Unable to remove Adward.Yontoo

[Chrissg]

Malwarebytes keeps flagging 3 yontoo in scans. I have quarantined and deleted it several times in the last week, with reboots in between the Malwarebytes scan, but it still reappears. I downloaded and ran adwcleaner, it deleted the following:

 [ Folders ]

Deleted: C:\ProgramData\201d1dc8

[ Registry ]

Deleted: [Key] - HKLM\SOFTWARE\WebBar
Deleted: [Value] - HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|SystemCash.exe

The rest of the log was "No malicious etc"

I used AdwCleaner again after a few days and nothing was detected this time. But MWbytes still picks up the 3 Adware.yontoo. I have also downloaded HitmanPro and my computer's "clean".

I have restored my IE to default settings, but MWbytes still finds those three.

Please can you help?

AdwCleaner[C0] 171115.txt

Malwarebytes scan report 171121.txt

[kevinf80]

Hello Chrissg and welcome to Malwarebytes, Follow the instructions in this link to clear your current problem: https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ Be aware there are two posts in that thread, if the first instruction does not help move onto the second.... Let me know if the issue is cleared... Thank you, Kevin...

[Chrissg]

Dear Kevin,

Thanks for getting back so quickly. I'm not very techy, so please be patient with me. From what I understand, my PC uses Microsoft Edge. I attach below the picture of what is at the top of my internet browser.

Microsoft edge browser 171121.docx

I don't think Chrome is installed in my PC because every time I log into my gmail, I get this thing that tells me "Google recommends using Chrome".

What do I do now?

 

C

[kevinf80]

According to the Malwarebytes log you posted Chrome is the issue, we`ve seen loads of theses recently, that is why those instructions were listed..

Quote

Adware.Yontoo, C:\USERS\JUSTINE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Removal Failed, [151], [454818],1.0.3309
Adware.Yontoo, C:\USERS\JUSTINE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Removal Failed, [151], [454818],1.0.3309
Adware.Yontoo, C:\USERS\JUSTINE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [151], [454818],1.0.3309

 

[Chrissg]

Hi Kevin,

I did a search and yes, I did find a lot of Chrome stuff, and one of them was a ChromeSetup.exe file. So I clicked on it and it was downloaded/installed. I followed the instructions on your link. The first one did not work (and the check on MWbytes gave me 7 threats instead of the original 3 Adware.Yontoo!)

But I went on to the second one and it seems to have worked. I'm going to check it again tomorrow to make sure. In the mean time, thank you very much for guiding me.

Regards,

Chrissg

[kevinf80]

Hello Chrissg

If you`ve managed to remove all entries using the instructions by @Aura try running another threat scan with Malwarebytes, see what the log shows...

Thanks,

Kevin....

[Chrissg]

I've done another scan. No threats detected. This is what the log shows. I think I'm OK now?

Malwarebytes scan report 171122.txt

[kevinf80]

Hiya Chrissg,

Yes a clean log, you should be good to go....

Read the following links to fully understand PC Security and Best Practices, you may find them useful.... Answers to Common Security Questions and best Practices Do I need a Registry Cleaner? Take care and surf safe Kevin...

[kevinf80]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!