All processes killed ========== OTL ========== Service catchme stopped successfully! Service catchme deleted successfully! File C:\DOCUME~1\Krzysiek\USTAWI~1\Temp\catchme.sys not found. Registry key HKEY_USERS\S-1-5-21-2000478354-1532298954-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}\ not found. Prefs.js: "62.85.54.110" removed from network.proxy.backup.ftp Prefs.js: 3128 removed from network.proxy.backup.ftp_port Prefs.js: "62.85.54.110" removed from network.proxy.backup.socks Prefs.js: 3128 removed from network.proxy.backup.socks_port Prefs.js: "62.85.54.110" removed from network.proxy.backup.ssl Prefs.js: 3128 removed from network.proxy.backup.ssl_port Prefs.js: "213.180.131.135" removed from network.proxy.ftp Prefs.js: 80 removed from network.proxy.ftp_port Prefs.js: "213.180.131.135" removed from network.proxy.http Prefs.js: 80 removed from network.proxy.http_port Prefs.js: "" removed from network.proxy.no_proxies_on Prefs.js: true removed from network.proxy.share_proxy_settings Prefs.js: "213.180.131.135" removed from network.proxy.socks Prefs.js: 80 removed from network.proxy.socks_port Prefs.js: "213.180.131.135" removed from network.proxy.ssl Prefs.js: 80 removed from network.proxy.ssl_port Registry value HKEY_USERS\S-1-5-21-2000478354-1532298954-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{09900DE8-1DCA-443F-9243-26FF581438AF} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09900DE8-1DCA-443F-9243-26FF581438AF}\ not found. Registry value HKEY_USERS\S-1-5-21-2000478354-1532298954-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{472734EA-242A-422B-ADF8-83D1E48CC825} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825}\ not found. Registry value HKEY_USERS\S-1-5-21-2000478354-1532298954-725345543-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found. ========== FILES ========== C:\Documents and Settings\Krzysiek\Ustawienia lokalne\Dane aplikacji\Mail.Ru folder moved successfully. C:\Documents and Settings\Krzysiek\Ustawienia lokalne\Dane aplikacji\Process.exe moved successfully. ========== COMMANDS ========== File move failed. C:\WINDOWS\System32\drivers\etc\Hosts scheduled to be moved on reboot. Error: Unble to create default HOSTS file! [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 57616 bytes User: Krzysiek ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 772649867 bytes ->FireFox cache emptied: 177174783 bytes ->Flash cache emptied: 59296 bytes User: LocalService ->Temp folder emptied: 66744 bytes ->Temporary Internet Files folder emptied: 16488050 bytes User: NetworkService ->Temp folder emptied: 184 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 3464704 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3430 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 925,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 05142013_180320 Files\Folders moved on Reboot... File move failed. C:\WINDOWS\System32\drivers\etc\Hosts scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot...