This thread's last reply is from April 10, 2012, 8:20 PM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
Please run the fix again, and this time follow the instructions exactly as I gave them, paying particular attention to press the Run Fix button, and NOT the Run Scan button.
OTL by OldTimer - Version 3.2.39.2 log created on 04092012_114324
Files\Folders moved on Reboot...
C:\Users\Mathieu\AppData\Local\Temp\ehmsas.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
OK, looks like the Babylon Toolbar entries were successfully removed.
The results from VirusTotal are fairly inconclusive as far as I can see. The first file looks to only be detected by E-Set, and the second I believe is detected because it is an uninstaller, and uninstallers generally trigger heuristic detections.
Did you install FoxTabVideoConverter yourself, and was it downloaded from a reliable and trustworthy source? If you did, then I think we can probably leave it, however if you have any doubt about where it came from, then it's probably best to remove it.
Let me know what you want to do, and let me know how your computer is behaving now please.
About FoxTabVideoConverter, I dont remember having downloaded it and I do not use it, so it can be readily removed.
Concerning the behaviour of the computer, it takes from two and a half to three minutes to get ready when started. I would be attempted to say that this duration did not change much, but as I did not measure it during the virus period, I cannot conclude with certainty. Another thing, when I had viruses, the control panel took sometimes from about half to one minute to open but now, it opens normaly (a couple of seconds).
Do you believe there are no more infected files in my computer, and would you say that the duration of the starting period is correct for this type of computer?
Yours sincerly,
jujucds
When finished a box will open asking you to open the fix log, click OK.
The fix log will open.
Copy/Paste the log in your next reply please.
Note: If necessary, OTL may re-boot your computer, or request that you do so, if it does, re-boot your computer. A log will be produced upon re-boot.
As for your startup time, it's not excessive, but we can speed it up a little by disabling some of the unecessary auto-startup entries if you wish. Let me know if you want to do that, and I can make a few suggestions.
When finished a box will open asking you to open the fix log, click OK.
The fix log will open.
Copy/Paste the log in your next reply please.
Note: If necessary, OTL may re-boot your computer, or request that you do so, if it does, re-boot your computer. A log will be produced upon re-boot.
PLEASE NOTE ..... all we are doing here is removing the Registry entries that auto-start these programs on startup, we are not removing the programs themselves. If you wish to use one of these programs you can launch it by clicking .... Start > All Programs then clicking on the icon for the program you wish to launch.
Now it's time to remove all the programs we've been using to check and clean your computer ....
Let's clear out Combofix and the files/folders it created
Click Start > Run
Copy/PasteComboFix /Uninstall into the Run box.
Click OK
Combofix will now delete its files and folders and also perform the following function.
Clears System Restore cache and creates a new Restore point. This will remove any "malicious" System Restore files, which may have been created whilst your computer was infected.
IMPORTANT
Do not use your computer while Combofix is running.
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
Next
Let's clear out OTL and the files and folders it created.
Double click OTL.exe to launch the programme.
Click on the CleanUp! button.
OTL will download a list from the Internet, if your firewall or other defensive programmes alerts you, allow it access.
You will be prompted to allow the clean up procedure, click Yes
When finished exit out of OTL
Now delete OTL.exe (if still present).
As far as I can see, your computer looks clear of infection now.
Are you still noticing any problems ?
If you are let me know about them.
If not it's time to make your computer more secure.
Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.
No ads, no affiliate links — generated on request from this thread's own
archived content, not written by forum staff. Never run a scan/removal tool
as a self-service step if the original thread describes it being done under
a helper's direct supervision, and don't include your name, email, or other
personal details in a follow-up question. See our privacy page
for details on how this works.
