All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\wmasl deleted successfully. C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temp\wmasl.dll moved successfully. ADS C:\WINDOWS:0FCA0E78035093D8 deleted successfully. ========== REGISTRY ========== HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{4BAC46DA-18EE-4549-9A4E-0878751CD0AE}" /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{4BAC46DA-18EE-4549-9A4E-0878751CD0AE}" /E : value set successfully! Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0E60FE92-D127-4D0A-9219-EBA96F833F01}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0E60FE92-D127-4D0A-9219-EBA96F833F01}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0E60FE92-D127-4D0A-9219-EBA96F833F01}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0E60FE92-D127-4D0A-9219-EBA96F833F01}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: k.placzek ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: r.bednarz ->Temp folder emptied: 2351630 bytes ->Temporary Internet Files folder emptied: 1476477 bytes ->Java cache emptied: 0 bytes ->Google Chrome cache emptied: 48491149 bytes ->Flash cache emptied: 1174 bytes User: R447D~1~BED User: t.owsiak ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: user ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes RecycleBin emptied: 119900 bytes Total Files Cleaned = 50,00 mb OTL by OldTimer - Version 3.2.46.0 log created on 06062012_110304 Files\Folders moved on Reboot... C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temp\ExchangePerflog_8484fa3140d23638cfcccd43.dat moved successfully. File\Folder C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temp\JVM70.tmp not found! C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{75D3FF6B-35CE-4BED-8B4A-5C2B49D63179}.tmp moved successfully. File\Folder C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{A1F4B639-41EE-4864-AA00-BE1EB2EFB7ED}.tmp not found! C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{B6FC0255-95F2-485B-A642-F7EAD52FD10B}.tmp moved successfully. C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temporary Internet Files\Content.Word\~WRS{BCAB6084-5391-40F6-BD44-F095EAD5D43B}.tmp moved successfully. C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temporary Internet Files\Content.IE5\LIV65QRP\indexie[1].htm moved successfully. C:\Documents and Settings\r.bednarz\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. Registry entries deleted on Reboot...