All processes killed ========== OTL ========== HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Prefs.js: "qooqlle" removed from browser.search.selectedEngine Prefs.js: "http://www.qooqlle.com/" removed from browser.startup.homepage Prefs.js: "http://www.google.com/cse?cx=partner-pub-5462406484424654%3A8q0sn8-w2ss&ie=ISO-8859-1&q=" removed from keyword.URL Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5617ECA9-488D-4BA2-8562-9710B9AB78D2}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\csrs deleted successfully. D:\ProgramData\csrs.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\svhost deleted successfully. D:\Program Files\Common Files\svhost.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\winloqon deleted successfully. D:\ProgramData\winloqon.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Crystal.exe deleted successfully. D:\Users\Daniel\AppData\Roaming\Crystal.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nvwiz deleted successfully. D:\ProgramData\nvwiz.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\RMF FM Miasto Muzyki deleted successfully. D:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\yr37391d.default\searchplugins\search.xml moved successfully. D:\Program Files\Mozilla Firefox\plugins\NPMyGlSh.dll moved successfully. D:\Users\Daniel\AppData\Roaming\System.dat moved successfully. D:\Users\Daniel\AppData\Roaming\etc.dat moved successfully. D:\Users\Daniel\AppData\Roaming\DirectX.dat moved successfully. D:\Users\Daniel\AppData\Roaming\Windows.dat moved successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Daniel ->Flash cache emptied: 2857085 bytes User: Default User: Default User User: Public Total Flash Files Cleaned = 3,00 mb [EMPTYTEMP] User: All Users User: Daniel ->Temp folder emptied: 968966110 bytes ->Temporary Internet Files folder emptied: 1257509560 bytes ->Java cache emptied: 19954268 bytes ->FireFox cache emptied: 57192558 bytes ->Google Chrome cache emptied: 6246300 bytes ->Flash cache emptied: 0 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 156931563 bytes RecycleBin emptied: 35282571 bytes Total Files Cleaned = 2 386,00 mb OTL by OldTimer - Version 3.2.29.1 log created on 09252011_111651 Files\Folders moved on Reboot... Registry entries deleted on Reboot...