Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-01-2014 02 Ran by Wojciech at 2014-01-23 13:34:40 Run:1 Running from C:\Users\Wojciech\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** () C:\Users\Wojciech\AppData\Roaming\pwo6\svchost.exe () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\bin\winlogon.exe HKCU\...\Run: [pwo6] - C:\Users\Wojciech\AppData\Roaming\pwo6\svchost.exe [7321417 2013-10-10] () C:\Users\Wojciech\AppData\Local\Temp\_MEI21042 C:\Users\Wojciech\AppData\Roaming\pwo6 CMD: sc config "PLAY ONLINE. RunOuc" start= demand ***************** [3720] C:\Users\Wojciech\AppData\Roaming\pwo6\svchost.exe => Process closed successfully. C:\Users\Wojciech\AppData\Local\Temp\_MEI21042\bin\winlogon.exe => No running process found HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\pwo6 => Value deleted successfully. "C:\Users\Wojciech\AppData\Local\Temp\_MEI21042" => File/Directory not found. "C:\Users\Wojciech\AppData\Roaming\pwo6" directory move: C:\Users\Wojciech\AppData\Roaming\pwo6\cached-certs => Moved successfully. C:\Users\Wojciech\AppData\Roaming\pwo6\cached-microdesc-consensus => Moved successfully. C:\Users\Wojciech\AppData\Roaming\pwo6\cached-microdescs => Moved successfully. C:\Users\Wojciech\AppData\Roaming\pwo6\cached-microdescs.new => Moved successfully. Could not move "C:\Users\Wojciech\AppData\Roaming\pwo6\lock" => Scheduled to move on reboot. C:\Users\Wojciech\AppData\Roaming\pwo6\state => Moved successfully. Could not move "C:\Users\Wojciech\AppData\Roaming\pwo6\svchost.exe" => Scheduled to move on reboot. Could not move "C:\Users\Wojciech\AppData\Roaming\pwo6" directory. => Scheduled to move on reboot. ========= sc config "PLAY ONLINE. RunOuc" start= demand ========= [SC] ChangeServiceConfig SUKCES ========= End of CMD: ========= => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-01-23 13:36:35)<= C:\Users\Wojciech\AppData\Roaming\pwo6\lock => Is moved successfully. C:\Users\Wojciech\AppData\Roaming\pwo6\svchost.exe => Is moved successfully. C:\Users\Wojciech\AppData\Roaming\pwo6 => Is moved successfully. ==== End of Fixlog ====