========== PROCESSES ========== All processes killed ========== FILES ========== [color=#A23BEC]< netsh winsock reset /C >[/color] C:\Documents and Settings\JA\Pulpit\cmd.bat deleted successfully. C:\Documents and Settings\JA\Pulpit\cmd.txt deleted successfully. [color=#A23BEC]< fsutil reparsepoint delete C:\Windows\$NtUninstallKB8442$ /C >[/color] BˆĄd: Plik lub katalog nie jest punktem ponownej analizy. C:\Documents and Settings\JA\Pulpit\cmd.bat deleted successfully. C:\Documents and Settings\JA\Pulpit\cmd.txt deleted successfully. C:\Windows\$NtUninstallKB8442$\942925622\U folder moved successfully. C:\Windows\$NtUninstallKB8442$\942925622\L folder moved successfully. C:\Windows\$NtUninstallKB8442$\942925622 folder moved successfully. Folder move failed. C:\Windows\$NtUninstallKB8442$ scheduled to be moved on reboot. C:\Program Files\Mozilla FireFox\Components\AskSearch.js moved successfully. C:\Program Files\Application Updater folder moved successfully. C:\Documents and Settings\Kasia\Dane aplikacji\pdfforge\temp folder moved successfully. C:\Documents and Settings\Kasia\Dane aplikacji\pdfforge\res folder moved successfully. C:\Documents and Settings\Kasia\Dane aplikacji\pdfforge folder moved successfully. C:\Documents and Settings\Kasia\Dane aplikacji\Search Settings\temp folder moved successfully. C:\Documents and Settings\Kasia\Dane aplikacji\Search Settings\res folder moved successfully. C:\Documents and Settings\Kasia\Dane aplikacji\Search Settings\kb130\temp folder moved successfully. C:\Documents and Settings\Kasia\Dane aplikacji\Search Settings\kb130 folder moved successfully. C:\Documents and Settings\Kasia\Dane aplikacji\Search Settings folder moved successfully. C:\Documents and Settings\JA\Dane aplikacji\QuickStoresToolbar folder moved successfully. [color=#A23BEC]< rd /s /q C:\32788R22FWJFW /C >[/color] C:\Documents and Settings\JA\Pulpit\cmd.bat deleted successfully. C:\Documents and Settings\JA\Pulpit\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q "C:\Documents and Settings\JA\DoctorWeb" /C >[/color] C:\Documents and Settings\JA\Pulpit\cmd.bat deleted successfully. C:\Documents and Settings\JA\Pulpit\cmd.txt deleted successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF739809-1C6C-47C0-85B9-569DBB141420}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found. ========== OTL ========== Error: Unable to stop service 95331952! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\95331952 deleted successfully. C:\WINDOWS\system32\drivers\95331952.sys moved successfully. Error: Unable to stop service 56451071! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\56451071 deleted successfully. C:\WINDOWS\system32\drivers\56451071.sys moved successfully. Error: Unable to stop service 46026056! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\46026056 deleted successfully. C:\WINDOWS\system32\drivers\46026056.sys moved successfully. Error: Unable to stop service 40865138! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\40865138 deleted successfully. C:\WINDOWS\system32\drivers\40865138.sys moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon\ deleted successfully. C:\WINDOWS\system32\klogon.dll moved successfully. OTL by OldTimer - Version 3.2.31.0 log created on 12022011_221518 Files\Folders moved on Reboot... Folder move failed. C:\Windows\$NtUninstallKB8442$ scheduled to be moved on reboot. Registry entries deleted on Reboot...