google chrome is redirected to yahoo.genio can't uninstall

I have windows 7 and tried to remove yahoo.genio but it will not uninstall and it is no longer listed in programs

Hi there! Welcome to the forums.

TDSSKiller Scan

Please download and run TDSSKiller to your desktop as outlined below:

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

For Windows XP, double-click to start.
For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.



-------------------------

Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.



------------------------

Click the Start Scan button.



-----------------------

If a suspicious object is detected, the default action will be Skip, click on Continue
If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
Skip and click on Continue




----------------------

If malicious objects are found, they will show in the Scan results and offer three (3) options.

Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.





--------------------

A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply.
Sometimes these logs can be very large, in that case please attach it or zip it up and attach it.

-------------------

Here's a summary of what to do if you would like to print it out:

If a suspicious object is detected, the default action will be Skip, click on Continue
If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
Skip and click on Continue

If malicious objects are found, they will show in the Scan results and offer three (3) options.

Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.


avast! aswMBR

Please download aswMBR from here

• Save aswMBR.exe to your Desktop
  
• Double click aswMBR.exe to run it
  
• Uncheck "Trace disk IO calls".
  
• Click the Scan button to start the scan as illustrated below
  

Note: Do not take action against any **Rootkit** entries until I have reviewed the log. Often there are false positives.

• Once the scan finishes click Save log to save the log to your Desktop
  
  
• Copy and paste the contents of aswMBR.txt back here for review
  
• Please also find MBR.dat on your Desktop, and rename it to MBRscan.txt. Upload that as well. Do not copy and paste MBR.dat/txt, it needs to be uploaded.

no threats found
I cant seem to attache the zipped file??

Try to post it in multiple replies, please or do the following:

Upload to SpeedyShare.com.

• When you enter the site, click the center bar, "Click here to upload[...]", find the file. Select that, and upload it.
  
• Once you do that, you will get a sharing link. Please post that in your next reply.

Great!

Now, aswMBR?

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-11-09 12:08:00
-----------------------------
12:08:00.908 OS Version: Windows 6.1.7601 Service Pack 1
12:08:00.908 Number of processors: 2 586 0xF0A
12:08:00.912 ComputerName: PAUL-PC UserName: Paul
12:08:04.120 Initialize success
12:08:06.294 AVAST engine defs: 12110900
12:08:25.561 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4
12:08:25.568 Disk 0 Vendor: ST9160821AS 3.BHD Size: 152627MB BusType: 11
12:08:25.601 Disk 0 MBR read successfully
12:08:25.610 Disk 0 MBR scan
12:08:25.621 Disk 0 Windows 7 default MBR code
12:08:25.631 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 144153 MB offset 63
12:08:25.663 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 8471 MB offset 295226505
12:08:25.691 Disk 0 scanning sectors +312576705
12:08:25.743 Disk 0 scanning C:\Windows\system32\drivers
12:08:46.671 Service scanning
12:09:33.105 Modules scanning
12:09:54.559 AVAST engine scan C:\Windows
12:09:57.332 AVAST engine scan C:\Windows\system32
12:14:34.816 AVAST engine scan C:\Windows\system32\drivers
12:14:59.588 AVAST engine scan C:\Users\Paul
12:18:11.288 Disk 0 MBR has been saved successfully to "C:\Users\Paul\Desktop\MBR.dat"
12:18:11.291 The log file has been saved successfully to "C:\Users\Paul\Desktop\aswMBR.txt"

Cool...

ComboFix scan

Please download ComboFix by sUBs
From BleepingComputer.com

Please save the file to your Desktop.

Important information about ComboFix


After the download:

• Close any open browsers.
  
• Very Important: Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". Please visit here if you don't know how.
  
• WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
  
• Please do not attempt to re-connect your machine back to the Internet until ComboFix has completely finished.
  
• If there is no Internet connection after running ComboFix, then restart your computer to restore back your connection.
  

Running ComboFix:

• Double click on ComboFix.exe & follow the prompts.
  
• When ComboFix finishes, it will produce a report for you.
  
• Please post the report, which will launch or be found at "C:\Combo-Fix.txt" in your next reply.
  

Troubleshooting ComboFix

Safe Mode:

If you still cannot get ComboFix to run, try booting into Safe Mode, and run it there.

(To boot into Safe Mode, tap F8 after BIOS, and just before the Windows
logo appears. A list of options will appear, select "Safe Mode.")

Re-downloading:

If this doesn't work either, try the same method (above method), but try to download it again, except name
ComboFix.exe to iexplore.exe, explorer.exe, or winlogon.exe.

