Request to check FRST logs

Hello,

I have the following problem with the Chrome browser. Despite the settings, the browser searches itself through the yahoo search engine. Additionally, whatever you type in the search bar, this website pops up every now and then:
https://consent.yahoo.com/collectConsent?sessionId=3_cc-session_2456a0fa-929b-4cef-ba5e-c7f362bc0d72&lang=en-US&inline=false

Would you like to see my problem on add picture, and help with with logs please...


http://www.wklejto.pl/849611
http://www.wklejto.pl/849612
http://www.wklejto.pl/849613
https://ibb.co/vw9bZ4P

Hello Damian747,

Welcome to the forum!

I am pgmigg and I'll be helping you with any malware problems.

Before we begin, please read and follow these important guidelines, so things will proceed smoothly.

1. The instructions being given are for YOUR computer and system only!
   Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!
2. You must have Administrator rights, permissions for this computer.
3. DO NOT run any other fix or removal tools unless instructed to do so!
4. DO NOT install any other software (or hardware) during the cleaning process until we are done as well as
   DO NOT Remove, or Scan with anything on your system unless I ask. This adds more items to be researched.
   Extra Additions and Removals of files make the analysis more difficult.
5. Only post your problem at (1) one help site. Applying fixes from multiple help sites can cause problems.
6. Print each set of instructions if possible - your Internet connection will not be available during some fix processes.
7. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
8. Only reply to this thread, do not start another one. Please, continue responding, until I give you the "All Clean!"
   Absence of symptoms does not mean that everything is clear.

I am currently reviewing your logs and will return, as soon as possible, with additional instructions. In the meantime...

Note: If you haven't done so already, please read this topic ALL USERS OF THIS FORUM MUST READ THIS FIRST where the conditions for receiving help here are explained.

Please read all instructions carefully before executing and perform the steps, in the order given.
lf you have any questions or problems executing these instructions, <<STOP>> do not proceed, post back with the question or problem.

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start


Failure to post replies within 72 hours will result in this thread being closed

Thank You for replay me pgmigg !!!
Thanks for instruction, that is fine for me, and no problem I will follow step by step...
I am law student form Poland, and actually, i have no idea about staffs like that, my world, is Microsoft Office, and I am just user..
I am fine with the important meters,
Best Regards...

Hello Damian747,

P2P Advisory!
IMPORTANT: There are sign of P2P (Peer to Peer) File Sharing Program installed on your computer:

uTorrent

As long as you have the P2P program(s) installed, per Forum Policy, I can offer you no further assistance.
If you choose NOT to remove the program(s), please indicate that in your next reply and this topic will be closed.

Otherwise, please perform the following steps:

Step 1.
Remove Program(s)

1. Click on Start, then click the Start Search box on the Start Menu.
2. Copy and paste the value below without the line with word Code: into the open text entry box:
   

    appwiz.cpl 

   and press Enter - the Unistall or change a program list will be opened.
3. Click each Entry, as follows, one by one, if it exists, choose Uninstall, and give permission to Continue:
   uTorrent
4. Take extra care in answering questions posed by any Uninstaller.
5. When the program(s) have been uninstalled, please close Control Panel.
6. Reboot you computer.

By using any form of P2P networking to download files you can anticipate infestations of malware to occur. The P2P program
itself, may be safe but the files may not - use P2P at your own risk!
Keep in mind that this practice may be the source of your current malware infestation.
Reference... siting risk factors, using P2P programs: How to Prevent the Online Invasion of Spyware and Adware

Then:
Please tell me, is this computer used for business purposes or connected to any business network?
I need to know it - so I can provide the proper instructions.

Step 2.
Run CKScanner

1. Please download CKScanner from Here
2. Important: - Save it to your Desktop.
3. Right-click CKScanner.exe and select "Run as administrator...", then click Search For Files.
4. After a very short time, when the cursor hourglass disappears, click Save List To File.
5. A message box will verify the file saved.
6. Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

Step 3.
Run CodeCheck Scan

1. Please download codecheck from here to your Desktop.
2. Make sure that codecheck.exe is on the your Desktop before running the application!
3. Right-click on codecheck.exe and select "Run as administrator..." to run it.
4. After a very short time a codecheck.txt icon will appear on your Desktop
5. Double-click on the codecheck.txt icon on your Desktop and copy/paste the contents in your next reply.

