All processes killed ========== OTL ========== Service Norton Internet Security stopped successfully! Service Norton Internet Security deleted successfully! File C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe not found. Service SRTSPX stopped successfully! Service SRTSPX deleted successfully! File C:\WINDOWS\System32\drivers\NIS\1000000.07D\SRTSPX.SYS not found. Service SRTSP stopped successfully! Service SRTSP deleted successfully! File C:\WINDOWS\System32\drivers\NIS\1000000.07D\SRTSP.SYS not found. Service SANDRA stopped successfully! Service SANDRA deleted successfully! File C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010c\WNt500x86\Sandra.sys not found. Error: No service named pavboot was found to stop! Service\Driver key pavboot not found. Service NAVEX15 stopped successfully! Service NAVEX15 deleted successfully! File C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVEX15.SYS not found. Service NAVENG stopped successfully! Service NAVENG deleted successfully! File C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20080829.024\NAVENG.SYS not found. Service EagleNT stopped successfully! Service EagleNT deleted successfully! File C:\WINDOWS\System32\drivers\EagleNT.sys not found. Service catchme stopped successfully! Service catchme deleted successfully! File C:\DOCUME~1\ppp\USTAWI~1\Temp\catchme.sys not found. Error: No service named a347bus was found to stop! Service\Driver key a347bus not found. File C:\WINDOWS\System32\DRIVERS\a347bus.sys not found. Prefs.js: "Web Search..." removed from browser.search.defaultenginename Prefs.js: "http://radiobar.toolbarhome.com/search.aspx?srch=ku&q=" removed from keyword.URL C:\Documents and Settings\ppp\Dane aplikacji\Mozilla\Firefox\Profiles\y8c35n6v.default\extensions\radiobar@toolbar\META-INF folder moved successfully. C:\Documents and Settings\ppp\Dane aplikacji\Mozilla\Firefox\Profiles\y8c35n6v.default\extensions\radiobar@toolbar\components folder moved successfully. C:\Documents and Settings\ppp\Dane aplikacji\Mozilla\Firefox\Profiles\y8c35n6v.default\extensions\radiobar@toolbar\chrome folder moved successfully. C:\Documents and Settings\ppp\Dane aplikacji\Mozilla\Firefox\Profiles\y8c35n6v.default\extensions\radiobar@toolbar folder moved successfully. C:\Documents and Settings\ppp\Dane aplikacji\Mozilla\Firefox\Profiles\y8c35n6v.default\searchplugins\daemon-search.xml moved successfully. C:\Documents and Settings\ppp\Dane aplikacji\Mozilla\Firefox\Profiles\y8c35n6v.default\searchplugins\web-search.xml moved successfully. Registry value HKEY_USERS\S-1-5-21-1645522239-562591055-839522115-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. C:\WINDOWS\system32\mgking0.dll moved successfully. C:\WINDOWS\system32\arking0.dll moved successfully. C:\WINDOWS\system32\arking.exe moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"SuperHidden"|dword:00000001 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"Hidden"|dword:00000001 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"ShowSuperHidden"|dword:00000001 /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\\"CheckedValue"|dword:00000001 /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\ deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\\@|"" /E : value set successfully! ========== COMMANDS ========== [EMPTYFLASH] User: Administrator User: All Users User: Default User User: LocalService User: NetworkService User: ppp ->Flash cache emptied: 5903 bytes Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 402 bytes User: ppp ->Temp folder emptied: 4998322 bytes ->Temporary Internet Files folder emptied: 5743965 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 122039094 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2304374 bytes %systemroot%\System32 .tmp files removed: 3131940 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 26953 bytes RecycleBin emptied: 1056248940 bytes Total Files Cleaned = 1 139,00 mb OTL by OldTimer - Version 3.2.18.0 log created on 12222010_134151 Files\Folders moved on Reboot... Registry entries deleted on Reboot...