pls help [Closed]

PLS help with recover my files.

I attached aswMBR.txt: 📎aswMBR.txt

Hi skullhead. My name is Firefly and I will help you with your computer. I ask you to follow a few ground rules while we are taking care of your computer:

I'm an Undergraduate trainee at MalwareRemovalUniversity (MRU), and as such my posts to you have to first be checked by a Teacher, because of this my replies to your posts may be slightly delayed. Please be patient and I'm sure we'll be able to resolve your problems.

Before we begin…please read and follow these important guidelines, so things will proceed smoothly. 

• The instructions being given are for YOUR computer and system only! Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!
• You must have Administrator rights, permissions for this computer.
• DO NOT run any other fix or removal tools unless instructed to do so or install any other software (or hardware) during the cleaning process.
• Only- post your problem at (1) one help site.  Applying fixes from multiple help sites can cause problems.
• Print each set of instructions…if possible…your Internet connection will not be available during some fix processes.
• Only- reply to this thread, do not start another …  Please, continue responding, until I give you the "All Clean". If you are in progress at another forum, please simply let me know so I can dedicate my time to others who need help.
• Failure to respond for 3 days, will result in your topic being closed.

Please take time to read the Forum Guidelines and Rules where the conditions for receiving help at this forum are explained.

Warning!

The steps presented in these posts are for this person and machine ONLY. Do not apply these steps to your own system, without the guidance of a trained malware removal helper. Doing so, may possibly damage your system, preventing it from starting.

Malware removal:

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

File Backup

For your safety and protection, I would advise backing up all your important documents, personal data files and photos as some infections may render your computer unbootable during or before the disinfection process. The safest practice is not to backup any files with the following file extensions:

exe, .scr, .ini, .htm, .html, .php, .asp, .xml, .zip, .rar, .cab as they may be infected.

All of the Windows systems we support have backup capabilities. These existing programs will allow you to back up your files to an external hard drive, USB drive or CD drive.

Do not back up your files to the hard drive of the computer we will be fixing. If the computer becomes unusable, your files will still be gone forever. Every photo, every document… gone. Seriously. Do this now.

Here is a link to using the backup programs in Windows 7: 

http://windows.microsoft.com/en-us/windows/back-up-files#1TC=windows-7

If you have internet connectivity, an alternative to backing your files up locally is to back your files up to the cloud, and there are a number of free and paid for services of this type available.

Below are links to a couple of articles with details for both free and paid for backup services …

http://www.techsupportalert.com/content… -sites.htm

http://www.pcmag.com/article2/0,2817,22… 745,00.asp

A word of warning - if you have a lot of data to backup, an online service can take days, weeks, or months. In this case, please consider using a local backup method (external hard drive, USB, etc.)

One other note – your description of your problem was:

PLS help with recover my files.

I will need a more detailed description of the problem you are having, which I will ask for at the end. Even if your files are locked or encrypted by a virus, they still need to be backed up. One way or another, it is critical that you backup your data before proceeding.

Finally, there will be several items to handle in each post (usually) so I will try to break them into easier to digest sections which will be demarked with Green Bold Lettering

Restore Point

First, before we do anything, we want to make sure we have made a backup of your computer's key information so that we can be sure to not make anything worse. Since you are running Windows 7, we will both make a restore point and do a system backup.

To create a restore point:

1. click on the Start button to open your Start Menu. Then

2. click on the Control Panel, then the System icon, and then finally click on System Protection in the left-hand task list. You will now be at the System Protection tab in the System control panel.

3. At the bottom of the window you will see a button called "create". A window will pop open allowing you to name this restore point - please name this "before malware fix".

4. You can then close the System window.

Please also do the following:

Please download tweaking.com_registry_backup_setup.exe

Choose a download site for the installer… download and save it to your desktop.

Double click on the "…setup.exe" program and install the program.  Let the install use the default installation.  How to tutorial here.

Once the program is installed…

1. Double click the Tweaking.com Registry Backup icon … on your Desktop to open the program.
2. It should open with the Backup Registry tab selected and all file options checked.  Check any that are not already checked.
3. Click on Backup Now to create a backup of your Registry.
   

    

   You'll see "Waiting for Volume Shadow Copy snapshot…" this may take a few moments, just be patient.

    

4. When completed you should see a message saying something like … Successful ??/?? Registry Files Backed Up … ?? is total number of files, both numbers should match.
5. Close and exit the program.

Once these are done, we can move forward with repairing the issues you are having. PLEASE DO NOT PROCEED IF YOU HAVE ANY PROBLEMS WITH THESE FIRST TWO STEPS OR IF YOU RECEIVED ANY ERROR MESSAGES.

FRST

Please download FRST … by Farbar, from the link below and save it to your Desktop.

For 32 bit Systems

For 64 bit Systems

• Right-click FRST.exe and select " Run as administrator " to run it.
• When the tool opens click Yes to the disclaimer.
• Press Scan button. … When finished a log will be created, FRST.txt.
• Please post the content of  the FRST.txt in your next reply.
• The first time the tool is run, it will create another log… Addition.txt.
• Please post the content of  the Addition.txt in your next reply.

Next Steps

1.      Confirm you were able to make a restore point and registry backup.

2.      Confirm you were able to back up your files satisfactorily

3.      Post (do not attach) FRST log

4.      Post Addition Log

Also, please give me a detailed description of what is happening with your computer, and what has happened to your files. Are they suddenly showing up as encrypted? Are they just gone? Are you getting unusual messages? The more details you can provide, the better and faster I will be able to help you. 

I was able to backup reg.s
Here is first txt: 📎FRST.txt

Here is addition log: 📎Addition.txt

I still need to know what happened to your files. Please give me a description of the problem.

Do you still need help? Please advise so I can help others if you are all set.

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.htmland start a new topic