Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-08-2013 02 Ran by SYSTEM at 2013-08-24 00:29:08 Run:1 Running from H:\ Boot Mode: Recovery ============================================== Content of fixlist: ***************** testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION! S1 vBszKyhV2; C:\Windows\system32\drivers\vBszKyhV2.sys [46528 2013-08-08] () S3 dgderdrv; System32\drivers\dgderdrv.sys [x] 2013-08-08 11:18 - 2013-08-08 11:18 - 04320056 _____ C:\Windows\System32\vBszKyhV.bmp 2013-08-08 11:18 - 2013-08-08 11:18 - 00702464 _____ C:\Windows\System32\vBszKyhV2.exe 2013-08-08 11:18 - 2013-08-08 11:18 - 00680448 _____ C:\Windows\System32\vBszKyhV1.exe 2013-08-08 11:18 - 2013-08-08 11:18 - 00046528 _____ C:\Windows\System32\Drivers\vBszKyhV2.sys 2013-08-08 11:18 - 2013-08-08 11:18 - 00004096 _____ C:\Windows\System32\vBszKyhV.dll 2013-08-08 11:17 - 2013-08-08 11:17 - 00031232 _____ C:\Windows\System32\vBszKyhVp.dll 2013-08-13 12:13 - 2010-11-20 19:24 - 00000000 __SHD C:\Users\mookie\AppData\Roaming\ecahgwue 2013-08-13 11:03 - 2013-08-13 11:03 - 00000000 __SHD C:\found.000 2013-08-20 08:17 - 2013-08-20 08:17 - 00000000 __SHD C:\found.001 ***************** The operation completed successfully. vBszKyhV2 => Service deleted successfully. dgderdrv => Service deleted successfully. C:\Windows\System32\vBszKyhV.bmp => Moved successfully. C:\Windows\System32\vBszKyhV2.exe => Moved successfully. C:\Windows\System32\vBszKyhV1.exe => Moved successfully. C:\Windows\System32\Drivers\vBszKyhV2.sys => Moved successfully. C:\Windows\System32\vBszKyhV.dll => Moved successfully. C:\Windows\System32\vBszKyhVp.dll => Moved successfully. C:\Users\mookie\AppData\Roaming\ecahgwue => Moved successfully. C:\found.000 => Moved successfully. C:\found.001 => Moved successfully. ==== End of Fixlog ====