All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-2063754109-2420316384-1785921031-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{91da5e8a-3318-4f8c-b67e-5964de3ab546} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91da5e8a-3318-4f8c-b67e-5964de3ab546}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@checkpoint.com/FFApi\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ not found. Registry value HKEY_USERS\S-1-5-21-2063754109-2420316384-1785921031-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{91DA5E8A-3318-4F8C-B67E-5964DE3AB546} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91DA5E8A-3318-4F8C-B67E-5964DE3AB546}\ not found. Registry value HKEY_USERS\S-1-5-21-2063754109-2420316384-1785921031-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Gosia ->Temp folder emptied: 588529 bytes ->Temporary Internet Files folder emptied: 2423688 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 81673172 bytes ->Flash cache emptied: 678 bytes User: Jarek ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 262422 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 81,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 10102012_201858 Files\Folders moved on Reboot... C:\Users\Gosia\AppData\Local\Temp\ehmsas.txt moved successfully. C:\Users\Gosia\AppData\Local\Temp\~DF712C.tmp moved successfully. File\Folder C:\Windows\temp\ZLT0776f.TMP not found! PendingFileRenameOperations files... Registry entries deleted on Reboot...