Horrible time with Yhttps://forums.malwarebytes.org/topic/189663-horrible-time-with-yourtvlink-and-custom-google-search/ourtv.link and custom google search

[IndridColdx]

Hi, so as the title suggests Yourtv.link keeps getting put back onto my system through unknown means.

I open Chrome and then, Chrome shuts down and restarts with Yourtv as the main page as well as changing my default search settings by admin rights and making me unable to remove them.

 

I have scanned with Malwarebytes, Adwcleaner, Zoek, CCCleaner. They all report PUP and a lot of other things and remove them, but alas they keep coming back.

 

Here is my FRST file:

 

 

Please help! This thing is relentless. Thank you!

FRST.txt

[TwinHeadedEagle]

Hello and

 

Please download Zemana AntiMalware and save it to your  Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.

• Open Zemana AntiMalware again.
• Click on icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.

---

Scan with Farbar Recovery Scan Tool
 
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please upload them into your next reply.

Edited October 22, 2016 by TwinHeadedEagle

[IndridColdx]

Hi there and thank you for responding.

Zemana seems to have detected a lot of things, but after a reboot it's still back.

 

Here is their log:2016.10.22-14.32.56-i0-t92-d6.txt

 

Also attached is as you requested, the FRST and Addition FRST.txt Addition.txt

 

 

[IndridColdx]

oops I checked and the FRST was empty, heres the right one

FRST1.txt

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.
  

Please attach it to your reply.

 

---

 

When you finish FRST fix, you will find Upload.zip archive on your Desktop. Please upload it along with fixlog report.

fixlist.txt

[IndridColdx]

Hi again, 

 

Thanks for everything. Everything seems much better for now and I will let you know if it comes back.

 

Here is the fix log as you requested Fixlog.txt

[TwinHeadedEagle]

Glad to hear it

You forgot to upload Upload.zip archive.

 

Also please uninstall Amazon 1Button App from your Control Panel.

Edited October 22, 2016 by TwinHeadedEagle