========== OTL ========== Registry value HKEY_USERS\S-1-5-21-337216868-1542458230-940509798-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}\ not found. Prefs.js: "MyStart Search" removed from browser.search.defaultenginename Prefs.js: "Softonic-Polska Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "Softonic-Polska Customized Web Search" removed from browser.search.selectedEngine Prefs.js: "http://search.conduit.com/?ctid=CT2530240&SearchSource=13" removed from browser.startup.homepage Prefs.js: "http://mystart.incredimail.com/?loc=ff_address_bar_fs&search=" removed from keyword.URL 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_USERS\S-1-5-21-337216868-1542458230-940509798-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found. 64bit-Registry value HKEY_USERS\S-1-5-21-337216868-1542458230-940509798-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Setwallpaper deleted successfully. Registry value HKEY_USERS\S-1-5-21-337216868-1542458230-940509798-1000\Software\Microsoft\Windows\CurrentVersion\Run\\EA Core deleted successfully. Registry value HKEY_USERS\S-1-5-21-337216868-1542458230-940509798-1000\Software\Microsoft\Windows\CurrentVersion\Run\\jtpien deleted successfully. Registry value HKEY_USERS\S-1-5-21-337216868-1542458230-940509798-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Tlen.pl deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{40525A66-DB98-480D-BCF9-7AF88C1AF438}\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40525A66-DB98-480D-BCF9-7AF88C1AF438}\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{40525A66-DB98-480D-BCF9-7AF88C1AF438}\ not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40525A66-DB98-480D-BCF9-7AF88C1AF438}\ not found. Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7} C:\Windows\Downloaded Program Files\gp.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Software\Classes\Conduit.Engine\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Software\Classes\Toolbar.CT2530240\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Software\PopCap\ not found. Registry key HKEY_CURRENT_USER\Software\AppDataLow\Software\PriceGong\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\AppDataLow\Software\Toolbar\ deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C86EB8A9-CCC2-4B6C-B75D-73576ED591BF}\ not found. ========== FILES ========== C:\Users\Aneta\AppData\Roaming\Mozilla\Firefox\Profiles\ov6rqpo7.default\searchplugins\conduit.xml moved successfully. C:\Users\Aneta\AppData\Roaming\Mozilla\Firefox\Profiles\ov6rqpo7.default\searchplugins\MyStart Search.xml moved successfully. C:\Users\Aneta\AppData\Local\TempAAM884.html moved successfully. C:\Users\Aneta\AppData\Local\TempaB1324.html moved successfully. C:\Users\Aneta\AppData\Local\TempAB4072.html moved successfully. C:\Users\Aneta\AppData\Local\TempAb5764.html moved successfully. C:\Users\Aneta\AppData\Local\TempAH2348.html moved successfully. C:\Users\Aneta\AppData\Local\TempAk2740.html moved successfully. C:\Users\Aneta\AppData\Local\TempAP1088.html moved successfully. C:\Users\Aneta\AppData\Local\TempAs3152.html moved successfully. C:\Users\Aneta\AppData\Local\Tempbf1220.html moved successfully. C:\Users\Aneta\AppData\Local\TempBI2348.html moved successfully. C:\Users\Aneta\AppData\Local\TempblR884.html moved successfully. C:\Users\Aneta\AppData\Local\TempBp1548.html moved successfully. C:\Users\Aneta\AppData\Local\TempBW2604.html moved successfully. C:\Users\Aneta\AppData\Local\Tempca3540.html moved successfully. C:\Users\Aneta\AppData\Local\TempCh3152.html moved successfully. C:\Users\Aneta\AppData\Local\TempCk8884.html moved successfully. C:\Users\Aneta\AppData\Local\Tempcp1080.html moved successfully. C:\Users\Aneta\AppData\Local\TempDp3652.html moved successfully. C:\Users\Aneta\AppData\Local\TempDR3044.html moved successfully. C:\Users\Aneta\AppData\Local\TempDT3628.html moved successfully. C:\Users\Aneta\AppData\Local\TempdX3232.html moved successfully. C:\Users\Aneta\AppData\Local\TempEb2016.html moved successfully. C:\Users\Aneta\AppData\Local\TempeI2364.html moved