All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\themecpl deleted successfully. C:\Documents and Settings\Marek\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3356\themecpl.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HDD Regenerator deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS5.5ServiceManager deleted successfully. Registry value HKEY_USERS\S-1-5-21-796845957-261478967-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully. Registry value HKEY_USERS\S-1-5-21-796845957-261478967-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Run\\mxClock deleted successfully. Service SwitchBoard stopped successfully! Service SwitchBoard deleted successfully! File C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe not found. Starting removal of ActiveX control {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\ not found. Registry value HKEY_USERS\S-1-5-21-796845957-261478967-1801674531-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C94E154B-1459-4A47-966B-4B843BEFC7DB}\ not found. Registry value HKEY_USERS\S-1-5-21-796845957-261478967-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041D03E-FD4B-44E0-B742-2D9B88305F98} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}\ not found. Registry key HKEY_USERS\S-1-5-21-796845957-261478967-1801674531-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0D7562AE-8EF6-416d-A838-AB665251703A}\ not found. Registry key HKEY_USERS\S-1-5-21-796845957-261478967-1801674531-1004\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_USERS\S-1-5-21-796845957-261478967-1801674531-1004\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF739809-1C6C-47C0-85B9-569DBB141420}\ not found. Prefs.js: "BitTorrentBar Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "BitTorrentBar Customized Web Search" removed from browser.search.selectedEngine Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&q=" removed from keyword.URL ========== FILES ========== C:\Documents and Settings\Marek\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3356 folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\hellomoto folder moved successfully. C:\WINDOWS\System32\dll.dll moved successfully. C:\WINDOWS\System32\crt.dat moved successfully. C:\WINDOWS\System32\shimg.dll moved successfully. C:\WINDOWS\System32\mdhcp32.dll moved successfully. C:\WINDOWS\System32\ope2BB.exe moved successfully. C:\WINDOWS\System32\FileOps.exe moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\searchplugin folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\Plugins folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\modules folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\META-INF folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\defaults folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\components folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\chrome folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\ffxtlbr@Facemoods.com\defaults\preferences folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\ffxtlbr@Facemoods.com\defaults folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\ffxtlbr@Facemoods.com\components folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\extensions\ffxtlbr@Facemoods.com folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\Mozilla\Firefox\Profiles\29bywmo2.default\searchplugins\conduit.xml moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\BabylonToolbar\BabylonToolbar folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\BabylonToolbar folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\facemoods.com\facemoods folder moved successfully. C:\Documents and Settings\Marek\Dane aplikacji\facemoods.com folder moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 93191 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Kasia ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Marek ->Temp folder emptied: 2502069444 bytes ->Temporary Internet Files folder emptied: 182501761 bytes ->Java cache emptied: 3125483 bytes ->FireFox cache emptied: 98328893 bytes ->Flash cache emptied: 3162406 bytes User: NetworkService ->Temp folder emptied: 29288 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Paulina ->Temp folder emptied: 2043 bytes ->Temporary Internet Files folder emptied: 239128 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 40001143 bytes ->Flash cache emptied: 1582 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 36422 bytes RecycleBin emptied: 18452 bytes Total Files Cleaned = 2 699,00 mb OTL by OldTimer - Version 3.2.53.1 log created on 07082012_165228 Files\Folders moved on Reboot... File\Folder C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DF9DB5.tmp not found! File\Folder C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DF9DDC.tmp not found! File\Folder C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DF9EEC.tmp not found! File\Folder C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DF9EFA.tmp not found! File\Folder C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DFA004.tmp not found! File\Folder C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DFA010.tmp not found! C:\Documents and Settings\Marek\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. PendingFileRenameOperations files... File C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DF9DB5.tmp not found! File C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DF9DDC.tmp not found! File C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DF9EEC.tmp not found! File C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DF9EFA.tmp not found! File C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DFA004.tmp not found! File C:\Documents and Settings\Marek\Ustawienia lokalne\Temp\~DFA010.tmp not found! File C:\Documents and Settings\Marek\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat not found! Registry entries deleted on Reboot...