All processes killed ========== OTL ========== HKU\S-1-5-21-4190490682-169511088-2227682846-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Prefs.js: "Ask.com" removed from browser.search.defaultengine Prefs.js: "Ask.com" removed from browser.search.defaultenginename Prefs.js: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=" removed from browser.search.defaulturl Prefs.js: "Ask.com" removed from browser.search.order.1 Prefs.js: "Ask.com" removed from browser.search.selectedEngine Prefs.js: true removed from browser.search.useDBForOrder Prefs.js: "http://vshare.toolbarhome.com/?hp=df" removed from browser.startup.homepage Prefs.js: toolbar@ask.com:3.11.3.15590 removed from extensions.enabledItems Prefs.js: engine@conduit.com:3.2.5.2 removed from extensions.enabledItems Prefs.js: vshare@toolbar:1.0.0 removed from extensions.enabledItems Prefs.js: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=FXTV5&o=101703&locale=en_US&apn_uid=AFE5183A-F230-4566-ACD9-789D77B77D61&apn_ptnrs=F3&apn_sauid=C0CC64BD-5459-40CC-9CF1-5043138CE97A&apn_dtid=YYYYYYYYGB&q=" removed from keyword.URL C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\META-INF folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\chrome folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\searchplugin folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\META-INF folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\lib folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\defaults folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\components folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\chrome folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\DTToolbar@toolbarnet.com\components\Resources folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\DTToolbar@toolbarnet.com\components folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\DTToolbar@toolbarnet.com\chrome\content folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\DTToolbar@toolbarnet.com\chrome folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\DTToolbar@toolbarnet.com folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\engine@conduit.com\searchplugin folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\engine@conduit.com\META-INF folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\engine@conduit.com\lib folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\engine@conduit.com\DualPackage folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\engine@conduit.com\defaults folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\engine@conduit.com\components folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\engine@conduit.com\chrome folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\engine@conduit.com folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\searchplugins folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\logs folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\defaults\preferences folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\defaults folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\datastore folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-03-Nov-2010-19-49-53-GMT folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Tue-25-Jan-2011-00-07-14-GMT folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Tue-09-Nov-2010-19-44-56-GMT folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Tue-05-Oct-2010-16-56-12-GMT folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-07-Apr-2011-19-15-03-GMT folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sun-16-Jan-2011-15-37-00-GMT folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\temp folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\skin folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome\content folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com\chrome folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\toolbar@ask.com folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\vshare@toolbar\modules folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\vshare@toolbar\locale\en-US folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\vshare@toolbar\locale folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\vshare@toolbar\components folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\vshare@toolbar\chrome folder moved successfully. C:\Users\Slawek\AppData\Roaming\mozilla\Firefox\Profiles\ufsesf5o.default\extensions\vshare@toolbar folder moved successfully. C:\Users\Slawek\AppData\Roaming\Mozilla\Firefox\Profiles\ufsesf5o.default\searchplugins\askcom.xml moved successfully. C:\Users\Slawek\AppData\Roaming\Mozilla\Firefox\Profiles\ufsesf5o.default\searchplugins\daemon-search.xml moved successfully. C:\Users\Slawek\AppData\Roaming\Mozilla\Firefox\Profiles\ufsesf5o.default\searchplugins\web-search.xml moved successfully. C:\Users\Slawek\AppData\Roaming\Mozilla\Firefox\Profiles\ufsesf5o.default\searchplugins\winamp-search.xml moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TrialReset deleted successfully. Registry value HKEY_USERS\S-1-5-21-4190490682-169511088-2227682846-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ares deleted successfully. Registry value HKEY_USERS\S-1-5-21-4190490682-169511088-2227682846-1000\Software\Microsoft\Windows\CurrentVersion\Run\\EA Core deleted successfully. Registry value HKEY_USERS\S-1-5-21-4190490682-169511088-2227682846-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Rubin deleted successfully. Registry value HKEY_USERS\S-1-5-21-4190490682-169511088-2227682846-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Steam deleted successfully. C:\Users\Slawek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wostock421.exe moved successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default ->Flash cache emptied: 0 bytes User: Default User ->Flash cache emptied: 0 bytes User: Public User: Slawek ->Flash cache emptied: 572 bytes Total Flash Files Cleaned = 0.00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public User: Slawek ->Temp folder emptied: 200101029 bytes ->Temporary Internet Files folder emptied: 3786387 bytes ->FireFox cache emptied: 22434877 bytes ->Google Chrome cache emptied: 0 bytes ->Apple Safari cache emptied: 0 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 1216 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 216.00 mb OTL by OldTimer - Version 3.2.22.3 log created on 04262011_222028 Files\Folders moved on Reboot... Registry entries deleted on Reboot...