All processes killed ========== REGISTRY ========== Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search\ deleted successfully. ========== FILES ========== C:\Users\san\AppData\Roaming\skype.dat moved successfully. C:\Users\san\AppData\Roaming\skype.ini moved successfully. C:\ProgramData\dsgsdgdsgdsgw.pad moved successfully. C:\Users\san\Local Settings\Application Data\Google\Chrome\User Data\Default\User StyleSheets folder moved successfully. C:\Users\san\Local Settings\Application Data\Google\Chrome\User Data\Default folder moved successfully. C:\Users\san\Local Settings\Application Data\Google\Chrome\User Data folder moved successfully. C:\Users\san\Local Settings\Application Data\Google\Chrome folder moved successfully. C:\Users\san\Local Settings\Application Data\Google folder moved successfully. C:\Users\san\Local Settings\Application Data folder moved successfully. C:\Users\san\Local Settings folder moved successfully. C:\Users\san\AppData\Roaming\Babylon folder moved successfully. C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml moved successfully. C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml moved successfully. C:\Users\san\AppData\Roaming\Ad-Aware Antivirus\Logs\20130402T193329.463531PID3980 folder moved successfully. C:\Users\san\AppData\Roaming\Ad-Aware Antivirus\Logs\20130402T191904.840077PID4652 folder moved successfully. C:\Users\san\AppData\Roaming\Ad-Aware Antivirus\Logs\20130402T191843.229841PID4460 folder moved successfully. C:\Users\san\AppData\Roaming\Ad-Aware Antivirus\Logs\20130402T191829.359048PID1896 folder moved successfully. C:\Users\san\AppData\Roaming\Ad-Aware Antivirus\Logs\20130402T191822.202639PID3200 folder moved successfully. C:\Users\san\AppData\Roaming\Ad-Aware Antivirus\Logs\20130402T191815.484255PID3548 folder moved successfully. C:\Users\san\AppData\Roaming\Ad-Aware Antivirus\Logs folder moved successfully. C:\Users\san\AppData\Roaming\Ad-Aware Antivirus folder moved successfully. C:\ProgramData\Ad-Aware Antivirus\Logs\20130402T191736.044049PID1852 folder moved successfully. C:\ProgramData\Ad-Aware Antivirus\Logs folder moved successfully. C:\ProgramData\Ad-Aware Antivirus folder moved successfully. C:\ProgramData\Lavasoft\AntiMalware\Quarantine folder moved successfully. C:\ProgramData\Lavasoft\AntiMalware\Logs folder moved successfully. C:\ProgramData\Lavasoft\AntiMalware\History folder moved successfully. C:\ProgramData\Lavasoft\AntiMalware\Events folder moved successfully. C:\ProgramData\Lavasoft\AntiMalware\Downloads folder moved successfully. C:\ProgramData\Lavasoft\AntiMalware folder moved successfully. C:\ProgramData\Lavasoft folder moved successfully. C:\Program Files (x86)\Ad-Aware Antivirus\Definitions\WDBF folder moved successfully. C:\Program Files (x86)\Ad-Aware Antivirus\Definitions\Staging folder moved successfully. C:\Program Files (x86)\Ad-Aware Antivirus\Definitions\LKGD folder moved successfully. C:\Program Files (x86)\Ad-Aware Antivirus\Definitions folder moved successfully. C:\Program Files (x86)\Ad-Aware Antivirus\cart\definitions folder moved successfully. C:\Program Files (x86)\Ad-Aware Antivirus\cart folder moved successfully. C:\Program Files (x86)\Ad-Aware Antivirus folder moved successfully. C:\found.000\dir0001.chk folder moved successfully. C:\found.000\dir0000.chk\JumpListIconsOld folder moved successfully. C:\found.000\dir0000.chk folder moved successfully. C:\found.000 folder moved successfully. C:\found.001\dir0003.chk folder moved successfully. C:\found.001\dir0002.chk folder moved successfully. C:\found.001\dir0001.chk folder moved successfully. C:\found.001\dir0000.chk folder moved successfully. C:\found.001 folder moved successfully. C:\found.002\dir0000.chk folder moved successfully. C:\found.002 folder moved successfully. ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry value HKEY_USERS\S-1-5-21-3202732050-771554603-589635687-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ not found. Registry key HKEY_USERS\S-1-5-21-3202732050-771554603-589635687-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0D7562AE-8EF6-416d-A838-AB665251703A}\ not found. Registry key HKEY_USERS\S-1-5-21-3202732050-771554603-589635687-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_USERS\S-1-5-21-3202732050-771554603-589635687-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found. Registry key HKEY_USERS\S-1-5-21-3202732050-771554603-589635687-1000\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ deleted successfully. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 16555685 bytes ->Temporary Internet Files folder emptied: 86807 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 913905 bytes ->Flash cache emptied: 75 bytes User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Gość ->Temp folder emptied: 893125103 bytes ->Temporary Internet Files folder emptied: 354945325 bytes ->Java cache emptied: 72976 bytes ->FireFox cache emptied: 1132067065 bytes ->Flash cache emptied: 16388016 bytes User: Public User: san ->Temp folder emptied: 457234351 bytes ->Temporary Internet Files folder emptied: 62624873 bytes ->Java cache emptied: 228165216 bytes ->FireFox cache emptied: 70984340 bytes ->Google Chrome cache emptied: 13685567 bytes ->Flash cache emptied: 3140699 bytes User: San_2 ->Temp folder emptied: 169793370 bytes ->Temporary Internet Files folder emptied: 97422608 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 303291820 bytes ->Flash cache emptied: 15308 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 58561380 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 984969 bytes RecycleBin emptied: 484104 bytes Total Files Cleaned = 3,701.00 mb OTL by OldTimer - Version 3.2.69.0 log created on 04252013_232908 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...