All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TabbtnEx deleted successfully. C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3565\TabbtnEx.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BroadcomWireless deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully! HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully! Prefs.js: "Web Search" removed from browser.search.defaultengine Prefs.js: "Web Search" removed from browser.search.defaultenginename Prefs.js: "Web Search" removed from browser.search.order.1 Prefs.js: "http://startsear.ch/?aff=2&src=sp&cf=c61e50ae-3af9-11e1-be9b-0017c42e7365&q=" removed from keyword.URL ========== FILES ========== C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3565 folder moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\hellomoto folder moved successfully. C:\Program Files\Common Files\wsock32.dll moved successfully. C:\WINDOWS\wsock32.dll moved successfully. C:\WINDOWS\file.exe moved successfully. C:\WINDOWS\rcx.dat moved successfully. C:\WINDOWS\rcx.ini moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\rcx.dat moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\rcx.ini moved successfully. C:\WINDOWS\System32\Desktop_.ini moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\ecvp3e25.default\searchplugins\startsear.xml moved successfully. C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\ecvp3e25.default\searchplugins\web-search.xml moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Admin ->Temp folder emptied: 804302431 bytes ->Temporary Internet Files folder emptied: 358796765 bytes ->Java cache emptied: 2405031 bytes ->FireFox cache emptied: 73300997 bytes ->Flash cache emptied: 303371 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Gość ->Temp folder emptied: 31548457 bytes ->Temporary Internet Files folder emptied: 28563610 bytes ->Java cache emptied: 3964656 bytes ->FireFox cache emptied: 1081773516 bytes ->Flash cache emptied: 101185 bytes User: LocalService ->Temp folder emptied: 65984 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 402 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2134153 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 612911 bytes RecycleBin emptied: 3426589875 bytes Total Files Cleaned = 5 545,00 mb OTL by OldTimer - Version 3.2.54.0 log created on 07182012_134126 Files\Folders moved on Reboot... C:\Documents and Settings\Admin\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{C9EB0265-1C48-4393-A838-D69DE10A2C95}.tmp moved successfully. PendingFileRenameOperations files... File C:\Documents and Settings\Admin\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{C9EB0265-1C48-4393-A838-D69DE10A2C95}.tmp not found! Registry entries deleted on Reboot...