Infected possibly by YIELDMANAGER

Hello. New to this forum. Hope you all can help me. I followed the read me guide and have my logs so I will attach them in the next two posts.

What I can first recall about this infection was the following. I was browsing an article on Overclockers.com. While reading it, another browser window opened automatically full screen for a video site (I believe it was Yahoo), and started playing a video. I closed that window and a few seconds later I got a popup window in a standard windows format about some offer. At that moment, I knew I had to be infected with something. I went to my Spybot - S&D and ran it after updating it and immunizing. It came back with one entry concerning YIELDMANAGER. I selected fix problem. I did some reading on this and one forum post somewhere suggested to use Spy Hunter. I installed that but did not run it as I did some further reading that stated this could be a fake scanner. I removed it via add/remove programs.

I did not feel that this issue had been cleared up. Opening browsers like Firefox 3.1 beta 2, could take over 30 seconds, and IE7 can be slow as well.

I found this forum so I went ahead and followed the read me procedure. A couple things of note happened. After running SuperAntiSpyware and closing it, my systems corporate Norton Antivirus (program version 10.1.4.4000) reported finding "Infostealer.Gampass", Reboot required - Cleaned by Deletion, and the count was 33. The path was to an uninst.exe for UberIcon which is part of Vista Inspirat 2 application suite. I use that to change the look of my WinXP to more of a Vista look. I've used it for a long time without issue, so I do not believe this was the source of the infection. NAV asked for a reboot to clear it and since that follows the direction of SuperAntiSpyware use read me, I did that. Later on in running the anti-malware apps, NAV again stated it needed a reboot to clear infection (not exact words), this was done when allowed by the read me guide. NAV finally reported in a tooltip by the clock that it was unsuccessful in removing the offending infection (again not exact words). Finally, when I ran Spybot today in following the read me guide, it found two entries for Spy Hunter. I clicked Fix selected problems there.

Now for a possible infection point, the worst thing I did yesterday was reading about softmodding a wii. I had gotten some files from a friend in this area, but I did not run any of those on the PC here. Maybe a visit to a bad site infected me as some of those sites did generate some opening of new browser windows for various things. I closed those as I saw them by clicking on the x in the upper right corner of the window. I did not use Alt-F4 for them.

Well, that is all I can think of to report right now. Hope someone can help and that I've provided enough to get started. Thank you in advance for all your assistance in this matter. :major

 

The other two log files are here. Thank you.

 

Thank you for your time chaslang. Performing the uninstall steps now.

Jeff :-D