this is all i get. i’m running on windows 8.1 maybe thats the problem?
Duh , Forgot it was not compatible with 8.1
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please copy and paste log back here.
[*]The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
i’m on a 64-bit system so i ran the 64-bit version
Got it
hiding away in one of your roaming folders and running as a task
Download the attached fixlist.txt to the same location as FRST
Run FRST and press Fix
On completion a log will open please post that
Then reboot and let me know if the alerts have ceased
oh so it was hiding in the origin folder there. here’s the log. i’ll be right back, rebooting
i’m pretty sure we got it, rebooted twice and nothing. thnx alot! i got one last question while you’re still here. some time ago i noticed that a shortcut to my programs folder had appeared from nowhere alongside the the real program files folder in C:. it has the white arrow that shortcuts have but i cant delete it. it i try to delete it windows asks me if i want to delete the original folder and the same thing when i right click and click properties, i get the properties for the original folder not the shortcut so i cant get rid of it in any way. its just that folder and its not causing me any problems. i’m just wondering if you know if this might be a symptom of some virus or something. if not i’ll try to solve it somewhere else where the people might know more about this particular issue
Hmm never come across that before and as far as I know it is not malware related
In that case methinks I will send you on your merry way ![]()
Subject to no further problems ![]()
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean ![]()
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?Keep safe ![]()
ok, thnx again for all your help and time. i didnt really understand what crypto ransom ware was but i’ll download crypto prevent if you think it’ll keep me safer.
ok so i’m now running avast internet security, MBAM and cryptoprevent. is this a good defense or do you think its too much? and on cryptoprevent, is it always running in the background now and autostarts when windows starts?
Thats good enough for protection, i dont think that crypto prevent runs in background.
so how do i use it then? do i need to start it every time i boot up my pc or how does it work
Cryptoprevent alters several keys within the registry so it does not need to run, apart from when you remove or set the protection. It is a true fire and forget
oh ok, thats great. thnx for everything
My pleasure ![]()