-
Arai78.
User deleted
Fatto grazie. SPOILER (clicca per visualizzare)Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2013
Ran by SYSTEM at 2013-08-17 17:15:04 Run:2
Running from G:\
Boot Mode: Recovery
==============================================
Content of fixlist:
*****************
start
HKU\Michael\...\Run: [Software updater] - C:\Users\Michael\AppData\Roaming\FreeSoftwareUpdater\updater.exe [52516 2013-05-21] ()
HKU\Michael\...\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] - C:\Users\Michael\AppData\Local\Temp\dsddSVj.exe [64000 2013-08-15] (Valve Corporation) <===== ATTENTION
HKU\Michael\...\Winlogon: [Shell] cmd.exe [344576 2009-07-14] (Microsoft Corporation) <==== ATTENTION
HKU\Michael\...\Command Processor: "C:\Users\Michael\AppData\Local\Temp\dsddSVj.exe" <===== ATTENTION!
2013-08-15 12:59 - 2013-08-15 12:59 - 01037386 _____ C:\ProgramData\2433f433
2013-08-15 12:59 - 2013-08-15 12:59 - 01037339 _____ C:\Users\Michael\AppData\Local\2433f433
2013-08-15 12:59 - 2013-08-15 12:59 - 01037306 _____ C:\Users\Michael\AppData\Roaming\2433f433
2013-07-18 12:45 - 2013-08-17 14:13 - 00000364 _____ C:\Windows\Tasks\AmiUpdXp.job
2013-07-18 12:45 - 2013-07-29 11:20 - 00000000 ____D C:\Users\Michael\AppData\Local\SwvUpdater
2013-07-18 12:45 - 2013-07-18 12:45 - 00003388 _____ C:\Windows\System32\Tasks\AmiUpdXp
C:\Users\Michael\AppData\Local\Temp\dsddSVj.exe
C:\Users\Michael\AppData\Roaming\FreeSoftwareUpdater
end
*****************
HKU\Michael\Software\Microsoft\Windows\CurrentVersion\Run\\Software updater => Value deleted successfully.
HKU\Michael\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value deleted successfully.
HKU\Michael\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
HKU\Michael\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully.
C:\ProgramData\2433f433 => Moved successfully.
C:\Users\Michael\AppData\Local\2433f433 => Moved successfully.
C:\Users\Michael\AppData\Roaming\2433f433 => Moved successfully.
C:\Windows\Tasks\AmiUpdXp.job => Moved successfully.
C:\Users\Michael\AppData\Local\SwvUpdater => Moved successfully.
C:\Windows\System32\Tasks\AmiUpdXp => Moved successfully.
C:\Users\Michael\AppData\Local\Temp\dsddSVj.exe => Moved successfully.
C:\Users\Michael\AppData\Roaming\FreeSoftwareUpdater => Moved successfully.
==== End of Fixlog ====.