Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

How to remove Yoog Search/Blueskyadagency/Contextual ads/Snappyads

- - - - -

  • Please log in to reply
15 replies to this topic

#1
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Yoog Search and its variations is a FireFox hijacker whose goal is to re-direct your searches and force you to use their search engine ( Yoog Search ). It also installs a Yoog Search Bar in Mozilla Firefox, which you can see below in the screenshots

Posted Image

Posted Image

You will get popups from Contextual ads by Blueskyadagency, Addestination and Snappyads as well.


Symptoms :

Although its easy to tell whether you have this infection just from using your browser, here are some other symptoms. It drops the following files ( among others ) onto your PC

C:\Program Files\Mozilla Firefox\searchplugins\Yoog.xml
C:\Program Files\Mozilla Firefox\components\nsadzgalore.dll
C:\Program Files\Mozilla Firefox\components\nsadsoftinc.dll
C:\Program Files\Mozilla Firefox\components\nsBrowserOpt.dll


Also if you see any randomly numbered 36 digit file in the following folder

C:\Program Files\mozilla firefox\components

then the infection is present on your machine

eg :

C:\Program Files\mozilla firefox\components\2d459f29-8673-5b62-1b99-d126554a936e.dll


Removal :


  • Download OTL to your desktop.
  • Double click on the icon to run it. Make sure all other windows ( especially FireFox ) are closed and to let it run uninterrupted.
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

    :OTL
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www1.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www2.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www3.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www5.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www6.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www7.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www8.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www9.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www10.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www11.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www13.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www14.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www15.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www26.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www27.yoog.com/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www28.yoog.com/
    FF - prefs.js..browser.search.defaulturl: "http://www28.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www28.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www28.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www28.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaultenginename: "Yoog Search"
    FF - prefs.js..browser.search.defaulturl: "http://www14.yoog.com/search.php?q="
    FF - prefs.js..browser.search.selectedEngine: "Yoog Search"
    FF - prefs.js..keyword.URL: "http://www14.yoog.com/search.php?q="
    FF - user.js..browser.search.defaultenginename: "Yoog Search"
    FF - user.js..browser.search.defaulturl: "http://www14.yoog.com/search.php?q="
    FF - user.js..browser.search.selectedEngine: "Yoog Search"
    FF - user.js..keyword.URL: "http://www14.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www8.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www8.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www8.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www8.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www15.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www15.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www5.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www7.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www7.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www7.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www7.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www13.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www13.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www13.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www13.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www3.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www3.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www3.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www3.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www10.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www10.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www10.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www10.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www11.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www11.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www11.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www11.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www2.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www2.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www2.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www2.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www26.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www26.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www26.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www26.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www5.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www5.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www5.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www5.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www1.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www1.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www1.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www1.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www9.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www9.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www9.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www9.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www6.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www6.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www6.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www6.yoog.com/search.php?q="
    FF - prefs.js..browser.search.defaulturl: "http://www27.yoog.com/search.php?q="
    FF - prefs.js..keyword.URL: "http://www27.yoog.com/search.php?q="
    FF - user.js..browser.search.defaulturl: "http://www27.yoog.com/search.php?q="
    FF - user.js..keyword.URL: "http://www27.yoog.com/search.php?q="
    FF - user.js..keyword.enabled: true
    FF - component: c:\program files\mozilla firefox\components\ozunxgvjpnsoioviq.dll
    FF - component: c:\program files\mozilla firefox\components\rnqbuctnbrd.dll
    
