Those two files not backed up by Tweeking are related to your user profile , even with out backing them up if you ran the reg fix and it caused problems you could still use Tweeking to back up the registry and also System Restore if you need to.
I would say go for it
That was along the lines I was thinking too.
I've run the merge and here is the FRST64 Fixlog (run just before):
Fix result of Farbar Recovery Scan Tool (x64) Version:18-04-2016
Ran by [removed] (2016-04-24 10:32:50) Run:2
Running from C:\Users\[removed]\Desktop
[removed]
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
C:\Users\Default\AppData\Local\Pokki
C:\Users\Public\Pokki
C:\Windows.old\Users\Default\AppData\Local\Pokki
C:\Windows.old\Users\Public\Pokki
C:\Windows.old\Users\UpdatusUser\AppData\Local\Pokki
C:\Windows.old\Users\Valda\AppData\Local\Pokki
C:\Windows.old\Users\Valda_2\AppData\Local\Pokki
C:\Windows.old\Users\Valda\AppData\Local\Spotify
C:\Windows.old\Users\Valda\AppData\Roaming\Spotify
EmptyTemp:
End
*****************
Processes closed successfully.
Restore point was successfully created.
C:\Users\Default\AppData\Local\Pokki => moved successfully
C:\Users\Public\Pokki => moved successfully
C:\Windows.old\Users\Default\AppData\Local\Pokki => moved successfully
C:\Windows.old\Users\Public\Pokki => moved successfully
C:\Windows.old\Users\UpdatusUser\AppData\Local\Pokki => moved successfully
C:\Windows.old\Users\Valda\AppData\Local\Pokki => moved successfully
C:\Windows.old\Users\Valda_2\AppData\Local\Pokki => moved successfully
C:\Windows.old\Users\Valda\AppData\Local\Spotify => moved successfully
C:\Windows.old\Users\Valda\AppData\Roaming\Spotify => moved successfully
EmptyTemp: => 699.1 MB temporary data Removed.
The system needed a reboot.
==== End of Fixlog 10:33:57 ====
Do you need me to run another FRST64 Fix or is that one from before the Regfix merge sufficient?
After you run the reg fix, reboot and then open SystemLook and plug these in
:folderfind
Pokki
Spotify
:regfind
Pokki
Spotify
Done. Here is the SystemLook log:
SystemLook 30.07.11 by jpshortstuff
Log created at 11:16 on 24/04/2016 by Valda
Administrator - Elevation successful
========== folderfind ==========
Searching for "Pokki"
C:\FRST\Quarantine\C\Users\Default\AppData\Local\Pokki d—— [18:34 25/07/2014]
C:\FRST\Quarantine\C\Users\Public\Pokki d—— [06:45 30/05/2015]
C:\FRST\Quarantine\C\Windows.old\Users\Default\AppData\Local\Pokki d—— [18:34 25/07/2014]
C:\FRST\Quarantine\C\Windows.old\Users\Public\Pokki d—— [03:12 07/11/2014]
C:\FRST\Quarantine\C\Windows.old\Users\UpdatusUser\AppData\Local\Pokki d—— [02:48 20/09/2014]
C:\FRST\Quarantine\C\Windows.old\Users\Valda\AppData\Local\Pokki d—— [03:07 07/11/2014]
C:\FRST\Quarantine\C\Windows.old\Users\Valda_2\AppData\Local\Pokki d—— [04:35 10/02/2015]
Searching for "Spotify"
C:\FRST\Quarantine\C\Windows.old\Users\Valda\AppData\Local\Spotify d—— [07:28 19/02/2015]
C:\FRST\Quarantine\C\Windows.old\Users\Valda\AppData\Roaming\Spotify d—— [07:27 19/02/2015]
========== regfind ==========
Searching for "Pokki"
No data found.
Searching for "Spotify"
No data found.
-= EOF =-
Next move?
Great job
C:\FRST\Quarantine <— You can go into this folder and delete it all.
How are things running now ??
Hi Ken545,
Thanks for sticking with this.
All looks good now. 10 secs to splash screen on restart, 30 sec more to login screen, then 1 min more to stable desktop.
Are we done enough now to see if my neighbour is ready to update this one to Windows 10?
Thanks for your patience once again!
I'm going to shut everything down now and make the drive back home. Will check in again later this evening.
This should remove those FRST backups along with FRST
Please download DelFix
[external image: DelFix_zps139e2ea1.jpg]
Windows XP Double Click DelFix.exe to run the program.
Windows Vista > Win 7 > Win 8 Right Click on DelFix.exe and select RUN AS ADMINISTRATOR
Checkmark " Remove Disinfection Tools "
Click the Run button
This will remove the specialised tools we used to clean your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually
Looks like your good to go. Windows 10 is ready for this system, go for it
I am down for the night myself
So How did I get infected in the first place
Safe Surfn
Ken
Hi Ken545,
Thanks again for your excellent help and especially, sticking through a rapid turn-around on some of my blunders.
You guys at WTT never cease to amaze me!
Your more than welcome my friend, any problems in the future just start a new topic
Ken
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. http://forums.whatthetech.com/you_Infected_t106388.html
