All processes killed ========== FILES ========== C:\Documents and Settings\darios\6883391.dll moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\1933886.pad moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\1933886.js moved successfully. C:\Documents and Settings\darios\1369159.dll moved successfully. C:\Documents and Settings\darios\Menu Start\Programy\Autostart\runctf.lnk moved successfully. C:\Documents and Settings\darios\6883391.dll moved successfully. C:\RECYCLER\S-1-5-21-9695393563-5879893685-557659880-0621 folder moved successfully. C:\RECYCLER\S-1-5-21-7788071147-8573556448-007298163-9550 folder moved successfully. C:\RECYCLER\S-1-5-21-6764309963-9074245526-283334048-1774 folder moved successfully. C:\RECYCLER\S-1-5-21-5519932666-9473084129-791597020-6096 folder moved successfully. C:\RECYCLER\S-1-5-21-4885212657-1842249566-578562459-2440 folder moved successfully. C:\RECYCLER\S-1-5-21-4375488757-1472366098-445895676-1907 folder moved successfully. C:\RECYCLER\S-1-5-21-4269469004-8937902578-009236127-0596 folder moved successfully. C:\RECYCLER\S-1-5-21-3404926122-1350374319-120686511-0896 folder moved successfully. C:\RECYCLER\S-1-5-21-2582602781-5530711017-414553800-5422 folder moved successfully. C:\RECYCLER\S-1-5-21-2486386601-2971629132-310620589-9669 folder moved successfully. C:\RECYCLER\S-1-5-21-1060284298-527237240-1644491937-500 folder moved successfully. C:\RECYCLER\S-1-5-21-1060284298-527237240-1644491937-1003 folder moved successfully. C:\RECYCLER\S-1-5-21-0744095257-4426670037-333132560-1918 folder moved successfully. C:\RECYCLER\S-1-5-21-0703793510-8669100128-048672454-3374 folder moved successfully. C:\RECYCLER folder moved successfully. D:\RECYCLER\S-1-5-21-776561741-1682526488-1606980848-1001 folder moved successfully. D:\RECYCLER\S-1-5-21-776561741-1647877149-1644491937-1001 folder moved successfully. D:\RECYCLER\S-1-5-21-606747145-706699826-1801674531-1001 folder moved successfully. D:\RECYCLER\S-1-5-21-583907252-920026266-1417001333-1001 folder moved successfully. D:\RECYCLER\S-1-5-21-2052111302-1958367476-1606980848-1001 folder moved successfully. D:\RECYCLER\S-1-5-21-1645522239-706699826-1177238915-1001 folder moved successfully. D:\RECYCLER\S-1-5-21-1645522239-448539723-1606980848-1001\Dd2.pl\Radio.Eska.-.Hity.Na.Czasie.Vol.11.(2008)-D4Mi4NM folder moved successfully. D:\RECYCLER\S-1-5-21-1645522239-448539723-1606980848-1001\Dd2.pl folder moved successfully. D:\RECYCLER\S-1-5-21-1645522239-448539723-1606980848-1001\Dd1\TOP 100 Hot-Pop 2008-06-14 Billboard - Torrent Tatty Feat RIAA Stars @224 folder moved successfully. D:\RECYCLER\S-1-5-21-1645522239-448539723-1606980848-1001\Dd1 folder moved successfully. D:\RECYCLER\S-1-5-21-1645522239-448539723-1606980848-1001 folder moved successfully. D:\RECYCLER\S-1-5-21-1417001333-1303643608-2147148427-1001 folder moved successfully. D:\RECYCLER\S-1-5-21-1343024091-1897051121-682003330-500 folder moved successfully. D:\RECYCLER\S-1-5-21-1123561945-1682526488-839522115-500 folder moved successfully. D:\RECYCLER\S-1-5-21-1060284298-527237240-1644491937-500 folder moved successfully. D:\RECYCLER\S-1-5-21-1060284298-527237240-1644491937-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-1004336348-1450960922-725345543-500 folder moved successfully. D:\RECYCLER\S-1-5-21-1004336348-1450960922-725345543-1003 folder moved successfully. D:\RECYCLER folder moved successfully. RECYCLER not found in F:\ ========== OTL ========== Service PEEK5 stopped successfully! Service PEEK5 deleted successfully! File C:\DOCUME~1\darios\Pulpit\WINDOW~1\WINDOW~1\AIRCRA~1.1_W\PEEK5.SYS not found. Prefs.js: "Ask.com" removed from browser.search.defaultengine Prefs.js: "Ask.com" removed from browser.search.defaultenginename Prefs.js: "Softonic-Eng7 Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "Ask.com" removed from browser.search.order.1 Prefs.js: "http://search.babylon.com/?babsrc=HP_ss&affID=111015&mntrId=28c93f68000000000000001de03baaf7" removed from browser.startup.homepage Prefs.js: gencrawler@some.com:2.6 removed from extensions.enabledItems C:\Documents and Settings\darios\Dane aplikacji\Mozilla\Firefox\Profiles\7i87zq4g.default\searchplugins\askcom.xml moved successfully. C:\Documents and Settings\darios\Dane aplikacji\Mozilla\Firefox\Profiles\7i87zq4g.default\searchplugins\conduit.xml moved successfully. C:\DOCUMENTS AND SETTINGS\DARIOS\DANE APLIKACJI\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\GENCRAWLER@SOME.COM\chrome\content folder moved successfully. C:\DOCUMENTS AND SETTINGS\DARIOS\DANE APLIKACJI\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\GENCRAWLER@SOME.COM\chrome folder moved successfully. C:\DOCUMENTS AND SETTINGS\DARIOS\DANE APLIKACJI\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\GENCRAWLER@SOME.COM folder moved successfully. C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA4520F3-AE13-4FB1-A513-58E23991C86D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA4520F3-AE13-4FB1-A513-58E23991C86D}\ deleted successfully. C:\Documents and Settings\darios\Dane aplikacji\Media Finder\Extensions\gencrawler_gc.dll moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{043C5167-00BB-4324-AF7E-62013FAEDACF} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ABBYY Screenshot Reader Bonus deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder\ deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\RECYCLER\S-1-5-21-5519932666-9473084129-791597020-6096\nissan.exe deleted successfully. ========== REGISTRY ========== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\winmgmt\Parameters\\"ServiceDll"|hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,62,00,65,00,6d,00,5c,00,57,00,4d,00,49,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 49152 bytes ->Temporary Internet Files folder emptied: 123691 bytes User: All Users User: darios ->Temp folder emptied: 75392683 bytes ->Temporary Internet Files folder emptied: 255845092 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 99435436 bytes ->Flash cache emptied: 30824 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 80820 bytes ->FireFox cache emptied: 3235046 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 8475589 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 422,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 02142013_153413 Files\Folders moved on Reboot... File\Folder C:\Documents and Settings\darios\Ustawienia lokalne\Temp\IMG1.tmp not found! PendingFileRenameOperations files... Registry entries deleted on Reboot...