All processes killed ========== FILES ========== [color=#A23BEC]< netsh winsock reset /C >[/color] Pomyślnie zresetowano Winsock Catalog. Musisz ponownie uruchomić komputer, aby ukończyć resetowanie. C:\Documents and Settings\Marta\Pulpit\fixit\cmd.bat deleted successfully. C:\Documents and Settings\Marta\Pulpit\fixit\cmd.txt deleted successfully. [color=#A23BEC]< netsh firewall reset /C >[/color] Ok. C:\Documents and Settings\Marta\Pulpit\fixit\cmd.bat deleted successfully. C:\Documents and Settings\Marta\Pulpit\fixit\cmd.txt deleted successfully. [color=#A23BEC]< fsutil reparsepoint delete C:\Windows\$NtUninstallKB46700$ /C >[/color] C:\Documents and Settings\Marta\Pulpit\fixit\cmd.bat deleted successfully. C:\Documents and Settings\Marta\Pulpit\fixit\cmd.txt deleted successfully. C:\Documents and Settings\Marta\Ustawienia lokalne\Dane aplikacji\cc808513\U folder moved successfully. C:\Documents and Settings\Marta\Ustawienia lokalne\Dane aplikacji\cc808513 folder moved successfully. C:\Windows\$NtUninstallKB46700$\3430974739\U folder moved successfully. C:\Windows\$NtUninstallKB46700$\3430974739\L folder moved successfully. C:\Windows\$NtUninstallKB46700$\3430974739 folder moved successfully. Folder move failed. C:\Windows\$NtUninstallKB46700$ scheduled to be moved on reboot. [color=#A23BEC]< del "\\?\C:\WINDOWS\System32\ " /C >[/color] C:\Documents and Settings\Marta\Pulpit\fixit\cmd.bat deleted successfully. C:\Documents and Settings\Marta\Pulpit\fixit\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q "C:\Kaspersky Rescue Disk 10.0" /C >[/color] C:\Documents and Settings\Marta\Pulpit\fixit\cmd.bat deleted successfully. C:\Documents and Settings\Marta\Pulpit\fixit\cmd.txt deleted successfully. ========== OTL ========== Service LexBceS stopped successfully! Service LexBceS deleted successfully! Service ACS stopped successfully! Service ACS deleted successfully! Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes ->Flash cache emptied: 0 bytes User: Gość ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 149892 bytes ->Java cache emptied: 53867 bytes ->FireFox cache emptied: 60975890 bytes ->Opera cache emptied: 151278 bytes ->Flash cache emptied: 696 bytes User: LocalService ->Temp folder emptied: 4216 bytes ->Temporary Internet Files folder emptied: 1209553 bytes ->Flash cache emptied: 456 bytes User: Marta ->Temp folder emptied: 1030121152 bytes ->Temporary Internet Files folder emptied: 475904940 bytes ->Java cache emptied: 86607518 bytes ->FireFox cache emptied: 196207438 bytes ->Flash cache emptied: 1945086 bytes User: NetworkService ->Temp folder emptied: 4216 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 19569 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 300081 bytes RecycleBin emptied: 5199752 bytes Total Files Cleaned = 1,773.00 mb OTL by OldTimer - Version 3.2.31.0 log created on 11272011_200709 Files\Folders moved on Reboot... Folder move failed. C:\Windows\$NtUninstallKB46700$ scheduled to be moved on reboot. C:\Documents and Settings\Marta\Ustawienia lokalne\Temporary Internet Files\Content.IE5\I0ZNEUC4\5951-rootkit-zeroaccess-bezmyslne-uzycie-combofix-brak-internetu[1].htm moved successfully. C:\Documents and Settings\Marta\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\A0AB7674-8D67-4F4D-B5E1-96FAEADFB79D.dat moved successfully. File\Folder C:\WINDOWS\temp\Perflib_Perfdata_6f4.dat not found! Registry entries deleted on Reboot...