successfully. C:\Users\Aneta\AppData\Local\TempEM1440.html moved successfully. C:\Users\Aneta\AppData\Local\TempES1564.html moved successfully. C:\Users\Aneta\AppData\Local\TempeU3208.html moved successfully. C:\Users\Aneta\AppData\Local\Tempey3848.html moved successfully. C:\Users\Aneta\AppData\Local\TempfH3180.html moved successfully. C:\Users\Aneta\AppData\Local\TempFI3628.html moved successfully. C:\Users\Aneta\AppData\Local\TempFJ3044.html moved successfully. C:\Users\Aneta\AppData\Local\Tempfp2328.html moved successfully. C:\Users\Aneta\AppData\Local\Tempfv3120.html moved successfully. C:\Users\Aneta\AppData\Local\Tempfw8264.html moved successfully. C:\Users\Aneta\AppData\Local\Tempfy6668.html moved successfully. C:\Users\Aneta\AppData\Local\TempFZ2076.html moved successfully. C:\Users\Aneta\AppData\Local\TempFZ3444.html moved successfully. C:\Users\Aneta\AppData\Local\TempGc1216.html moved successfully. C:\Users\Aneta\AppData\Local\TempgC2064.html moved successfully. C:\Users\Aneta\AppData\Local\TempgD3540.html moved successfully. C:\Users\Aneta\AppData\Local\Tempgh5812.html moved successfully. C:\Users\Aneta\AppData\Local\TempGo2328.html moved successfully. C:\Users\Aneta\AppData\Local\TempgQ2292.html moved successfully. C:\Users\Aneta\AppData\Local\TempgV2916.html moved successfully. C:\Users\Aneta\AppData\Local\TempgX1012.html moved successfully. C:\Users\Aneta\AppData\Local\TemphD4072.html moved successfully. C:\Users\Aneta\AppData\Local\Temphe2196.html moved successfully. C:\Users\Aneta\AppData\Local\TempHL3044.html moved successfully. C:\Users\Aneta\AppData\Local\TempHz5812.html moved successfully. C:\Users\Aneta\AppData\Local\Tempih3988.html moved successfully. C:\Users\Aneta\AppData\Local\Tempij3176.html moved successfully. C:\Users\Aneta\AppData\Local\Tempix1116.html moved successfully. C:\Users\Aneta\AppData\Local\TempjH3080.html moved successfully. C:\Users\Aneta\AppData\Local\TempJS3148.html moved successfully. C:\Users\Aneta\AppData\Local\TempKI4480.html moved successfully. C:\Users\Aneta\AppData\Local\TempKu3216.html moved successfully. C:\Users\Aneta\AppData\Local\TempkV2076.html moved successfully. C:\Users\Aneta\AppData\Local\TempKx3100.html moved successfully. C:\Users\Aneta\AppData\Local\TemplB1280.html moved successfully. C:\Users\Aneta\AppData\Local\TemplC3444.html moved successfully. C:\Users\Aneta\AppData\Local\Templj1884.html moved successfully. C:\Users\Aneta\AppData\Local\Templke308.html moved successfully. C:\Users\Aneta\AppData\Local\TemplP1160.html moved successfully. C:\Users\Aneta\AppData\Local\TempLX3232.html moved successfully. C:\Users\Aneta\AppData\Local\TempLY3216.html moved successfully. C:\Users\Aneta\AppData\Local\TempmD3280.html moved successfully. C:\Users\Aneta\AppData\Local\TempmE3080.html moved successfully. C:\Users\Aneta\AppData\Local\TempMR3096.html moved successfully. C:\Users\Aneta\AppData\Local\TempMs3176.html moved successfully. C:\Users\Aneta\AppData\Local\Tempmv1324.html moved successfully. C:\Users\Aneta\AppData\Local\TempMV3180.html moved successfully. C:\Users\Aneta\AppData\Local\TempnL1116.html moved successfully. C:\Users\Aneta\AppData\Local\TempNT3172.html moved successfully. C:\Users\Aneta\AppData\Local\TempNX1884.html moved successfully. C:\Users\Aneta\AppData\Local\Tempob3044.html moved successfully. C:\Users\Aneta\AppData\Local\TempoI3100.html moved successfully. C:\Users\Aneta\AppData\Local\TempOr2392.html moved successfully. C:\Users\Aneta\AppData\Local\TempoT1088.html moved successfully. C:\Users\Aneta\AppData\Local\TempPA2064.html moved successfully. C:\Users\Aneta\AppData\Local\Temppp3172.html moved successfully. C:\Users\Aneta\AppData\Local\TempPv1216.html moved successfully. C:\Users\Aneta\AppData\Local\Temppx3224.html moved successfully. C:\Users\Aneta\AppData\Local\Tempqc3392.html moved successfully. C:\Users\Aneta\AppData\Local\Tempqg3280.html moved successfully. C:\Users\Aneta\AppData\Local\TempQu2916.html moved successfully. C:\Users\Aneta\AppData\Local\Temprd3392.html moved successfully. C:\Users\Aneta\AppData\Local\TemprK8264.html