All processes killed ========== FILES ========== C:\Documents and Settings\All Users\Dane aplikacji\F4D55F2C0029A93F00675A380CDF108C folder moved successfully. C:\Documents and Settings\s. Iwona\Dane aplikacji\Search Settings\temp folder moved successfully. C:\Documents and Settings\s. Iwona\Dane aplikacji\Search Settings\res folder moved successfully. C:\Documents and Settings\s. Iwona\Dane aplikacji\Search Settings folder moved successfully. ========== OTL ========== Error: No service named Winsock - Google Desktop Search Backup Before Last Install was found to stop! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock - Google Desktop Search Backup Before Last Install deleted successfully. Error: No service named Winsock - Google Desktop Search Backup Before First Install was found to stop! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock - Google Desktop Search Backup Before First Install deleted successfully. Service ps_drv stopped successfully! Service ps_drv deleted successfully! File C:\Program Files\ArcaBit\ArcaVir\ps_drv.sys not found. Error: No service named mbr was found to stop! Service\Driver key mbr not found. File C:\DOCUME~1\S0904~1.IWO\USTAWI~1\Temp\mbr.sys not found. Service HPZipr12 stopped successfully! Service HPZipr12 deleted successfully! File system32\DRIVERS\HPZipr12.sys not found. Service CFcatchme stopped successfully! Service CFcatchme deleted successfully! File C:\DOCUME~1\S0904~1.IWO\USTAWI~1\Temp\CFcatchme.sys not found. Error: No service named catchme was found to stop! Service\Driver key catchme not found. File C:\DOCUME~1\S0904~1.IWO\USTAWI~1\Temp\catchme.sys not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}\ deleted successfully. Registry value HKEY_USERS\S-1-5-21-2608949019-1795743748-2640794766-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found. Registry value HKEY_USERS\S-1-5-21-2608949019-1795743748-2640794766-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{40525A66-DB98-480D-BCF9-7AF88C1AF438}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40525A66-DB98-480D-BCF9-7AF88C1AF438}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{40525A66-DB98-480D-BCF9-7AF88C1AF438}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40525A66-DB98-480D-BCF9-7AF88C1AF438}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7} C:\WINDOWS\Downloaded Program Files\gp.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\swearware\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 56466 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: s. Iwona ->Temp folder emptied: 642206 bytes ->Temporary Internet Files folder emptied: 51508041 bytes ->Java cache emptied: 40859908 bytes ->Google Chrome cache emptied: 0 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 2021644 bytes User: S0904~1~IWO %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2174196 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 5645 bytes RecycleBin emptied: 43539 bytes Total Files Cleaned = 93,00 mb OTL by OldTimer - Version 3.2.42.1 log created on 04262012_155347 Files\Folders moved on Reboot... File\Folder C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{279F646A-E6BC-40C1-8326-C2BDF2877442}.tmp not found! C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{61FD0876-6911-4FF5-911E-60D45EDA08CF}.tmp moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{6A5A3058-7411-4447-9B1F-A4AD0A85F765}.tmp moved successfully. File\Folder C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{B55093FB-B3A2-4AC1-83D3-CF32A892DC79}.tmp not found! C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{BDB4AD68-20C8-436F-8A75-84791EE19CFA}.tmp moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.IE5\YUHUJYBT\fastbutton[1].htm moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.IE5\YUHUJYBT\search[6].htm moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.IE5\VU46CKEB\fastbutton[1].htm moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.IE5\VU46CKEB\page__p__324[1].htm moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.IE5\GX0CMVBF\8181-zeroaccess-nie-moge-wyleczyc-kompa[1].htm moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.IE5\74INULSM\61-diagnostyka-ogolne-raporty-systemowe[1].htm moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\Content.IE5\74INULSM\fastbutton[1].htm moved successfully. C:\Documents and Settings\s. Iwona\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. Registry entries deleted on Reboot...