Fix result of Farbar Recovery Scan Tool (x64) Version:20-12-2015 Ran by legendary_sage (2015-12-22 15:19:37) Run:1 Running from C:\Users\legendary_sage\Desktop Loaded Profiles: legendary_sage (Available Profiles: legendary_sage) Boot Mode: Normal ============================================== fixlist content: ***************** CreateRestorePoint: HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\...\MountPoints2: I - "I:\AutoRun.exe" HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\...\MountPoints2: {3f7b560c-6ab2-11e5-8260-cc3d82e2884d} - "H:\AutoRun.exe" HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\...\MountPoints2: {3f7b564e-6ab2-11e5-8260-cc3d82e2884d} - "H:\AutoRun.exe" HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\...\MountPoints2: {3f7b5bac-6ab2-11e5-8260-cc3d82e2884d} - "H:\AutoRun.exe" HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\...\MountPoints2: {3f7b5d7b-6ab2-11e5-8260-cc3d82e2884d} - "I:\AutoRun.exe" HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\...\MountPoints2: {8784b0b0-8a8b-11e5-8273-cc3d82e2884d} - "I:\AutoRun.exe" HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\...\MountPoints2: {d91cd4ad-6b29-11e5-8262-cc3d82e2884d} - "H:\AutoRun.exe" EmptyTemp: ***************** Restore point was successfully created. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully "HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I" => key removed successfully "HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3f7b560c-6ab2-11e5-8260-cc3d82e2884d}" => key removed successfully HKCR\CLSID\{3f7b560c-6ab2-11e5-8260-cc3d82e2884d} => key not found. "HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3f7b564e-6ab2-11e5-8260-cc3d82e2884d}" => key removed successfully HKCR\CLSID\{3f7b564e-6ab2-11e5-8260-cc3d82e2884d} => key not found. "HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3f7b5bac-6ab2-11e5-8260-cc3d82e2884d}" => key removed successfully HKCR\CLSID\{3f7b5bac-6ab2-11e5-8260-cc3d82e2884d} => key not found. "HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3f7b5d7b-6ab2-11e5-8260-cc3d82e2884d}" => key removed successfully HKCR\CLSID\{3f7b5d7b-6ab2-11e5-8260-cc3d82e2884d} => key not found. "HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8784b0b0-8a8b-11e5-8273-cc3d82e2884d}" => key removed successfully HKCR\CLSID\{8784b0b0-8a8b-11e5-8273-cc3d82e2884d} => key not found. "HKU\S-1-5-21-3578966673-3173021478-2160172042-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d91cd4ad-6b29-11e5-8262-cc3d82e2884d}" => key removed successfully HKCR\CLSID\{d91cd4ad-6b29-11e5-8262-cc3d82e2884d} => key not found. EmptyTemp: => 177 MB temporary data Removed. The system needed a reboot. ==== End of Fixlog 15:20:59 ====