maktone

Fix result of Farbar Recovery Tool (FRST written by Farbar) Version: 29-08-2012 03 Ran by SYSTEM at 2012-08-30 14:08:53 Run:1 Running from F:\ ============================================== C:\Windows\setupact.log moved successfully. C:\Windows\Tasks\AutoKMS.job moved successfully. C:\Windows\Tasks\AutoKMSDaily.job moved successfully. C:\Windows\Tasks\SA.DAT moved successfully. C:\Windows\KMSEmulator.exe moved successfully. C:\Windows\PFRO.log moved successfully. C:\$Recycle.Bin\S-1-5-21-2510215674-2607915592-2127655418-1000\$75fd18f078ff224ff0b054fd39c44f55 moved successfully. C:\Windows\assembly\GAC_32\Desktop.ini moved successfully. C:\Windows\assembly\GAC_64\Desktop.ini moved successfully. C:\Windows\explorer.exe moved successfully. C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe copied successfully to C:\Windows\explorer.exe ==== End of Fixlog ====

I hope this is it? Farbar Recovery Scan Tool Version: 29-08-2012 03 Ran by SYSTEM at 2012-08-30 13:56:09 Running from F:\ ================== Search: "explorer.exe" =================== C:\Windows\explorer.exe [2012-03-01 15:08] - [2012-03-01 16:24] - 2871808 ____A (Microsoft Corporation) 99E20776EBA9468BECF8B385D53EA5B4 C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe [2012-03-01 15:08] - [2011-02-25 21:19] - 2616320 ____A (Microsoft Corporation) 0FB9C74046656D1579A64660AD67B746 C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe [2012-03-01 15:08] - [2011-02-24 21:30] - 2616320 ____A (Microsoft Corporation) 8B88EBBB05A0E56B7DCC708498C02B3E C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe [2010-11-20 19:24] - [2010-11-20 19:24] - 2616320 ____A (Microsoft Corporation) 40D777B7A95E00593EB1568C68514493 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe [2012-03-01 15:08] - [2011-02-25 22:14] - 2871808 ____A (Microsoft Corporation) 3B69712041F3D63605529BD66DC00C48 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe [2012-03-01 15:08] - [2012-03-01 16:24] - 2871808 ____A (Microsoft Corporation) 99E20776EBA9468BECF8B385D53EA5B4 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe [2010-11-20 19:24] - [2010-11-20 19:24] - 2872320 ____A (Microsoft Corporation) AC4C51EB24AA95B77F705AB159189E24 C:\Windows\SysWOW64\explorer.exe [2012-03-01 15:08] - [2011-02-24 21:30] - 2616320 ____A (Microsoft Corporation) 8B88EBBB05A0E56B7DCC708498C02B3E ====== End Of Search ======

Thanks Maniac FRST.txt

Hi Maniac, if you look at my top most post you will see I attached the FRST.txt as search.txt

Could someone help me with this please. I got infected with this last night. I ran OTL and enclose the following logs Search.txt OTL.Txt