Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

YTD video downloader related issues (Malware/Adware?)


  • This topic is locked This topic is locked
9 replies to this topic

#1 MyPancreas

MyPancreas

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:05:59 PM

Posted 02 April 2016 - 02:43 PM

While I was off for a moment, my dad managed to install YTD video downloader on here.

 

Now after rebooting the CPU usage would go up and things like clicking on the start bar or dragging the vertical bar in the task manager window started to get interrupted almost immediately, as if I'd double clicked.

 

I removed YTD Video Downloader but this particular issue still persisted on the next reboot. I did notice this seems to be a Chrome related issue as I had both Chrome and Firefox on at the same time and disabling one of the Chrome processes in Task Manager stopped this weird phenomenon from happening. I did notice that at about the same time I got a message on the side of the screen talking about "synchronisation".

 

I did a system restore, deleted YTD Video through the Add or Remove Hardware feature directly instead of running the uninstal from the window, then used CCleaner to delete things and block a few isolated things which may or may not be related as they seemed rather minor.

 

Now as for the things I see mentioned in relation to YTD in various forums and online tutorials, I did not find any folder with the title of Spigot in the files, nor any Searchsettings, Searchsettings64, nor Application Updater like this person for example

 

http://www.digitalfaq.com/forum/computers/4621-warning-ytd-video.html

 

As for the Toolbar, I found it mentioned in the list of Programes, as well as via UnHack Me but both tell me that the programe could not be found, I'll post the exact quote when the full scan I'm running now is done.

 

Currently running a full scan with Malwarebytes. I know this forum preffers ADWCleaner but that one seems to hang for me when I push scan or delete, basically getting stuck.

 

 

I'd really appreciate if someone can help me figure things out, as the various places I go to, be it forum threads or invidivual pages talking about this almost all have different programes they suggest.


Edited by MyPancreas, 02 April 2016 - 02:48 PM.


BC AdBot (Login to Remove)

 


#2 satchfan

satchfan

  • Malware Response Team
  • 2,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:10:59 PM

Posted 02 April 2016 - 04:05 PM

Hello MyPancreas and welcome to Bleeping Computer.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

  • please follow all instructions in the order posted
  • please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
  • all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
  • if you don't understand something, please don't hesitate to ask for clarification before proceeding
  • the fixes are specific to your problem and should only be used for this issue on this machine.
  • please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

===================================================

Note: Please complete these tasks in the order given in the instructions.

 

If any of these won't run, run them in Safe Mode.

===================================================

 

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

  • run AdwCleaner
  • when it has finished, select Clean
  • if it asks to reboot, allow the reboot
  • on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Download and run Junkware Removal Tool

Please download Junkware Removal Tool to your desktop.

  • shut down your protection software now to avoid potential conflicts.
  • run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator"
  • the tool will open and start scanning your system
  • please be patient as this can take a while to complete depending on your system's specifications
  • on completion, a log (JRT.txt) is saved to your desktop and will automatically open
  • post the contents of JRT.txt into your next message.

===================================================

Run Malwarebytes’ Anti-Malware

You say that you have MBAM on your system: if you no longer have it, you can download it from here:

  • start Malwarebytes-Anti-Malware and update it, (“Update” tab}
  • once it is updated, click on “Scan” tab, select Threat Scan, then click Scan.
  • when the scan is complete, if no malicious items are found you can close the program
  • if malicious items are found be sure that everything is checked and click Quarantine
  • when removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
  • the log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • copy and paste the contents of that report in your next reply and exit MBAM.

NOTE: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

Logs to include with next post:

AdwCleaner log
JRT.txt
Mbam.txt


Thanks

Satchfan


Edited by satchfan, 02 April 2016 - 04:16 PM.

My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#3 MyPancreas

MyPancreas
  • Topic Starter

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:05:59 PM

Posted 02 April 2016 - 05:35 PM

Thanks for the response. I can only post the Mbam one now, because as I said ADWCleaner seems determined to hang on my end for some reason.

 

I'll look into the others first thing in the morning as it is half past midnight now and I'm still technically ill. I did remove YTD from the registry, as well as the APN Toolbar files but I'd need to redo the scan because I accidentally closed those and I can't stay awake for so long.

 

 

Attached Files



#4 satchfan

satchfan

  • Malware Response Team
  • 2,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:10:59 PM

Posted 03 April 2016 - 02:51 AM

If any of these won't run, run them in Safe Mode.

 

Did you try running AdwCleaner in safe mode? If not, do so please.

 

Also, you need to re-run Malwarebytes and get rid of what was found.

 

if malicious items are found be sure that everything is checked and click Quarantine

 

Satchfan


Edited by satchfan, 03 April 2016 - 02:53 AM.

My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#5 MyPancreas

MyPancreas
  • Topic Starter

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:05:59 PM

Posted 03 April 2016 - 03:24 AM

I didn't run AdwCleaner yet, as I had to uninstal MB, reinstall the new version, run the test all over again (albeit much shorter this time around) and then get the Farbar Scan Tool and run a scan with that.

 

As for AdwCleaner, I know I'm not the only one who had issues with it not running as I looked online so maybe that needs a reinstall. Anyway here are the logs I have so far.

 

 

Attached Files



#6 satchfan

satchfan

  • Malware Response Team
  • 2,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:10:59 PM

Posted 03 April 2016 - 03:34 AM

I didn't ask for FRST.

 

I asked you to run AdwCleaner and Junkware Removal Tool.

 

Also, having dealt with thousands of posts helping people to clean their computers, I'm aware of some having problems running AdwCleaner but not as many as you think.

 

I give instructions in a certain order for good reason and although you are keen to resolve this problem it will not be helped by you following your own instructions instead of mine.

 

Please try AdwCleaner in safe mode and run Junkware Removal Tool as requested.

 

Satchfan


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#7 MyPancreas

MyPancreas
  • Topic Starter

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:05:59 PM

Posted 03 April 2016 - 03:57 AM

Sorry, I just didn't have the logs for ADW Cleaner yet, sorry, I've been doing this till 3 AM in the morning and I'm sick so I didn't have the strength to finish it in one go.

 

I got the newest version of ADW Cleaner and that one doesn't hang at all. Here are the logs.

 

 

 

Attached Files



#8 satchfan

satchfan

  • Malware Response Team
  • 2,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:10:59 PM

Posted 03 April 2016 - 04:03 AM

Thanks, that cleaned up a lot.

 

Now Junkware Removal Tool.


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#9 satchfan

satchfan

  • Malware Response Team
  • 2,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:10:59 PM

Posted 06 April 2016 - 01:34 AM

Hi MyPancreas

It has been several days since I replied and asked you for the result of the Junkware Removal Tool scan.

Please let me know if you are having problems and still need help.

Thanks

Satchfan
 


My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.


#10 satchfan

satchfan

  • Malware Response Team
  • 2,917 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Devon, UK
  • Local time:10:59 PM

Posted 07 April 2016 - 03:37 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.

My help is always free of charge. If you are happy with the help provided, if you wish you can make a donation to buy me a beer.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users