Rev-Roy

Finished...thanks very much. RevRoy

DONE! No more Babylon and it seems to be working fine. I really appreciate your time and help. I will perform your next wedding free! Again Thanks Rev-Roy

When I click on new tab while on firefox myyahoo it comes up as babylon search but I have everything else working ok now thanks revroy

After reboot it asked to let OTL Exe runa nd I did and it created the following: FilesFolders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot... new log: OTL logfile created on: 11/2/2012 9:27:57 AM - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:UsersRockin RevDesktop 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.75 Gb Total Physical Memory | 2.35 Gb

Sorry, must have done something wrong with txt extra so here it is: OTL Extras logfile created on: 11/2/2012 7:10:38 AM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:UsersRockin RevDesktop 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.75 Gb Total Physical Memory | 2.53 Gb Available Physical Memory | 67.47% Memory free 7.50 Gb Paging File | 6.12 Gb Available in Paging File | 81.59% Paging File free Paging file lo

Thanks...here are the scans: OTL logfile created on: 11/2/2012 7:10:38 AM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:UsersRockin RevDesktop 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.75 Gb Total Physical Memory | 2.53 Gb Available Physical Memory | 67.47% Memory free 7.50 Gb Paging File | 6.12 Gb Available in Paging File | 81.59% Paging File free Paging file location(s): ?:pagefile.sys [binary data] %S

Good Morning: I am sorry to say that Babylon Search still shows up when I am on MyYahoo page and I click to open a new blank tab...Babylon Search comes up. Thanks for all your help. The computer is running better but some sites are still hanging during download and taking a long time. Must be some setting with the Shentel Service. I never had this problem when I was with Comcast but have just moved here to Lynchburg VA area and had to get the new service. Again thanks for your time and help. Rev Roy

ComboFix 12-10-31.03 - Rockin Rev 11/01/2012 14:17:16.2.2 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3839.2606 [GMT -4:00] Running from: c:usersRockin RevDesktopComboFix.exe Command switches used :: c:usersRockin RevDesktopCFScript.txt AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C} SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2012-10

ComboFix 12-10-31.03 - Rockin Rev 11/01/2012 14:17:16.2.2 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3839.2606 [GMT -4:00] Running from: c:usersRockin RevDesktopComboFix.exe Command switches used :: c:usersRockin RevDesktopCFScript.txt AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C} SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2012-10

Really appreciate you folks! ComboFix 12-10-31.03 - Rockin Rev 11/01/2012 7:10.1.2 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3839.2131 [GMT -4:00] Running from: c:usersRockin RevDesktopComboFix.exe AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C} SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))

Thanks for your help. DDS (Ver_2012-10-19.01) - NTFS_AMD64 Internet Explorer: 9.0.8112.16421 Run by Rockin Rev at 14:50:50 on 2012-10-31 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3839.1872 [GMT -4:00] . AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C} SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:Windowssystem32wininit.exe C:Wi

Good Morning: If I open a new tab it will say Babylon Search at the top of the tab. I stay on top of making sure antivirus, etc are kept up to date. I was sure I had removed everything associated with Babylon but apparently something is still messing with me.

Looking for advice on slow and poor performance with websites opening. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 12:20:23 PM, on 10/29/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16450) Boot mode: Normal Running processes: C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe C:\Users\Rockin Rev\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Pr

I have finished your advice and am forever thankful! My daughter is very appreciative as well! Thanks JonTom!!!!!! Rev-Roy

Hello JonTom: here is the Eset Scan results. C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinWebdirb3.zip Win32/Bagle.gen.zip worm C:\Qoobox\Quarantine\C\Documents and Settings\Chase\Application Data\Mozilla\Firefox\Profiles\w3yuryd3.default\extensions\{29cf4142-1456-4559-8300-2ed298e9c263}\chrome.manifest.vir Win32/TrojanDownloader.Tracur.F trojan C:\Qoobox\Quarantine\C\Documents and Settings\Chase\Application Data\Mozilla\Firefox\Profiles\w3yuryd3.default\extensions\{29cf4142-1456-4559-8300-2ed298e9c263}\chrome\xulcache.jar.vir JS/