Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2014 Ran by Donkey Kong at 2014-03-12 00:14:53 Run:1 Running from C:\Users\Donkey Kong\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** Start HKU\S-1-5-21-2481818962-1579234034-314252365-1000\...\CurrentVersion\Windows: [Load] C:\ProgramData\NTKernel\nt32.exe <===== ATTENTION HKU\S-1-5-21-2481818962-1579234034-314252365-1000\...\MountPoints2: G - G:\LaunchU3.exe -a HKU\S-1-5-21-2481818962-1579234034-314252365-1000\...\Winlogon: [Shell] explorer.exe,"C:\ProgramData\load32.exe" [243712 2014-02-02] () <==== ATTENTION C:\ProgramData\load32.exe C:\ProgramData\NTKernel\nt32.exe C:\Users\Donkey Kong\AppData\Roaming\DLTMPE.INI C:\ProgramData\NTKernel C:\Users\Donkey Kong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Update.Microsoft.com.url C:\NTKernel End ***************** HKU\S-1-5-21-2481818962-1579234034-314252365-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully. HKU\S-1-5-21-2481818962-1579234034-314252365-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-2481818962-1579234034-314252365-1000 => Key not found. HKU\S-1-5-21-2481818962-1579234034-314252365-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully. Could not move "C:\ProgramData\load32.exe" => Scheduled to move on reboot. Could not move "C:\ProgramData\NTKernel\nt32.exe" => Scheduled to move on reboot. C:\Users\Donkey Kong\AppData\Roaming\DLTMPE.INI => Moved successfully. "C:\ProgramData\NTKernel" directory move: C:\ProgramData\NTKernel\load32 => Moved successfully. Could not move "C:\ProgramData\NTKernel\nt32.exe" => Scheduled to move on reboot. Could not move "C:\ProgramData\NTKernel" directory. => Scheduled to move on reboot. Could not move "C:\Users\Donkey Kong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Update.Microsoft.com.url" => Scheduled to move on reboot. C:\NTKernel => Moved successfully. => Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-03-12 00:17:44)<= C:\ProgramData\load32.exe => Is moved successfully. C:\ProgramData\NTKernel\nt32.exe => Is moved successfully. C:\ProgramData\NTKernel\nt32.exe => Is moved successfully. C:\ProgramData\NTKernel => Moved successfully. C:\Users\Donkey Kong\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Update.Microsoft.com.url => Is moved successfully. ==== End of Fixlog ====