All processes killed ========== REGISTRY ========== Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell deleted successfully. ========== OTL ========== Service f99b5f3053fc0b87 stopped successfully! Service f99b5f3053fc0b87 deleted successfully! C:\WINDOWS\system32\drivers\f99b5f3053fc0b87.sys moved successfully. Service NvUpdSrv stopped successfully! Service NvUpdSrv deleted successfully! C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\NVIDIA Corporation\Update\nvupd32.exe moved successfully. Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully. ========== FILES ========== [color=#A23BEC]< rd /s /q "C:\Documents and Settings\Kacper\Pulpit\ESETNecursRemover.exe_20130307.180820.2872" /C >[/color] C:\Documents and Settings\Kacper\Pulpit\wir\cmd.bat deleted successfully. C:\Documents and Settings\Kacper\Pulpit\wir\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q "C:\Documents and Settings\Kacper\Pulpit\ESETNecursRemover.exe_20130307.170907.1188" /C >[/color] C:\Documents and Settings\Kacper\Pulpit\wir\cmd.bat deleted successfully. C:\Documents and Settings\Kacper\Pulpit\wir\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q "C:\Documents and Settings\Kacper\Pulpit\ESETNecursRemover.exe_20130307.165854.1436" /C >[/color] C:\Documents and Settings\Kacper\Pulpit\wir\cmd.bat deleted successfully. C:\Documents and Settings\Kacper\Pulpit\wir\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q "C:\Documents and Settings\Kacper\Pulpit\ESETNecursRemover.exe_20130307.165550.1400" /C >[/color] C:\Documents and Settings\Kacper\Pulpit\wir\cmd.bat deleted successfully. C:\Documents and Settings\Kacper\Pulpit\wir\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q "C:\Documents and Settings\Kacper\Pulpit\ESETNecursRemover.exe_20130307.165547.1388" /C >[/color] C:\Documents and Settings\Kacper\Pulpit\wir\cmd.bat deleted successfully. C:\Documents and Settings\Kacper\Pulpit\wir\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Kacper ->Temp folder emptied: 2918205 bytes ->Temporary Internet Files folder emptied: 2662322625 bytes ->Java cache emptied: 583827 bytes ->FireFox cache emptied: 119229230 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 475 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 128129 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 4724795 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 2 661,00 mb OTL by OldTimer - Version 3.2.54.1 log created on 03072013_221802 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...