Malware is known for blocking all "user" processes, except for its whitelist of system important processes such as iexplore.exe, explorer.exe, winlogon.exe.

NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.

I have avast free version can't turn it off

You should be able to. Right-click on the avast! icon, mouse-over avast! Shields Control, and select Disable until restart.

here is the link

ESET Online Scan

Please run a free online scan with the ESET Online Scanner

• Tick the box next to YES, I accept the Terms of Use
  
• Click Start
  
• When asked, allow the ActiveX control to install, or it will ask to download an installer. Please do so an install it.
  
• Click Start or wait for the scanner to load.
  
• Make sure that the options Remove found threats and the option Scan unwanted applications are checked.
  
• Click Scan (This scan can take several hours, so please be patient)
  
• Once the scan is completed, there are a couple of things to keep in mind:
  
• 1. If NO threats were found, allow the scanner to Uninstall on close and then close the Window.
  
• 2. If threats WERE detected, click on List of Threats Found, Export to Text File...save it as ESET-Scan-Log.txt. Click the back button/link, put a checkmark to Uninstall Application on Close and then close the window.
  
• Open the logfile from wherever you saved it
  
• Copy and paste the contents in your next reply.
  

Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

• Slow computer
  
• Error messages
  
• Fake antivirus alerts or the icon in the system tray
  
• svchost.exe running at 100%
  
• System crashes or blue screen of death

no threats found. I just want yahoo.genio uninstalled it makes my computer slow and I want it to boot to google chrome home page but yahoo.genio won't let it

Uninstall and reinstall Google Chrome, and tell me if it helps...

no that did not help.....computer seems to be getting slower

OTL Quick Scan

Please download OTL by OldTimer to your Desktop.

• Close all windows and double click OTL.exe.
  
• Click Quick Scan button and let the program run uninterrupted.
  
• It will produce a log for you called OTL.txt, please post it in your next reply.
  
• You may need to use two posts to get it all.

here is the log

OTL Fix

Please run OTL

• Under the Custom Scans/Fixes box at the bottom, copy and paste in the following:
  
  

  :OTL
  FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0
  CHR - Extension: Color my Facebook = C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\innimmmamipenpklmoafgkgidfhfemhb\2.0.1_0\
  
  :files
  ipconfig /flushdns /c
  
  :commands
  [emptytemp]
  [reboot]

  
  
  
• Then click the Run Fix button at the top.
  
• Note: The fix for OTL automatically hides your Desktop and Start menu so the fix can be completed. Do not be alerted, as this is normal.
  
• Please do not exit the program. It might take a while to fix, but allow it to run. If it asks to reboot the computer, allow it to reboot. If the program freezes, and the computer fails to reboot - let me know.
  Lastly, post the contents of the log. (Located at C:\_OTL\Moved Files)

Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

• Slow computer
  
• Error messages
  
• Fake antivirus alerts or the icon in the system tray
  
• svchost.exe running at 100%
  
• System crashes or blue screen of death

Ran fix but it did not get rid of the problem and the computer is getting slower....what is it with this yahoo genio??

Here is the info on their site:

How do I remove Genieo?


On Windows:

• Open Control Panel.
  
• On Windows 7 - choose “Uninstall a program”. On Windows XP - choose “Add/Remove Programs”.
  
• Select the “Genieo” entry from the list of installed programs and click the “Uninstall” button.
  
• If from any reason the uninstall does not work please download and run the following file.
  

Once that's done (if successful), post new log from OTL please.

I originally did that and it did not work. Genio is not listed but it still comes up as my home page and there is no way to change it. I think ever since I accidently installled it my computer has been getting slower I think it is a virus in itself. There was no file to run in the last post

You tried the Geneio download the remove it?

What Genio download? In Windows I had found the program and uninstalled it but that does not work and now it is not listed in the programs section

I wrote this:

If from any reason the uninstall does not work please download and run the following file

Link was to http://genieo.com/uninstall/updater_uninstall.exe

That does nothing I hit run and the box goes away and nothing happens except that it brings up my files listed under c:

SystemLook scan

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

NOTE: If you have a x86 system instead, please use this link.

• Double-click SystemLook.exe to run it.
  
• Copy the content of the following codebox into the main textfield:
  

  
  :filefind
  *geneio*
  *genio*
  *yahoo*
  
  :folderfind
  
  *geneio*
  *genio*
  *yahoo*
  
  :regfind
  
  geneio
  genio
  yahoo

  
  
  
• Click the Look button to start the scan.
  
