All processes killed ========== FILES ========== C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\rundll32.exe moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\9D04A673E4421F7D00009D04097827CA folder moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\etstsjhshgfvuew moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\BendPokeSkipNew(2) folder moved successfully. C:\Documents and Settings\NetworkService\Dane aplikacji\vqdlkr.dat moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\5276446.exe moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\7148260.exe moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\avdrn.dat moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\-2025827831 moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\Adlume folder moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\Cartall folder moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\Ebydry folder moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\GoforFiles folder moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\SystemProc folder moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\winm folder moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Dane aplikacji\Xyuny folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\chrome folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D} folder moved successfully. C:\Program Files\Mozilla Firefox\extensions folder moved successfully. C:\Program Files\Mozilla Firefox folder moved successfully. C:\WINDOWS\tasks\Go for FilesUpdate.job moved successfully. [color=#A23BEC]< netsh firewall reset /C >[/color] Ok. C:\Documents and Settings\Tomasz Mikołajczyk\Pulpit\cmd.bat deleted successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Pulpit\cmd.txt deleted successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Mozilla\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\ deleted successfully. Registry key HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\ deleted successfully. ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-1214440339-2000478354-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found. Registry value HKEY_USERS\S-1-5-21-1214440339-2000478354-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found. Registry value HKEY_USERS\S-1-5-21-1214440339-2000478354-1801674531-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{F2E259E8-0FC8-438C-A6E0-342DD80FA53E} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F2E259E8-0FC8-438C-A6E0-342DD80FA53E}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Infodelivery\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDrives deleted successfully. Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found. Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found. Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found. Starting removal of ActiveX control {31435657-9980-0010-8000-00AA00389B71} C:\WINDOWS\Downloaded Program Files\wvc1dmo.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{31435657-9980-0010-8000-00AA00389B71}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{31435657-9980-0010-8000-00AA00389B71}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found. Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Service Adobe LM Service stopped successfully! Service Adobe LM Service deleted successfully! Service Cdr4vsd stopped successfully! Service Cdr4vsd deleted successfully! Service AC2003 stopped successfully! Service AC2003 deleted successfully! Service 3c2364b stopped successfully! Service 3c2364b deleted successfully! File C:\WINDOWS\system32\drivers\3c2364b.sys not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 2847598 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Tomasz Mikołajczyk ->Temp folder emptied: 539511 bytes ->Temporary Internet Files folder emptied: 18139830 bytes ->Java cache emptied: 0 bytes ->Flash cache emptied: 506 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 1119430 bytes %systemroot%\System32 .tmp files removed: 3911680 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 16384 bytes RecycleBin emptied: 437102 bytes Total Files Cleaned = 26,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 06102013_211632 Files\Folders moved on Reboot... File\Folder C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temp\~DF27F3.tmp not found! File\Folder C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temp\~DF280D.tmp not found! File\Folder C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temp\~DF2881.tmp not found! File\Folder C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temp\~DF289B.tmp not found! C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\VE3IIZQJ\aiCAUW2JSR.htm moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\VE3IIZQJ\fastbutton[1].htm moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\PHVA8H2Q\12[1].htm moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\PHVA8H2Q\xd_arbiter[1].htm moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\PHVA8H2Q\xd_arbiter[2].htm moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\FGISTBMT\18380-zniknięcie-folderów-i-plików-z-dysku[1].txt moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\FGISTBMT\ai[6].htm moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\FGISTBMT\facebook_com[1].txt moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\95N1M597\like[1].htm moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\Content.IE5\95N1M597\page10[1].txt moved successfully. C:\Documents and Settings\Tomasz Mikołajczyk\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. File\Folder C:\WINDOWS\temp\Perflib_Perfdata_880.dat not found! PendingFileRenameOperations files... Registry entries deleted on Reboot...