All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-2558228922-1657107745-1823895112-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Tok-Cirrhatus not found. C:\Users\Iwonka\AppData\Local\smss.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ROC_ROC_NT not found. C:\Program Files\AVG Secure Search\ROC_ROC_NT.exe moved successfully. Registry key HKEY_USERS\S-1-5-21-2558228922-1657107745-1823895112-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. ========== FILES ========== File\Folder C:\Users\Iwonka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Empty.pif not found. C:\Users\Iwonka\AppData\Local\csrss.exe moved successfully. C:\Users\Iwonka\AppData\Local\inetinfo.exe moved successfully. C:\Users\Iwonka\AppData\Local\lsass.exe moved successfully. C:\Users\Iwonka\AppData\Local\services.exe moved successfully. C:\Users\Iwonka\AppData\Local\winlogon.exe moved successfully. C:\Users\Iwonka\AppData\Local\Bron.tok-14-11 folder moved successfully. C:\Users\Iwonka\AppData\Local\Bron.tok-14-12 folder moved successfully. C:\Users\Iwonka\AppData\Local\Bron.tok-14-13 folder moved successfully. C:\Users\Iwonka\AppData\Local\Bron.tok-14-14 folder moved successfully. C:\Users\Iwonka\AppData\Local\Bron.tok-14-15 folder moved successfully. C:\Users\Iwonka\AppData\Local\Kosong.Bron.Tok.txt moved successfully. C:\Users\Iwonka\AppData\Local\Loc.Mail.Bron.Tok folder moved successfully. C:\Users\Iwonka\AppData\Local\Ok-SendMail-Bron-tok folder moved successfully. C:\Users\Iwonka\AppData\Local\Babylon\Setup folder moved successfully. C:\Users\Iwonka\AppData\Local\Babylon folder moved successfully. C:\Users\Iwonka\AppData\Roaming\Babylon folder moved successfully. C:\ProgramData\Babylon folder moved successfully. C:\Program Files\AVG Secure Search folder moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Iwonka ->Temp folder emptied: 342921177 bytes ->Temporary Internet Files folder emptied: 54537979 bytes ->Java cache emptied: 744800 bytes ->FireFox cache emptied: 14523302 bytes ->Flash cache emptied: 130721 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 28149759 bytes RecycleBin emptied: 816601592 bytes Total Files Cleaned = 1 199,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 07152013_201830 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...