Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-10-2013 Ran by admin at 2013-10-03 12:23:43 Run:1 Running from H:\wirusy Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Users\admin\AppData\Roaming\settings.ini C:\Users\admin\AppData\Roaming\i.ini C:\Users\admin\Desktop\Antivirus Security Pro support.url C:\Users\admin\Desktop\Antivirus Security Pro.lnk C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro BHO: Savensharee - {670BA3DF-57B2-1B12-10E5-BBCB35590E6B} - C:\ProgramData\Savensharee\9asrfx.dll () BootExecute: autocheck autochk /p \??\I:autocheck autochk * R3 catchme; \??\C:\ComboFix\catchme.sys [x] U3 mbr; \??\C:\Users\admin\AppData\Local\Temp\mbr.sys [x] ***************** C:\Users\admin\AppData\Roaming\settings.ini => Moved successfully. "C:\Users\admin\AppData\Roaming\i.ini" => File/Directory not found. C:\Users\admin\Desktop\Antivirus Security Pro support.url => Moved successfully. "C:\Users\admin\Desktop\Antivirus Security Pro.lnk" => File/Directory not found. "C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antivirus Security Pro" => File/Directory not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{670BA3DF-57B2-1B12-10E5-BBCB35590E6B} => Key deleted successfully. HKCR\CLSID\{670BA3DF-57B2-1B12-10E5-BBCB35590E6B} => Key deleted successfully. HKLM\System\CurrentControlSet\Control\Session Manager\\BootExecute => Value was restored successfully. catchme => Service deleted successfully. mbr => Service deleted successfully. The system needs a manual reboot. ==== End of Fixlog ====