    :Files
    %ProgramFiles%\IEToolbar
    %ProgramFiles%\Mozilla Firefox\components\nsadzgalore.dll
    %ProgramFiles%\Mozilla Firefox\components\nsadsoftinc.dll
    %ProgramFiles%\Mozilla Firefox\components\nsBrowserOpt.dll
    %ProgramFiles%\Mozilla Firefox\searchplugins\Yoog.xml
    %ProgramFiles%\Mozilla Firefox\components\nsBrowserDc.dll
    %ProgramFiles%\Mozilla Firefox\components\nsdcads.dll
    %APPDATA%\Mozilla\Firefox\Profiles\Yoog Search.xml /s
    %PROGRAMFILES%\Mozilla Firefox\components\mexmgzdhgnvqilpib.dll
    %SystemRoot%\system32\mexmgzdhgnvqilpib.dll
    %PROGRAMFILES%\mozilla firefox\components\zvakwomxas.dll
    %SystemRoot%\system32\zawcukanoit.exe
    %SystemRoot%\System32\lkvwtxiako.dll  
    %SystemRoot%\system32\zvakwomxas.dll
    %SystemRoot%\system32\dgbzetddjouspgzqz.dll
    %SystemRoot%\System32\nsn*.dll 
    %SystemRoot%\nmwi*.exe
    %SystemRoot%\system32\nsx*.dll
    %SystemRoot%\system32\nsj*.dll
    %SystemRoot%\system32\nsv*.dll
    %systemroot%\system32\nsf*.dll
    %systemroot%\mutfp*.exe
    %systemroot%\obwu*.exe
    %systemroot%\ntaj*.exe
    %systemroot%\nwuhr*.exe
    %systemroot%\System32\nss*.dll
    %SystemRoot%\system32\*-uninst.exe
    %SystemRoot%\system32\*-remove.exe 
    %systemroot%\system32\nsr*.dll
    %systemroot%\reax*.exe
    %systemroot%\giptf*.exe
    %systemroot%\tkoo*.exe
    %systemroot%\axjth*.exe
    %systemroot%\ertbg*.exe
    %systemroot%\jnnmp*.exe
    %systemroot%\bprxe*.exe
    %systemroot%\xwisg*.exe
    %systemroot%\jpng*.exe
    %systemroot%\fhsv*.exe
    %systemroot%\dfmqc*.exe
    %systemroot%\wgfp*.exe
    %systemroot%\gweq*.exe
    %systemroot%\pxwis*.exe 
    %systemroot%\fcvmq*.exe 
    %systemroot%\System32\hfkxlchuhv.dll
    %systemroot%\System32\nst*.dll 
    %systemroot%\dmkv*.exe
    %systemroot%\system32\nseE*.dll
    %systemroot%\System32\nsk*.dll
    %systemroot%\system32\mexmgzdhgnvqilpib.dll
    %systemroot%\system32\ibgyxrpdcrlay.dll
    %systemroot%\system32\ympweffizcodl.exe
    %systemroot%\kdiue732.txt
    %systemroot%\system32\jmcvcflmiugsrfia.exe
    %PROGRAMFILES%\VnrBlock
    %PROGRAMFILES%\iCheck
    %systemroot%\tvilp*.exe
    %systemroot%\itqot*.exe
    %systemroot%\system32\wskuofzpxkxdb.exe
    %systemroot%\tutvo*.exe
    %systemroot%\hsep*.exe
    %systemroot%\system32\pihtwcdtsghokinvg.dll
    %systemroot%\system32\juluypfvhofv.dll
    %systemroot%\system32\nsl*.dll
    %systemroot%\system32\gchnamepziopknko.dll
    %systemroot%\system32\pihtwcdtsghokinvg.dll
    %systemroot%\system32\yprhhrqubcbujp.exe
    %systemroot%\system32\ucicolizrhssr.dll
    %systemroot%\system32\hiwdrlnk.exe
    %systemroot%\System32\nsg*.dll
    %systemroot%\System32\jifgoojjyhmkthcfk.dll 
    %USERPROFILE%\Start Menu\Programs\Startup\runit_32.lnk
    %PROGRAMFILES%\runit
    %systemroot%\System32\hokfklenusuebapl.dll 
    %systemroot%\System32\drsqpwimruypmc.dll 
    %systemroot%\System32\nsxE*.dll 
    %ProgramFiles%\Mozilla Firefox\components\drsqpwimruypmc.dll 
    %ProgramFiles%\Mozilla Firefox\components\hokfklenusuebapl.dll
    %systemroot%\System32\kxzubfhuxew.exe
    %systemroot%\System32\dsygtypzdloyoxivg.exe
    %systemroot%\System32\qdfggdhhofhhylbfx.exe
    %systemroot%\system32\spkr.exe
    %systemroot%\system32\winset.ini
    %systemroot%\ajis*.exe
    %systemroot%\cdmb*.exe
    %systemroot%\vsoei*.exe
    %systemroot%\bkit*.exe
    %systemroot%\okjo*.exe
    %systemroot%\xwaro*.exe
    %systemroot%\ojxde*.exe
    %systemroot%\system32\spkr.exe
    %systemroot%\system32\winset.ini
    %systemroot%\system32\cabine.dll
    %systemroot%\system32\rnqbuctnbrd.dll
    %systemroot%\system32\nsy*.dll
    %ProgramFiles%\mozilla firefox\components\ozunxgvjpnsoioviq.dll
    %ProgramFiles%\mozilla firefox\components\rnqbuctnbrd.dll
    %systemroot%\system32\nsa*.dll
    %systemroot%\system32\ebrhmlpemih.dll
    %systemroot%\system32\sfirpzmipv.dll
    %systemroot%\system32\dkwjlgwkreqy.exe
    %systemroot%\system32\nsm*.dll
    %ProgramFiles%\mozilla firefox\components\????????-????-????-????-????????????.dll
    %systemroot%\System32\????????-????-????-????-????????????.exe
    
