All processes killed ========== FILES ========== [color=#A23BEC]< attrib -r -s -h C:\Windows\System32\drivers\etc\hosts /C >[/color] C:\Documents and Settings\Krzemyk\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\Krzemyk\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< C:\Windows\system32\fsutil.exe reparsepoint delete C:\Windows\$NtUninstallKB12850$ /C >[/color] Error: The system cannot find the file specified. C:\Documents and Settings\Krzemyk\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\Krzemyk\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q C:\Windows\$NtUninstallKB12850$ /C >[/color] C:\Documents and Settings\Krzemyk\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\Krzemyk\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< reg delete HKCU\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /f /C >[/color] The operation completed successfully C:\Documents and Settings\Krzemyk\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\Krzemyk\Desktop\cmd.txt deleted successfully. C:\Documents and Settings\All Users\Application Data\F4D55F0E000D3E5D00715E6CD151FC84 folder moved successfully. C:\Documents and Settings\Krzemyk\Local Settings\Application Data\{03c2c37e-7aba-17ff-5e6e-a890f7cf63c3}\U folder moved successfully. C:\Documents and Settings\Krzemyk\Local Settings\Application Data\{03c2c37e-7aba-17ff-5e6e-a890f7cf63c3}\L folder moved successfully. C:\Documents and Settings\Krzemyk\Local Settings\Application Data\{03c2c37e-7aba-17ff-5e6e-a890f7cf63c3} folder moved successfully. ========== OTL ========== Prefs.js: "iMesh Web Search" removed from browser.search.defaultenginename Prefs.js: "iMesh Web Search" removed from browser.search.order.1 Prefs.js: "http://search.imesh.com/web?src=ffb&systemid=1&q=" removed from keyword.URL Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}\ not found. C:\Documents and Settings\Krzemyk\Start Menu\Programs\Startup\Wilq - Kalendarz 2011.lnk moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully. HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}\ not found. HKEY_USERS\S-1-5-21-329068152-220523388-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! Registry key HKEY_USERS\S-1-5-21-329068152-220523388-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 56478 bytes User: Krzemyk ->Temp folder emptied: 112981647 bytes ->Temporary Internet Files folder emptied: 83782650 bytes ->Java cache emptied: 26039211 bytes ->FireFox cache emptied: 251015561 bytes ->Google Chrome cache emptied: 10873889 bytes ->Opera cache emptied: 27354728 bytes ->Flash cache emptied: 1187848 bytes User: LocalService ->Temp folder emptied: 65984 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2175612 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 438668 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 440963183 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 913,00 mb OTL by OldTimer - Version 3.2.49.0 log created on 06172012_202055 Files\Folders moved on Reboot... Registry entries deleted on Reboot...