Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:26-08-2014 Ran by Admin at 2014-08-31 09:58:18 Run:1 Running from F:\ Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Documents and Settings\Admin\xeaya.exe C:\Documents and Settings\Admin\diefioj.exe C:\Documents and Settings\Ewa\ciedeih.exe HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k R3 WMI_MFC_TPSHOKER_80; \??\C:\WINDOWS\system32\drivers\gmsmsn.sys [X] Reg: reg delete "HKCU\software\microsoft\windows\currentversion\explorer\mountpoints2" C:\FOUND.007 C:\Program Files\Program Files.exe C:\Program Files\Common Files\Common Files.exe EmptyTemp: ***************** C:\Documents and Settings\Admin\xeaya.exe => Moved successfully. C:\Documents and Settings\Admin\diefioj.exe => Moved successfully. C:\Documents and Settings\Ewa\ciedeih.exe => Moved successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck => value deleted successfully. WMI_MFC_TPSHOKER_80 => Service stopped successfully. WMI_MFC_TPSHOKER_80 => Service deleted successfully. ========= reg delete "HKCU\software\microsoft\windows\currentversion\explorer\mountpoints2" ========= Permanently delete the registry key software\microsoft\windows\currentversion\explorer\mountpoints2 (Y/N)? Operacja ukończona pomyślnie ========= End of Reg: ========= C:\FOUND.007 => Moved successfully. C:\Program Files\Program Files.exe => Moved successfully. C:\Program Files\Common Files\Common Files.exe => Moved successfully. EmptyTemp: => Removed 958.4 MB temporary data. The system needed a reboot. ==== End of Fixlog ====