(1/2) How Do I Remove "Yieldmanager.xxx" files

Discussion in 'Malware Help (A Specialist Will Reply)' started by owen.family@usfamily.net, Oct 27, 2008.

  1. Hello,

    I’ve been having trouble with something called yieldmanager...

    When I am searching, say, eBay, and should go to the Results page, it redirects to a page with the following address:
    http://ad.yieldmanager.com/st?ad_type”

    I have read the posts here, and have seen quite a bit on the Internet about this; also quite a bit about how to remove it manually, and/or with Spy Hunter. When I D/Led and ran Spy Hunter scanner, it returned several positives (including yieldmanager), but of course then they wanted me to buy the thing. Then I ran SpyBot S&D, and it identified Spy Hunter itself as Malware; “…prone to return false positives.”

    I have also tried removing every mention of yieldmanager (.txt, .com, etc.) from the Registry, but that did not make any difference.

    It is not showing in the Processes of Task Manager, nor does it show up in IE Explorer when I go to Tools/Internet Options etc. and look for it in the Temporary Files/cookies.

    I have run full scans with:
    Hijack This,
    AdAware,
    AVG -- w/latest definitions
    SpyBot S7D, ,
    Ccleaner,
    and have Spyware Blaster running as well.

    I have tried following the manual remove instructions found on the internet, but that has not worked. I don’t know what to do next, other than a reformat and reinstall of Win XP.

    I have also followed the instructions in Malware Removal regarding running the various tools, and the logs are attached to this thread...that is, if I did it correctly.

    These scans did find a few things, which surprised me, as I thought my anti spyware/virus etc. was doing alright, but yieldmanger is still there, and really a pest!

    I was wondering about that (was it) AdBlocker, I read about in another post, but it looked like that was specific to Firefox, perhaps?


    Any suggestions/instructions on how to delete this thing will be appreciated.

    Thanks much!

    Clayton
     

    Attached Files:

  2. (2/2) How Do I Remove Yieldmanager.xxx files

    This is the last of the logs pertaining to the previous yieldmanager posting.
     

    Attached Files:

  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    This is not a malware problem. It is just advertising links that you are blocking from appearing. And when they are blocked, the URL Assistant program you have installed ( actually thank Dell for this ) is redirecting you since it cannot find the actual page to display. Uninstall URL Assistant and you should be ok. The other choice is to stop blocking the ads.;)

    By the way, which browser are you using?

    Your logs are clean.


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
      • Delete the C:\combofix folder from combofix (if it exists)
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Go to add/remove programs and uninstall HijackThis.
    7. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    8. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    9. After doing the above, you should work thru the below link:
     
  4. Thank you!

    I am using IE 7.x

    I went to the Add/Remove and removed the URL Assistant, as you instructed. Then I went to eBay and gave it a try. There was no problem!

    After all the headache I went through with this thing, I can't believe how simple it actually was to fix. I guess it pays to ask the right people for help. Thanks again!

    Now I guess I'll have to go through the routine to reset everything, hmm?

    btw...
    Of the Free/Basic anti-virus & anti-spyware programs out there, i.e. AVG, Avast, etc., is there one that "out-protects" them all, in your opinion? I had used Norton for quite a few years, and then had some compatibility issues with it, and checked out AVG. When AVG found two Trojans that Norton had missed, I was sold; up 'til now...

    Your thoughts would be appreciated.

    CLayton
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    You may also want to read the below thread where yieldmanager was also discussed.

    ad.yieldmanager removal

    In the above user's case, they did not have URL Assistant but were just having problems due to the ads. As you can see in this case, just adding the URL to the hosts file has resolved their problems.

    The final instructions I gave you in my previous message cover everything you need to do.

    They are all about the same. Each has their pros and each has their cons. Either way they are quite adequate and usually out perform the big name pay tools and they do it for free.

    I don't know what you mean by "up 'til now...' AVG did not miss anything. You did not have malware problems so AVG did not miss anything.
     
  6. Hi,

    No, sorry, what I meant by "up 'til now..." was that although I was paying for Norton protection, I was quite surprised to see that AVG found some Trojans that Norton had let through...or whatever.

    I will check out the other thread that you indicated.

    Thanks again.

    Have a nice day.

    CLayton
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds