Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-02-2014 Ran by Sony at 2014-02-07 10:59:35 Run:1 Running from C:\Users\Sony\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** () C:\Users\Sony\AppData\Roaming\pwo6\svchost.exe () C:\Users\Sony\AppData\Local\Temp\_MEI20762\bin\winlogon.exe () C:\Users\Sony\AppData\Local\Temp\_MEI20762\bin\explorer.exe HKLM-x32\...\Run: [Application Layer Gateway] - C:\Program Files (x86)\Common Files\alg.exe HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKU\S-1-5-21-2432516722-503974337-737974545-1000\...\Run: [pwo6] - C:\Users\Sony\AppData\Roaming\pwo6\svchost.exe [7321472 2014-01-28] () HKU\S-1-5-21-2432516722-503974337-737974545-1000\...\Run: [ChicaPasswordManager] - "C:\Program Files (x86)\ChicaLogic\Chica Password Manager\stpass.exe" /autorunned S2 Update Jump Flip; No ImagePath C:\Program Files (x86)\Mobogenie C:\Users\Sony\AppData\Local\genienext C:\Users\Sony\AppData\Local\Mobogenie C:\Users\Sony\AppData\Roaming\newnext.me C:\Users\Sony\AppData\Roaming\pwo6 C:\Users\Sony\Documents\Chica Passwords ***************** [2412] C:\Users\Sony\AppData\Roaming\pwo6\svchost.exe => Process closed successfully. C:\Users\Sony\AppData\Local\Temp\_MEI20762\bin\winlogon.exe => No running process found C:\Users\Sony\AppData\Local\Temp\_MEI20762\bin\explorer.exe => No running process found HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Application Layer Gateway => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\mobilegeni daemon => Value deleted successfully. HKU\S-1-5-21-2432516722-503974337-737974545-1000\Software\Microsoft\Windows\CurrentVersion\Run\\pwo6 => Value deleted successfully. HKU\S-1-5-21-2432516722-503974337-737974545-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ChicaPasswordManager => Value deleted successfully. Update Jump Flip => Service deleted successfully. C:\Program Files (x86)\Mobogenie => Moved successfully. C:\Users\Sony\AppData\Local\genienext => Moved successfully. C:\Users\Sony\AppData\Local\Mobogenie => Moved successfully. C:\Users\Sony\AppData\Roaming\newnext.me => Moved successfully. "C:\Users\Sony\AppData\Roaming\pwo6" directory move: C:\Users\Sony\AppData\Roaming\pwo6\cached-certs => Moved successfully. C:\Users\Sony\AppData\Roaming\pwo6\cached-microdesc-consensus => Moved successfully. C:\Users\Sony\AppData\Roaming\pwo6\cached-microdescs => Moved successfully. C:\Users\Sony\AppData\Roaming\pwo6\cached-microdescs.new => Moved successfully. Could not move "C:\Users\Sony\AppData\Roaming\pwo6\lock" => Scheduled to move on reboot. C:\Users\Sony\AppData\Roaming\pwo6\state => Moved successfully. Could not move "C:\Users\Sony\AppData\Roaming\pwo6\svchost.exe" => Scheduled to move on reboot. Could not move "C:\Users\Sony\AppData\Roaming\pwo6" directory. => Scheduled to move on reboot. C:\Users\Sony\Documents\Chica Passwords => Moved successfully. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-02-07 11:00:52)<= C:\Users\Sony\AppData\Roaming\pwo6\lock => Is moved successfully. C:\Users\Sony\AppData\Roaming\pwo6\svchost.exe => Is moved successfully. C:\Users\Sony\AppData\Roaming\pwo6 => Is moved successfully. ==== End of Fixlog ====