Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Downloaded Tuvaro, malware, cannot delete, redirects.

09 Jan 2014   #1
aintnorock

windows 7 home premium 64 bit
 
 
Downloaded Tuvaro, malware, cannot delete, redirects.

My wife unfortunately hit the wrong button and downloaded Tuvaro, malware that redirects your home screen in IE and Chrome to a Tuvaro Bing search. I've googled it, saw several fixes, and I think I've fixed most of the problem, but whenever I open IE or Chrome, it redirects to this Tuvaro screen.

The program no longer shows up as a current program, I think I've deleted it with Malware Bytes and SpyBot, but it continues to do it. I've search the registry for "tuvaro" and can't find it.

Is there anything that I can do to get it to stop?


My System SpecsSystem Spec
.

09 Jan 2014   #2
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Try using AdwCleaner from the Bleeping Computer site.

AdwCleaner Download
My System SpecsSystem Spec
09 Jan 2014   #3
cottonball

Windows 7 Home Premium
 
 

Welcome to the forum, aintnorock!

Please use the tool Zoek:
Download > http://hijackthis.nl/smeenk/

Select the .zip version, and save to the Desktop.

On the Desktop, right-click the .zip file, and select: Extract to Zoek\, or the option that extracts the tool to its own folder on the Desktop.

Open the new Zoek folder on the Desktop, and double-click zoek.exe to start the program. (Give it a few seconds to appear.)


If your AntiVirus warns you about the program, either allow Zoek to run, or temporarily disable your AV program.
Info on how to disable your security applications > http://www.bleepingcomputer.com/forums/topic114351.html


Next, copy/paste the entire script in the code box below to the input field of Zoek:


Code:
createsrpoint; 
process; 
filesrcm; 
startupall; 
installedprogs;
installer-list; 
uninstall-list;
hijackthis; 
firefoxlook; 
chromelook;  
srinfo; 
DIR /S /A:L "%systemdrive%\*">>"%temp%\log.txt";b
Now...
  • Close any open Browsers.
  • Click the Run script button, and wait. It takes a few minutes to run all the script.
  • When the tool finishes, the zoek-results.log is opened in Notepad.
  • The log is also found on the systemdrive, normally C:\
  • If a reboot is needed log is opened after the reboot.
Please post the zoek-results.log in your reply.


Thanks!
My System SpecsSystem Spec
.


09 Jan 2014   #4
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

aintnorock please follows cottonball suggestions and recommendations.
My System SpecsSystem Spec
17 Jan 2014   #5
aintnorock

windows 7 home premium 64 bit
 
 

I've been way behind in email and just saw the replies. I will try Cottonballs suggestion tomorrow.
My System SpecsSystem Spec
21 Jan 2014   #6
aintnorock

windows 7 home premium 64 bit
 
 

Quote   Quote: Originally Posted by cottonball View Post
Welcome to the forum, aintnorock!

Please post the zoek-results.log in your reply.


Thanks!
attached is the log file

zoek-results.txt


My System SpecsSystem Spec
22 Jan 2014   #7
cottonball

Windows 7 Home Premium
 
 

This one is a bummer.
You got Tuvaro after installing free software that bundled it into their installer.
The problem is finding what was installed!!

Please run Zoek again.

Next, copy/paste the entire script inside the code box below to the input field of Zoek:

Code:
iedefaults;
CHRdefaults;
autoclean;
emptyclsid;
emptyalltemp;
createsrpoint;
Now...

Close any open Browsers.

Click the Run script button, and wait. It takes a few minutes to run all the script.

When the tool finishes, the zoek-results.log is opened in Notepad.
The log is also found on the systemdrive, normally C:\
If a reboot is needed log is opened after the reboot.

Please post the zoek-results.log in your reply.
My System SpecsSystem Spec
24 Jan 2014   #8
aintnorock

windows 7 home premium 64 bit
 
 
latest log results

here's the latest:

thanks for your help


Attached Files
File Type: txt zoek-results.txt (23.5 KB, 6 views)
My System SpecsSystem Spec
27 Jan 2014   #9
cottonball

Windows 7 Home Premium
 
 

Any progress?

Are you still getting redirections in IE and Chrome to a Tuvaro Bing search?
My System SpecsSystem Spec
27 Jan 2014   #10
aintnorock

windows 7 home premium 64 bit
 
 

Quote   Quote: Originally Posted by cottonball View Post
Any progress?

Are you still getting redirections in IE and Chrome to a Tuvaro Bing search?

Yes I am getting the redirect. No progress has been made.
My System SpecsSystem Spec
Reply

 Downloaded Tuvaro, malware, cannot delete, redirects.




Thread Tools





Similar help and support threads
Thread Forum
Tuvaro has taken over IE and FaceBook as a browser
I use IE for my browser on Facebook. This a.m. I click on it and a blank page with Tuvaro and the word bing at the end show up.....cannot figure out how to delete it. It is not in the add /remove programs, and I cannot right click on it and delete it.... dang, anyone know how this happend and what...
System Security
Downloaded files delete as soon as it completes
I have Windows7 32bit OS. For last few days I have been facing a very strange problem as follows: My downloaded files get deleted as soon as the download reaches 100%. I have tried downloading with different web browser like IE, FF, Chrome, Safari, but problem persists in every browser. I...
Network & Sharing
“BadNews” malware in Google Play downloaded up to 9 million times
Source A Guy
Security News
Auto Delete downloaded file
I cannot find my file after download. I observe it by downloading a large file through firefox and internet explorer however after completion the file was remove or deleted. I try to remove my AV(nod32) but issue still exists. This was also observe downloading torrent files. Can some one help...
Browsers & Mail
Delete downloaded files
Is it ok to delete downloaded files in the "download folder"?
Performance & Maintenance
Delete a downloaded Update that is not installed yet?
how can i delete an update that has been downloaded but not yet installed? i'm sure that this update caused the corruption/deletion of my user profile and i've restored my system to a date before it was installed. but now anytime i want to turn my computer off, it wants to re-install the update....
Windows Updates & Activation

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 16:08.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App