I am working through the items you suggested in post 14. I have not run the system restore yet as I am trying to find a program that can detect the problem/virus so I know the issue is gone. I also have a friend who can take a complete image of the drive just in case I completely make a mess of the system.
Anyway, while trying the stinger it came out clean. The normal Anti-virus detected a trojan. I click on the shield to view the manager and it says three virus detected since xxx date (it was 2 so it only found one this time around). Is there a log file that tells you what trojan or virus has been detected not just the number and how can I see it?
What I suggested in post 14 would save you a lot of work as the other specialist forum would analayze the log and tell you what's best to do next.
System Restore will only take you back to an earlier time so be careful you don't land yourself back into the Babylon mess again.
Any infections caught by VirusScan will be listed in the SecurityCenter ? click Navigation at top right, then click Quarantined and Trusted Items in the list below, you may need to scroll down.
Correct me if I'm wrong, but I thought McAfee's duty first of all was to keep our computers free of unwanted software. I have also had the pleasure of having Babylon installed on my computer and that is definately not by choice. You feel your privacy violated when that happens. Just uninstall it? Yes, but it is not like most programs which easily can be removed in a few seconds. This one is aggresive in the way it hides and disguise itself.
You call it a legitimate program, I certainly don't agree with that. Why is it so difficullt to get rid of then? You must be aware that this program(s) is a big nuisance to many of your customers. Many of us have spent numerous hours to solve the problem
So far I have been a very satisfied customer, having McAfee products installed for many years now, but the attitude against this kind of aggresive software annoys and worries me.
According to what I read here: http://forums.malwarebytes.org/index.php?showtopic=83898 it is legitimate however there are fake versions circulating and if one clicks unwisely then that's the result.
Antiviruses generally, no matter what brand. don't look for these fake entities but each one has tools for them.
McAfee has Stinger, and it also has a tool called GetSusp which auto-submits suspicious files to McAfee and, if you input your email into the settings, yuo will be contacted.
The links to these and other tools are all on this page: https://community.mcafee.com/docs/DOC-2168
Did you go to the Babylon site to find out how to remove this program? You don't say whether you have Babylon software, or just the Babylon toolbar and search engine, but their site shows you how to remove both, with clear instructions.
If you have one of their programs :
If it's only the toolbar :
And in the case of this toolbar, I believe McAfee would classify it only as a PUP. It usually comes as an unwanted addition to some download because a user doesn't notice the uncheck-this-option box. Lots of people complain about McAfee's Security Scan Plus, which arrives (often unwanted) with some Adobe downoads.
I had the babylon search. This program overwrote some default registry entries and could not be unistalled using the normal add remove programs. Please forgive me but I am not about to open any link to babylon. In fact, I have setup my internet filters to block this website always. It also change search results even when I specifically chose to use google search. This may have lead to a bigger issue. I was able to resolve my issue with the help of BleepingComputers and a long weekend.
My concern is that I tried to scan my computer with seveal of the Mcafee products and none of them detected this issue. If you need to know what went wrong with my computer the logs are on/were on bleeping computer. This may give Macaffe someidea of the problems that they may have missed. The logs really did not mean much to me but thankfull bleepingcomputers could understand them and help me resolve my issues.
For anyone who has (and doesn't want) Babylon search, this is the uninstall information provided by Babylon on their website, the link to which I provided above.
If you have a complaint about the product there is a feedback form on the site at http://support.babylon.com/index.php?/Tickets/Submit
Alternatively, if you refuse to visit the website, you could write to the company and complain. Their address is
Nördliche Auffahrtsallee 44
You probably won't receive any compensation, since the software was a free download.
I went through the whole shebang including cleaning all the babylon registry entries and it stayed away for 24hrs - probably until the last reboot.
Disappointed to see mcafee forum mods being so supportive of it. Maybe it was harmless yonks ago - I seem to remember it was. But cnet was too, and one of the biggest and most reliable download sites till this happened. If you don't know the news story, do please google it. It is not an optional toolbar any more - watch your address line - it is a hijacker.
As an irony to top it off, Cnet are now offering a Babylon removal tool. Which according to comments on the site you have to pay for.
By the way, I always de-selected cnet's naff default add-ons when downloading - maybe I missed a click - babylon was downloaded anyway
Sophos, Bit-Defender and F-sc agree apparently: