All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\werdiagcontroller deleted successfully. C:\Users\Ania i Piotrek\AppData\Local\Microsoft\Windows\1134\werdiagcontroller.exe moved successfully. ========== FILES ========== C:\Users\Ania i Piotrek\AppData\Local\Microsoft\Windows\1134 folder moved successfully. C:\Users\Ania i Piotrek\AppData\Roaming\hellomoto folder moved successfully. C:\ProgramData\F4D55F3E64CCAA18580280E2DFD81D6B folder moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{95D50A4F-D1E5-4F36-A07A-C74C6EF22055}C:\windows\system\csrss.exe deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1070533B-35B7-4D9E-A908-F7A77B0B24F0}C:\windows\system\csrss.exe deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Ania i Piotrek ->Temp folder emptied: 761039842 bytes ->Temporary Internet Files folder emptied: 24237370 bytes ->Java cache emptied: 20114151 bytes ->FireFox cache emptied: 49190144 bytes ->Google Chrome cache emptied: 268472324 bytes ->Flash cache emptied: 3094114 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 43953291 bytes RecycleBin emptied: 1629377702 bytes Total Files Cleaned = 2 670,00 mb OTL by OldTimer - Version 3.2.53.1 log created on 07122012_104944 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...