What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

iYogiSupportDock Module [Closed]

33 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
:pullhair: Dear Sirs: My computer has recently been bothered with slow connections and various pop-up of sorts. I had a paid for service from this company last year called iYogi. I did not renew it and tried to uninstall it thru the normal means using "uninstall" from "Ctrl Panel". I suspect I may have spyware. Could you please look at my computer and the services that my computer is trying to access to determine if anything is wrong? Here is my computer information: Manufacturer: Gateway. Model: MT6705. Rating: 1.0 Windows Experience Index. Processor: Genuine Intel ® CPU T2060 @ 1.6 GHz. Memory Ram: 1.00 GB. System Type: 32-bit Operating System. Operating System: Windows Vista Home Premium. I await your reply. Thank you for your service. Best Regards, Sean O'Sullivan :wavey: P.S. Here is a screen snapshot of iYogi: 📎iyogi.jpg
Post #2
Hello AD4GP Sean O and welcome to the WTT forum.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:
  • please follow all instructions in the order posted
  • please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
  • all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
  • if you don't understand something, please don't hesitate to ask for clarification before proceeding
  • the fixes are specific to your problem and should only be used for this issue on this machine.
  • please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!
IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

===================================================

Run DDS

Please download DDS by sUBs from one of the following links and save it to your desktop.

DDS.scr
DDS.pif

• disable any script blocking protection (How to Disable your Security Programs)
• double click DDS icon to run the tool (may take up to 3 minutes to run)
• when done, DDS.txt will open.
• after a few moments, attach.txt will open in a second window.
• save both reports to your desktop.
• Post the contents of the DDS.txt and Attach.txt reports in your next reply
===================================================

Run aswMBR
  • download aswMBR.exe to your desktop.
  • double click the aswMBR.exe to run it
  • if asked, accept the AVAST virus definition download
  • click the "Scan" button to start scan
  • on completion of the scan click Save log, save it to your desktop and post in your next reply
Logs to include with next post:

DDS.txt
Attach.txt
aswMBR log

Thanks

Satchfan
Post #3
Hello AD4GP Sean O It has been a couple of days since I posted instructions to help with your computer problem. Please let me know if you are having problems and still need help. Thanks Satchfan
Post #4
Hi Satchfan, I am here at work. I downloaded the files you advised but I have had no time yet to do the scans. I will be on 12 hour days until Saturday Dec 17th. Can you please allow me until then to run the scans and post? I am away from my home until then while I work out of town. Thanks, Sean O AD4GP
Post #5

I will be on 12 hour days until Saturday Dec 17th. Can you please allow me until then to run the scans and post?

:thumbup: I'll keep it open until you return.

We do ask you to let us know if there is going to be a delay in replying.as we close unanswered posts after 3 days so please remember to let me know if there is to be a delay in future. Thanks.

Satchfan
Post #6
Hello Satchfan: Thank you for your time and effort. It is greatly appreciated. I have followed your directions per your post. Please find the following attachments per your request: 1: DDs.txt 2: Attach.txt 3: aswMBR.txt I hope I did this correctly. I will be looking forward in seeing what you have determined. In the meantime, take care and God Bless. AD4GP Sean O

Attachments:

Post #7 last edited
Hello Sean.

The ASK toolbar comes bundled with many third-party applications, is considered as Spyware and comes with vulnerabilities.

See the following links and decide yourself whether or not you want to keep it.:

http://secunia.com/advisories/product/15810/
http://www.benedelman.org/spyware/ask-toolbars/

You also have other programs that should be uninstalled. Some are adware that often come bundled with third party applications that, among other things, redirect you to other sites. You also have an old version of Java which is vulnerable to infections.

Uninstall the following programs:
  • click Start, Control Panel, Programs, Programs and Features.
  • click on each of the following and then Uninstall.

