All processes killed ========== FILES ========== C:\D & S\Administrator\Menu Start\Programy\Autostart\ctfmon.lnk moved successfully. C:\D & S\All Users\Dane aplikacji\pmt_0piot.pad moved successfully. C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\msaozczz.default\searchplugins\daemon-search.xml moved successfully. C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\msaozczz.default\searchplugins\startsear.xml moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{3577365A-A0AB-43F2-B2AE-55342C864E62}" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{3577365A-A0AB-43F2-B2AE-55342C864E62}" /E : value set successfully! HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\\"Start"|dword:00000004 /E : value set successfully! HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ERSvc\\"Start"|dword:00000004 /E : value set successfully! HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc\\"Start"|dword:00000004 /E : value set successfully! HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\helpsvc\\"Start"|dword:00000004 /E : value set successfully! ========== OTL ========== Prefs.js: "http://startsear.ch/?aff=1&cf=1ad26816-ba3d-11e1-a252-001966dbdf8d" removed from browser.startup.homepage HKEY_USERS\S-1-5-21-776561741-57989841-1801674531-500\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_USERS\S-1-5-21-776561741-57989841-1801674531-500\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found. Registry key HKEY_USERS\S-1-5-21-776561741-57989841-1801674531-500\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. Registry key HKEY_USERS\S-1-5-21-776561741-57989841-1801674531-500\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}\ not found. Registry key HKEY_USERS\S-1-5-21-776561741-57989841-1801674531-500\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 3631 bytes ->Temporary Internet Files folder emptied: 442662 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 60075810 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 2671 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temporary Internet Files folder emptied: 353590 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 771488 bytes RecycleBin emptied: 44779213 bytes Total Files Cleaned = 102,00 mb OTL by OldTimer - Version 3.2.54.0 log created on 07192012_181803 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...