Fix result of Farbars's Recovery Tool (FRST written by farbar Version 2.1.1) Ran by SYSTEM at 2011-06-24 14:15:52 R:1 Running from E:\ ============================================== HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit Value was restored. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell Value was restored. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Mircosoft Explorer Value deleted successfully. HKEY_USERS\gx520\Software\Microsoft\Windows\CurrentVersion\Run\\Mircosoft Explorer Value deleted successfully. HKEY_USERS\gx520\Software\Microsoft\Windows\CurrentVersion\Run\\Kypips Value deleted successfully. HKEY_USERS\gx520\Software\Microsoft\Windows\CurrentVersion\Run\\ju7bd Value deleted successfully. HKEY_USERS\gx520\Software\Microsoft\Windows\CurrentVersion\Run\\12CFG214-K641-12SF-N85P Value deleted successfully. HKEY_USERS\gx520\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell Value deleted successfully. C:\RECYCLER moved successfully. C:\Windows\System32\svdhalp.exe.vir moved successfully. C:\Windows\System32\svdhalp.exe.ini.vir moved successfully. C:\Windows\System32\wwwycdcx.dll.vir moved successfully. C:\Windows\System32\svdhalp.exe984.vir moved successfully. C:\Windows\System32\svdhalp.exe247.vir moved successfully. C:\Windows\System32\svdhalp.exe.ini648.vir moved successfully. C:\Windows\System32\svdhalp.exe.ini267.vir moved successfully. C:\Windows\syskey2i.drv moved successfully. C:\Windows\System32\windows.acm moved successfully. C:\Windows\System32\systeme.acm moved successfully. C:\winnit.acm moved successfully.