All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TabbtnEx deleted successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3565\TabbtnEx.exe moved successfully. Prefs.js: "Search the web (Babylon)" removed from browser.search.defaultenginename Prefs.js: "Search the web (Babylon)" removed from browser.search.order.1 Prefs.js: "Search the web (Babylon)" removed from browser.search.selectedEngine Prefs.js: "http://search.babylon.com/?affID=110819&tt=100512_1_&babsrc=KW_ss&mntrId=ac540c830000000000000018f3cd61b0&q=" removed from keyword.URL Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found. Error: No service named mbr was found to stop! Service\Driver key mbr not found. File C:\ComboFix\mbr.sys not found. Service hwdatacard stopped successfully! Service hwdatacard deleted successfully! File system32\DRIVERS\ewusbmdm.sys not found. Service catchme stopped successfully! Service catchme deleted successfully! File C:\DOCUME~1\Admin\USTAWI~1\Temp\catchme.sys not found. ========== FILES ========== C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3565 folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\hellomoto folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lmcezdey.default\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lmcezdey.default\extensions\ffxtlbr@babylon.com\defaults folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lmcezdey.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lmcezdey.default\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lmcezdey.default\extensions\ffxtlbr@babylon.com\content folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lmcezdey.default\extensions\ffxtlbr@babylon.com\components folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lmcezdey.default\extensions\ffxtlbr@babylon.com folder moved successfully. C:\Program Files\mozilla firefox\searchplugins\babylon.xml moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: Admin ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Java cache emptied: 653136 bytes ->FireFox cache emptied: 63982994 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 706 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Java cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 62,00 mb OTL by OldTimer - Version 3.2.54.0 log created on 07182012_091813 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...