All processes killed ========== FILES ========== C:\Windows\$NtUninstallKB13661$\1884308749\U folder moved successfully. C:\Windows\$NtUninstallKB13661$\1884308749\L folder moved successfully. C:\Windows\$NtUninstallKB13661$\1884308749 folder moved successfully. C:\Windows\$NtUninstallKB13661$ folder moved successfully. C:\Windows\System32\%APPDATA%\Microsoft\Windows\IETldCache folder moved successfully. C:\Windows\System32\%APPDATA%\Microsoft\Windows folder moved successfully. C:\Windows\System32\%APPDATA%\Microsoft folder moved successfully. C:\Windows\System32\%APPDATA% folder moved successfully. ========== OTL ========== Prefs.js: "AVG Secure Search" removed from browser.search.selectedEngine Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@thrixxx.com/WebLaunch\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@thrixxx.com/WebLaunch\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\SearchScopes\{080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\SearchScopes\{080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\URLSearchHooks\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\{e802027b-1f2b-40bd-b307-0bd96d036835} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e802027b-1f2b-40bd-b307-0bd96d036835}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e802027b-1f2b-40bd-b307-0bd96d036835}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e802027b-1f2b-40bd-b307-0bd96d036835}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041D03E-FD4B-44E0-B742-2D9B88305F98} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041D03E-FD4B-44E0-B742-2D9B88305F98} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7}\ not found. Registry value HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E802027B-1F2B-40BD-B307-0BD96D036835} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E802027B-1F2B-40BD-B307-0BD96D036835}\ not found. Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} C:\Windows\Downloaded Program Files\erma.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7} C:\Windows\Downloaded Program Files\gp.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Service VcommMgr stopped successfully! Service VcommMgr deleted successfully! File System32\Drivers\VcommMgr.sys not found. Service VComm stopped successfully! Service VComm deleted successfully! File system32\DRIVERS\VComm.sys not found. Service BTHidMgr stopped successfully! Service BTHidMgr deleted successfully! File System32\Drivers\BTHidMgr.sys not found. Service BTHidEnum stopped successfully! Service BTHidEnum deleted successfully! File System32\Drivers\vbtenum.sys not found. Service Btcsrusb stopped successfully! Service Btcsrusb deleted successfully! File System32\Drivers\btcusb.sys not found. Service BT stopped successfully! Service BT deleted successfully! File system32\DRIVERS\btnetdrv.sys not found. Service BlueletSCOAudio stopped successfully! Service BlueletSCOAudio deleted successfully! File system32\DRIVERS\BlueletSCOAudio.sys not found. Service BlueletAudio stopped successfully! Service BlueletAudio deleted successfully! File system32\DRIVERS\blueletaudio.sys not found. Service 75796635 stopped successfully! Service 75796635 deleted successfully! File system32\drivers\54279535.sys not found. C:\Users\Krzysztof_2\AppData\Roaming\ParetoLogic\RegCure Pro folder moved successfully. C:\Users\Krzysztof_2\AppData\Roaming\ParetoLogic folder moved successfully. C:\Users\Krzysztof_2\AppData\Roaming\DriverCure folder moved successfully. C:\ProgramData\ParetoLogic\RegCure Pro folder moved successfully. C:\ProgramData\ParetoLogic folder moved successfully. ========== REGISTRY ========== HKEY_USERS\S-1-5-21-3448668637-3735255564-3605904168-1003\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: Default ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 56475 bytes User: Default User ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Dominik ->Temp folder emptied: 75715422 bytes ->Temporary Internet Files folder emptied: 518528896 bytes ->Java cache emptied: 31658741 bytes ->FireFox cache emptied: 86321510 bytes ->Google Chrome cache emptied: 276261094 bytes ->Flash cache emptied: 1320 bytes User: Gość ->Temp folder emptied: 0 bytes User: Krzysztof ->Temp folder emptied: 2859226457 bytes ->Temporary Internet Files folder emptied: 12558264 bytes ->Java cache emptied: 33391546 bytes ->FireFox cache emptied: 35668960 bytes ->Apple Safari cache emptied: 28916736 bytes ->Flash cache emptied: 1177 bytes User: Krzysztof_2 ->Temp folder emptied: 304573366 bytes ->Temporary Internet Files folder emptied: 178650228 bytes ->Java cache emptied: 21734191 bytes ->FireFox cache emptied: 932779087 bytes ->Google Chrome cache emptied: 289023382 bytes ->Apple Safari cache emptied: 16384 bytes ->Flash cache emptied: 3765317 bytes User: Public User: UpdatusUser ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 372840162 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 5 781,00 mb OTL by OldTimer - Version 3.2.61.3 log created on 09102012_172931 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...