ALOT Toolbar
Ask Toolbar
iYogi Support Dock 4.2
Java™ 6 Update 4
PriceGong 2.1.0
StartNow Toolbar

If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

====================================================

Download and run ComboFix

Download ComboFix from the following location:

Link

* IMPORTANT !!! Save ComboFix.exe to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, as they may otherwise interfere with our tools. See here for programs that need to be disabled and instruction on how to disable them.
  • Remember to re-enable them when we're done.
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue its malware removal procedures.

    [external image: Posted Image]


    Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

    [external image: Posted Image]


    Click on Yes, to continue scanning for malware.
Note: Do not mouse-click combofix's window while it is running. That may cause it to stall.

When finished, it will produce a log. Please include the ComboFix.txt in your next reply. It can be found at C:\ComboFix.txt

Satchfan
Post #8
Hello Satchfan:

Thank you so much for your timely response. I really appreciate it.

PART ONE:

Per your post, I uninstalled the following:

1. ALot Toolbar
2. Ask Toolbar
3. iYogi Support Dock 4.2
4. Java ™ 6 Update 4
5. Price Gong 2.1.0
6. StartNow Toolbar.

All uninstalled with no problem except for iYogi Support Dock 4.2

When I selected to uninstall iYogi Support Dock 4.2, it showed the directory in which it would be uninstalling from:

c:\Program Files\iYogi Support Dock

I pressed the continue tab. A pop-up was then displayed asking me to choose from the following to files to uninstall:

Home Network Manager
Smart PC Care
PC Support

I selected all three and pressed continue. After a few seconds passed, I noticed the following statement displayed at the top of the monitor:

"iYogi Support Dock 4.2 Uninstall (Not Respnding)"

I waited for a few more seconds and nothing happened. So, I pressed cancel to abort the uninstall. I went back to the Uninstall page under the Control Panel and selected iYogi Support Dock 4.2 and pressed Uninstall again.

Another pop-up was displayed. This time it only showed 2 of the original 3 selections I had to choose from. They were:

Smart PC Care
PC Support

I then selected these 2 items to be deleted and pressed continue. Again, after a few seconds passed, I noticed at the top of the monitor the following statement:

iYogi Support Dock 4.2 Uninstall (Not Respnding)

But this time I got another pop-up which stated the following:

"Unable to execute file in the temporary directory. Setup aborted. Error 6: The handle is invalid."

I pressed cancel tab again. I went back to uninstall under Control Panel. I selected iYogi Support Dock 4.2 again and selected uninstall. Another pop-up was displayed. However this time it only displayed 1 of the orginal 3 items. The file listed was:

PC Support

I selected this item to delete and pressed the continue tab. This time the file was uninstalled with no problems. It required me to reboot the computer in order to complete the uninstallation process. I went back to Control Panel and noticed that "iYogi Support Dock 4.2" was no longer visible.

Now, I need to let you know this: I have a short-cut icon linked to Miscrosoft Word which is entitled, "Support Dock Features - iYogi.rtf" I am attaching this file to this post for you review if needed.

Also, I have found a Folder entitled: "IYogi Test" I clicked on this folder to see if there were any files in it. When I clicked on it, it gave me the following pop-up:

"You don't currently have permission to access this folder."

PART TWO:

I was unable to run the ComboFix program because I have the following virus programs on my computer:

1: TDSSKiller (Kaspersky lab)
2: Webroot Internet Security Essentials

I cannot find the tab which allows me to disable these programs from running. :pullhair:

If you could advise me how to disable these 2 programs or even uninstall them (Webroot is currently out of date anyway and I don' t intend updating it), I would appreciate it. :thumbup:

Take care Satchfan.

Sean.

Attachments:

Post #9
You can delete TDSSKiller from your desktop.

Go here for information on disabling Microsoft Security Essentials and Webroot components.

It might be easier to temporarily uninstall Webroot as it appears that you have to disable various components, not just one.

