Trojan horse infections

File attached, I’ve made sure it’s in ANSI format

Manual delete thouse folders:
c:\program files[b]BabylonToolbar[/b]
c:\programdata[b]Babylon[/b]
c:\users\Steve\AppData\Roaming[b]Babylon[/b]

It is necessary to uninstall the ComboFix :

[*] Click Start (or
http://amf.mycity.rs/pg/images/VistaStartButton.png
) then Run.

On Windows7 or Vista you may use Start Search field if Run is not available.

[*] In the line of text type in (Copy) the following:

ComboFix /Uninstall

Note that there is a space between " ComboFix " and " /Uninstall " .

[*] then click OK (or press Enter ).

Wait for the uninstall process is complete.

How’s your computer behaving now ?

I couldn’t delete all of c:\program files\BabylonToolbar, I was told I didn’t have permission to delete some of the files. I deleted what I could. The second one deleted ok but I couldn’t find c:\users\Steve\AppData\Roaming\Babylon. There is no Appdata folder in c:\users\steve. I haven’t deleted the combo fix yet as I thought I’d wait for your views on these points before I did. The computer appears to be working fine.

No, be free to uninstall Combofix.

Re run OTL , press QuickScan and attah here fresh OTL.txt log.

Log attached

We are finalizing: :slight_smile:

download & run this utility.
http://download.bleepingcomputer.com/sUBs/CF_UNINST.EXE

Re-run OTL and click CleanUp!

and finally…

[*]Download AdwCleaner (by Xplode) on your desktop.

[*]Launch it, click on [Search] and wait for the scan.
[]When the scan ends, a report appears.
[
] Close the report

[*] Click on [Delete].

Wait until the program deletes entries
The program will launch two pop-up window.
[*] On both windows click Ok
The second pop-up will ask for restart machine.


I recommended to you to use MCShield if you will.
It will prevent infection by computer via USB flash drive, mobile phone or any other memory card.
And not only will prevent infection, but will immediately clean Memory card or external HDD

MyCity - Official download link
Softpedija - Mirror download link

That would be all :wink:

Magna86, I’ve done all you said and all seems to be fine. Thank you very much for your time and patience. It’s been a great pleasure dealing with you, your responses have been very quick and very effective. I will be upgrading to the paid for avast product very soon and I’m sure I will be a subscriber to avast for many years to come, thanks to your support. It’s great to have my computer back working normally again. Thanks again.
Regards, Steve

Glad to help. :slight_smile:
Best Regards :wink: