All processes killed ========== OTL ========== Service PBADRV stopped successfully! Service PBADRV deleted successfully! C:\Windows\System32\logmein.dll moved successfully. Service eSettingsService stopped successfully! Service eSettingsService deleted successfully! C:\Windows\System32\FiltUSBEMPIA.dll moved successfully. ========== FILES ========== C:\Users\Mikołaj\AppData\Local\TempaA4580.html moved successfully. C:\Users\Mikołaj\AppData\Local\Tempad4032.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempBo2500.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempBW2500.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempCa2472.html moved successfully. C:\Users\Mikołaj\AppData\Local\Tempcm2968.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempDO3460.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempEC2856.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempeG4028.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempEj4032.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempEo2500.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempfN2472.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempFz3460.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempGY4032.html moved successfully. C:\Users\Mikołaj\AppData\Local\Tempif3460.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempIM4580.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempJL2884.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempjQ4580.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempKc2740.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempKE4048.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempkI4028.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempKt2968.html moved successfully. C:\Users\Mikołaj\AppData\Local\Templp2472.html moved successfully. C:\Users\Mikołaj\AppData\Local\Tempmj4048.html moved successfully. C:\Users\Mikołaj\AppData\Local\Tempmp2740.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempPa4580.html moved successfully. C:\Users\Mikołaj\AppData\Local\TemppJ2856.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempPP2472.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempqC2884.html moved successfully. C:\Users\Mikołaj\AppData\Local\Tempql2856.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempQZ4028.html moved successfully. C:\Users\Mikołaj\AppData\Local\Temprd2856.html moved successfully. C:\Users\Mikołaj\AppData\Local\TemptF2500.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempTK4028.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempVb2884.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempvL2740.html moved successfully. C:\Users\Mikołaj\AppData\Local\Tempvt4032.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempvU4424.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempWF3460.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempWu4424.html moved successfully. C:\Users\Mikołaj\AppData\Local\TempyV2884.html moved successfully. C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data\Default folder moved successfully. C:\Users\Mikołaj\AppData\Local\Google\Chrome\User Data folder moved successfully. C:\Users\Mikołaj\AppData\Local\Google\Chrome folder moved successfully. [color=#A23BEC]< rd /s /q C:\FRST /C >[/color] No captured output from command... C:\Users\Mikołaj\Desktop\Narzędzia\cmd.bat deleted successfully. [color=#A23BEC]< rd /s /q C:\TDSSKiller_Quarantine /C >[/color] No captured output from command... C:\Users\Mikołaj\Desktop\Narzędzia\cmd.bat deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Gość ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Gruby ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Miko ->Temp folder emptied: 0 bytes User: Mikołaj ->Temp folder emptied: 14506125 bytes ->Temporary Internet Files folder emptied: 27367076 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 95160717 bytes ->Flash cache emptied: 470 bytes User: Public ->Temp folder emptied: 0 bytes User: TEMP ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: TEMP.MikołajPC ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: TEMP.MikołajPC.000 ->Temp folder emptied: 0 bytes User: TEMP.MikołajPC.001 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: TEMP.MikołajPC.002 ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 451182 bytes RecycleBin emptied: 4620192 bytes Total Files Cleaned = 136,00 mb OTL by OldTimer - Version 3.2.33.2 log created on 03062012_201433 Files\Folders moved on Reboot... C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat moved successfully. C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8YVFP32\fastbutton[1].htm moved successfully. C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8YVFP32\page__st__40[1].htm moved successfully. C:\Users\Mikołaj\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VH1R56SR\topbuttons[1].xml moved successfully. Registry entries deleted on Reboot...