========== FILES ========== H:\RECYCLER folder moved successfully. H:\RECYCLER.lnk moved successfully. H:\od kamila.lnk moved successfully. H:\$RECYCLE.BIN.lnk moved successfully. H:\inventor.lnk moved successfully. H:\album.lnk moved successfully. H:\mama2.lnk moved successfully. H:\System Volume Information.lnk moved successfully. H:\zdjecia piotra.lnk moved successfully. H:\paralotnie.lnk moved successfully. H:\nananaa.lnk moved successfully. H:\nowe.lnk moved successfully. H:\sesja.lnk moved successfully. [color=#A23BEC]< attrib /d /s -s -h H:\* /C >[/color] c:\Users\Piotr\Downloads\cmd.bat deleted successfully. c:\Users\Piotr\Downloads\cmd.txt deleted successfully. C:\Users\Piotr\AppData\LocalLow\AskToolbar folder moved successfully. C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\xuhefz41.default\searchplugins\MyStart Search.xml moved successfully. ========== OTL ========== Prefs.js: "MyStart Search" removed from browser.search.defaultenginename Prefs.js: "MyStart Search" removed from browser.search.selectedEngine Prefs.js: "http://mystart.incredimail.com/mb59?u=92259949699575635" removed from browser.startup.homepage ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2C635B05-1B48-4FB9-AAB4-A3B303BF5526} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C635B05-1B48-4FB9-AAB4-A3B303BF5526}\ not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{531D999A-0F69-4AD3-A585-592719728A3E} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{531D999A-0F69-4AD3-A585-592719728A3E}\ not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{AB91C653-9EEF-4036-99A0-E47D5F0AEF1C}C:\windows\system32\winn\winn.exe deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Classes\Conduit.Engine\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2878731\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Conduit\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\AppDataLow\Software\AskToolbar\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. OTL by OldTimer - Version 3.2.31.0 log created on 10202011_112106