Step 4.
TSG - SysInfo utility

1. Please download SysInfo utility and save it to your Desktop.
2. Right click on SysInfo.exe, select "Run As Administrator..." to run it... if UAC prompts, please allow it.
3. Right click, select copy and then paste in your next post.

Step 5.
Fresh FRST64 Scan
You should still have FRST64.exe on your Desktop.

1. Please close all open programs and windows.
2. Right-click FRST64.exe and select "Run as administrator..." to run it.
3. When the tool opens click Yes to the disclaimer if it is occurred.
4. Please be sure that 90 Days Files check box under Optional Scan section is checked.
5. Please be sure that Addition.txt check box under Optional Scan section is checked.
6. Press Scan button. When finished a two logs FRST.txt. and Addition.txt will be created and opened in Notepad.
7. Please post the content of the both FRST.txt and Addition.txt in your next reply.

Please post each log separately as a new post for every log to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections...

Don't post anything as attachments or links as you did for initial FRST logs unless I will ask you about it specifically!

Please include in your next reply:

1. Your decision about P2P program.
2. Do you have any problems executing the instructions?
3. Answer for my question related to type of using of your computer.
4. Contents of the CKFiles.txt log file
5. Contents of the codecheck.txt log file
6. Contents of SysInfo scan
7. Contents of the FRST.txt log file after fresh FRST scan
8. Contents of the Addition.txt log file after fresh FRST scan
9. Do you see any changes in computer behavior?

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Hello pgmigg !!!
Thank You for your replay pgmigg !!!
I have decide to uninstall uTorrent, and I have did it. Its not any more at my pc.
I have uninstall Dell software for mouse, my Pc is not Dell...
I have follow the steps what I got form you, and I am submitting the results below...:

Hello Damian747,

"Damian747" wrote:I have follow the steps what I got form you, and I am submitting the results below...:

Thank you, but you did not exactly as I asked you. Please look:

"pgmigg" wrote:Don't post anything as attachments or links as you did for initial FRST logs unless I will ask you about it specifically!

Did I asked you specifically to attach all logs?

"pgmigg" wrote:Please post each log separately as a new post for every log to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections...

In opposite, I asked you to post each log separately as a new post for every log, but you attached them!
Every request here makes sense - please watch out for the future!

Let's start our treatment...

Step 1.
Create a Backup With Tweaking.com Registry Backup (TCRB)
There is also a tutorial with pictures available HERE.

1. Please download TCRB from HERE and save it to your Desktop, then double-click on tweaking.com_registry_backup_setup.exe and follow the prompts to install TCRB.
2. Launch TCRB.
3. Click the Backup Registry tab and make sure all the boxes are checked.
4. Click on Backup Now.
5. Once the backup is finished you can now exit the program.

< STOP > Do not proceed any further if you were not able to create a registry backup. Post back with what happened so we can determine why it was unsuccessful.

Step 2.
Scan with AdwCleaner.

1. Please download AdwCleaner and save it to your Desktop.
2. Double click AdwCleaner.exe to run it. If it will ask for update please decline it.
3. Click Yes on UAC question and I Agree on Welcome window.
4. Click Scan now button and wait for a while until the scan finish... then click on Cancel button.
5. On the vertical left side menu select Log Files, click on it, and you will see the list of log files.
6. Find most recent one AdwCleaner[Sxx].txt with a type of Scan and double click on it - the Notepad with a log file will be opened.
7. Close the AdwCleaner.
8. Please post the contents of AdwCleaner[Sxx].txt log file from Notepad with your next reply.

AT THIS POINT, DO NOT ATTEMPT TO CLEAN ANYTHING THAT MAY BE FOUND

Please post each log separately to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections...

Don't post anything as attachments unless I will ask you about it specifically!

Please include in your next reply:

1. Do you have any problems executing the instructions?
2. Content of the C:\AdwCleaner[Sxx].txt
3. Do you see any changes in computer behavior?

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Due to a lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.