All processes killed ========== OTL ========== Registry key HKEY_USERS\S-1-5-21-329068152-1614895754-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_USERS\S-1-5-21-329068152-1614895754-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com deleted successfully. File D:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird not found. Registry value HKEY_USERS\S-1-5-21-329068152-1614895754-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CBE3B7C-1E47-477E-A7DD-396DB0476E29}\ not found. Registry value HKEY_USERS\S-1-5-21-329068152-1614895754-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run\\dso32 deleted successfully. Registry value HKEY_USERS\S-1-5-21-329068152-1614895754-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run\\Pokki deleted successfully. Registry value HKEY_USERS\S-1-5-21-329068152-1614895754-725345543-1003\Software\Microsoft\Windows\CurrentVersion\RunOnce\\048D6875529423690000048D63EF2AA5 not found. File D:\Documents and Settings\All Users\Dane aplikacji\048D6875529423690000048D63EF2AA5\048D6875529423690000048D63EF2AA5.exe not found. Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Service psdvdisk stopped successfully! Service psdvdisk deleted successfully! File D:\WINDOWS\system32\Drivers\psdvdisk.sys not found. Service psdfilter stopped successfully! Service psdfilter deleted successfully! File D:\WINDOWS\system32\Drivers\psdfilter.sys not found. Service NTIDrvr stopped successfully! Service NTIDrvr deleted successfully! File D:\Documents and Settings\Marzena\NTIDrvr.sys not found. Service eLock2FSCTLDriver stopped successfully! Service eLock2FSCTLDriver deleted successfully! File D:\WINDOWS\system32\eLock2FSCTLDriver.sys not found. Service eLock2BurnerLockDriver stopped successfully! Service eLock2BurnerLockDriver deleted successfully! File D:\WINDOWS\system32\eLock2BurnerLockDriver.sys not found. ========== FILES ========== C:\autorun.inf moved successfully. D:\autorun.inf moved successfully. E:\autorun.inf moved successfully. D:\WINDOWS\tasks\At1.job moved successfully. D:\WINDOWS\tasks\EPUpdater.job moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\048D6875529423690000048D63EF2AA5 folder moved successfully. File\Folder D:\Documents and Settings\Marzena\Menu Start\Programy\System Care Antivirus not found. D:\Documents and Settings\All Users\Dane aplikacji\AVG10\SetupBackup folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\AVG10\scanlogs folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\AVG10\log folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\7204865c04862369 folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\56b8b001b8afde2d folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\3cecc338ecc2eaea folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\AVG10 folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\Babylon folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\Common Files folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\ESET\ESET NOD32 Antivirus\Stats folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\ESET\ESET NOD32 Antivirus folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\ESET folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\MFAData\pack\bins folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\MFAData\pack folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\MFAData\mkt\res folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\MFAData\mkt\pl folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\MFAData\mkt\hi folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\MFAData\mkt folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\MFAData\logs folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\MFAData folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\TEMP folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\tmp\order folder moved successfully. D:\Documents and Settings\All Users\Dane aplikacji\tmp folder moved successfully. D:\Documents and Settings\Gość\Dane aplikacji\facemoods.com\facemoods folder moved successfully. D:\Documents and Settings\Gość\Dane aplikacji\facemoods.com folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\AVG10\cfgall folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\AVG10 folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\BabSolution\Shared folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\BabSolution\CR folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\BabSolution folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\Babylon folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\facemoods.com\facemoods folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\facemoods.com folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\OpenCandy\OpenCandy_D0552166912849B4BCE8925EA8C3BA2E folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\OpenCandy\D0552166912849B4BCE8925EA8C3BA2E folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\OpenCandy folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\PriceGong\Data folder moved successfully. D:\Documents and Settings\Marzena\Dane aplikacji\PriceGong folder moved successfully. D:\Program Files\mozilla firefox\searchplugins\babylon.xml moved successfully. [color=#A23BEC]< netsh firewall reset /C >[/color] Ok. D:\Documents and Settings\Marzena\Downloads\cmd.bat deleted successfully. D:\Documents and Settings\Marzena\Downloads\cmd.txt deleted successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 846014 bytes ->Temporary Internet Files folder emptied: 427553 bytes ->FireFox cache emptied: 2912737 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Gość ->Temp folder emptied: 866610 bytes ->Temporary Internet Files folder emptied: 18153267 bytes ->Flash cache emptied: 725 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 33228 bytes User: Marzena ->Temp folder emptied: 23939051 bytes ->Temporary Internet Files folder emptied: 217936256 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 78044843 bytes ->Flash cache emptied: 66772 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 10741020 bytes RecycleBin emptied: 2364310 bytes Total Files Cleaned = 340,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 06272013_190307