All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ deleted successfully. Registry value HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}\ not found. Registry key HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\Software\Microsoft\Internet Explorer\SearchScopes\{3D768D0F-8A1C-4c56-A1A9-16AF9D44095A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3D768D0F-8A1C-4c56-A1A9-16AF9D44095A}\ not found. Registry key HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ not found. Registry key HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found. Prefs.js: "v9" removed from browser.search.defaultenginename Prefs.js: "v9" removed from browser.search.order.1 Prefs.js: "v9" removed from browser.search.selectedEngine Prefs.js: true removed from browser.search.useDBForOrder C:\Users\pl\AppData\Roaming\Mozilla\Firefox\Profiles\4wrl3ayd.default\searchplugins\daemon-search.xml moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\ deleted successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{338B4DFE-2E2C-4338-9E41-E176D497299E} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{338B4DFE-2E2C-4338-9E41-E176D497299E}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. 64bit-Registry value HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found. Registry value HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Wisdom-soft AutoScreenRecorder 3.1 Free deleted successfully. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. C:\Users\pl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully. Registry value HKEY_USERS\S-1-5-21-448562795-4172729588-1198038377-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HideSCAHealth deleted successfully. 64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&ksportuj do programu Microsoft Excel\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&ksportuj do programu Microsoft Excel\ not found. Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully. Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully. Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully. Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ not found. Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ not found. Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ not found. Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ not found. Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully. File Protocol\Handler\skype4com - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully. File Protocol\Handler\skype-ie-addon-data - No CLSID value found not found. C:\Program Files (x86)\v9Soft folder moved successfully. C:\Users\Tomek\AppData\Roaming\Babylon\updates folder moved successfully. C:\Users\Tomek\AppData\Roaming\Babylon\Content folder moved successfully. C:\Users\Tomek\AppData\Roaming\Babylon folder moved successfully. C:\Ibot1.0.8\iBot\sounds folder moved successfully. C:\Ibot1.0.8\iBot\scripts folder moved successfully. C:\Ibot1.0.8\iBot\library folder moved successfully. C:\Ibot1.0.8\iBot\files folder moved successfully. C:\Ibot1.0.8\iBot\aaa\PX folder moved successfully. C:\Ibot1.0.8\iBot\aaa\nbv folder moved successfully. C:\Ibot1.0.8\iBot\aaa\mk\Quarantine.2.Terminal.2011.DVDRip.XviD-DOCUMENT_mfscene.com folder moved successfully. C:\Ibot1.0.8\iBot\aaa\mk\IINiB folder moved successfully. C:\Ibot1.0.8\iBot\aaa\mk\FILMY\RASA folder moved successfully. C:\Ibot1.0.8\iBot\aaa\mk\FILMY\PARANORMAL ACTIVITY 2 folder moved successfully. C:\Ibot1.0.8\iBot\aaa\mk\FILMY\EVAN WSZECHMOGĄCY folder moved successfully. C:\Ibot1.0.8\iBot\aaa\mk\FILMY folder moved successfully. C:\Ibot1.0.8\iBot\aaa\mk folder moved successfully. C:\Ibot1.0.8\iBot\aaa\Mikuś 2011 folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Zdjęcia nasze folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\UltimateJewelQuestCollection-SKiDROW\sounds folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\UltimateJewelQuestCollection-SKiDROW\images folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\UltimateJewelQuestCollection-SKiDROW\fscommand folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\UltimateJewelQuestCollection-SKiDROW folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy\Zbaw mnie od zlego folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy\Ted Bundy(XviD) folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy\Osiem milimetrów (1999) [TnT24.Info] folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy\Men of War; Oddział Szturmowy (PL)\spolszczenie Men of WAR Assault Squad folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy\Men of War; Oddział Szturmowy (PL)\SKIDROW folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy\Men of War; Oddział Szturmowy (PL)\Men of War Trainer +8 folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy\Men of War; Oddział Szturmowy (PL) folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy\Czas bohaterów Age of Heroes (2011) PL.SUBBED.DVDRip.XviD-B89 NAPISY PL folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M\Filmy folder moved successfully. C:\Ibot1.0.8\iBot\aaa\M folder moved successfully. C:\Ibot1.0.8\iBot\aaa\instance0 folder moved successfully. C:\Ibot1.0.8\iBot\aaa\123 folder moved successfully. C:\Ibot1.0.8\iBot\aaa\1\Angry.Birds.Seasons.v1.5.1.Cracked.GAME-ErES\Angry.Birds.Seasons.v1.5.1.Cracked.GAME-ErES\Crack folder moved successfully. C:\Ibot1.0.8\iBot\aaa\1\Angry.Birds.Seasons.v1.5.1.Cracked.GAME-ErES\Angry.Birds.Seasons.v1.5.1.Cracked.GAME-ErES folder moved successfully. C:\Ibot1.0.8\iBot\aaa\1\Angry.Birds.Seasons.v1.5.1.Cracked.GAME-ErES folder moved successfully. C:\Ibot1.0.8\iBot\aaa\1 folder moved successfully. C:\Ibot1.0.8\iBot\aaa folder moved successfully. C:\Ibot1.0.8\iBot folder moved successfully. C:\Ibot1.0.8 folder moved successfully. C:\ibot1.0.7\iBot\sounds folder moved successfully. C:\ibot1.0.7\iBot\scripts\actions folder moved successfully. C:\ibot1.0.7\iBot\scripts folder moved successfully. C:\ibot1.0.7\iBot\library folder moved successfully. C:\ibot1.0.7\iBot\files folder moved successfully. C:\ibot1.0.7\iBot folder moved successfully. C:\ibot1.0.7 folder moved successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default ->Flash cache emptied: 56475 bytes User: Default User ->Flash cache emptied: 0 bytes User: pl ->Flash cache emptied: 57157 bytes User: Public User: Tomek ->Flash cache emptied: 56967 bytes Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: pl ->Temp folder emptied: 4473734514 bytes ->Temporary Internet Files folder emptied: 300418053 bytes ->Java cache emptied: 95455958 bytes ->FireFox cache emptied: 106094267 bytes ->Google Chrome cache emptied: 126949287 bytes ->Flash cache emptied: 1142 bytes User: Public User: Tomek ->Temp folder emptied: 3253184957 bytes ->Temporary Internet Files folder emptied: 280379059 bytes ->Java cache emptied: 24956067 bytes ->FireFox cache emptied: 100071991 bytes ->Google Chrome cache emptied: 97184143 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 8086896 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 342956590 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36046203 bytes RecycleBin emptied: 7264311 bytes Total Files Cleaned = 8 824,00 mb OTL by OldTimer - Version 3.2.57.0 log created on 08172012_120728 Files\Folders moved on Reboot... File\Folder C:\Users\pl\AppData\Local\Temp\etilqs_085UNPks9lkSJcb not found! File\Folder C:\Users\pl\AppData\Local\Temp\etilqs_LYdxlEArT22IKv9 not found! C:\Users\pl\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\startupCache\startupCache.4.little moved successfully. C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\OfflineCache\index.sqlite moved successfully. C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\Cache\_CACHE_001_ moved successfully. C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\Cache\_CACHE_002_ moved successfully. C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\Cache\_CACHE_003_ moved successfully. C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\Cache\_CACHE_MAP_ moved successfully. C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\urlclassifier3.sqlite moved successfully. File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. PendingFileRenameOperations files... File C:\Users\pl\AppData\Local\Temp\etilqs_085UNPks9lkSJcb not found! File C:\Users\pl\AppData\Local\Temp\etilqs_LYdxlEArT22IKv9 not found! File C:\Users\pl\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found! File C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\startupCache\startupCache.4.little not found! File C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\OfflineCache\index.sqlite not found! File C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\Cache\_CACHE_001_ not found! File C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\Cache\_CACHE_002_ not found! File C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\Cache\_CACHE_003_ not found! File C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\Cache\_CACHE_MAP_ not found! File C:\Users\pl\AppData\Local\Mozilla\Firefox\Profiles\4wrl3ayd.default\urlclassifier3.sqlite not found! [2012-08-17 12:38:15 | 000,000,000 | ---- | M] () C:\Windows\temp\_avast_\Webshlock.txt : Unable to obtain MD5 Registry entries deleted on Reboot...