=================================================

iYogi Support Dock 4.2

I see that you have Revo Uninstaller Pro 2.4.3 on your computer: try using this program to uninstall iYogi Support Dock 4.2. If this doesn’t work, we’ll find the remaining files/folders later and remove them later.

Please run ComboFix and send the log in your next post

Thanks

Satchfan
Post #10
Hi Satchfan: Hope you are doing well. I have performed the following: 1: Deleted "TDSSKiller" from the desktop as you directed. 2: Uninstalled "Webroot" 3: Downloaded and ran "ComboFix.exe" 4: Attached the file "log.txt" from Notepad that ComboFix.exe created. Please note the following: 1: When I deleted "Webroot", I got the following message: " Windows Firewall has blocked some features of this program. Windows Firewall has blocked this program from acepting incoming network connections. If you unblock this program, it will be unblocked on all private networks that you connect to. Name: qnbwyqnp tbCb Publisher: rrvbQpjk lawsrjizv AkIuf gjvsiilcfg Path: C:\program data\whbqkhjsz\gzxzc.exe" It then gave me the choice to keep blocking or not. I clicked on "Keep blocking" 2: I tried to use Revo Uninstaller Pro 2.4.3 to uninstall iYogi Support Dock 4.2 as you suggested. However, when I started the Revo program, a screen came up indicating that I had to purchase the program and receive serial # via e-mail in order to activate the software. I declined. 3: When I tried to boot up into Explorer, I kept getting these different messages about leaving a "secure connection" and so forth. I just kept clicking on "continue." Take care Satchfan. Again, thanks for your continued help. Sean.

Attachments:

Post #11
Hi Satchfan: I went back to review your instructions. I should have done this prior to sending you my last reply because I noted that you wanted me to attach the file ComboFix.txt Sorry about that. I have attached it in this reply. Thank you. Sean.

Attachments:

Post #12
Hi Sean

Download Revo Uninstaller

Please uninstall the version of RevoUninstaller you have, (Revo Uninstaller Pro 2.4.3).

Using the new version, uninstall Webroot and iYogi.
  • Double click the installation file on the desktop to run the installer.
  • Let it install to the default location.
  • Double click the new Revo Uninstaller Icon on the desktop to start the program.
You will now see a list of installed programs that Revo Uninstaller can remove.
  • Locate the program you are uninstalling
  • Right Click the Icon then choose Uninstall.
  • Click yes to the warning and choose the Uninstall Mode
  • Choose the Advanced option and then click Next.
  • This will launch the programs built in uninstaller. Be patient it can take several seconds.
  • Once the uninstaller is done click Next.
  • Revo Uninstaller will now scan for leftover information. Be patient it can take several seconds.
  • Once this scan is done click Next.
  • You will then be presented of the leftover entries found by Revo Uninstaller
  • Look at ALL of the entries to ensure they relate to the uninstall.
  • Next click Select All > Delete to remove the entries.
  • Click Next.
  • If there are any program file folders left over you will be presented with a list to be removed.
  • Again look at ALL of the entries to ensure they are related to the uninstall.
  • Click Select All > Delete to remove the entries.
  • Click Finish to go back to the uninstall list.
  • Close the program
===================================================

Open ComboFix

Please do the following:
  • close any open browsers.
  • close/disable all anti virus and anti malware programs so that they do not interfere with the running of ComboFix.
  • open notepad and copy/paste the text in the codebox below into it:
Folder::
C:\program data\whbqkhjsz
c:\users\I Yogi Test
c:\program files\babylontoolbar

