All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-2524492288-3767872630-1049285630-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\ not found. Registry value HKEY_USERS\S-1-5-21-2524492288-3767872630-1049285630-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}\ not found. Registry value HKEY_USERS\S-1-5-21-2524492288-3767872630-1049285630-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}\ not found. Registry value HKEY_USERS\S-1-5-21-2524492288-3767872630-1049285630-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\kJ01677LgOhE01677 deleted successfully. C:\ProgramData\kJ01677LgOhE01677\kJ01677LgOhE01677.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-2524492288-3767872630-1049285630-1000\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent deleted successfully. Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Prefs.js: "http://search.conduit.com/?ctid=CT2786678&SearchSource=13" removed from browser.startup.homepage Prefs.js: {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}:2.0.0.54356 removed from extensions.enabledItems Prefs.js: engine@conduit.com:3.3.3.2 removed from extensions.enabledItems Prefs.js: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.3.3.2 removed from extensions.enabledItems C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\lib folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\engine@conduit.com\searchplugin folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\engine@conduit.com\META-INF folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\engine@conduit.com\lib folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\engine@conduit.com\DualPackage folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\engine@conduit.com\defaults folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\engine@conduit.com\components folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\engine@conduit.com\chrome folder moved successfully. C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\opw87xpg.default\extensions\engine@conduit.com folder moved successfully. C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\opw87xpg.default\searchplugins\conduit.xml moved successfully. C:\Program Files\Mozilla Firefox\extensions\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}\META-INF folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}\chrome folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} folder moved successfully. Folder C:\ProgramData\kJ01677LgOhE01677\ not found. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Piotrek ->Temp folder emptied: 32330302 bytes ->Temporary Internet Files folder emptied: 55685961 bytes ->Java cache emptied: 2915069 bytes ->FireFox cache emptied: 54645118 bytes ->Flash cache emptied: 2029 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 1517585 bytes RecycleBin emptied: 46120066 bytes Total Files Cleaned = 184,00 mb OTL by OldTimer - Version 3.2.31.0 log created on 10252011_203431 Files\Folders moved on Reboot... Registry entries deleted on Reboot...