other sites on the Web where you can obtain assistance if you don't want us to help.

Thanks for visiting.

[Insomniac]

I'm sorry but a program with that name looks like spyware/malware itself to me!

Riiight.... judging an application on it's name and not it's funtion isn't going to get you very far. It's a very well-known program.

[deathtospyware]

I'm sorry but a program with that name looks like spyware/malware itself to me!

What it's name looks like and what it does are two different things. From one "computer expert" to another. HijackThis has done more to help me than any program I've found to date. And MBAM makes it easier to remove the rouge software, but when it doesn't quite do the job HijackThis is the program that can steer you in the right direction. If you don't know how to interpret the HijackThis log file follow the advice given. It works.

[GT500]

I guess this site is all about trying to get people to buy the full version of their program. Sad.

No, you were given instructions about how to post for help, and you did not follow them. My guess is you got to the point where it said to run MBAM, and you said "I can't do that" or "I already tried that", and you just stopped reading. If you had continued, you would have noticed that YOU ARE SUPPOSED TO CREATE A NEW TOPIC IN OUR MALWARE REMOVAL FORUM. So, if you are done with your little gripe session, read the rest of the instructions Advanced Setup gave you, and post that new topic with your HijackThis log in it, and one of our malware removal experts will be happy to help you.

I'm sorry but a program with that name looks like spyware/malware itself to me!

Then you have no idea what malware is. Do a little research next time...

[Hellashot]

I guess I'll read other posts on what to actually do to remove it that has been posted in here. I've read so many opinions on what will actually remove it without any of them actually removing yoog.

[AdvancedSetup]

There are differing ways to remove because if we can't actually duplicate it and a user isn't willing to work with us to track it down, that makes it difficult to remove. Often it's just a little bit of folder/registry/Jscript junk but have also seen a DLL involved for someone before as well. Those things are not easy to find and still maintain a decent scan time. If we took 15 hours to scan your box you'd be a bit upset.

The people writing it also keep changing it around because they don't want you to remove it either. So if you want help to remove it then you need to work with someone to find the root cause and remove it.

[GT500]

I guess I'll read other posts on what to actually do to remove it that has been posted in here. I've read so many opinions on what will actually remove it without any of them actually removing yoog.

I'm seriously trying not to call you a tard, but I think I just failed at that.

You have experts telling you "do this, and you'll get help", yet you refuse to do it. So, for the last time, here are your directions. Either follow them, or reformat your hard drive.

Please follow these instructions (skipping any steps you are unable to complete) for posting in our Malware Removal - HijackThis Logs forum. If you cannot follow any of those steps, then please create a new topic in that forum explaining what happened when you tried to run each of the tools in the instructions, and the expert who helps you will be able to suggest steps to take to get the tools working.

[miekiemoes]

Above instructions apply for older variants and is a copy/paste from another forum without mentioning credits.

Original reference

MBAM should detect and remove all latest variants now with the exception of the user.js file present in the Firefox profile folder. The user.js file is not present by default. In this case, the user.js file was added when dealing with Yoogsearch (in Firefox). But the user.js file could already be present before where own preferences were set. More info here.

[Electrobrandino]

Above instructions apply for older variants and is a copy/paste from another forum without mentioning credits.

Original reference

MBAM should detect and remove all latest variants now with the exception of the user.js file present in the Firefox profile folder. The user.js file is not present by default. In this case, the user.js file was added when dealing with Yoogsearch (in Firefox). But the user.js file could already be present before where own preferences were set. More info here.

NICE CALL MIEKIEMOES!!!

Seriously dude, if you want help, you should follow directions...they don't type that stuff up for fun...

[fixitguy2009]

omg, now that's funny...lol.."copy/paste from another forum without mentioning credits"...where did that come from? I never said I came up with it or where I got it from. Jesus Christ, my first post trying to help people, not show off and I get investigated by the Malwarebytes "nothing better to do" police! Grow up and find better things to do....stop being a hater!!! Mr. or Miss "original source"...lol..enough time wasted...that's all the time you get!

[GT500]

omg, now that's funny...lol.."copy/paste from another forum without mentioning credits"...where did that come from? I never said I came up with it or where I got it from. Jesus Christ, my first post trying to help people, not show off and I get investigated by the Malwarebytes "nothing better to do" police! Grow up and find better things to do....stop being a hater!!! Mr. or Miss "original source"...lol..enough time wasted...that's all the time you get!

I deleted your post for several reasons:

1) We've already told the guy what to do to get help. No one else needs to be stepping in and saying anything. Let us handle this guy.

2) As miekiemoes said, "Above instructions apply for older variants and is a copy/paste from another forum without mentioning credits." No need for outdated instructions that won't work, and please credit your source if you are quoting someone else.

3) Malware removal instructions are not to be posted in the General Malwarebytes' Anti-Malware Forum.

[Hellashot]

MBAM should detect and remove all latest variants now

What is this mbam you're talking about? The malware bytes anti malware program?

If so, it doesn't detect anything when I run it after updating it. It found something the first time I ran it but never found anything since.

[GT500]

What is this mbam you're talking about? The malware bytes anti malware program?

If so, it doesn't detect anything when I run it after updating it. It found something the first time I ran it but never found anything since.

Then you could follow the instructions we gave you, and get some help...

[Hellashot]

So when will malware bytes anti malware program remove yoog? I just updated the program and scanned and it found nothing still.