For the Punycode thing I saw two options, the one you mentioned which I changed to true, and "network.standard-url.punycode-host" Status set to false should I do anything with that one?
I'll try cryptolocker and make sure to check my programs as well, thanks for the advice.