FBI money scam and locked out of safe mode

[tracyg]

step 2

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by robert gaulke on Mon 05/13/2013 at 20:08:09.61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{7B0897B0-14DC-4482-A66B-1AE796DBE107}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\bcool"
Successfully deleted: [Folder] "C:\ProgramData\premium"
Successfully deleted: [Folder] "C:\Users\robert gaulke\appdata\locallow\bcool"
Successfully deleted: [Folder] "C:\Users\robert gaulke\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Program Files (x86)\SimpleSpeedy"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\bcool"
Successfully deleted: [Folder] "C:\ai_recyclebin"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{50D669E3-CCCF-4CF9-9898-A06270A51A59}
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{63EE7C2A-E9A4-450E-B939-541104C6834E}
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{7CF13B85-BDB4-40AF-AD0F-1A5AE422375B}
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{9B3991A5-B77D-4FB3-B677-6869113F5D2B}
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{B14BA05D-6469-47A7-996B-3B3EB4CB9240}
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{BED48CF6-8349-4619-8120-CB86E2E06229}
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{D31C6425-286D-4ABE-AC31-F27262E0F139}
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{EE42019D-BD8E-4648-9920-A8730C2800DE}
Successfully deleted: [Empty Folder] C:\Users\robert gaulke\appdata\local\{FFDFD0D2-07D7-4C67-ABD2-DBFA5BBE46DC}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 05/13/2013 at 20:15:07.10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[tracyg]

step 3 complete. ESET found something and quarantined it

C:\Users\robert gaulke\Downloads\Guitar Hero 3 soundtrack\Bonus\mauvais garcon.mp3 WMA/TrojanDownloader.GetCodec.C trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\05122013_214809\C_Users\robert gaulke\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdknclljdmfklkodfgglnganldhbpmgd\1\51037ef7b10464.07935986.js Win32/Adware.MultiPlug.H application cleaned by deleting - quarantined

 

[kuttus]

Okay. How's Everything else working now?

 

[tracyg]

Everything seems to be working. I'm just wondering if I should try running anything else. It seemed like every time I ran a different fix it found something new. How can I be sure that I got everything?

 

[kuttus]

All the above logfiles seems to be good only...

---

Double click on OTL to run it

• Click on the Cleanup button at the top.
• You will be asked to reboot the machine to finish the Cleanup process. Choose Yes
• This will remove itself and other tools we may have used.

---

Now that your PC is clean, I recommend you to create a new System Restore point then purge the old ones after.

For XP
How to create a Restore Point in XP
Delete all restore points except the most recent one

For Vista
Create a restore point
Delete all but the most recent restore point

For Windows 7
Create a restore point
Delete all but the most recent restore point - Click the Delete all but the most recent restore point link

---

Keep your system updated

• Keeping your programs (especially Adobe and Java products) updated is essential. Update Checker will notify you if any of your programs require an update.
• Microsoft releases patches for Windows and Office products regularly to patch up Windows and Office product bugs and vulnerabilities.
• Please ensure you update your system regularly and have automatic updates on. You can learn how to turn Automatic Updates on here

---

I also recommend you to switch your antivirus program to a better one. Here are some suggestions:

• avast! 7 Home Edition - Don't use it with Online Armor
• Avira AntiVir Personal
• Microsoft Security Essentials

In addition to your antivirus, you need additional protection such as a firewall and behavioural blocker.

• Online Armor
• Comodo Firewall - If you are an advance user

Here are only a few suggestions that will improve your system security. Should you wish to allow us to make full recommendations and set your PC up with maximum security, please start a thread here. Our community of PC enthusiasts and experts will give you feedback and help you secure your system from future malware infections.

---

Internet Explorer may be the most popular browser but it's definitely not the most secure browser. Consider using other browsers with addition add-ons to safeguard your system while browsing the internet.

Firefox is a more secure, faster browser than Internet Explorer. Firefox contains less vulnerabilities, reducing the risk of drive-by downloads. In addition, you can add the following add-ons to increase security.

• KeyScramber - Encrypts your keystrokes to protect you against keyloggers that steals personal & banking information
• AdBlock - Disable/blocks advertisements on websites so you won't accidentally click on a malicious ad.
• NoScript - Disables Flash & Java contents to avoid exploits or drive-by attacks
• Web of Trust - Shows the website rating by other users and blocks dangerous and poor-rated sites

Google Chrome is another good browser that is faster and more secure than Internet Explorer by having a sandbox feature. Additionally, you can add the following add-on to Chrome to heighten security.

• AdBlock

---

Lastly, it is important to perform system maintenance on a regular basis. Here are a few tools and on-demand scanners that you should keep & use every 1-2 weeks to keep your system healthy.

• CCleaner
• Malwarebytes Anti-Malware
• Temp File Cleaner by OldTimer

Other than that, stay safe out there! If you have any other questions or concerns, feel free to ask

<hr />
What's next?

1. Bulild up your malware defenses by starting a new thread in Security Configuration Wizard forum.
2. Learn how to avoid malware by reading this article <a href="http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/">How to easily avoid malware</a>
3. Be an active member in the MalwareTips community!

My virus removal help is always free. Should you wish to show your appreciation via a donation, it will be much appreciated.​