========== FILES ========== [color=#A23BEC]< attrib /d /s -s -h H:\* /C >[/color] C:\Users\Maciej\Desktop\cmd.bat deleted successfully. C:\Users\Maciej\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q H:\$RECYCLE.BIN /C >[/color] C:\Users\Maciej\Desktop\cmd.bat deleted successfully. C:\Users\Maciej\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q H:\RECYCLER /C >[/color] C:\Users\Maciej\Desktop\cmd.bat deleted successfully. C:\Users\Maciej\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q C:\$Recycle.Bin /C >[/color] C:\Users\Maciej\Desktop\cmd.bat deleted successfully. C:\Users\Maciej\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q D:\$RECYCLE.BIN /C >[/color] C:\Users\Maciej\Desktop\cmd.bat deleted successfully. C:\Users\Maciej\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q D:\RECYCLER /C >[/color] C:\Users\Maciej\Desktop\cmd.bat deleted successfully. C:\Users\Maciej\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q E:\$RECYCLE.BIN /C >[/color] C:\Users\Maciej\Desktop\cmd.bat deleted successfully. C:\Users\Maciej\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q E:\RECYCLER /C >[/color] C:\Users\Maciej\Desktop\cmd.bat deleted successfully. C:\Users\Maciej\Desktop\cmd.txt deleted successfully. ========== OTL ========== Prefs.js: "http://isearch.avg.com/search?cid=%7B4bd4c36f-db89-4aec-a897-66e57b40050e%7D&mid=841e7423ac6f47d0a35ed154d43bfa55-d1113e44ae21302e57bdbc3bdf4438affb0710ff&ds=AVG&v=10.2.0.3&lang=pl&pr=fr&d=2012-03-30%2012%3A37%3A48&sap=ku&q=" removed from keyword.URL ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully. ========== SERVICES/DRIVERS ========== Service CDMA Device Service stopped successfully! Service CDMA Device Service deleted successfully! Service avgwd stopped successfully! Service avgwd deleted successfully! Service AVGIDSAgent stopped successfully! Service AVGIDSAgent deleted successfully! OTL by OldTimer - Version 3.2.61.3 log created on 09102012_103045