Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 27-09-2013 01 Ran by Galileus at 2013-10-01 12:31:39 Run:1 Running from C:\Users\Galileus\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\ProgramData\6XgVgp9n C:\Users\G256385\Desktop\Antivirus Security Pro.lnk C:\Users\G256385\Desktop\Antivirus Security Pro support.url C:\Users\G256385\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service" ***************** "C:\ProgramData\6XgVgp9n" directory move: Could not move "C:\ProgramData\6XgVgp9n\6XgVgp9n.exe" => Scheduled to move on reboot. Could not move "C:\ProgramData\6XgVgp9n\6XgVgp9n.exe.manifest" => Scheduled to move on reboot. C:\ProgramData\6XgVgp9n\6XgVgp9n.ico => Moved successfully. Could not move "C:\ProgramData\6XgVgp9n\6XgVgp9nKaadatag.in" => Scheduled to move on reboot. Could not move "C:\ProgramData\6XgVgp9n\6XgVgp9nKaadatag.lg" => Scheduled to move on reboot. C:\ProgramData\6XgVgp9n\serv.bat => Moved successfully. Could not move "C:\ProgramData\6XgVgp9n" directory. => Scheduled to move on reboot. C:\Users\G256385\Desktop\Antivirus Security Pro.lnk => Moved successfully. C:\Users\G256385\Desktop\Antivirus Security Pro support.url => Moved successfully. C:\Users\G256385\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro => Moved successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => Key deleted successfully. HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => Key deleted successfully. =========== Result of Scheduled Files to move =========== C:\ProgramData\6XgVgp9n\6XgVgp9n.exe => Moved successfully. C:\ProgramData\6XgVgp9n\6XgVgp9n.exe.manifest => Moved successfully. C:\ProgramData\6XgVgp9n\6XgVgp9nKaadatag.in => Moved successfully. C:\ProgramData\6XgVgp9n\6XgVgp9nKaadatag.lg => Moved successfully. C:\ProgramData\6XgVgp9n => Moved successfully. ==== End of Fixlog ====