All processes killed ========== REGISTRY ========== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winmgmt\Parameters\\"ServiceDll"|hex(2):"%SystemRoot%\system32\wbem\WMIsvc.dll" /E : value set successfully! Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ctfmon.exe deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\Yandex\ deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9A551F80-CCEE-478B-B242-8AD15CE9E3EC}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9A551F80-CCEE-478B-B242-8AD15CE9E3EC}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Google\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Wikipedia\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Yahoo\ deleted successfully. ========== FILES ========== C:\ProgramData\bb1e.dat moved successfully. File move failed. C:\ProgramData\8fonih.dat scheduled to be moved on reboot. C:\ProgramData\e1bb.pad moved successfully. C:\ProgramData\hinof8.js moved successfully. C:\ProgramData\hinof8.pad moved successfully. C:\ProgramData\gla.pad moved successfully. C:\ProgramData\rundll32.exe moved successfully. C:\ProgramData\lsass.exe moved successfully. C:\Users\Jarek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 58264 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Jarek ->Temp folder emptied: 175991273 bytes ->Temporary Internet Files folder emptied: 178754285 bytes ->Java cache emptied: 3500887 bytes ->FireFox cache emptied: 487373838 bytes ->Opera cache emptied: 5200730 bytes ->Flash cache emptied: 7615039 bytes User: Public User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 57294202 bytes RecycleBin emptied: 780325292 bytes Total Files Cleaned = 1 618,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 05092013_235619 Files\Folders moved on Reboot... C:\ProgramData\8fonih.dat moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...