All processes killed ========== OTL ========== Service websenselogserver stopped successfully! Service websenselogserver deleted successfully! File %systemroot%\system32\ntcharge.dll not found. Service bridge stopped successfully! Service bridge deleted successfully! File %systemroot%\system32\ARSVC.dll not found. Service atiavaiw stopped successfully! Service atiavaiw deleted successfully! File %systemroot%\system32\cpqvcagent.dll not found. Service aolservice stopped successfully! Service aolservice deleted successfully! File %systemroot%\system32\smartscaps.dll not found. Service LiveUpdate Notice Ex stopped successfully! Service LiveUpdate Notice Ex deleted successfully! File C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon not found. Service cyqbrgzx stopped successfully! Service cyqbrgzx deleted successfully! File C:\WINDOWS\system32\drivers\cyqbrgzx.sys not found. Service catchme stopped successfully! Service catchme deleted successfully! File C:\ComboFix\catchme.sys not found. MRESP50 removed from NetSvcs value successfully! XTrapD12 removed from NetSvcs value successfully! websenselogserver removed from NetSvcs value successfully! aolservice removed from NetSvcs value successfully! SMPLSCSI removed from NetSvcs value successfully! z525mgmt removed from NetSvcs value successfully! atiavaiw removed from NetSvcs value successfully! passthru removed from NetSvcs value successfully! CX23880 removed from NetSvcs value successfully! tapeware removed from NetSvcs value successfully! bmuservice removed from NetSvcs value successfully! bridge removed from NetSvcs value successfully! USB28xxBGA removed from NetSvcs value successfully! Service USB28xxBGA stopped successfully! Service USB28xxBGA deleted successfully! TMBUS removed from NetSvcs value successfully! mssqlserver removed from NetSvcs value successfully! ntsvcmgr removed from NetSvcs value successfully! RTL8169 removed from NetSvcs value successfully! lusbaudio removed from NetSvcs value successfully! blueservice removed from NetSvcs value successfully! szserver removed from NetSvcs value successfully! slssvc removed from NetSvcs value successfully! PTDCBus removed from NetSvcs value successfully! pduip6000dmemcrdmgr removed from NetSvcs value successfully! OracleOraHome92ClientCache removed from NetSvcs value successfully! hpgate removed from NetSvcs value successfully! w550mgmt removed from NetSvcs value successfully! dlbt_device removed from NetSvcs value successfully! Service dlbt_device stopped successfully! Service dlbt_device deleted successfully! quickbooksdb removed from NetSvcs value successfully! Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\UserFaultCheck deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Symantec PIF AlertEng deleted successfully. C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe moved successfully. Starting removal of ActiveX control {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 56504 bytes User: Gość ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 13595 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 44961646 bytes ->Flash cache emptied: 90173 bytes User: Han ->Temp folder emptied: 136032750 bytes ->Temporary Internet Files folder emptied: 36416231 bytes ->Java cache emptied: 10903437 bytes ->FireFox cache emptied: 681731097 bytes ->Google Chrome cache emptied: 9499325 bytes ->Flash cache emptied: 165753 bytes User: LocalService ->Temp folder emptied: 86009 bytes ->Temporary Internet Files folder emptied: 10646677 bytes User: Michał ->Temp folder emptied: 53588 bytes ->Temporary Internet Files folder emptied: 37078 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 42501139 bytes ->Flash cache emptied: 58424 bytes User: NetworkService ->Temp folder emptied: 15634 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2352022 bytes %systemroot%\System32 .tmp files removed: 267372 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 65451 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 931,00 mb OTL by OldTimer - Version 3.2.39.2 log created on 04052012_110845 Files\Folders moved on Reboot... Registry entries deleted on Reboot...