========== PROCESSES ========== All processes killed ========== OTL ========== HKU\S-1-5-21-1659004503-562591055-839522115-1005\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Registry value HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00A6FAF6-072E-44cf-8957-5838F569A31D} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ deleted successfully. Registry value HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\Software\Microsoft\Internet Explorer\URLSearchHooks\\{08C06D61-F1F3-4799-86F8-BE1A89362C85} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}\ not found. Prefs.js: {9CE11043-9A15-4207-A565-0C94C42D590D}:2.0 removed from extensions.enabledItems Registry value HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07AA283A-43D7-4CBE-A064-32A21112D94D} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}\ not found. Registry value HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found. Registry value HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Run\\ares deleted successfully. Registry value HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin deleted successfully. Registry value HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\Software\Microsoft\Windows\CurrentVersion\Run\\RGSC deleted successfully. Registry value HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\Software\Microsoft\Windows\CurrentVersion\RunOnce\\113499697 not found. File C:\Documents and Settings\Julek\Ustawienia lokalne\Dane aplikacji\113499697.exe not found. Registry key HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\se-2011-download.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-1659004503-562591055-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\se-2011-payment.com\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{861ae142-7e6b-11dc-bee4-000e50f46b27}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{861ae142-7e6b-11dc-bee4-000e50f46b27}\ not found. File G:\RESTORE\S-1-5-21-1482476501-1644491937-682003330-1013\lin32.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{861ae142-7e6b-11dc-bee4-000e50f46b27}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{861ae142-7e6b-11dc-bee4-000e50f46b27}\ not found. File G:\RESTORE\S-1-5-21-1482476501-1644491937-682003330-1013\lin32.exe not found. OTL by OldTimer - Version 3.2.17.3 log created on 11222010_103355 Files\Folders moved on Reboot... Registry entries deleted on Reboot...