All processes killed ========== OTL ========== Service ServiceLayer stopped successfully! Service ServiceLayer deleted successfully! Service InCDsrv stopped successfully! Service InCDsrv deleted successfully! Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\ not found. Prefs.js: "Search the web (Babylon)" removed from browser.search.defaultenginename Prefs.js: "Free Lunch Design Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=15627" removed from browser.search.defaulturl Prefs.js: "Search the web (Babylon)" removed from browser.search.order.1 Prefs.js: "http://utils.babylon.com/abt/index.php?url=" removed from keyword.URL Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdVantage deleted successfully. ========== FILES ========== C:\Program Files\mozilla firefox\components\AdVComponent.dll moved successfully. C:\Program Files\mozilla firefox\searchplugins\babylon.xml moved successfully. C:\Documents and Settings\Beatka\Dane aplikacji\Mozilla\Firefox\Profiles\ntjx8rhm.default\searchplugins\conduit.xml moved successfully. C:\Documents and Settings\Beatka\Dane aplikacji\advantage folder moved successfully. C:\Documents and Settings\Beatka\Dane aplikacji\BabylonToolbar\BabylonToolbar folder moved successfully. C:\Documents and Settings\Beatka\Dane aplikacji\BabylonToolbar folder moved successfully. [color=#A23BEC]< regsvr32 /u /s "C:\Program Files\easyMule\modules\IE2EM.dll" /C >[/color] C:\Documents and Settings\Beatka\Moje dokumenty\Pobieranie\cmd.bat deleted successfully. C:\Documents and Settings\Beatka\Moje dokumenty\Pobieranie\cmd.txt deleted successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Documents and Settings\Beatka\Ustawienia lokalne\Temp\~os5.tmp\rlvknlg.exe deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Beatka ->Flash cache emptied: 41718996 bytes User: Default User User: LocalService User: Michał ->Flash cache emptied: 1004 bytes User: NetworkService Total Flash Files Cleaned = 40,00 mb [EMPTYTEMP] User: All Users User: Beatka ->Temp folder emptied: 42973777 bytes ->Temporary Internet Files folder emptied: 4477575 bytes ->Java cache emptied: 84229162 bytes ->FireFox cache emptied: 108893755 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 82513 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Michał ->Temp folder emptied: 768230 bytes ->Temporary Internet Files folder emptied: 533128 bytes ->FireFox cache emptied: 71329766 bytes ->Flash cache emptied: 0 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2134153 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 245760 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 301,00 mb OTL by OldTimer - Version 3.2.26.1 log created on 07282011_172033 Files\Folders moved on Reboot... File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...