========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\\searchpredict@speedbit.com deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\ not found. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\\{472734EA-242A-422b-ADF8-83D1E48CC825} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472734EA-242A-422b-ADF8-83D1E48CC825}\ not found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\"Tabs"|"res://ieframe.dll/tabswelcome.htm" /E : value set successfully! Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{603C4CC9-5DC6-4C44-873F-8281509DF953}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{603C4CC9-5DC6-4C44-873F-8281509DF953}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{384FE458-A963-450D-9187-EEFF81913FD0}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Classes\Conduit.Engine\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3031607\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Conduit\ deleted successfully. ========== FILES ========== C:\Users\Andrzej\AppData\Roaming\Mozilla\Firefox\Profiles\x84iee44.default\searchplugins\conduit.xml moved successfully. C:\Users\Andrzej\AppData\Roaming\Mozilla\Firefox\Profiles\x84iee44.default\searchplugins\speedbit.xml moved successfully. C:\Users\Andrzej\AppData\Local\Conduit folder moved successfully. C:\Users\Andrzej\AppData\LocalLow\Conduit\Community Alerts\Log folder moved successfully. C:\Users\Andrzej\AppData\LocalLow\Conduit\Community Alerts folder moved successfully. C:\Users\Andrzej\AppData\LocalLow\Conduit folder moved successfully. C:\Users\Andrzej\AppData\Roaming\OpenCandy\OpenCandy_3D769CC76CD24F18B3699F44869F204A folder moved successfully. C:\Users\Andrzej\AppData\Roaming\OpenCandy folder moved successfully. C:\Users\Andrzej\AppData\Local\OpenCandy folder moved successfully. C:\Users\Andrzej\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\include_files folder moved successfully. C:\Users\Andrzej\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}\cache folder moved successfully. C:\Users\Andrzej\AppData\LocalLow\Toolbar4\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} folder moved successfully. C:\Users\Andrzej\AppData\LocalLow\Toolbar4 folder moved successfully. File move failed. C:\Program Files\mozilla firefox\plugins\npdap.dll scheduled to be moved on reboot. ========== OTL ========== Prefs.js: "SFT_eng7 Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3031607&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "SFT_eng7 Customized Web Search" removed from browser.search.selectedEngine Service hpqcxs08 stopped successfully! Service hpqcxs08 deleted successfully! Service GDPkIcpt stopped successfully! Service GDPkIcpt deleted successfully! C:\Windows\System32\drivers\PktIcpt.sys moved successfully. ========== SERVICES/DRIVERS ========== Service szserver stopped successfully! Service szserver deleted successfully! Service SpiderG3 stopped successfully! Service SpiderG3 deleted successfully! Service kncyasbj stopped successfully! Service kncyasbj deleted successfully! Service 5016 stopped successfully! Service 5016 deleted successfully! OTL by OldTimer - Version 3.2.31.0 log created on 10302011_141811 Files\Folders moved on Reboot... C:\Program Files\mozilla firefox\plugins\npdap.dll moved successfully. Registry entries deleted on Reboot...