All processes killed ========== OTL ========== Prefs.js: "Hotspot Shield Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1561552&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RstrtMgr deleted successfully. C:\Documents and Settings\Czarnecki\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\1194\RstrtMgr.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WinampAgent deleted successfully. Service taphss stopped successfully! Service taphss deleted successfully! C:\WINDOWS\system32\drivers\taphss.sys moved successfully. Service xhunter1 stopped successfully! Service xhunter1 deleted successfully! File C:\WINDOWS\xhunter1.sys not found. Service XDva398 stopped successfully! Service XDva398 deleted successfully! File C:\WINDOWS\system32\XDva398.sys not found. Service XDva397 stopped successfully! Service XDva397 deleted successfully! File C:\WINDOWS\system32\XDva397.sys not found. Service WPRO_40_1123 stopped successfully! Service WPRO_40_1123 deleted successfully! File system32\drivers\WPRO_40_1123.sys not found. Service vtany stopped successfully! Service vtany deleted successfully! File C:\WINDOWS\vtany.sys not found. Service EagleXNt stopped successfully! Service EagleXNt deleted successfully! File C:\WINDOWS\system32\drivers\EagleXNt.sys not found. Service DAUpdaterSvc stopped successfully! Service DAUpdaterSvc deleted successfully! File D:\Dragon Age not found. ========== FILES ========== C:\Documents and Settings\Czarnecki\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\1194 folder moved successfully. C:\Documents and Settings\Czarnecki\Dane aplikacji\hellomoto folder moved successfully. C:\Documents and Settings\Czarnecki\Dane aplikacji\Mozilla\Firefox\Profiles\35p6gjn8.default\searchplugins\conduit.xml moved successfully. C:\Documents and Settings\Czarnecki\Dane aplikacji\Mozilla\Firefox\Profiles\35p6gjn8.default\searchplugins\daemon-search.xml moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 230 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->FireFox cache emptied: 19267388 bytes ->Flash cache emptied: 42112 bytes User: Administrator.CZARNECK-A5FCE2 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->FireFox cache emptied: 13443285 bytes ->Flash cache emptied: 42112 bytes User: All Users User: Czarnecki ->Temp folder emptied: 3466354580 bytes ->Temporary Internet Files folder emptied: 82987833 bytes ->Java cache emptied: 21142681 bytes ->FireFox cache emptied: 849335976 bytes ->Flash cache emptied: 229150 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41620 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 402 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41620 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2846857 bytes %systemroot%\System32 .tmp files removed: 3240580 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 283625286 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 4 523,00 mb OTL by OldTimer - Version 3.2.61.0 log created on 09052012_222656 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...