All processes killed ========== FILES ========== C:\autorun.inf moved successfully. Folder move failed. D:\autorun.inf scheduled to be moved on reboot. Folder move failed. E:\autorun.inf scheduled to be moved on reboot. C:\Program Files\Conduit\Community Alerts folder moved successfully. C:\Program Files\Conduit folder moved successfully. C:\Documents and Settings\Zachary\Ustawienia lokalne\Dane aplikacji\Conduit\Community Alerts\Log folder moved successfully. C:\Documents and Settings\Zachary\Ustawienia lokalne\Dane aplikacji\Conduit\Community Alerts folder moved successfully. C:\Documents and Settings\Zachary\Ustawienia lokalne\Dane aplikacji\Conduit folder moved successfully. ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully. Registry value HKEY_USERS\S-1-5-21-1708537768-1993962763-839522115-1007\Software\Microsoft\Windows\CurrentVersion\Run\\cdoosoft deleted successfully. C:\Documents and Settings\Zachary\Ustawienia lokalne\Temp\herss.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1708537768-1993962763-839522115-1007\Software\Microsoft\Windows\CurrentVersion\Run\\King_ar deleted successfully. C:\WINDOWS\system32\arking.exe moved successfully. C:\WINDOWS\system32\arking1.dll moved successfully. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"SuperHidden"|dword:00000001 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"Hidden"|dword:00000001 /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"ShowSuperHidden"|dword:00000001 /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\\"CheckedValue"|dword:00000001 /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\ deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\\@|"" /E : value set successfully! ========== COMMANDS ========== [EMPTYFLASH] User: Administrator User: All Users User: Default User ->Flash cache emptied: 56468 bytes User: LocalService User: NetworkService User: Oda ->Flash cache emptied: 60757 bytes User: UpdatusUser User: Zachary ->Flash cache emptied: 38846978 bytes Total Flash Files Cleaned = 37,00 mb [EMPTYTEMP] User: Administrator ->Temp folder emptied: 617291739 bytes ->Temporary Internet Files folder emptied: 4576352 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Oda ->Temp folder emptied: 3586927 bytes ->Temporary Internet Files folder emptied: 7321179 bytes ->Java cache emptied: 12767618 bytes ->Google Chrome cache emptied: 339607360 bytes ->Flash cache emptied: 0 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Zachary ->Temp folder emptied: 913542401 bytes ->Temporary Internet Files folder emptied: 1469129828 bytes ->Java cache emptied: 96977 bytes ->FireFox cache emptied: 58822733 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2114584 bytes %systemroot%\System32 .tmp files removed: 68132 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 162160 bytes RecycleBin emptied: 84089 bytes Total Files Cleaned = 3 270,00 mb OTL by OldTimer - Version 3.2.26.1 log created on 08072011_094029 Files\Folders moved on Reboot... Folder move failed. D:\autorun.inf scheduled to be moved on reboot. Folder move failed. E:\autorun.inf scheduled to be moved on reboot. Registry entries deleted on Reboot...