Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-10-2013 Ran by Natalia at 2013-11-06 19:58:25 Run:1 Running from C:\Users\Natalia\Desktop\Tomek Boot Mode: Normal ============================================== Content of fixlist: ***************** HKCU\...\Run: [Ykniviicf] - C:\Users\Natalia\AppData\Roaming\Ciuh\lydac.exe [440320 2013-08-22] (Alexander Roshal) C:\Users\Natalia\AppData\Roaming\Ciuh\lydac.exe Task: {82413FB8-5B66-4734-9F72-E7C88357AC80} - \BitGuard No Task File HKLM\...\Run: [] - [x] AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll [97280 2009-07-14] () AppInit_DLLs-x32: c:\progra~3\bitguard\271769~1.27\{c16c1~1\bitguard.dll [ ] () C:\ProgramData\rXgXgVXn_OLD C:\Users\Natalia\AppData\Local\avgchrome C:\Users\Natalia\AppData\Roaming\Casael C:\Users\Natalia\AppData\Roaming\Wyomk C:\Users\Natalia\AppData\Roaming\Ciuh C:\Users\Natalia\AppData\Local\Google\Desktop\Install C:\Program Files (x86)\Google\Desktop\Install ***************** HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Ykniviicf => Value deleted successfully. C:\Users\Natalia\AppData\Roaming\Ciuh\lydac.exe => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{82413FB8-5B66-4734-9F72-E7C88357AC80} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{82413FB8-5B66-4734-9F72-E7C88357AC80} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BitGuard => Key deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully. C:\ProgramData\rXgXgVXn_OLD => Moved successfully. C:\Users\Natalia\AppData\Local\avgchrome => Moved successfully. C:\Users\Natalia\AppData\Roaming\Casael => Moved successfully. C:\Users\Natalia\AppData\Roaming\Wyomk => Moved successfully. C:\Users\Natalia\AppData\Roaming\Ciuh => Moved successfully. C:\Users\Natalia\AppData\Local\Google\Desktop\Install => Moved successfully. C:\Program Files (x86)\Google\Desktop\Install => Moved successfully. The system needs a manual reboot. ==== End of Fixlog ====