All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WPDShServiceObj deleted successfully. C:\Users\Monika\AppData\Local\Microsoft\Windows\4915\WPDShServiceObj.exe moved successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HideSCAHealth deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found. Prefs.js: "AVG Secure Search" removed from browser.search.defaultenginename Prefs.js: "https://isearch.avg.com/search?cid=%7B9726efb6-880a-46d5-8f53-0d003ac99d2e%7D&mid=706288cbaf2f47d0bdc1d16f64acd459-6eeba56c8d9911494aca205e8bf59ed300750455&ds=gm011&v=11.1.1.7&lang=pl&pr=sa&d=2012-05-30%2021%3A29%3A45&sap=ku&q=" removed from keyword.URL ========== FILES ========== C:\Users\Monika\AppData\Local\Microsoft\Windows\4915 folder moved successfully. C:\Users\Monika\AppData\Roaming\hellomoto folder moved successfully. C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml moved successfully. C:\Program Files\mozilla firefox\searchplugins\babylon.xml moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Monika ->Temp folder emptied: 238116914 bytes ->Temporary Internet Files folder emptied: 6700249 bytes ->Java cache emptied: 777040 bytes ->FireFox cache emptied: 55206601 bytes ->Flash cache emptied: 509 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 1216 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 287,00 mb OTL by OldTimer - Version 3.2.54.0 log created on 07202012_145340 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...