All processes killed ========== FILES ========== C:\ProgramData\0tbpw.pad moved successfully. C:\ProgramData\nircmd.exe moved successfully. C:\ProgramData\972a2c8037a25343a49d50d3c046a983_c moved successfully. C:\Users\Iwona\uidsave.dat moved successfully. C:\Users\Iwona\AppData\Roaming\9C1D09 folder moved successfully. C:\Users\Iwona\AppData\Roaming\4d211137.dat moved successfully. C:\Users\Iwona\AppData\Roaming\DownloaderGold\temporary folder moved successfully. C:\Users\Iwona\AppData\Roaming\DownloaderGold\downloads folder moved successfully. C:\Users\Iwona\AppData\Roaming\DownloaderGold folder moved successfully. C:\Users\Iwona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk moved successfully. C:\Users\Iwona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe moved successfully. C:\Users\Iwona\AppData\Roaming\mozilla\firefox\profiles\ywc1g9mx.default-1347992596969\extensions\onlinehdtv@onlinehd.tv.xpi moved successfully. File\Folder C:\Users\Iwona\AppData\Local\ClickPotatoLiteSA not found. C:\Users\Iwona\AppData\Local\TempaD4504.html moved successfully. C:\Users\Iwona\AppData\Local\TempaO4188.html moved successfully. C:\Users\Iwona\AppData\Local\TempAT4192.html moved successfully. C:\Users\Iwona\AppData\Local\TempbG4628.html moved successfully. C:\Users\Iwona\AppData\Local\TempCL4076.html moved successfully. C:\Users\Iwona\AppData\Local\TempCn4272.html moved successfully. C:\Users\Iwona\AppData\Local\TempCu4348.html moved successfully. C:\Users\Iwona\AppData\Local\Tempcz2432.html moved successfully. C:\Users\Iwona\AppData\Local\TempdB2580.html moved successfully. C:\Users\Iwona\AppData\Local\TempDu3372.html moved successfully. C:\Users\Iwona\AppData\Local\TempdY3356.html moved successfully. C:\Users\Iwona\AppData\Local\TempEi4192.html moved successfully. C:\Users\Iwona\AppData\Local\Tempff4120.html moved successfully. C:\Users\Iwona\AppData\Local\Tempfk4740.html moved successfully. C:\Users\Iwona\AppData\Local\TempfY4076.html moved successfully. C:\Users\Iwona\AppData\Local\TempgD3024.html moved successfully. C:\Users\Iwona\AppData\Local\TempGv3024.html moved successfully. C:\Users\Iwona\AppData\Local\TempHf4104.html moved successfully. C:\Users\Iwona\AppData\Local\TemphK4260.html moved successfully. C:\Users\Iwona\AppData\Local\TemphO4188.html moved successfully. C:\Users\Iwona\AppData\Local\Temphu3272.html moved successfully. C:\Users\Iwona\AppData\Local\TempIc4116.html moved successfully. C:\Users\Iwona\AppData\Local\TempIk4104.html moved successfully. C:\Users\Iwona\AppData\Local\Tempiq3372.html moved successfully. C:\Users\Iwona\AppData\Local\TempjC3632.html moved successfully. C:\Users\Iwona\AppData\Local\Tempkg7972.html moved successfully. C:\Users\Iwona\AppData\Local\TempLy4212.html moved successfully. C:\Users\Iwona\AppData\Local\TempmI3132.html moved successfully. C:\Users\Iwona\AppData\Local\Tempmx7972.html moved successfully. C:\Users\Iwona\AppData\Local\Tempn10340.html moved successfully. C:\Users\Iwona\AppData\Local\TempNX4004.html moved successfully. C:\Users\Iwona\AppData\Local\TempNY4552.html moved successfully. C:\Users\Iwona\AppData\Local\Tempo10340.html moved successfully. C:\Users\Iwona\AppData\Local\TempOS4504.html moved successfully. C:\Users\Iwona\AppData\Local\TempOT3700.html moved successfully. C:\Users\Iwona\AppData\Local\Tempph2908.html moved successfully. C:\Users\Iwona\AppData\Local\TempPJ4196.html moved successfully. C:\Users\Iwona\AppData\Local\Temppy4116.html moved successfully. C:\Users\Iwona\AppData\Local\TempPy4348.html moved successfully. C:\Users\Iwona\AppData\Local\TempQY2432.html moved successfully. C:\Users\Iwona\AppData\Local\TempRe4004.html moved successfully. C:\Users\Iwona\AppData\Local\TempRE4128.html moved successfully. C:\Users\Iwona\AppData\Local\TempRg2580.html moved successfully. C:\Users\Iwona\AppData\Local\TempRz2328.html moved successfully. C:\Users\Iwona\AppData\Local\Tempsa4120.html moved successfully. C:\Users\Iwona\AppData\Local\TempSh4628.html moved successfully. C:\Users\Iwona\AppData\Local\TempsU1004.html moved successfully. C:\Users\Iwona\AppData\Local\TempsV2908.html moved successfully. C:\Users\Iwona\AppData\Local\TempsX5312.html moved successfully. C:\Users\Iwona\AppData\Local\TempTN3132.html