    :Reg
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b0d2e786-354b-fea1-8de7-883e7524e6d2}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2fe5f61-3eb4-4e22-7c84-f52993635f52}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f20e8516-7d08-c1e3-e689-96d39bb42220}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{ad7781e6-d262-25f8-389d-967a6d974748}"=-
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{314506e6-db9d-d679-08b6-c16f288ad5c9}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AC4A7813-6844-2FF3-D929-DCB471E346AB}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77cab7d9-e377-ddfc-7d69-cd9cab0e10ff}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8620A38-0404-12B1-FA60-5A0C1FB1C6A5}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B188763A-902C-98E9-780E-DAA0BF25BBFD}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4c18a538-eb55-9029-1fdb-37769fbefee2}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{314506e6-db9d-d679-08b6-c16f288ad5c9}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AC4A7813-6844-2FF3-D929-DCB471E346AB}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58b39041-fe10-d989-5b61-50d6fe664b48}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{994b5fb4-0103-44a6-b6b3-c73572b362bc}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c8217294-fa91-dd4d-ba56-4561001b63c8}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{670b520c-3f08-4d72-94a5-047740c07766}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78f9a905-789c-d4b1-d5d6-336920981691}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78ff6579-e7fe-8225-43c1-3fe7864edc62}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e8217e11-e93b-fc21-7455-fea561f86263}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\nlhbxrcsmhodrzf]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\iztcfgmowgboporyl] 
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b5b5ca3-3bec-e287-841a-52b690c5641a}] 
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8415b27c-0bd3-dcf3-6c9b-354472fd2f31}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a09d0f21-af0a-aba8-16d7-6b8ffabcb6a0}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5c7368fb-d033-ce70-4757-e3b62547b82c}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{667675cf-b246-41eb-a1c4-5d8c6231bd49}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{733716e1-76d2-4003-ac39-845281c0ef85}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f7e5f38b-3105-3aa1-4519-bd2d7e219a76}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{031502ac-155a-922d-031c-bcd735a47512}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{040dc938-3620-9395-8810-c742263372c8}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d685ddf2-6463-fd20-4a25-97da85835f20}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{1bd3b92c-ee2e-f53d-24ca-4244ab728c8a}"=-
    
    :Commands
    [purity]
    [emptytemp]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • The fix should only take a few minutes to run. If it appears to freeze then try it again.