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
  

Note: The log can also be found on your Desktop entitled SystemLook.txt

here is the log

OTL Fix

Please run OTL

• Under the Custom Scans/Fixes box at the bottom, copy and paste in the following:
  
  

  :reg
  [-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{087CE277-A82B-4DA7-B4AA-303B9C99DADC}]
  [-HKEY_USERS\S-1-5-21-2542492384-342735957-1596629310-1000\Software\Microsoft\Internet Explorer\SearchScopes\{087CE277-A82B-4DA7-B4AA-303B9C99DADC}]
  
  :files
  ipconfig /flushdns /c
  
  :commands
  [emptytemp]
  [reboot]

  
  
  
• Then click the Run Fix button at the top.
  
• Note: The fix for OTL automatically hides your Desktop and Start menu so the fix can be completed. Do not be alerted, as this is normal.
  
• Please do not exit the program. It might take a while to fix, but allow it to run. If it asks to reboot the computer, allow it to reboot. If the program freezes, and the computer fails to reboot - let me know.
  Lastly, post the contents of the log. (Located at C:\_OTL\Moved Files)

All processes killed
========== OTL ==========
Prefs.js: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0 removed from extensions.enabledAddons
File C:\Users\Paul\AppData\Local\Google\Chrome\User Data\Default\Extensions\innimmmamipenpklmoafgkgidfhfemhb\2.0.1_0 not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Paul\Downloads\cmd.bat deleted successfully.
C:\Users\Paul\Downloads\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Paul
->Temp folder emptied: 757 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 23861109 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 9418 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 23.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 12062012_194459

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Test for Geneio please...

it is still there

Please download Junkware Removal Tool to your desktop
Junkware Removal Tool by thisisu
•You may need to shut down your protection software now to avoid potential conflicts.
•Run the tool by double-clicking it. If you are using Windows Vista or
Seven, right-mouse click it and select Run as Administrator.
•The tool will open and start scanning your system.
•Please be patient as this can take a while to complete depending on your system's specifications.
•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
•Post the contents of JRT.txt into your next message.


Please download and run RKill.

Download mirror 1 - Download mirror 2 - Download mirror 3

• Save it to your Desktop.
  
• Double click the RKill desktop icon.
  
• It will quickly run and launch a log. If it does not launch a log, try another download link until it does.
  
• Please post its log in your next reply.
  
• After it has run successfully, delete RKill.

Note: This tool only kills the active infection, the actual infection will not be gone. Once you reboot the infection will be active again! Please do not reboot until instructed further to do so.



Adware Cleaning

Please download AdwCleaner by Xplode onto your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  
• Click on Delete.
  
• A logfile will automatically open after the scan has finished.
  
• Please post the content of that logfile in your reply.
  
• You can find the logfile at C:\AdwCleaner[Rn].txt as well - n is the order number.

I ran adware cleaner and it automatically logged off...not sure if it re booted as the power did not go off...anyway here is the log

Do the issues continue?

Not sure until i re boot.....should I?

Sure. Let me know.

re booted and yahoo genio is still in my system...also getting slower

Sorry to hear that. Remember the scan we did with SystemLook? We'll need that done again please.

Wow! Geneio is still on your system? And nothing on it was found by SystemLook....impressive!

Tell you what...remove Google Chrome...

Go to Control Panel > Programs... search for Google Chrome and remove it, please.

Then, follow this tutorial to manually uninstall it/remove any other information: http://support.google.com/chrome/bin/answer.py?hl=en&answer=111899


Are you having the problem on Firefox? Internet Explorer?

Then, reinstall Google Chrome...no extensions or anything yet.

Let me know if it helps.

I uninstalled chrome but when I try to manually remove it by clicking on their link all that gets saved to the desktop is a notepad saying this is to change the registry and it does not give me the option to click on yes as it says in the directions.
I have had problems with Internet Explorer and never used Firefox
should I reinstall chrome?

Try to reinstall now...

I think Yahoo Genio is now gone but my computer is very slow

In what ways is it slow? Web browsing...programs, general slowness?

web browsing and general slowness

Let's go with this. If you already have it, no need to re-download. Let me know how it goes...

Download Windows Repair (all in one) from this site

Install the program then run it.

Go to Step 2 and allow it to run CheckDisk by clicking on Do It button:





Once that is done then go to Step 3 and allow it to run System File Check by clicking on Do It button:




Go to Step 4 and under "System Restore" click on Create button:




Go to Start Repairs tab and click Start button.




Please ensure that ONLY items seen in the image below are ticked as indicated (they're all checked by default):



Click on box next to the Restart System when Finished. Then click on Start.

This did not seem to do anything. the computer takes about 5 minutes to boot up and when on sites that need to load pictures scrolling is slow