All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Trickler deleted successfully. c:\Documents and Settings\Żaneta\Ustawienia lokalne\Temp\~vis0000\gain_3202.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Services deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Update System deleted successfully. C:\Documents and Settings\Żaneta\Dane aplikacji\hidserv.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1078081533-1454471165-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Run\\InternetCalls deleted successfully. Registry value HKEY_USERS\S-1-5-21-1078081533-1454471165-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Run\\NokiaOviSuite2 deleted successfully. Registry value HKEY_USERS\S-1-5-21-1078081533-1454471165-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Update deleted successfully. C:\Documents and Settings\Żaneta\Ustawienia lokalne\Temp\service2.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1078081533-1454471165-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Update System deleted successfully. File C:\Documents and Settings\Żaneta\Dane aplikacji\hidserv.exe not found. Starting removal of ActiveX control {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {D27CDB6E-AE6D-11CF-96B8-444553540000} C:\WINDOWS\Downloaded Program Files\swflash.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ not found. ========== FILES ========== C:\RECYCLER\S-1-5-21-1078081533-1454471165-725345543-1004 folder moved successfully. C:\RECYCLER folder moved successfully. D:\RECYCLER\S-1-5-21-606747145-1801674531-682003330-1004\Dd113 folder moved successfully. D:\RECYCLER\S-1-5-21-606747145-1801674531-682003330-1004\Dd112 folder moved successfully. D:\RECYCLER\S-1-5-21-606747145-1801674531-682003330-1004\Dd111 folder moved successfully. D:\RECYCLER\S-1-5-21-606747145-1801674531-682003330-1004 folder moved successfully. D:\RECYCLER\S-1-5-21-1275210071-1767777339-839522115-1004 folder moved successfully. D:\RECYCLER\S-1-5-21-1078081533-1454471165-725345543-1004 folder moved successfully. D:\RECYCLER folder moved successfully. E:\RECYCLER\S-1-5-21-3606741209-2170264094-430102709-1003\Df43 folder moved successfully. E:\RECYCLER\S-1-5-21-3606741209-2170264094-430102709-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-3385659057-1177737885-3970083432-1005\Df1 folder moved successfully. E:\RECYCLER\S-1-5-21-3385659057-1177737885-3970083432-1005 folder moved successfully. E:\RECYCLER\S-1-5-21-2012620455-601326651-1912373028-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-1757981266-1682526488-682003330-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-158814717-1171427905-3547120763-1003 folder moved successfully. E:\RECYCLER\S-1-5-21-1202660629-1788223648-682003330-1004\Dg1\Symulator MCS51\PROGRAMY folder moved successfully. E:\RECYCLER\S-1-5-21-1202660629-1788223648-682003330-1004\Dg1\Symulator MCS51 folder moved successfully. E:\RECYCLER\S-1-5-21-1202660629-1788223648-682003330-1004\Dg1 folder moved successfully. E:\RECYCLER\S-1-5-21-1202660629-1788223648-682003330-1004 folder moved successfully. E:\RECYCLER\S-1-5-21-1078081533-1454471165-725345543-1004 folder moved successfully. E:\RECYCLER folder moved successfully. C:\WINDOWS\anza.exe moved successfully. C:\WINDOWS\Gr.exe moved successfully. C:\WINDOWS\see.exe moved successfully. C:\WINDOWS\ross.exe moved successfully. C:\WINDOWS\UD.exe moved successfully. C:\WINDOWS\tool.exe moved successfully. C:\WINDOWS\csrs.exe moved successfully. C:\WINDOWS\server.exe moved successfully. C:\WINDOWS\System32\Client.exe moved successfully. C:\WINDOWS\System32\IthasaBinder.exe moved successfully. C:\WINDOWS\SoftonicDownloader_para_utorrent.exe moved successfully. C:\Documents and Settings\Żaneta\Dane aplikacji\OpenCandy folder moved successfully. C:\Documents and Settings\Żaneta\Dane aplikacji\PriceGong\Data folder moved successfully. C:\Documents and Settings\Żaneta\Dane aplikacji\PriceGong folder moved successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\F:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\usb_driver.com deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\Windows Update System deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default User ->Flash cache emptied: 56502 bytes User: LocalService User: NetworkService User: Żaneta ->Flash cache emptied: 5508736 bytes Total Flash Files Cleaned = 5,00 mb [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 35708 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Żaneta ->Temp folder emptied: 112859752 bytes ->Temporary Internet Files folder emptied: 8833000 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 53479147 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 118059130 bytes %systemroot% .tmp files removed: 2503512 bytes %systemroot%\System32 .tmp files removed: 4193316 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 21431550 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 307,00 mb OTL by OldTimer - Version 3.2.26.6 log created on 09172011_150114 Files\Folders moved on Reboot... Registry entries deleted on Reboot...