All processes killed ========== OTL ========== Service MyWebSearchService stopped successfully! Service MyWebSearchService deleted successfully! C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwssvc.exe moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. Registry value HKEY_USERS\S-1-5-21-904257741-2250506218-2533763600-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00A6FAF6-072E-44cf-8957-5838F569A31D} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found. Registry key HKEY_USERS\S-1-5-21-904257741-2250506218-2533763600-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_USERS\S-1-5-21-904257741-2250506218-2533763600-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ not found. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0BF43445-2F28-4351-9252-17FE6E806AA0} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0BF43445-2F28-4351-9252-17FE6E806AA0}\ not found. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0BF43445-2F28-4351-9252-17FE6E806AA0} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0BF43445-2F28-4351-9252-17FE6E806AA0}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}\ not found. Registry value HKEY_USERS\S-1-5-21-904257741-2250506218-2533763600-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found. Registry value HKEY_USERS\S-1-5-21-904257741-2250506218-2533763600-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\My Web Search Bar Search Scope Monitor deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin deleted successfully. C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsoemon.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-904257741-2250506218-2533763600-1000\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin deleted successfully. File C:\PROGRA~2\MYWEBS~1\bar\1.bin\mwsoemon.exe not found. Registry value HKEY_USERS\S-1-5-21-904257741-2250506218-2533763600-1000\Software\Microsoft\Windows\CurrentVersion\Run\\RESTART_STICKY_NOTES deleted successfully. Registry value HKEY_USERS\S-1-5-21-904257741-2250506218-2533763600-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Twoje TVN24 deleted successfully. C:\Users\szczuro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SAM.lnk moved successfully. 64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Search the Web\ deleted successfully. File C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Search the Web\ not found. File C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html not found. ========== FILES ========== C:\PROGRA~2\MyWebSearch\bar\Settings folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\Overlay folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\Notifier folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\Message folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\IE9Mesg folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\icons folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\History folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\Game folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\Avatar folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\1.bin\ThirdPartyInstallers folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\1.bin\chrome folder moved successfully. C:\PROGRA~2\MyWebSearch\bar\1.bin folder moved successfully. C:\PROGRA~2\MyWebSearch\bar folder moved successfully. C:\PROGRA~2\MyWebSearch folder moved successfully. C:\Program Files (x86)\Mozilla Firefox\searchplugins folder moved successfully. C:\Program Files (x86)\Mozilla Firefox\extensions folder moved successfully. C:\Program Files (x86)\Mozilla Firefox folder moved successfully. C:\Windows\SysWow64\searchplugins folder moved successfully. C:\Windows\SysWow64\Extensions folder moved successfully. C:\Windows\tasks\DSite.job moved successfully. C:\Users\szczuro\AppData\Roaming\Babylon folder moved successfully. C:\Users\szczuro\AppData\Roaming\DSite\UpdateProc folder moved successfully. C:\Users\szczuro\AppData\Roaming\DSite folder moved successfully. C:\Users\szczuro\AppData\Roaming\OpenCandy\OpenCandy_D3E9963B7FA549009B6AE97477510AF9 folder moved successfully. C:\Users\szczuro\AppData\Roaming\OpenCandy\D3E9963B7FA549009B6AE97477510AF9 folder moved successfully. C:\Users\szczuro\AppData\Roaming\OpenCandy folder moved successfully. C:\Users\szczuro\AppData\Roaming\Systweak\ASO 2 folder moved successfully. C:\Users\szczuro\AppData\Roaming\Systweak folder moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Mozilla\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mozilla.org\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public User: szczuro ->Temp folder emptied: 85683 bytes ->Temporary Internet Files folder emptied: 242332203 bytes ->Java cache emptied: 0 bytes ->Google Chrome cache emptied: 8403161 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3524 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes RecycleBin emptied: 4606280 bytes Total Files Cleaned = 244,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 06032013_003643 Files\Folders moved on Reboot... C:\Users\szczuro\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\szczuro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P795TTF0\xd_arbiter[1].htm moved successfully. C:\Users\szczuro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MXDKUAWB\xd_arbiter[1].htm moved successfully. C:\Users\szczuro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GFAEPCUV\like[1].htm moved successfully. C:\Users\szczuro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3ZEIHNC9\18260-wirus-facebook-flash-player[1].htm moved successfully. C:\Users\szczuro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3ZEIHNC9\fastbutton[1].htm moved successfully. C:\Users\szczuro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\7A7E08C8-3FF5-45F2-873D-A84D669DC82F.dat moved successfully. C:\Users\szczuro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully. C:\Users\szczuro\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...