Your computer should now be clean from Yoog Search and its friends. If you find it is still present then you need to visit the Malware Removal forum to ensure its complete removal. This can be due to new variants or other infections being present on your machine.


If this guide fixes your machine, then please read my guide on how to prevent malware and about safe computing here


If you have had any issues or problems with this fix please let us know.

Edited by Rorschach112, 11 February 2010 - 07:25 AM.

  • 0

Advertisements


#2
claw3412

claw3412

    New Member

  • Member
  • Pip
  • 1 posts
i have tried these steps and nothing is working Help!!!!!!
  • 0

#3
sari

sari

    GeekU Admin

  • Administrator
  • 21,589 posts
  • MVP
Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE.

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post an OTListIt log in THAT forum.
  • 0

#4
workingstiff

workingstiff

    New Member

  • Member
  • Pip
  • 3 posts
I do not understand what you mean by "paste in the following". I am so lost with all this computer jargin'. I need so much help.
  • 0

#5
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
See everything in the code box ? Starting with :OTL and ending in [Reboot], select all of that, right click and pick Copy. Then right click and paste that into the program OTL under the Fix area and select Run Fix.
  • 0

#6
workingstiff

workingstiff

    New Member

  • Member
  • Pip
  • 3 posts
I must be missing something. When I right click there is no "Copy" option. The cursor doesn't change when I move it anywhere over the box. Even if it did, I still do not get this "Copy and Paste" thing. I did not grow up with a computer in the house and I can not afford to take some computer course. We have only had a computer in our house for about 9 months. Everything I do know about these things I have had to learn by just stumbling through it. I do not learn very well that way. All this was to say "Please bare with me". What I need is very detailed "Step by step" instructions. I am about to throw this "Evil" thing in the trash.
  • 0

#7
BHowett

BHowett

    OT Moderator

  • Moderator
  • 4,648 posts
what he ment by select all that is...Take your mouse, and place your cursor at the beginning of the text in the box, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. then under the fix area, right click your mouse again, and select 'paste' and you will have copied and pasted the text.

it might be better for you to post in the Virus, Spyware and Trojan Removal area, and get some one on one help with a staff member cleaning your computer.
  • 0

#8
workingstiff

workingstiff

    New Member

  • Member
  • Pip
  • 3 posts
Oh My God, It worked!!! Thank You so much. I believe I got YOOG by going to " Limewire ". I have since "uninstalled" Limewire, so hopefully I will be safe from YOOG for now.
  • 0

#9
BHowett

BHowett

    OT Moderator

  • Moderator
  • 4,648 posts
glad to hear you got it sorted :)
  • 0

#10
Belarius

Belarius

    New Member

  • Member
  • Pip
  • 2 posts
sorry if I'm being a troll. But I got yoog off my computer and removed bluesky adware agency. I got it on IE7 removed it and updates to IE8 so now when ever I start up my browser the yoog search engine icon will appear for a few seconds in the explorer bar but it's totally gone. Help? thanks.
  • 0

Advertisements


#11
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Did you try the guide above ?
  • 0

#12
Belarius

Belarius

    New Member

  • Member
  • Pip
  • 2 posts
Yes. I'm saying Yoog is removed from my system. But when broswer starts you can see a yoog icon just for a second but it goes away and it's not even in search providers.
weird.
  • 0

#13
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE.

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post an OTListIt log in THAT forum.
  • 0

#14
petra.blabla

petra.blabla

    New Member

  • Member
  • Pip
  • 1 posts
:) :) :) :) :)

Thank you very much, it worked like a charm :)
  • 0

#15
lp098

lp098

    Member

  • Member
  • PipPip
  • 33 posts
.

Edited by lp098, 10 January 2010 - 09:46 PM.

  • 0




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.