All processes killed ========== OTL ========== Service MEMSWEEP2 stopped successfully! Service MEMSWEEP2 deleted successfully! File C:\WINDOWS\system32\E.tmp not found. Service InCDRm stopped successfully! Service InCDRm deleted successfully! File system32\drivers\InCDRm.sys not found. Service InCDPass stopped successfully! Service InCDPass deleted successfully! File system32\drivers\InCDPass.sys not found. Service InCDFs stopped successfully! Service InCDFs deleted successfully! File system32\drivers\InCDFs.sys not found. Service CrystalSysInfo stopped successfully! Service CrystalSysInfo deleted successfully! File C:\Program Files\MediaCoder\SysInfo.sys not found. Service catchme stopped successfully! Service catchme deleted successfully! File C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\catchme.sys not found. Service 5776 stopped successfully! Service 5776 deleted successfully! File C:\DOCUME~1\MAŁGOSIA\USTAWI~1\Temp\5776.sys not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\bProtector Start Page| /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Documents and Settings\Małgosia\Dane aplikacji\AltShell.dat deleted successfully. C:\Documents and Settings\Małgosia\Dane aplikacji\AltShell.dat moved successfully. ========== FILES ========== [color=#A23BEC]< attrib /d /s -r -s -h C:\WINDOWS\system32\drivers\etc\hosts /C >[/color] C:\cmd.bat deleted successfully. C:\cmd.txt deleted successfully. C:\Documents and Settings\Małgosia\Dane aplikacji\AltShell.ini moved successfully. File\Folder C:\Documents and Settings\Małgosia\Dane aplikacji\AltShell.dat not found. ========== COMMANDS ========== [EMPTYTEMP] User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: All Users User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: Małgosia ->Temp folder emptied: 3215652 bytes ->Temporary Internet Files folder emptied: 29917823 bytes ->Java cache emptied: 3522304 bytes ->Opera cache emptied: 16797497 bytes ->Flash cache emptied: 1653 bytes User: Ma│gosia ->Temp folder emptied: 0 bytes User: Administrator ->Temp folder emptied: 114688 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Opera cache emptied: 13701411 bytes ->Flash cache emptied: 662 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2216984 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 107862 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 67.00 mb OTL by OldTimer - Version 3.2.69.0 log created on 03272013_084047 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...