Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-07-2014 Ran by Toshba at 2014-07-22 16:55:31 Run:3 Running from C:\Users\Toshba\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-831562436-1945061552-1814410315-1000\...\Run: [pytatcqgyisrbu] => xifojukcwiuvhcfp.exe HKU\S-1-5-21-831562436-1945061552-1814410315-1000\...\Run: [syqukqbodkr] => C:\Users\Toshba\AppData\Local\Temp\xifojukcwiuvhcfp.exe <===== ATTENTION HKLM-x32\...\Run: [syqukqbodkr] => ymmywkdyvkzdsqwjdcg.exe HKLM-x32\...\Run: [eqoyugxqlylnawald] => C:\Users\Toshba\AppData\Local\Temp\laboncwsqgwbrqxlgglb.exe HKLM\...\Policies\Explorer\Run: [owqwowjypyhfo] => eqoyugxqlylnawald.exe No File HKLM\...\Policies\Explorer\Run: [xctwlqamag] => C:\Users\Toshba\AppData\Local\Temp\laboncwsqgwbrqxlgglb.exe No File C:\Windows\SysWOW64\nazkhumgcqehvsxjca.exe C:\Windows\SysWOW64\laboncwsqgwbrqxlgglb.exe C:\Users\Gość\AppData\Local\Comodo ***************** HKU\S-1-5-21-831562436-1945061552-1814410315-1000\Software\Microsoft\Windows\CurrentVersion\Run\\pytatcqgyisrbu => value deleted successfully. HKU\S-1-5-21-831562436-1945061552-1814410315-1000\Software\Microsoft\Windows\CurrentVersion\Run\\syqukqbodkr => value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\syqukqbodkr => value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\eqoyugxqlylnawald => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\owqwowjypyhfo => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\xctwlqamag => value deleted successfully. C:\Windows\SysWOW64\nazkhumgcqehvsxjca.exe => Moved successfully. C:\Windows\SysWOW64\laboncwsqgwbrqxlgglb.exe => Moved successfully. C:\Users\Gość\AppData\Local\Comodo => Moved successfully. ==== End of Fixlog ====