All processes killed ========== OTL ========== Service PavPrSrv stopped successfully! Service PavPrSrv deleted successfully! Service PavSRK.sys stopped successfully! Service PavSRK.sys deleted successfully! Service PavProc stopped successfully! Service PavProc deleted successfully! Service ShldDrv stopped successfully! Service ShldDrv deleted successfully! Error: Unable to stop service DwProt! Unable to delete service\driver key DwProt. C:\WINDOWS\system32\drivers\dwprot.sys moved successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found. Prefs.js: "AVG Secure Search" removed from browser.search.defaultenginename Prefs.js: "AVG Secure Search" removed from browser.search.selectedEngine Prefs.js: "http://search.avg.com/route/?d=4d98be29&v=6.103.018.001&i=26&tp=ab&iy=&ychte=us&lng=pl&q=" removed from keyword.URL Registry key HKEY_CURRENT_USER\Software\Classes\.exe\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Classes\exefile\ deleted successfully. HKEY_LOCAL_MACHINE\Software\Classes\.exe\\|exefile /E : value set successfully! C:\$AVG\$VAULT folder moved successfully. C:\$AVG folder moved successfully. C:\Documents and Settings\andrzej\Ustawienia lokalne\Dane aplikacji\AVG Security Toolbar\cache\update folder moved successfully. C:\Documents and Settings\andrzej\Ustawienia lokalne\Dane aplikacji\AVG Security Toolbar\cache folder moved successfully. C:\Documents and Settings\andrzej\Ustawienia lokalne\Dane aplikacji\AVG Security Toolbar folder moved successfully. C:\Documents and Settings\andrzej\Dane aplikacji\AVG10\cfgall folder moved successfully. C:\Documents and Settings\andrzej\Dane aplikacji\AVG10 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\lsdb\prev folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\lsdb folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\IDS\quarantine\186ed9c2-0000-1000-8000-000000000000 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\IDS\quarantine folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\IDS folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\dec01b8bc01b6953 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\ceac581cac5800ff folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\ce080ee4080ecc01 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\c6043660043653a1 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\c27e3caf3678ce04 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\9e70cdee70cdcce9 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\8edcdcf2dcdcd615 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\81cae7b1cae6402 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\7620725120721877 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\6e00a1f400a1c405 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\577333bb48484079 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\4c8417ee8417d8f2 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\30cc0426cc03e546 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\2cc1d6fcc1d5deb folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\2c5ce8d05ce895bc folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\1844bcaf44bc90cc folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\16a0b3ea76635e40 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\156b2a476559f599 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw\10ec2b27ec2b0696 folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10\Chjw folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\AVG10 folder moved successfully. C:\Program Files\AVG\AVG10\Notification folder moved successfully. C:\Program Files\AVG\AVG10 folder moved successfully. C:\Program Files\AVG\AVG PC Tuneup 2011 folder moved successfully. C:\Program Files\AVG folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData\pack\bins folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData\pack folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData\mkt\res folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData\mkt\pl folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData\mkt\hi folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData\mkt folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData\logs folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\MFAData folder moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\parport\\"Start"|dword:00000004 /E : value set successfully! HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV\\"Start"|dword:00000004 /E : value set successfully! ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: andrzej ->Flash cache emptied: 43671 bytes User: Default User User: LocalService User: NetworkService Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: All Users User: andrzej ->Temp folder emptied: 178872896 bytes ->Temporary Internet Files folder emptied: 1424280 bytes ->Java cache emptied: 9701 bytes ->FireFox cache emptied: 59332064 bytes ->Google Chrome cache emptied: 89199294 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2173291 bytes %systemroot%\System32 .tmp files removed: 11189156 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2877981 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 329,00 mb OTL by OldTimer - Version 3.2.22.3 log created on 05022011_190633 Files\Folders moved on Reboot... File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...