Farbar Recovery Scan Tool (x86) Version:26-08-2014 Ran by Admin at 2014-08-31 17:51:51 Running from F:\ Boot Mode: Normal ================== Search Registry: "xeaya;diefioj;ciedeih" =========== ===================== Search result for "xeaya" ========== [HKEY_USERS\S-1-5-21-1229272821-113007714-725345543-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Admin\xeaya.exe"="xeaya" ===================== Search result for "diefioj" ========== [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "F:\DieFIoJ.EXe"="F:\DieFIoJ.EXe:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Documents and Settings\Admin\diefioj.exe"="C:\Documents and Settings\Admin\diefioj.exe:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "F:\DieFIoJ.EXe"="F:\DieFIoJ.EXe:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Documents and Settings\Admin\diefioj.exe"="C:\Documents and Settings\Admin\diefioj.exe:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "F:\DieFIoJ.EXe"="F:\DieFIoJ.EXe:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Documents and Settings\Admin\diefioj.exe"="C:\Documents and Settings\Admin\diefioj.exe:*:Enabled:ipsec" [HKEY_USERS\S-1-5-21-1229272821-113007714-725345543-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Admin\diefioj.exe"="diefioj" [HKEY_USERS\S-1-5-21-1229272821-113007714-725345543-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "F:\dieFiOJ.eXE"="dieFiOJ" [HKEY_USERS\S-1-5-21-1229272821-113007714-725345543-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache] "F:\diefioj.scr"="diefioj" ===================== Search result for "ciedeih" ========== [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "F:\cIedeIh.exE"="F:\cIedeIh.exE:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Documents and Settings\Ewa\ciedeih.exe"="C:\Documents and Settings\Ewa\ciedeih.exe:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "F:\cIedeIh.exE"="F:\cIedeIh.exE:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Documents and Settings\Ewa\ciedeih.exe"="C:\Documents and Settings\Ewa\ciedeih.exe:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "F:\cIedeIh.exE"="F:\cIedeIh.exE:*:Enabled:ipsec" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Documents and Settings\Ewa\ciedeih.exe"="C:\Documents and Settings\Ewa\ciedeih.exe:*:Enabled:ipsec" ====== End Of Search ======