========== OTL ========== Registry value HKEY_USERS\S-1-5-21-725345543-573735546-839522115-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_USERS\S-1-5-21-725345543-573735546-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Run\\sxknapctbywuxvo deleted successfully. Registry value HKEY_USERS\S-1-5-21-725345543-573735546-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Run\\Gadu-Gadu 10 deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet32\ deleted successfully. Prefs.js: "Web Search" removed from browser.search.defaultengine Prefs.js: "Web Search" removed from browser.search.defaultenginename Prefs.js: "Web Search" removed from browser.search.order.1 Prefs.js: "http://startsear.ch/?aff=2&cf=230e7904-83ea-11e1-8303-001e37b4e5be" removed from browser.startup.homepage Prefs.js: "http://startsear.ch/?aff=2&src=sp&cf=230e7904-83ea-11e1-8303-001e37b4e5be&q=" removed from keyword.URL C:\Documents and Settings\Radek\Dane aplikacji\Mozilla\Firefox\Profiles\wqyccrvd.default\searchplugins\startsear.xml moved successfully. C:\Documents and Settings\Radek\g2mdlhlpx.exe moved successfully. C:\WINDOWS\system32\crt.dat moved successfully. C:\WINDOWS\system32\shimg.dll moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{B37EDB01-4803-459D-9451-0168A776F721}" /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{B37EDB01-4803-459D-9451-0168A776F721}" /E : value set successfully! Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. OTL by OldTimer - Version 3.2.53.0 log created on 06272012_214757