moved successfully. C:\Users\Aneta\AppData\Local\Tempsv1280.html moved successfully. C:\Users\Aneta\AppData\Local\Temptb3224.html moved successfully. C:\Users\Aneta\AppData\Local\TempTe3120.html moved successfully. C:\Users\Aneta\AppData\Local\TempuE3232.html moved successfully. C:\Users\Aneta\AppData\Local\TempuK3080.html moved successfully. C:\Users\Aneta\AppData\Local\TempUo2604.html moved successfully. C:\Users\Aneta\AppData\Local\TempvK3080.html moved successfully. C:\Users\Aneta\AppData\Local\TempVo3988.html moved successfully. C:\Users\Aneta\AppData\Local\TempVP3532.html moved successfully. C:\Users\Aneta\AppData\Local\TempvR3096.html moved successfully. C:\Users\Aneta\AppData\Local\Tempvs1740.html moved successfully. C:\Users\Aneta\AppData\Local\TempWc2832.html moved successfully. C:\Users\Aneta\AppData\Local\TempwS1564.html moved successfully. C:\Users\Aneta\AppData\Local\TempXb2740.html moved successfully. C:\Users\Aneta\AppData\Local\TempXK3200.html moved successfully. C:\Users\Aneta\AppData\Local\Tempxlg308.html moved successfully. C:\Users\Aneta\AppData\Local\TempXo2292.html moved successfully. C:\Users\Aneta\AppData\Local\TempXV2880.html moved successfully. C:\Users\Aneta\AppData\Local\TempXY2364.html moved successfully. C:\Users\Aneta\AppData\Local\TempyF1952.html moved successfully. C:\Users\Aneta\AppData\Local\Tempyr1088.html moved successfully. C:\Users\Aneta\AppData\Local\TempyX1740.html moved successfully. C:\Users\Aneta\AppData\Local\TempzG3848.html moved successfully. C:\Users\Aneta\AppData\Local\Tempzi8884.html moved successfully. C:\Users\Aneta\AppData\Local\TempzL2832.html moved successfully. C:\Users\Aneta\AppData\Local\Tempzl3216.html moved successfully. C:\Users\Aneta\AppData\Local\TempZq1548.html moved successfully. C:\Users\Aneta\AppData\Local\TempZZ6668.html moved successfully. C:\Users\Aneta\AppData\Roaming\ArcaBit\AntiSpam\History folder moved successfully. C:\Users\Aneta\AppData\Roaming\ArcaBit\AntiSpam folder moved successfully. C:\Users\Aneta\AppData\Roaming\ArcaBit folder moved successfully. C:\Users\Aneta\AppData\LocalLow\PriceGong\Data folder moved successfully. C:\Users\Aneta\AppData\LocalLow\PriceGong folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\properties folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\warshak folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\underover folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\turnaround folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\tunnellevel folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\triangle folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\tiltspiral folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\targetglyph folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\squaresville folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\spiral folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\spaceinvaders folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\space folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\snakepit folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\serpents folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\riverbed folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\perm_thumbnails folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\overunder folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\loopy folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\longrange folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\inversespiral folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\groovefest folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\coaster folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\claw folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels\Blackswirley folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe\levels folder moved successfully. C:\Program Files (x86)\PopCap Games\Zuma Deluxe folder moved successfully. C:\Program Files (x86)\PopCap Games folder moved successfully. OTL by OldTimer - Version 3.2.27.0 log created on 09132011_125207