DDS::
C:\Program Files\iYogi Support Dock\Services\URLHit\iYogiURLHit.exe
C:\Program Files\iYogi Support Dock\Services\CommAgent\SupportDockClientService.exe
BHO: ALOT Toolbar Helper: {14ceeaff-96dd-4101-ae37-d5ecdc23c3f6} - c:\program files\alot\bin\bho\alotBHO.dll
BHO: PriceGongBHO Class: {1631550f-191d-4826-b069-d9439253d926} - c:\program files\pricegong\2.1.0\PriceGongIE.dll
BHO: EpicPlay Games: {56e4076b-a42b-4745-ba35-34da8ac4c2f2} - c:\program files\epicplay\epicPlayGames.dll
BHO: Shop to Win 8: {dac028c6-2a41-4730-b91f-dfbcb26c82b3} - c:\program files\shop to win 8\ShoppingBHO.dll
TB: ALOT Toolbar: {5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} - c:\program files\alot\bin\alot.dll
TB: {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No File
TB: StartNow Toolbar: {5911488e-9d1e-40ec-8cbb-06b231cc153f} - c:\program files\startnow toolbar\Toolbar32.dll
mRun: [iYogi Support Dock] "c:\program files\iyogi support dock\iYogiSupportDock.exe"
mRun: [BabylonToolbar] "c:\program files\babylontoolbar\babylontoolbar\1.4.15.10\BabylonToolbarsrv.exe" /md I
R2 SupportDockClientService.exe;iYogi Communication Agent;c:\program files\iyogi support dock\services\commagent\SupportDockClientService.exe [2010-11-10 46592]
R2 iYogiURLHit.exe;iYogi Hit Agent;c:\program files\iyogi support dock\services\urlhit\iYogiURLHit.exe [2010-10-10 17408]

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CreoLab"=

Save this as "CFScript.txt", and as Type: All Files (*.*) in the same location as ComboFix.exe

[external image: Posted Image]

Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it produces a log at C:\ComboFix.txt. Post the contents of Combofix.txt in your next reply.

Can you tell me how your computer is mow and what problems remain

Thanks

Satchfan
Post #13
Hi Satchfan: 1: I downloaded Revo Uninstaller. 2: I booted up the Revo Uninstaller program. 3: I had to purchase it to get a serial # in order to activate the software (no problem). 4: I had to re-start my computer. 5: Once back up and running, I initiated the Revo Uninstaller program. 6: Revo showed a lot of programs that were available for uninstalling, but it did not show "iYogi Support Dock". 7: I used the "Hunter Mode" of Revo to locate the iYogi Support Dock folder. 8: It was located in the following folder- C:\Program Files\iYogi Support Dock 9: I checked this folder for uninstalling, then I clicked on the Revo "Bullseye" then clicked "Uninstall". 10: A screen appeared. It showed the following information: Forced Uninstall ("Moderate" was pre-selected). Full Path: C:\Windows\Explorer.EXE Program's Exact Name: Microsoft Windows Operating System. I knew this was not correct, so I clicked on the Revo "Bullseye" and clicked "cancel". iYogi is obviously setup to where one can really mess up their computer trying to uninstall the iYogi software if one is not careful. I'll be waiting on your next instructions. Sean.
Post #14
Please download SystemLook from one of the links below and save it to your Desktop.

Download Mirror #1
Download Mirror #2
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    :process 
explorer.exe 

:filefind
SupportDockService.exe
*iYogi*

:folderfind
*iYogi*

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt


Can you also send the new ComboFix log after completing my previous instructions.

Also, can you tell me if there are any computer problems now.

Satchfan
Post #15
Hi Satchfan: You will find the following attachments: 1: ComboFix.log 2: SystemLook.txt As far as any other computer problems? I have noticed at least two (2) things: 1: On Facebook for example. When I click on a post that has a link to a Youtube video, the computer will freeze. The Youtube picture will not show. After a few seconds, the Youtube picture would show and play normally. 2: The other thing I still notice is when I am typing a post in Facebook, the screen seems to "freeze" at times. As a result, I will have to wait for the screen to "unfreeze" then go back and re-type the letters where the screen "locked" up at. This is also typical for Gmail.com, Microsoft Excel and Word. Other than that, I only notice a couple of software related issues as it relates to iTunes.. I don't know if you deal with those types of problems. Thank you Satchfan. Sean.

Attachments:

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI