Fix result of Farbar Recovery Tool (FRST written by farbar) Version: 24-01-2012 Ran by SYSTEM at 2012-01-25 09:38:31 R:2 Running from F:\ ============================================== HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Session Manager\SubSystems\\Windows Value was restored. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs tng-doba Deleted successfully. tng-doba service deleted successfully. C:\Windows\System32\RDID1027.dll moved successfully. C:\Windows\System32\consrv.dll moved successfully. C:\Windows\assembly\tmp\U moved successfully. C:\Windows\assembly\tmp\loader.tlb moved successfully. C:\Windows\assembly\tmp\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6} moved successfully. C:\Windows\assembly\GAC_64\desktop.ini moved successfully. C:\Windows\assembly\GAC_32\desktop.ini moved successfully. C:\Users\user\AppData\Local\da66c0bc moved successfully. C:\Users\user\AppData\Local\Microsoft Help moved successfully. C:\Users\user\AppData\Roaming\Ukyzr moved successfully. C:\Users\user\AppData\Roaming\Byxo moved successfully. C:\Users\user\AppData\Roaming\jumprs moved successfully. C:\Users\user\AppData\Roaming\38C00 moved successfully. C:\Users\user\AppData\Roaming\48F38 moved successfully. C:\Users\user\AppData\Roaming\6615DE.dat moved successfully. C:\Users\user\AppData\Roaming\MSWINSCK.OCX moved successfully. C:\Users\user\AppData\Roaming\1.gif moved successfully. C:\Users\user\AppData\Roaming\start moved successfully. C:\Users\user\AppData\Roaming\ct_start moved successfully. C:\Users\user\AppData\Roaming\xxzic1upujaqmjsvcccrcg1g1xexwdp12 moved successfully. C:\Users\user\AppData\Roaming\xfuxownrijstax1kopspcbnwfbypleia2 moved successfully. C:\Users\user\AppData\Roaming\x1su1ublpqjksu11clzp2ntfcbdjldd32 moved successfully. C:\Users\user\AppData\Roaming\xfk2luzgv2sh23rmp2gueguhqbpdphtp2 moved successfully. C:\ProgramData\k803Rl2.dat moved successfully. C:\Windows\SysWow64\%APPDATA% moved successfully. ==== End of Fixlog ====