All processes killed ========== REGISTRY ========== HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\""|"C:\Program Files\Mozilla Firefox\firefox.exe" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\""|"C:\Program Files\Internet Explorer\iexplore.exe" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\""|"C:\Users\Właściciel\AppData\Local\Google\Chrome\Application\chrome.exe" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome.Ewa\shell\open\command\\""|"C:\Users\Ewa\AppData\Local\Google\Chrome\Application\chrome.exe" /E : value set successfully! ========== FILES ========== C:\Program Files\mozilla firefox\searchplugins\v9.xml moved successfully. C:\Users\Właściciel\AppData\Local\TempaA4804.html moved successfully. C:\Users\Właściciel\AppData\Local\TempAQ3816.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempax3940.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempbh4236.html moved successfully. C:\Users\Właściciel\AppData\Local\TempBQ5064.html moved successfully. C:\Users\Właściciel\AppData\Local\TempbZ4184.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempcb5920.html moved successfully. C:\Users\Właściciel\AppData\Local\TempCL4692.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempdg5700.html moved successfully. C:\Users\Właściciel\AppData\Local\TempDl4460.html moved successfully. C:\Users\Właściciel\AppData\Local\TempDM3660.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempemc580.html moved successfully. C:\Users\Właściciel\AppData\Local\TempEP4588.html moved successfully. C:\Users\Właściciel\AppData\Local\TempEU4240.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempev4088.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempfy4944.html moved successfully. C:\Users\Właściciel\AppData\Local\TempgB4468.html moved successfully. C:\Users\Właściciel\AppData\Local\Temphk1176.html moved successfully. C:\Users\Właściciel\AppData\Local\TempHM3744.html moved successfully. C:\Users\Właściciel\AppData\Local\Temphm5800.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempie4468.html moved successfully. C:\Users\Właściciel\AppData\Local\TempiP3020.html moved successfully. C:\Users\Właściciel\AppData\Local\TempIy5052.html moved successfully. C:\Users\Właściciel\AppData\Local\TempjG2424.html moved successfully. C:\Users\Właściciel\AppData\Local\TempJW3760.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempkp3536.html moved successfully. C:\Users\Właściciel\AppData\Local\TempLH3652.html moved successfully. C:\Users\Właściciel\AppData\Local\TempLK1960.html moved successfully. C:\Users\Właściciel\AppData\Local\Templn4944.html moved successfully. C:\Users\Właściciel\AppData\Local\TempLV1176.html moved successfully. C:\Users\Właściciel\AppData\Local\TempLx3148.html moved successfully. C:\Users\Właściciel\AppData\Local\TempLz3704.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempng5808.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempon3660.html moved successfully. C:\Users\Właściciel\AppData\Local\TempoO3816.html moved successfully. C:\Users\Właściciel\AppData\Local\Temppi3704.html moved successfully. C:\Users\Właściciel\AppData\Local\Temppu3808.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempqc3080.html moved successfully. C:\Users\Właściciel\AppData\Local\TempQL4588.html moved successfully. C:\Users\Właściciel\AppData\Local\TempqQ4236.html moved successfully. C:\Users\Właściciel\AppData\Local\TempQv3464.html moved successfully. C:\Users\Właściciel\AppData\Local\Temprc5812.html moved successfully. C:\Users\Właściciel\AppData\Local\TempRj6016.html moved successfully. C:\Users\Właściciel\AppData\Local\TempRs4464.html moved successfully. C:\Users\Właściciel\AppData\Local\TempsJ4008.html moved successfully. C:\Users\Właściciel\AppData\Local\Temptj4644.html moved successfully. C:\Users\Właściciel\AppData\Local\TempTL3124.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempts2424.html moved successfully. C:\Users\Właściciel\AppData\Local\TempTy3976.html moved successfully. C:\Users\Właściciel\AppData\Local\TempUa3408.html moved successfully. C:\Users\Właściciel\AppData\Local\TempUB3416.html moved successfully. C:\Users\Właściciel\AppData\Local\TempUG4416.html moved successfully. C:\Users\Właściciel\AppData\Local\TempuJ3956.html moved successfully. C:\Users\Właściciel\AppData\Local\TempvI3760.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempwb2500.html moved successfully. C:\Users\Właściciel\AppData\Local\TempwF5936.html moved successfully. C:\Users\Właściciel\AppData\Local\TempWHT556.html moved successfully. C:\Users\Właściciel\AppData\Local\TempWy4212.html moved successfully. C:\Users\Właściciel\AppData\Local\TempXw4248.html moved successfully. C:\Users\Właściciel\AppData\Local\TempYcH580.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempyh3408.html moved successfully. C:\Users\Właściciel\AppData\Local\TempYx5440.html moved successfully. C:\Users\Właściciel\AppData\Local\TempZF4508.html moved successfully. C:\Users\Właściciel\AppData\Local\TempZj5244.html moved successfully. C:\Users\Właściciel\AppData\Local\TempZL2416.html moved successfully. C:\Users\Właściciel\AppData\Local\TempzS3276.html moved successfully. C:\Users\Właściciel\AppData\Local\TempZU4088.html moved successfully. C:\Users\Właściciel\AppData\Local\TempZY3748.html moved successfully. C:\Users\Właściciel\AppData\Local\Tempzz3036.html moved successfully. ========== OTL ========== Service NMIndexingService stopped successfully! Service NMIndexingService deleted successfully! File C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe not found. Service LiveUpdate Notice Ex stopped successfully! Service LiveUpdate Notice Ex deleted successfully! File C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon not found. Service CLTNetCnService stopped successfully! Service CLTNetCnService deleted successfully! File C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon not found. Service LiveUpdate Notice Service stopped successfully! Service LiveUpdate Notice Service deleted successfully! C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe moved successfully. Service LiveUpdate stopped successfully! Service LiveUpdate deleted successfully! C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE moved successfully. Service .norton2009Reset stopped successfully! Service .norton2009Reset deleted successfully! C:\Program Files\Norton2009Reset.exe moved successfully. Service MpKsle2ef8288 stopped successfully! Service MpKsle2ef8288 deleted successfully! File c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{16E1BA69-F903-4A47-A06D-200CAA655E90}\MpKsle2ef8288.sys not found. Service VBoxNetFlt stopped successfully! Service VBoxNetFlt deleted successfully! File system32\DRIVERS\VBoxNetFlt.sys not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} C:\Windows\Downloaded Program Files\erma.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32768 bytes ->Flash cache emptied: 41661 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Ewa ->Temp folder emptied: 336596822 bytes ->Temporary Internet Files folder emptied: 15901069 bytes ->Java cache emptied: 25724933 bytes ->FireFox cache emptied: 19636183 bytes ->Google Chrome cache emptied: 337344471 bytes ->Flash cache emptied: 4230 bytes User: Public User: TEMP User: W³aœciciel User: WĹ‚aĹ›ciciel User: Właściciel ->Temp folder emptied: 324573603 bytes ->Temporary Internet Files folder emptied: 65331488 bytes ->Java cache emptied: 7098490 bytes ->FireFox cache emptied: 52851279 bytes ->Google Chrome cache emptied: 389026630 bytes ->Flash cache emptied: 2393448 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2354414754 bytes RecycleBin emptied: 10289833 bytes Total Files Cleaned = 3 759,00 mb OTL by OldTimer - Version 3.2.42.0 log created on 04242012_094548 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. C:\Windows\temp\JETF.tmp moved successfully. Registry entries deleted on Reboot...