Missing favourites in IE and trojan found

Thank you.

Best regards

Steve

Just one final question, I notice in my C:\Downloads folder a file called myfile.exe, I am sure I saw this in one of your removal fixes.

Steve

Hello Steve,

Just one final question, I notice in my C:\Downloads folder a file called myfile.exe, I am sure I saw this in one of your removal fixes.

Firstly, I would like to say that this file never was mentioned in this topic by me as well as no one log you posted here did not contain it..

Then please do the following:

Online Multi Antivirus file scan
Please go to either: Jotti or Virus Total and upload the following file for scanning:

C:\Downloads\myfile.exe

Using Jotti

1. Choose the appropriate language (if needed)... once a language is selected, you'll see a message "Ready to receive files"
2. Press the Browse button and navigate to -one- of the files in the list.
3. Double click the located file name...The file name should now appear in the online scanner's "File to scan:" box.
4. Click on Submit..button.
   
   If you receive the message: This file has been scanned before. The results for this previous scan are listed below.
   Please press the Scan again button, so your file will be scanned.
5. The file will be uploaded and scanned by various antivirus scanners..this may take a few minutes.
6. When all scans have completed... the results page is displayed
7. Please highlight and copy the page web address link from your browser window.
   Example of web address :
   
8. Paste the Web address link for the scan results in your next reply.

Using Virus Total

1. Press the Browse button and navigate to -one- of the files in the list.
2. Double click the located file name... The file name should now appear in the online scanner's text entry box.
3. Click on Send File...button.
4. The file will be queued, uploaded and scanned by various antivirus scanners..this may take a few minutes.
   
   If you receive the message: File has already been analysed:
   Please press the Reanalyse file now button, so your file will be scanned.
5. When all scans have completed... the results page is displayed
6. Please highlight and copy the page web address link from your browser window.
   Example of web address :
   
7. Paste the Web address link for the scan results in your next reply.

Note:
Please do not attempt to remove the C:\Downloads\myfile.exe file by yourself, regardless of the scan results - I want to see them before deciding what and how to do with this file!lease do not try to delete it! <-- It is Important!

Please include in your next reply:

1. Do you have any problems executing the instructions?
2. The resulting web link after online file scan by Virus Total or Jotti.
3. Do you see any changes in computer behavior?

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed

http://virusscan.jotti.org/en/scanresult/df1c75e442c430cc7faee9c2670f203e91b932ef/06771f9f84a648e7c92104b2cc570fe6ef1bf5d8

Hello Steve,

Even in case when online scanners did not find presence of any infections in questionable C:\Downloads\myfile.exe, I strongly recommend you to delete it, especially when you have no clue about this file and a reason why it was placed to your download folder.

Deleting unknown files including emptying of Recycle Bin

1. Please find and delete C:\Downloads\myfile.exe
2. Click Start and type cleanmgr.exe in the opened box. Then press Enter.
3. Select the drive-letter from the list (usually System (C:)) and click OK - this action may take a while...
4. Ensure the boxes for Recycle Bin, Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
5. Click on OK.

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed

Hi, as recommended I have deleted the file and run cleanmgr.exe, so far all is well.
Thanks for your assistance.

Regards

Steve

Hello Steve,

Thanks for your assistance.

You are very welcome!

Stay Safe!
pgmigg

Failure to post replies within 72 hours will result in this thread being closed

As this issue appears to be resolved,