[schrauber]

Hello, ToKoYaMi
Welcome to the CyberTechHelp Forums. My name is Thomas (Tom is fine), and I will be helping you fixing your problems.



Please take note of some guidelines for this fix:

• Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
• If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
• Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
• Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.
• Please set your system to show all files.
  Click Start, open My Computer, select the Tools menu and click Folder Options.
  Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
  Uncheck: Hide file extensions for known file types
  Uncheck the Hide protected operating system files (recommended) option.
  Click Yes to confirm.

Please use black color for your text instead of red.

1. Please download Farbar Recovery Scan Tool and save it to a flash drive.
   
   Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
   
   Plug the flash drive into the infected PC.
   
2. If you are using Windows 8 consult How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.
   
   If you are using Vista or Windows 7 enter System Recovery Options.
   
   To enter System Recovery Options from the Advanced Boot Options:
   • Restart the computer.
   • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
   • Use the arrow keys to select the Repair your computer menu item.
   • Select US as the keyboard language settings, and then click Next.
   • Select the operating system you want to repair, and then click Next.
   • Select your user account an click Next.
   
   Note: In case you can not enter System Recovery Options by using F8 method, you can use Windows installation disc, or make a repair disc. Any Windows installation disc or a repair disc made on another computer can be used.
   To make a repair disk on Windows 7 consult: http://www.sevenforums.com/tutorials...sc-create.html
   
   
   To enter System Recovery Options by using Windows installation disc:
   • Insert the installation disc.
   • Restart your computer.
   • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
   • Click Repair your computer.
   • Select US as the keyboard language settings, and then click Next.
   • Select the operating system you want to repair, and then click Next.
   • Select your user account and click Next.
3. On the System Recovery Options menu you will get the following options:
   • • Startup Repair
       System Restore
       Windows Complete PC Restore
       Windows Memory Diagnostic Tool
       Command Prompt
       
       Select Command Prompt
       
       Once in the Command Prompt:
   • In the command window type in notepad and press Enter.
   • The notepad opens. Under File menu select Open.
   • Select "Computer" and find your flash drive letter and close the notepad.
   • In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
     Note: Replace letter e with the drive letter of your flash drive.
   • The tool will start to run.
   • When the tool opens click Yes to disclaimer.
   • Press Scan button.
   • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.