All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com deleted successfully. File C:\Program Files (x86)\MyWebSearch\bar\1.bin not found. Folder C:\ProgramData\mLhJnNi15302\ not found. C:\windows\msdownld.tmp folder deleted successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== [color=#A23BEC]< ipconfig /flushdns /c >[/color] Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Users\Basia\Desktop\need dont delete\cmd.bat deleted successfully. C:\Users\Basia\Desktop\need dont delete\cmd.txt deleted successfully. File\Folder C:\Program Files (x86)\MyWebSearch not found. ========== COMMANDS ========== C:\windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: Administrator User: All Users User: Basia ->Temp folder emptied: 98637485 bytes ->Temporary Internet Files folder emptied: 97853173 bytes ->Java cache emptied: 170090 bytes ->Flash cache emptied: 142139 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 48300766 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67563 bytes RecycleBin emptied: 4485 bytes Total Files Cleaned = 234.00 mb [EMPTYFLASH] User: Administrator User: All Users User: Basia ->Flash cache emptied: 0 bytes User: Default User: Default User User: Public Total Flash Files Cleaned = 0.00 mb Restore point Set: OTL Restore Point OTL by OldTimer - Version 3.2.20.6 log created on 03132011_195440 Files\Folders moved on Reboot... C:\Users\Basia\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\O1IBHWOO\ads[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\O1IBHWOO\clk[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\O1IBHWOO\iframe3[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IM8YQB0Z\launch[1].txt moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IM8YQB0Z\openmail.app[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H15D5O56\blank[1].html moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H15D5O56\blank[2].html moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H15D5O56\page__pid__1976763[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H15D5O56\st[1] moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CR49SBTQ\openmail.app[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9P7STIDY\fc[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\18GG4GWD\ads[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\18GG4GWD\openmail.app[1].htm moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. C:\Users\Basia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully. Registry entries deleted on Reboot...