All processes killed ========== OTL ========== C:\WINDOWS\system32\bkyefuod.dll moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\modules folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\lib\WINNT_x86-msvc\1.9.1 folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\lib\WINNT_x86-msvc folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\lib\Linux_x86-gcc3 folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\lib\Darwin_x86-gcc3 folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\lib folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\defaults\preferences folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\defaults folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\components folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\chrome\m\yoono.com folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\chrome\m folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\chrome folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66} folder moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\searchplugins\BearShareWebSearch.xml moved successfully. C:\Documents and Settings\Anetka\Dane aplikacji\Mozilla\Firefox\Profiles\xfg81lt5.default\searchplugins\iMeshWebSearch.xml moved successfully. C:\Program Files\Mozilla Firefox\searchplugins\BearShareWebSearch.xml moved successfully. C:\Program Files\Mozilla Firefox\searchplugins\iMeshWebSearch.xml moved successfully. Prefs.js: "iMesh Web Search" removed from browser.search.defaultenginename Prefs.js: "iMesh Web Search" removed from browser.search.order.1 Prefs.js: "http://search.imesh.com/" removed from browser.startup.homepage Prefs.js: {d9284e50-81fc-11da-a72b-0800200c9a66}:7.4.1 removed from extensions.enabledItems Prefs.js: "http://search.imesh.com/web?src=ffb&q=" removed from keyword.URL HKU\S-1-5-21-1757981266-484763869-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\SearchMigratedDefaultName| /E : value set successfully! HKU\S-1-5-21-1757981266-484763869-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\SearchMigratedDefaultURL| /E : value set successfully! HKU\S-1-5-21-1757981266-484763869-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Service USBModem stopped successfully! Service USBModem deleted successfully! File C:\WINDOWS\System32\DRIVERS\lgusbmodem.sys not found. Service UsbDiag stopped successfully! Service UsbDiag deleted successfully! File C:\WINDOWS\System32\DRIVERS\lgusbdiag.sys not found. Service usbbus stopped successfully! Service usbbus deleted successfully! File C:\WINDOWS\System32\DRIVERS\lgusbbus.sys not found. Service upperdev stopped successfully! Service upperdev deleted successfully! File C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys not found. Service hwdatacard stopped successfully! Service hwdatacard deleted successfully! File C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys not found. Service catchme stopped successfully! Service catchme deleted successfully! File C:\DOCUME~1\Anetka\USTAWI~1\Temp\catchme.sys not found. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Anetka ->Flash cache emptied: 4414683 bytes User: Default User User: LocalService User: NetworkService Total Flash Files Cleaned = 4,00 mb [EMPTYTEMP] User: All Users User: Anetka ->Temp folder emptied: 642814 bytes ->Temporary Internet Files folder emptied: 2273028 bytes ->Java cache emptied: 1076288 bytes ->FireFox cache emptied: 40907222 bytes ->Opera cache emptied: 3957710 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 49286 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2134153 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 1743200 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 50,00 mb OTL by OldTimer - Version 3.2.15.2 log created on 10162010_205150 Files\Folders moved on Reboot... Registry entries deleted on Reboot...