========== OTL ========== HKU\marek_ON_C\Software\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Update deleted successfully. C:\Documents and Settings\marek\Dane aplikacji\system\winlogon.exe moved successfully. Registry value HKEY_USERS\marek_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Ekyzelizs deleted successfully. C:\Documents and Settings\marek\Dane aplikacji\Agnepa\laim.exe moved successfully. Registry value HKEY_USERS\marek_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Update deleted successfully. File C:\Documents and Settings\marek\Dane aplikacji\system\winlogon.exe not found. Registry value HKEY_USERS\marek_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\Update deleted successfully. File C:\Documents and Settings\marek\Dane aplikacji\system\winlogon.exe not found. Starting removal of ActiveX control {33564D57-0000-0010-8000-00AA00389B71} " Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_USERS\LocalService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_USERS\marek_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_USERS\NetworkService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_USERS\systemprofile_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71} "\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Documents and Settings\marek\Dane aplikacji\system\winlogon.exe deleted successfully. File C:\Documents and Settings\marek\Dane aplikacji\system\winlogon.exe not found. C:\Documents and Settings\marek\Dane aplikacji\System folder moved successfully. C:\Documents and Settings\marek\Dane aplikacji\Weyt folder moved successfully. C:\Documents and Settings\marek\Dane aplikacji\Ireda folder moved successfully. C:\Documents and Settings\marek\Dane aplikacji\Agnepa folder moved successfully. C:\Documents and Settings\marek\Dane aplikacji\Babylon folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\Babylon folder moved successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Documents and Settings\marek\Dane aplikacji\system\winlogon.exe deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: marek ->Temp folder emptied: 5901028 bytes ->Temporary Internet Files folder emptied: 637912 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 71005220 bytes ->Google Chrome cache emptied: 6099312 bytes ->Flash cache emptied: 17926 bytes User: NetworkService ->Temp folder emptied: 212992 bytes ->Temporary Internet Files folder emptied: 78349085 bytes ->Java cache emptied: 0 bytes ->Flash cache emptied: 1428 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 98304 bytes Total Files Cleaned = 155.00 mb OTLPE by OldTimer - Version 3.1.48.0 log created on 09212012_002148