Hello, Following the installation of uTorrent (which is now uninstalled), I have "Utweb" showing up in the Startup applications menu. I can't do anything to remove it, and I can't find it anywhere: - programs and features - search on C:\ In the startup menu, I only have the option "Enable" or "Search online" on Utweb I'm not a "computer pro" Could someone help me? Thanks Configuration: Windows / Firefox 64.0

Utweb in impossible startup can't be removed : CCM

Réponse 1 / 4

Malekal_morte- Posted messages 178136 Registration date Status Modérateur, Contributeur sécurité Last intervention 24 711

Let's see if this works for you and has solved your problem.

--
Please press any key to continue the disinfection...

Lunatix555 Posted messages 9 Status Membre

Yes, that's great, thank you.

jaipeurpourmonpcaidezmoiplz Posted messages 3 Status Membre

Malekal dead, I have the same problem can you help me? I can send you the attached links please help me PLEEEASE!

Malekal_morte- Posted messages 178136 Registration date Status Modérateur, Contributeur sécurité Last intervention 24 711 > jaipeurpourmonpcaidezmoiplz Posted messages 3 Status Membre

Yes, go ahead.
After that, if you can create your own help topic.

Réponse 2 / 4

Malekal_morte- Posted messages 178136 Registration date Status Modérateur, Contributeur sécurité Last intervention 24 711

UTweb is not malicious.
It's the WEB version of uTorrent, so it's normal that you have this entry.
If you really want to remove it, make the correction with FRST.

Another note that is unrelated, CCleaner is not really useful, even though it is recommended everywhere.
If you want to keep it, disable CCleaner's monitoring, which is unnecessary, as it starts up with Windows and slows it down with its constant cleaning, see: https://www.malekal.com/supprimer-ccleaner-demarrage-windows/

~~

Here is the correction to be made with FRST. You can refer to this explanatory note with screenshots.
Restart FRST and then on your keyboard press the CTRL + Y keys.
The notepad will open, copy/paste this.

CreateRestorePoint:
CloseProcesses:
Task: {D50F5A5D-B61E-4448-BCB0-3218595DA6A7} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
 Task: {85E3BC0F-CD7C-4D2B-AD98-E763411C73A3} - System32\Tasks\update-S-1-5-21-1780805101-1631617104-3967941747-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
 HKU\S-1-5-21-1780805101-1631617104-3967941747-1001\...\Run: [utweb] => "C:\Users\Lunatix\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

Save the content through the file menu and then save.

Close the notepad, return to FRST and click on the "Fix" button
A restart may be necessary and automatic.
A text file will appear, copy/paste the content here in a new message.

Restart the computer

Lunatix555 Posted messages 9 Status Membre

I did what you asked me, but no text file opened; I only have the slhodwkyloi.txt saved on my desktop. And Utweb has really taken off (THANK YOU!! :)

Lunatix555 Posted messages 9 Status Membre

However, FRST64 was in my downloads :s and I have a new text file "Fixlog", maybe it's this one?

Lunatix555 Posted messages 9 Status Membre

Results of Farbar Recovery Scan Tool (x64) Version: 20.01.2019
Executed by Lunatix (22-01-2019 17:40:14) Run:1
Executed from C:\Users\Lunatix\Downloads
Loaded profiles: Lunatix (Available profiles: Lunatix)
Boot mode: Normal
==============================================

fixlist content:

CreateRestorePoint:
CloseProcesses:
Task: {D50F5A5D-B61E-4448-BCB0-3218595DA6A7} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: )
Task: {85E3BC0F-CD7C-4D2B-AD98-E763411C73A3} - System32\Tasks\update-S-1-5-21-1780805101-1631617104-3967941747-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: )
HKU\S-1-5-21-1780805101-1631617104-3967941747-1001\...\Run: [utweb] => "C:\Users\Lunatix\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

Error: (0) Failed to create restore point.
Process successfully closed.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D50F5A5D-B61E-4448-BCB0-3218595DA6A7}" => successfully deleted
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D50F5A5D-B61E-4448-BCB0-3218595DA6A7}" => successfully deleted
C:\Windows\System32\Tasks\update-sys => successfully moved
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\update-sys" => successfully deleted
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{85E3BC0F-CD7C-4D2B-AD98-E763411C73A3}" => successfully deleted
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85E3BC0F-CD7C-4D2B-AD98-E763411C73A3}" => successfully deleted
C:\Windows\System32\Tasks\update-S-1-5-21-1780805101-1631617104-3967941747-1001 => successfully moved
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\update-S-1-5-21-1780805101-1631617104-3967941747-1001" => successfully deleted
"HKU\S-1-5-21-1780805101-1631617104-3967941747-1001\Software\Microsoft\Windows\CurrentVersion\Run\\utweb" => successfully deleted
C:\Windows\System32\Drivers\etc\hosts => successfully moved
Hosts successfully restored.

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => successfully deleted
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => successfully deleted
"HKU\S-1-5-21-1780805101-1631617104-3967941747-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => successfully deleted
"HKU\S-1-5-21-1780805101-1631617104-3967941747-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => successfully deleted

========= End of RemoveProxy: =========

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 22661083 B
Java, Flash, Steam htmlcache => 196083194 B
Windows/system/drivers => 350032 B
Edge => 3584 B
Chrome => 7226339 B
Firefox => 130414309 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 2464 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
Lunatix => 4861068 B

RecycleBin => 0 B
EmptyTemp: => 352.4 MB of temporary data deleted.

================================

The system had to restart.

End of Fixlog 17:40:25

Réponse 3 / 4

Malekal_morte- Posted messages 178136 Registration date Status Modérateur, Contributeur sécurité Last intervention 24 711

You're welcome,

Delete the folder C:\FRST

--
Please press any key to continue the disinfection...

Réponse 4 / 4

Malekal_morte- Posted messages 178136 Registration date Status Modérateur, Contributeur sécurité Last intervention 24 711

Hi,

Can you provide a screenshot of this startup menu?

To check your computer for potential infections and get a general status of the system:

Follow the FRST tutorial by clicking on this blue link. ( take the time to read carefully - everything is well explained ).

Download and run the FRST scan,
Wait for the scan to finish, a message will indicate that the analysis is complete.

Three FRST reports will be generated:

FRST.txt
Shortcut.
Additional.txt

Send these 3 reports to the website https://pjjoint.malekal.com/ and reply here with the 3 pjjoint links to the reports in a new response so that we can review them.

(The blue links lead to step-by-step explanatory tutorials, click on them for more precise instructions to follow).

--
Please press any key to continue the disinfection...

Lunatix555 Posted messages 9 Status Membre

Thank you for your quick response, I'll do what you asked me to do, I'll be back.

Lunatix555 Posted messages 9 Status Membre

Here are the 3 links:

https://pjjoint.malekal.com/files.php?id=FRST_20190122_m11l7r6n8i6
https://pjjoint.malekal.com/files.php?id=20190122_e14w11w8t8i15
https://pjjoint.malekal.com/files.php?id=20190122_k7q10f14u10t15

Utweb in impossible startup can't be removed

4 réponses

End of Fixlog 17:40:25

Epson printer prints unexpectedly

Texture issues in enshrouded

Stay away from rewards casinos!!!

My pc can't find the wi-fi connection.

Unlock my landline phone "logicom 850"

Music series a woman's honor

How to remove the asus uefi bios utility menu

Saracroche: the effective french app against phone spam

Siemens sintony si 120 f alarm user manual

Freebox stuck on step 7. [grouped topic]