All processes killed ========== OTL ========== HKU\S-1-5-21-1275210071-1409082233-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Prefs.js: "qooqlle" removed from browser.search.selectedEngine Prefs.js: "http://www.qooqlle.com/" removed from browser.startup.homepage Prefs.js: "http://www.google.com/cse?cx=partner-pub-5462406484424654%3A8q0sn8-w2ss&ie=ISO-8859-1&q=" removed from keyword.URL Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\csrs deleted successfully. C:\Documents and Settings\All Users.WINDOWS\csrs.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\svhost deleted successfully. C:\Program Files\Common Files\svhost.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\winloqon deleted successfully. C:\Documents and Settings\All Users.WINDOWS\winloqon.exe moved successfully. File C:\Documents and Settings\Aśka.MOKONA-FA3B2BF0\Dane aplikacji\Mozilla\Firefox\Profiles\xy69oxpo.default\searchplugins\search.xml not found. C:\Documents and Settings\Aśka.MOKONA-FA3B2BF0\Dane aplikacji\qvjsge.dat moved successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\WINDOWS\TEMP\80461.exe deleted successfully. ========== COMMANDS ========== [EMPTYFLASH] User: Administrator ->Flash cache emptied: 33668 bytes User: Administrator.MOKONA User: All Users User: All Users.WINDOWS User: aśka User: Aśka.MOKONA-FA3B2BF0 ->Flash cache emptied: 52233 bytes User: Default User User: Default User.WINDOWS ->Flash cache emptied: 41620 bytes User: LocalService User: LocalService.ZARZĄDZANIE NT User: LocalService.ZARZĄDZANIE NT.000 User: NetworkService User: NetworkService.ZARZĄDZANIE NT User: NetworkService.ZARZĄDZANIE NT.000 Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: Administrator ->Flash cache emptied: 0 bytes User: Administrator.MOKONA ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: All Users User: All Users.WINDOWS User: aśka User: Aśka.MOKONA-FA3B2BF0 ->Temp folder emptied: 1647297 bytes ->Temporary Internet Files folder emptied: 405013 bytes ->Java cache emptied: 51852175 bytes ->FireFox cache emptied: 105819875 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: Default User.WINDOWS ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: LocalService.ZARZĄDZANIE NT ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: LocalService.ZARZĄDZANIE NT.000 ->Temp folder emptied: 65984 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 402 bytes User: NetworkService.ZARZĄDZANIE NT ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 402 bytes User: NetworkService.ZARZĄDZANIE NT.000 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 402 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 256456 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 153,00 mb OTL by OldTimer - Version 3.2.22.3 log created on 03192011_115947 Files\Folders moved on Reboot... Registry entries deleted on Reboot...