Reply to thread

Message

<blockquote data-quote="RJude" data-source="post: 125847" data-attributes="member: 9341">Here is the fix log:Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 24-06-2013Ran by SYSTEM at 2013-06-25 00:19:56 Run:1Running from F:\Boot Mode: Recovery==============================================HKU\Caitlin\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx =&gt; Value deleted successfully.C:\Users\Caitlin\AppData\Local\Temp\xrrpxyjsuiwavyhxr.exe =&gt; Moved successfully.HKU\Caitlin\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell =&gt; Value deleted successfully.HKU\Caitlin\Software\Microsoft\Command Processor\\AutoRun =&gt; Value deleted successfully.GMSIPCI =&gt; Service deleted successfully.c:\windows\system32\rismxdp.dll =&gt; File/Directory not found.savscan =&gt; Service deleted successfully.motmodem =&gt; Service deleted successfully.subxk =&gt; Service deleted successfully.C:\windows\System32\drivers\oojbued.sys =&gt; File/Directory not found.vvar =&gt; Service deleted successfully.C:\windows\System32\drivers\gqertes.sys =&gt; File/Directory not found.HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs motmodem =&gt; Value deleted successfully.HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs savscan =&gt; Value deleted successfully.HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs GMSIPCI =&gt; Value deleted successfully.HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs rismxdp =&gt; Value deleted successfully.HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs DirectUpdate =&gt; Value deleted successfully.C:\Users\Caitlin\AppData\Roaming\2433f433 =&gt; Moved successfully.C:\Users\Caitlin\AppData\Local\2433f433 =&gt; Moved successfully.C:\$Recycle.Bin\S-1-5-21-1188298847-2614170819-2347088058-1000\$1275ff5241a28249602b776eb539b742 =&gt; Moved successfully.==== End of Fixlog ====Should I move on to the next steps?</blockquote>

[QUOTE="RJude, post: 125847, member: 9341"] Here is the fix log: Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 24-06-2013 Ran by SYSTEM at 2013-06-25 00:19:56 Run:1 Running from F:\ Boot Mode: Recovery ============================================== HKU\Caitlin\Software\Microsoft\Windows\CurrentVersion\Run\\qcgce2mrvjq91kk1e7pnbb19m52fx => Value deleted successfully. C:\Users\Caitlin\AppData\Local\Temp\xrrpxyjsuiwavyhxr.exe => Moved successfully. HKU\Caitlin\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully. HKU\Caitlin\Software\Microsoft\Command Processor\\AutoRun => Value deleted successfully. GMSIPCI => Service deleted successfully. c:\windows\system32\rismxdp.dll => File/Directory not found. savscan => Service deleted successfully. motmodem => Service deleted successfully. subxk => Service deleted successfully. C:\windows\System32\drivers\oojbued.sys => File/Directory not found. vvar => Service deleted successfully. C:\windows\System32\drivers\gqertes.sys => File/Directory not found. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs motmodem => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs savscan => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs GMSIPCI => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs rismxdp => Value deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs DirectUpdate => Value deleted successfully. C:\Users\Caitlin\AppData\Roaming\2433f433 => Moved successfully. C:\Users\Caitlin\AppData\Local\2433f433 => Moved successfully. C:\$Recycle.Bin\S-1-5-21-1188298847-2614170819-2347088058-1000\$1275ff5241a28249602b776eb539b742 => Moved successfully. ==== End of Fixlog ==== Should I move on to the next steps? [/QUOTE]

Verification