All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-3367781697-3170282490-3786960534-1006\Software\Microsoft\Windows\CurrentVersion\Run\\Wewuyp deleted successfully. C:\Documents and Settings\vobis\Dane aplikacji\Heefo\giel.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-3367781697-3170282490-3786960534-1006\Software\Microsoft\Windows\CurrentVersion\Run\\ZetNews deleted successfully. Registry value HKEY_USERS\S-1-5-21-3367781697-3170282490-3786960534-1006\Software\Microsoft\Windows\CurrentVersion\RunOnce\\6F63A5660076AB0BF5B2F2B981CB3F95 deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\6F63A5660076AB0BF5B2F2B981CB3F95\6F63A5660076AB0BF5B2F2B981CB3F95.exe moved successfully. Starting removal of ActiveX control {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. ========== FILES ========== C:\Documents and Settings\All Users\Dane aplikacji\6F63A5660076AB0BF5B2F2B981CB3F95 folder moved successfully. C:\Documents and Settings\vobis\Menu Start\Programy\Live Security Platinum folder moved successfully. C:\Documents and Settings\vobis\Dane aplikacji\Uvke folder moved successfully. C:\Documents and Settings\vobis\Dane aplikacji\Ketigi folder moved successfully. C:\Documents and Settings\vobis\Dane aplikacji\Heefo folder moved successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\WINDOWS\explorer.exe deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Platinum\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 13165158 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: vobis ->Temp folder emptied: 489418680 bytes ->Temporary Internet Files folder emptied: 507605399 bytes ->Java cache emptied: 154939567 bytes ->Google Chrome cache emptied: 7107130 bytes ->Flash cache emptied: 456 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 19569 bytes %systemroot%\System32 .tmp files removed: 33112612 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 55811528 bytes RecycleBin emptied: 24680641 bytes Total Files Cleaned = 1 226,00 mb OTL by OldTimer - Version 3.2.61.3 log created on 09142012_071805 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...