View original (French)

Remove btweb and utweb on startup

Solved
nico -  
bazfile Posted messages 58492 Registration date   Status Moderator Last intervention   -
Hello, I'm contacting you because after a download I now have these files at startup and I would like to know how to delete them.

4 answers

  1.
    cristali Posted messages 9483 Registration date   Status Member Last intervention   1 578
     
    Hello, run a adwcleaner, it should eliminate them

    otherwise, disable them in the Task Manager, "Startup" tab.
    0
  2. bazfile Posted messages 58492 Registration date   Status Moderator Last intervention   20 268
     
    Hello,
    these are Torrent software (BiTorrent and µTorrent), uninstall them.
    OR
    Download FRST once downloaded save it to your desktop then open it you'll see this:

    Click on Analyze at the end of the scan you'll have two text files on the desktop FRST and Addition, .
    Make sure to wait for the messages saying that the scan is complete to display    , then send these reports to https://pjjoint.malekal.com/ see this tutorial paragraph Send analysis reports to pjjoint then give the two links generated by Pjoint in your next message.

    bazfile
    Moderator/Security Contributor.
    a hello, a response, a thank you are always appreciated.
    0
  3. nico
     
    Hello, I have done the analysis and sent the reports, but I still have the files and the analysis with AdwCleaner found some things but did not delete the files
    here are the reports
    https://pjjoint.malekal.com/files.php?id=20210603_r11j7w5c5c10
    https://pjjoint.malekal.com/files.php?id=FRST_20210603_z10j14i8h15o9
    https://pjjoint.malekal.com/files.php?id=20210603_y5o12f15f6n9
    0
    1. bazfile Posted messages 58492 Registration date   Status Moderator Last intervention   20 268
       
      Procedure to follow in the indicated order:

      1- Open FRST as an administrator by right-clicking on FRST and selecting run as administrator
      2 - Copy the entire script in the box below: 
      Start::
      CreateRestorePoint:
      CloseProcesses:
      HKLM-x32\...\Run: [Genshin Impact Beta_Launcher] => [X]
      HKLM-x32\...\Run: [Genshin Impact_Launcher] => [X]
      HKU\S-1-5-21-1466918366-3130612470-472058666-1001\...\Run: [Opera Browser Assistant] => C:\Users\nicol\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4042960 2021-06-02] (Opera Software AS -> Opera Software)
      HKU\S-1-5-21-1466918366-3130612470-472058666-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe --profile-directory=Default --app-id=diekafcbbmcolffflekimginbldpnioe --flag-switches-begin --flag-switches-end --enable-aud (data element has 114 characters more).
      HKU\S-1-5-21-1466918366-3130612470-472058666-1001\...\Run: [utweb] => "C:\Users\nicol\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED
      HKU\S-1-5-21-1466918366-3130612470-472058666-1001\...\Run: [btweb] => "C:\Users\nicol\AppData\Roaming\BitTorrent Web\btweb.exe" /MINIMIZED
      C:\Users\nicol\AppData\Roaming\uTorrent Web
      C:\Users\nicol\AppData\Roaming\BitTorrent Web
      Shortcut: C:\Users\nicol\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -> C:\Users\nicol\AppData\Roaming\uTorrent\uTorrent.exe (File not found)
      Shortcut: C:\Users\nicol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitTorrent Web.lnk -> C:\Users\nicol\AppData\Roaming\BitTorrent Web\btweb.exe (File not found)
      Shortcut: C:\Users\nicol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent Web.lnk -> C:\Users\nicol\AppData\Roaming\uTorrent Web\utweb.exe (File not found)
      Shortcut: C:\Users\nicol\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -> C:\Users\nicol\AppData\Roaming\uTorrent\uTorrent.exe (File not found)
      C:\Users\nicol\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
      FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.7.915.0\npAvastBrowserUpdate3.dll [File not found]
      FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.7.915.0\npAvastBrowserUpdate3.dll [File not found]
      S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
      S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]
      Task: {0C7E0F97-A5E4-412D-A945-598BD32D1445} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
      Task: {8CF15231-E053-4439-883F-FFB01C3B8E7E} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
      GroupPolicy: Restriction ? 
      Policies: C:\ProgramData\NTUSER.pol: Restriction 
      HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction 
      HKLM\SOFTWARE\Policies\Google: Restriction
      EmptyTemp:
      End::

      3- Once the script is copied, click on Fix.

      Let the fix run, once completed you will be asked to restart your PC, do so as soon as prompted, see below.
      Then once your computer has restarted:
      4- You will have a Fixlog file on your desktop, send it via https://pjjoint.malekal.com/ and then put the link generated by Pjoint in your next message.

      5- CHECK AND LET ME KNOW IF YOUR PROBLEM STILL EXISTS


      FOR INFORMATION:

      Your version of Windows 10 is not up to date, to check it go to this page click on Update now, this will start the download of the Microsoft tool, just open it and it will allow you to update Windows 10 to the latest version and tell you if it is compatible with your PC, be careful this update takes some time, if you have a laptop, plug it into the mains, as it would be unfortunate to run out of battery before the update is complete.
      0