FBI Ransomware

trampy,

My apology for the delay. Real life stuff to do.

Since the following steps involve editing the Registry, please create new restore point before proceeding.
System Restore Point - Create
Select: Option Two

~~~~
Now, please download ESET's ServiceRepair:
http://kb.eset.com/library/ESET/KB%2...icesRepair.exe)
Save to the Desktop.
Double-click to run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes

When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder named CC Support on the Desktop.
Please provide the CC Support\Logs\SvcRepair.txt in your reply.

~~~~
Last, run the Farbar Service Scanner once again.
Select all the options.
Press: Scan
Please provide the new FSS.txt in your reply. (Check out the date to make sure you have the right one.)

Sorry for taking so long had some things to do, here are the logs.

trampy,

Let's merge a missing key into the Registry:

Please open Notepad by pressing the Windows key and the R key at the same time.
In the Open area, type: notepad
Copy and paste all the text inside the code box below to Notepad:

Code:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}]
"AutoStart"=""

In Notepad, go to File > Save As
Save the file to: Desktop
Save the file as: fixacn.reg
Save type as needs set to: All files

On the Desktop, double-click: fixacn.reg
When a box pops up, click: Yes
Confirm the key was added to the Registry
Click: OK

Restart the computer.

On the Desktop, right click fixacn.reg, and select: Delete
Also empty the Recycle Bin.

~~~~
Now, once again press the Windows key and the R key at the same time.
In the Open area, type: services.msc

In the Services console, make sure Security Center is there, and:
Startup Type is set to: Automatic (Delayed Start)
Service Status is set to: Started

Do the same for the Windows Update service.

When done, please run the Farbar Service Scanner once again, and post its FSS.txt report.


~~~~
Also download Security Check:
http://screen317.spywareinfoforum.org/SecurityCheck.exe
Save it to the Desktop.
Double-click SecurityCheck.exe and follow the onscreen instructions (on the black screen)
When done, a Notepad document opens automatically: checkup.txt

Please post the contents of checkup.txt in your reply.

trampy,

The FSS report looks good now.


Security Check shows no AntiVirus program.
Please take action to install an AntiVirus program!!! <<--- Important!

The following free AVs are available:
Microsoft Security Essentials: Microsoft Security Essentials Download | Free Spyware Protection
Avast! Free: http://www.avast.com/free-antivirus-download
Avira AntiVir: Avira Free Antivirus 2013 | Download Best Free Antivirus Software
(Note - Avira may install a version of the adware/spyware Ask Toolbar. Suggest you Uncheck this option when installing).

Once done installing an AntiVirus program, run a Full scan, and post back on what it found, if anything.



Also take care of the following. It is a vulnerability that you cannot afford to have:
Java version out of date!
Please verify your version of Java, and, since it is outdated, proceed to update it:
Verify Java Version
When done, uninstall older versions:
How do I uninstall Java on my Windows computer ?

In avast!, press Scan Computer

There is an option there: Scan Logs
Click on it, and you get a new window with the Completed scans.

Your scan should be there.

Navigate to the following by right-clicking the Windows 7 orb and selecting Open Windows Explorer:

C:\ProgramData\Avast Software\Avast\report\aswBoot.txt

Click the > to the left of the following (in sequence):
Local Disk C:
ProgramData
Avast Software
Avast
report

In the report folder, look for: aswBoot.txt

It should open in Notepad.