All processes killed ========== OTL ========== Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}\ not found. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\!{0974BA1E-64EC-11DE-B2A5-E43756D89593} deleted successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\!{0974BA1E-64EC-11DE-B2A5-E43756D89593} deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fsm deleted successfully. 64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Atomic Email Hunter\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Atomic Email Hunter\ not found. 64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64\datamngr.dll deleted successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64\IEBHO.dll deleted successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64\datamngr.dll deleted successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64\IEBHO.dll deleted successfully. File HKEY_LOCAL_MACHINE\software\mozilla\FireFox\extensions\\{4bcdbfd0-fa26-11de-8a39-0800200c9a66}: C:\Users\Adam\AppData\Roaming\Mozilla\FireFox\{4bcdbfd0-fa26-11de-8a39-0800200c9a66} not found. Prefs.js: {67E7F3E5-8B3A-4219-B92B-47F9E05F5F4A}:1.0 removed from extensions.enabledItems C:\Program Files (x86)\mozilla firefox\extensions\{67E7F3E5-8B3A-4219-B92B-47F9E05F5F4A}\defaults\preferences folder moved successfully. C:\Program Files (x86)\mozilla firefox\extensions\{67E7F3E5-8B3A-4219-B92B-47F9E05F5F4A}\defaults folder moved successfully. C:\Program Files (x86)\mozilla firefox\extensions\{67E7F3E5-8B3A-4219-B92B-47F9E05F5F4A}\chrome folder moved successfully. C:\Program Files (x86)\mozilla firefox\extensions\{67E7F3E5-8B3A-4219-B92B-47F9E05F5F4A} folder moved successfully. C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\qeu0y5fr.default\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully. C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\qeu0y5fr.default\extensions\ffxtlbr@babylon.com\defaults folder moved successfully. C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\qeu0y5fr.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio folder moved successfully. C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\qeu0y5fr.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully. C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\qeu0y5fr.default\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully. C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\qeu0y5fr.default\extensions\ffxtlbr@babylon.com\content folder moved successfully. C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\qeu0y5fr.default\extensions\ffxtlbr@babylon.com\components folder moved successfully. C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\qeu0y5fr.default\extensions\ffxtlbr@babylon.com folder moved successfully. C:\ProgramData\mtbjfghn.xbe moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Adam ->Temp folder emptied: 7407839 bytes ->Temporary Internet Files folder emptied: 13964351 bytes ->Java cache emptied: 71349559 bytes ->FireFox cache emptied: 39412156 bytes ->Google Chrome cache emptied: 204314325 bytes ->Flash cache emptied: 15222705 bytes User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 56475 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Gość ->Temp folder emptied: 153000 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 55011 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 1619120 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 840 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50534 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 337,00 mb OTL by OldTimer - Version 3.2.32.0 log created on 02282012_203627 Files\Folders moved on Reboot... C:\Users\Adam\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File\Folder C:\Users\Adam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{08DBD8CF-5775-4667-86D5-5F686847254D}.tmp not found! File\Folder C:\Users\Adam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1E96A44B-A73B-4F94-83DD-444969CEA84C}.tmp not found! File\Folder C:\Users\Adam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{6D92888A-21CB-490A-B3E9-84DFBDEA6C0D}.tmp not found! File\Folder C:\Users\Adam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E059472E-F809-49EC-A26C-9A94466BA92F}.tmp not found! File\Folder C:\Users\Adam\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E9B2608A-265B-4DA2-80BB-5A5BE710F088}.tmp not found! Registry entries deleted on Reboot...