Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-10-2014 Ran by galonpzw at 2014-10-17 01:09:31 Run:1 Running from G:\Pulpit\PULPIT Loaded Profile: galonpzw (Available profiles: galonpzw) Boot Mode: Safe Mode (with Networking) ============================================== Content of fixlist: ***************** CloseProcesses: R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2014-10-11] () S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 GPU-Z; \??\C:\Users\galonpzw\AppData\Local\Temp\GPU-Z.sys [X] HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-3991204091-2138177107-2604177908-1001\...\Run: [AdobeBridge] => [X] C:\ProgramData\AVG2014 C:\ProgramData\F-Secure C:\ProgramData\MFAData C:\Users\galonpzw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter C:\Users\Default\AppData\Roaming\TuneUp Software C:\Users\galonpzw\AppData\Roaming\3909 C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP C:\WINDOWS\system32\Drivers\fsbts.sys C:\WINDOWS\SysWOW64\%TMP% C:\WINDOWS\SysWOW64\sqlite3.dll CMD: ipconfig /flushdns EmptyTemp: ***************** Processes closed successfully. fsbts => Unable to stop service fsbts => Service deleted successfully. esgiguard => Service deleted successfully. GPU-Z => Service deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. HKU\S-1-5-21-3991204091-2138177107-2604177908-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully. C:\ProgramData\AVG2014 => Moved successfully. C:\ProgramData\F-Secure => Moved successfully. C:\ProgramData\MFAData => Moved successfully. C:\Users\galonpzw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter => Moved successfully. C:\Users\Default\AppData\Roaming\TuneUp Software => Moved successfully. C:\Users\galonpzw\AppData\Roaming\3909 => Moved successfully. C:\WINDOWS\AF54923662584AC6A0435B5B89C6EB61.TMP => Moved successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP => Moved successfully. C:\WINDOWS\system32\Drivers\fsbts.sys => Moved successfully. C:\WINDOWS\SysWOW64\%TMP% => Moved successfully. C:\WINDOWS\SysWOW64\sqlite3.dll => Moved successfully. ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= EmptyTemp: => Removed 259.9 MB temporary data. The system needed a reboot. ==== End of Fixlog ====