moved successfully. C:\Users\Iwona\AppData\Local\Tempug3620.html moved successfully. C:\Users\Iwona\AppData\Local\Tempum3700.html moved successfully. C:\Users\Iwona\AppData\Local\TempUr3620.html moved successfully. C:\Users\Iwona\AppData\Local\TempvB4156.html moved successfully. C:\Users\Iwona\AppData\Local\Tempvb4740.html moved successfully. C:\Users\Iwona\AppData\Local\TempVG3632.html moved successfully. C:\Users\Iwona\AppData\Local\TempVK3356.html moved successfully. C:\Users\Iwona\AppData\Local\TempWE3060.html moved successfully. C:\Users\Iwona\AppData\Local\TempWo3272.html moved successfully. C:\Users\Iwona\AppData\Local\TempWR3060.html moved successfully. C:\Users\Iwona\AppData\Local\TempYJ4128.html moved successfully. C:\Users\Iwona\AppData\Local\Tempyu4272.html moved successfully. C:\Users\Iwona\AppData\Local\TempZK4156.html moved successfully. File\Folder C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_ClickPotatoLiteSA.dll not found. C:\Windows\tasks\OptimizerPro1UpdaterTask{F75B51FA-61B1-4D21-84CC-5874ADF1533E}.job moved successfully. [color=#A23BEC]< netsh advfirewall reset /C >[/color] Ok. C:\Users\Iwona\Downloads\cmd.bat deleted successfully. C:\Users\Iwona\Downloads\cmd.txt deleted successfully. ========== OTL ========== Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{fcbf663e-8530-46f8-a880-ac5abe9d2b23} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fcbf663e-8530-46f8-a880-ac5abe9d2b23}\ not found. Registry value HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\ClickPotatoLite@ClickPotatoLite.com deleted successfully. File C:\Users\Iwona\AppData\Local\ClickPotatoLiteSA\bin\12.0.15.0\firefox\extensions not found. 64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00e71626-0bef-11dc-8314-0864264c9a64}\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00e71626-0bef-11dc-8314-0864264c9a64}\ deleted successfully. File C:\Users\Iwona\AppData\Roaming\DownloaderGold\ieplug.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00e71626-0bef-11dc-8314-0800200c9a66}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00e71626-0bef-11dc-8314-0800200c9a66}\ deleted successfully. File C:\Users\Iwona\AppData\Roaming\DownloaderGold\ieplug.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9438D5FA-D5AF-4DD1-D7AA-F1959AA7DC05}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9438D5FA-D5AF-4DD1-D7AA-F1959AA7DC05}\ deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FCBF663E-8530-46F8-A880-AC5ABE9D2B23} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FCBF663E-8530-46F8-A880-AC5ABE9D2B23}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Optimizer Pro deleted successfully. C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe moved successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\Piriform deleted successfully. File C:\Users\Iwona\AppData\Roaming\9C1D09\9C1D09.exe not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Iwona ->Temp folder emptied: 171875738 bytes ->Temporary Internet Files folder emptied: 7368249 bytes ->Java cache emptied: 29664130 bytes ->FireFox cache emptied: 940584041 bytes ->Google Chrome cache emptied: 13912245 bytes ->Opera cache emptied: 1212485 bytes ->Flash cache emptied: 30781 bytes User: Konto User: Kuba xD ->Temp folder emptied: 265 bytes ->Temporary Internet Files folder emptied: 1256634 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 54682772 bytes ->Flash cache emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3111877715 bytes %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 4165232 bytes %systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 755 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 32986 bytes %systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes RecycleBin emptied: 91692495 bytes Total Files Cleaned = 4 223,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 11292012_185452 Files\Folders moved on Reboot... File\Folder C:\Users\Iwona\AppData\Local\Temp\Cóż warte.pps not found! C:\Users\Iwona\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File move failed. C:\Windows\temp\gnserv.dat scheduled to be moved on reboot. File move failed. C:\Windows\temp\spserv.dat scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot...