All processes killed ========== OTL ========== HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully! HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully! Registry key HKEY_USERS\S-1-5-21-3372220405-3466121577-2169093991-1002\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry value HKEY_USERS\S-1-5-21-3372220405-3466121577-2169093991-1002\Software\Microsoft\Internet Explorer\URLSearchHooks\\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\ not found. Registry value HKEY_USERS\S-1-5-21-3372220405-3466121577-2169093991-1002\Software\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\ not found. Registry value HKEY_USERS\S-1-5-21-3372220405-3466121577-2169093991-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{00000000-5736-4205-0008-781CD0E19F00} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-5736-4205-0008-781CD0E19F00}\ not found. Registry value HKEY_USERS\S-1-5-21-3372220405-3466121577-2169093991-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1392B8D2-5C05-419F-A8F6-B9F15A596612} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1392B8D2-5C05-419F-A8F6-B9F15A596612}\ not found. Registry value HKEY_USERS\S-1-5-21-3372220405-3466121577-2169093991-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found. Prefs.js: "Freecorder Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=2&q=" removed from keyword.URL C:\Users\Acer\AppData\Roaming\mozilla\Firefox\Profiles\k9i5go0w.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\searchplugin folder moved successfully. C:\Users\Acer\AppData\Roaming\mozilla\Firefox\Profiles\k9i5go0w.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\Plugins folder moved successfully. C:\Users\Acer\AppData\Roaming\mozilla\Firefox\Profiles\k9i5go0w.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\modules folder moved successfully. C:\Users\Acer\AppData\Roaming\mozilla\Firefox\Profiles\k9i5go0w.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\META-INF folder moved successfully. C:\Users\Acer\AppData\Roaming\mozilla\Firefox\Profiles\k9i5go0w.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\defaults folder moved successfully. C:\Users\Acer\AppData\Roaming\mozilla\Firefox\Profiles\k9i5go0w.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\components folder moved successfully. C:\Users\Acer\AppData\Roaming\mozilla\Firefox\Profiles\k9i5go0w.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\chrome folder moved successfully. C:\Users\Acer\AppData\Roaming\mozilla\Firefox\Profiles\k9i5go0w.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612} folder moved successfully. C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k9i5go0w.default\searchplugins\conduit.xml moved successfully. C:\Program Files (x86)\Conduit\Community Alerts folder moved successfully. C:\Program Files (x86)\Conduit folder moved successfully. C:\Users\Acer\AppData\Local\Conduit folder moved successfully. C:\Windows\Tasks\{7B0A945C-2471-4779-BF4D-85B3DB183543}.job moved successfully. C:\Windows\Tasks\{87A04C84-9186-408D-AB1B-381D2B3B0B15}.job moved successfully. C:\Windows\Tasks\{B66E5C90-025C-4281-A96E-EA1812049E8B}.job moved successfully. C:\Windows\Tasks\{D11EFB66-871F-449D-97E0-7B77DCA6831F}.job moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: Acer ->Temp folder emptied: 294267712 bytes ->Temporary Internet Files folder emptied: 63406790 bytes ->Java cache emptied: 1 bytes ->FireFox cache emptied: 161603502 bytes ->Flash cache emptied: 49511 bytes User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Gość ->Temp folder emptied: 5417274 bytes ->Temporary Internet Files folder emptied: 51032119 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 93660144 bytes ->Opera cache emptied: 33931 bytes ->Flash cache emptied: 53680 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 83330050 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50534 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 718.00 mb OTL by OldTimer - Version 3.2.46.0 log created on 06052012_162755 Files\Folders moved on Reboot... C:\Users\Acer\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot. Registry entries deleted on Reboot...