All processes killed ========== OTL ========== Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\036DFF98028B4A8502B3B7EF2F3B707C deleted successfully. C:\ProgramData\036DFF98028B4A8502B3B7EF2F3B707C\036DFF98028B4A8502B3B7EF2F3B707C.exe moved successfully. ========== FILES ========== C:\Users\Danuta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum folder moved successfully. C:\ProgramData\036DFF98028B4A8502B3B7EF2F3B707C folder moved successfully. C:\Users\Danuta\Desktop\Live Security Platinum.lnk moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Danuta ->Temp folder emptied: 23579151 bytes ->Temporary Internet Files folder emptied: 8773879 bytes ->Java cache emptied: 9853271 bytes ->FireFox cache emptied: 169413092 bytes ->Flash cache emptied: 18698 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public User: TEMP ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 28436252 bytes RecycleBin emptied: 6572637 bytes Total Files Cleaned = 235,00 mb OTL by OldTimer - Version 3.2.56.0 log created on 08082012_185606 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...