My wife installed the yucky Babylon Adware last night.
I updated and ran Spybot, which I believe removed it. However, I am now getting this error message on every startup:
"There was a problem starting.
C:\\Users\Curtis\AppData\Roaming\BabSolution\Shared\NTRedirect.dll
The Specified module could not be found."
I ran Adware Cleaner and JRT.
Reports attached to this post.
Thank you in advance.
--Curtis
Spybot isn't recommended by anyone here ever as its been years since it became bloated and buggy, and could have actually made the situation worse. I'd run full scans with SUPERAntiSpyware and Malwarebytes for on-demand scanning, and installed AV Microsoft Security Essentials.
Disable all add-ons and Search services in browsers except Flash and Google and keep them out.
Turn off all startups except AV, any sync, gadgets or stickies in msconfig>Startup and >Services after Hiding all MS Services. Keep those clean too.
Thank you for the advice.
But what specific solution will make the error message stop appearing on startup?
--Curtis
On your wife's PC download and run the program below
Farbar Recovery Scan Tool
64-Bit Version OS Farbar Recovery Scan Tool x64 <===== Download Link
Drag the FRST64.exe from the Downloads folder to your Desktop
Right click on FRST64.exe and choose
When the tool opens click Yes on the disclaimer window .
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file
NoteThe first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt
Please upload both logs in your reply.(FRST.txt and Addition.txt)
FRST.txt and Addition.txt will be on the Desktop
Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .
Also run
<==== Download
<==== Download
Click on one of the links above that goes with your Windows 7 bit versions
and choose
All of them.
Spybot likely only half removed it so it's struggling to start with Windows. SAS can likely root it out of registry, but the other scans and steps may be required to be comprehensive.
You can also look at your System Restore points to see if you can get before the infection.
It's probably caused by a entry in the registry. If you feel comfortable working with regedit you can search and delete the entry.
Thank you all for the advice.
I will work on it later today and let you know the results.
Take care.
--Curtis
FRST files attached.
Will run other scans as time permits.
Thank you for your assistance.
--Curtis
RK file attached.
Will run other scans as time permits.
Thank you for your assistance.
--Curtis
Quote