ll processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-2857651082-4123162017-1854227071-1000\Software\Microsoft\Windows\CurrentVersion\Run\\WiaExtensionHost64 deleted successfully. C:\Users\Tomek\AppData\Local\Microsoft\Windows\3330\WiaExtensionHost64.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-2857651082-4123162017-1854227071-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1392B8D2-5C05-419F-A8F6-B9F15A596612} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1392B8D2-5C05-419F-A8F6-B9F15A596612}\ not found. Registry value HKEY_USERS\S-1-5-21-2857651082-4123162017-1854227071-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1392b8d2-5c05-419f-a8f6-b9f15a596612}\ not found. Registry key HKEY_USERS\S-1-5-21-2857651082-4123162017-1854227071-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EC55B7CD-717B-4596-9F58-97CEF7D6CB2E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EC55B7CD-717B-4596-9F58-97CEF7D6CB2E}\ not found. ========== FILES ========== C:\Users\Tomek\AppData\Local\Microsoft\Windows\3330 folder moved successfully. C:\ProgramData\7531CCA90058266076DA6584F875F002 folder moved successfully. C:\Users\Tomek\AppData\Roaming\hellomoto folder moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Platinum\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56502 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public User: Tomek ->Temp folder emptied: 229025288 bytes ->Temporary Internet Files folder emptied: 2243414320 bytes ->Java cache emptied: 22432 bytes ->Flash cache emptied: 130683 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 261330636 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 139720 bytes RecycleBin emptied: 63834601 bytes Total Files Cleaned = 2 668,00 mb OTL by OldTimer - Version 3.2.54.0 log created on 07142012_180522 Files\Folders moved on Reboot... C:\Users\Tomek\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat moved successfully. C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FQJHMOPG\10258-problem-jak-u-innychpotrzebna-pomoc[1].htm moved successfully. C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FQJHMOPG\fastbutton[1].htm moved successfully. C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77LN5X7L\otl-wykonanie-logow-obowiazkowych-t3110[1].htm moved successfully. C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\67SUQUIU\sh090[1].htm moved successfully. C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DFWW6VW\PIE[1].htc moved successfully. PendingFileRenameOperations files... File C:\Users\Tomek\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found! File C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat not found! File C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FQJHMOPG\10258-problem-jak-u-innychpotrzebna-pomoc[1].htm not found! File C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FQJHMOPG\fastbutton[1].htm not found! File C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\77LN5X7L\otl-wykonanie-logow-obowiazkowych-t3110[1].htm not found! File C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\67SUQUIU\sh090[1].htm not found! File C:\Users\Tomek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DFWW6VW\PIE[1].htc not found! Registry entries deleted on Reboot...