All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-799944849-2823117135-1810774025-1006\Software\Microsoft\Internet Explorer\URLSearchHooks\\{08C06D61-F1F3-4799-86F8-BE1A89362C85} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ not found. Registry value HKEY_USERS\S-1-5-21-799944849-2823117135-1810774025-1006\Software\Microsoft\Windows\CurrentVersion\RunOnce\\036DFF85000BF250FF3CAD1F81CB3EF3 not found. File C:\Documents and Settings\All Users\Dane aplikacji\036DFF85000BF250FF3CAD1F81CB3EF3\036DFF85000BF250FF3CAD1F81CB3EF3.exe not found. ========== FILES ========== File\Folder C:\Documents and Settings\All Users\Dane aplikacji\036DFF85000BF250FF3CAD1F81CB3EF3 not found. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Platinum\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 520 bytes User: All Users User: biuro ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 396667 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: kasa ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 12117239 bytes ->Java cache emptied: 0 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Kasia_ ->Temp folder emptied: 143 bytes ->Temporary Internet Files folder emptied: 35738 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: NetworkService ->Temp folder emptied: 114688 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 19429412 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 31,00 mb OTL by OldTimer - Version 3.2.26.1 log created on 09042012_092138 Files\Folders moved on Reboot... C:\Documents and Settings\kasa\Ustawienia lokalne\Temporary Internet Files\Content.IE5\8BB2UQKG\12314-falszywy-antywirus-ktory-jest-wirusem[1].htm moved successfully. C:\Documents and Settings\kasa\Ustawienia lokalne\Temporary Internet Files\Content.IE5\8BB2UQKG\fastbutton[1].htm moved successfully. C:\Documents and Settings\kasa\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. File\Folder C:\Documents and Settings\NetworkService\Ustawienia lokalne\Temp\Perflib_Perfdata_180.dat not found! Registry entries deleted on Reboot...