All processes killed ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@mywebsearch.com/Plugin\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com deleted successfully. File C:\Program Files (x86)\MyWebSearch\bar\1.bin not found. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\statuswinks@StatusWinks deleted successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks\chrome\skin folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks\chrome\content\mz folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks\chrome\content folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks\chrome folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks folder moved successfully. Registry value HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\statuswinks@StatusWinks deleted successfully. File C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks not found. Registry value HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\specialsavings@vshsolutions.com deleted successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\specialsavings@vshsolutions.com\defaults\preferences folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\specialsavings@vshsolutions.com\defaults folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\specialsavings@vshsolutions.com\content folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Mozilla\Extensions\specialsavings@vshsolutions.com folder moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{56256A51-B582-467e-B8D4-7786EDA79AE0}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{03EB0E9C-7A91-4381-A220-9B52B641CDB1} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}\ not found. Registry key HKEY_USERS\S-1-5-21-2609196990-4100073175-631784037-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bb184e6d-26d1-461a-9226-b93ca8da2af9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bb184e6d-26d1-461a-9226-b93ca8da2af9}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{bb184e6d-26d1-461a-9226-b93ca8da2af9}\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-2609196990-4100073175-631784037-1000\SOFTWARE\Classes\CLSID\{bb184e6d-26d1-461a-9226-b93ca8da2af9}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_USERS\S-1-5-21-2609196990-4100073175-631784037-1002\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_USERS\S-1-5-21-2609196990-4100073175-631784037-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\spchecker deleted successfully. File move failed. C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel® Turbo Boost Technology Monitor 2.0.lnk scheduled to be moved on reboot. File move failed. C:\Users\Dzieciaki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel® Turbo Boost Technology Monitor 2.0.lnk scheduled to be moved on reboot. Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-2609196990-4100073175-631784037-1000\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~3\bprote~1\20392~1.106\protec~1.dll deleted successfully. ========== FILES ========== C:\Users\Dzieciaki\AppData\Roaming\Babylon folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\BabSolution\Shared folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\BabSolution folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Babylon folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\DealPly\UpdateProc folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\DealPly folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\DownloaderGold\temporary folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\DownloaderGold\downloads folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\DownloaderGold folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\DSite\UpdateProc folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\DSite folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\File Scout folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\GoD folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\OpenCandy\OpenCandy_107523C17DA44A848C7D327743FE5F48 folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\OpenCandy\107523C17DA44A848C7D327743FE5F48 folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\OpenCandy folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\SpecialSavings folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\StatusWinks folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Yontoo\dat\update folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Yontoo\dat folder moved successfully. C:\Users\Krzysztof\AppData\Roaming\Yontoo folder moved successfully. C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml moved successfully. [color=#A23BEC]< netsh advfirewall reset /C >[/color] Ok. D:\cmd.bat deleted successfully. D:\cmd.txt deleted successfully. ========== REGISTRY ========== HKEY_USERS\S-1-5-21-2609196990-4100073175-631784037-1002\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 2347826 bytes ->Temporary Internet Files folder emptied: 960034 bytes ->Google Chrome cache emptied: 20500110 bytes User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33488 bytes ->Flash cache emptied: 56504 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Dzieciaki ->Temp folder emptied: 94419663 bytes ->Temporary Internet Files folder emptied: 25082371 bytes ->Java cache emptied: 0 bytes ->Google Chrome cache emptied: 365808435 bytes ->Flash cache emptied: 1067 bytes User: Krzysztof ->Temp folder emptied: 304617314 bytes ->Temporary Internet Files folder emptied: 5699180 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 13729126 bytes ->Google Chrome cache emptied: 199289305 bytes ->Apple Safari cache emptied: 0 bytes ->Flash cache emptied: 57557 bytes User: Public User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 37010395 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42321122 bytes RecycleBin emptied: 846426993 bytes Total Files Cleaned = 1 868,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 06022013_162324 Files\Folders moved on Reboot... File\Folder C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel® Turbo Boost Technology Monitor 2.0.lnk not found! File\Folder C:\Users\Dzieciaki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel® Turbo Boost Technology Monitor 2.0.lnk not found! C:\Users\Krzysztof\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\Krzysztof\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully. File\Folder C:\Windows\temp\TMP0000000150F6256CD0D31D32 not found! PendingFileRenameOperations files... Registry entries deleted on Reboot...