Youtube popup havoc

[SuzyQ]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-09-2014
Ran by Computer at 2014-09-23 19:02:58 Run:1
Running from C:\Users\Computer\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
FF SearchEngineOrder.1: Ask.com
CHR DefaultSearchKeyword: Default -> ask.com
CHR DefaultSearchProvider: Default -> Ask
CHR DefaultSearchURL: Default -> http://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-4&o=APN10266&locale=en_US&apn_uid=ffb2f987-f112-49fa-892b-ff3b5edb30ea&apn_ptnrs=%5EAGX&apn_sauid=40532622-B5B4-46F5-A5ED-E657BB64CE9F&apn_dtid=%5EYYYYYY%5EYY%5EUS&q={searchTerms}
CHR DefaultSuggestURL: Default -> http://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms}
Hosts:
EmptyTemp:
End
*****************

Firefox SearchEngineOrder.1 deleted successfully.
Chrome DefaultSearchKeyword deleted successfully.
CHR DefaultSearchProvider: Default -> Ask ==> The Chrome "Settings" can be used to fix the entry.
Chrome DefaultSearchURL deleted successfully.
Chrome DefaultSuggestURL deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 1 GB temporary data.


The system needed a reboot.

==== End of Fixlog ====

[ken545]

Morning Suzy

• Open Chrome
• Click the Chrome menu on the browser toolbar.
• Click on Settings
• Then Manage Search Engines
• Highlite Ask and select Delete

How is your system behaving now, any better ?

[SuzyQ]

Good morning and I appreciate your time so much!

The Ask is gone from Chrome.

The computer seems to be working good. I still have this Windows Live Messenger opening ever start, and it is in Russian. I am concerned about those programs that were installed when this happened at ~ 10:30 PM on 9-20-2014. I don't know how safe it is to use my computer and sign into websites. Suzy

[ken545]

Suzy. I wont be online until later this afternoon. Just hang in

[ken545]

Go to Programs and Features in the Control Panel and see if you can uninstall WinLiveSuite

[SuzyQ]

Hello Ken, I got called into work tonight, sorry it took so long to get back.

The WinLiveSuite or anything similar isn't in the uninstall list. :(

Suzy

[ken545]

Suzy,

Run this script and then you should be able to uninstall them manually

Open notepad (Start --> All Programs --> Accessories --> Notepad).
Please copy the entire contents of the code box below.
(To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste).
Save it to the same directory as FRST or FRST64 as fixlist.txt. (it has to be right next to FRST or FRST64) either in a directory you saved FRST or FRST64 or on your desktop if thats where you saved it.
You can use your mouse to drag Fixlist right next to FRST or FRST64, either above or below it but not on top of it.

Start
Основные компоненты Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
EmptyTemp:
End

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Then open FRST or FRST64 and click on fix
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

[SuzyQ]

It seems there is a new challenge. When I try to save the fixlog.txt, I get a warning. Is it because of the foreign letters and language? Here is the warning:

C:\Users\Computer\Desktop\fixlist.txt
This file contains characters in Unicode format which will be lost if you save this file as an ANSI encoded text file. To keep the Unicode information, click Cancel below and then select one of the Unicode options from the Encoding drop down list. Continue?

I didn't click anything. Thanks ahead of time. Suzy

[ken545]

Save it as Fixlist and when you get that warning save it as Unicode

[SuzyQ]

Thank you. I did that. But upon restart, I still have it on my taskbar, so I think it is still there.

Suzy