All processes killed
========== FILES ==========
C:\aueme.exe moved successfully.
C:\autorun.inf moved successfully.
I:\cahf.exe moved successfully.
Folder move failed. I:\Autorun.inf scheduled to be moved on reboot.
I:\rarnew.dat moved successfully.
I:\zipnew.dat moved successfully.
J:\eluiv.exe moved successfully.
Folder move failed. J:\Autorun.inf scheduled to be moved on reboot.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf\\""|"@SYS:DoesNotExist" /E : value set successfully!
========== OTL ==========
HKU\S-1-5-21-580308997-3297512381-3963118376-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-580308997-3297512381-3963118376-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{472734EA-242A-422B-ADF8-83D1E48CC825} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825}\ not found.
Starting removal of ActiveX control {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
C:\ProgramData\webex\ieatgpc.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}\ not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
C:\Windows\Downloaded Program Files\gp.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Service ZTEusbser6k stopped successfully!
Service ZTEusbser6k deleted successfully!
File C:\Windows\System32\DRIVERS\ZTEusbser6k.sys not found.
Service ZTEusbnmea stopped successfully!
Service ZTEusbnmea deleted successfully!
File C:\Windows\System32\DRIVERS\ZTEusbnmea.sys not found.
Service ZTEusbmdm6k stopped successfully!
Service ZTEusbmdm6k deleted successfully!
File C:\Windows\System32\DRIVERS\ZTEusbmdm6k.sys not found.
Service upperdev stopped successfully!
Service upperdev deleted successfully!
File C:\Windows\System32\DRIVERS\usbser_lowerflt.sys not found.
Service massfilter stopped successfully!
Service massfilter deleted successfully!
File C:\Windows\System32\drivers\massfilter.sys not found.
Service EagleNT stopped successfully!
Service EagleNT deleted successfully!
File C:\Windows\System32\drivers\EagleNT.sys not found.
Service dsnpfdMP stopped successfully!
Service dsnpfdMP deleted successfully!
File C:\Windows\System32\DRIVERS\dsnpfd.sys not found.
Service catchme stopped successfully!
Service catchme deleted successfully!
File C:\ComboFix\catchme.sys not found.
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: All Users
 
User: Cysia
->Flash cache emptied: 97870 bytes
 
User: Default
->Flash cache emptied: 56504 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Gość
->Flash cache emptied: 56504 bytes
 
User: Maria
->Flash cache emptied: 84343 bytes
 
User: Maria_2
->Flash cache emptied: 57410 bytes
 
User: Public
 
Total Flash Files Cleaned = 0,00 mb
 
 
[EMPTYTEMP]
 
User: All Users
 
User: Cysia
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 46167233 bytes
->Java cache emptied: 13825813 bytes
->FireFox cache emptied: 115923182 bytes
->Flash cache emptied: 0 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Gość
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 3459823 bytes
->Flash cache emptied: 0 bytes
 
User: Maria
->Temp folder emptied: 28234066 bytes
->Temporary Internet Files folder emptied: 98714845 bytes
->Java cache emptied: 31402817 bytes
->FireFox cache emptied: 43716960 bytes
->Flash cache emptied: 0 bytes
 
User: Maria_2
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 38970537 bytes
->Flash cache emptied: 0 bytes
 
User: Public
->Temp folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 123320 bytes
RecycleBin emptied: 16293 bytes
 
Total Files Cleaned = 401,00 mb
 
 
OTL by OldTimer - Version 3.2.17.3 log created on 12142010_164316

Files\Folders moved on Reboot...
Folder move failed. I:\Autorun.inf scheduled to be moved on reboot.
Folder move failed. J:\Autorun.inf scheduled to be moved on reboot.
File\Folder C:\Users\Maria\AppData\Local\Temp\tmp8A0C.tmp not found!
File\Folder C:\Users\Maria\AppData\Local\Temp\tmp8B76.tmp not found!
File\Folder C:\Users\Maria\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{26A4985B-9DDE-4744-8C29-3721ED11C641}.tmp not found!
C:\Users\Maria\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{70453F92-710B-462A-9392-76A2CEC2F659}.tmp moved successfully.
C:\Users\Maria\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{ACDF8C5B-9AA4-4119-BF1D-C7FDEF83862C}.tmp moved successfully.
C:\Users\Maria\AppData\Local\Mozilla\Firefox\Profiles\e9g0dqxv.default\Cache\_CACHE_001_ moved successfully.
C:\Users\Maria\AppData\Local\Mozilla\Firefox\Profiles\e9g0dqxv.default\Cache\_CACHE_002_ moved successfully.
C:\Users\Maria\AppData\Local\Mozilla\Firefox\Profiles\e9g0dqxv.default\Cache\_CACHE_003_ moved successfully.
C:\Users\Maria\AppData\Local\Mozilla\Firefox\Profiles\e9g0dqxv.default\Cache\_CACHE_MAP_ moved successfully.
C:\Users\Maria\AppData\Local\Mozilla\Firefox\Profiles\e9g0dqxv.default\urlclassifier3.sqlite moved successfully.

Registry entries deleted on Reboot...