All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-1801674531-838170752-725345543-1005\Software\Microsoft\Internet Explorer\URLSearchHooks\\*{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\*{CFBFAE00-17A6-11D0-99CB-00C04FD64497}\ deleted successfully. Registry value HKEY_USERS\S-1-5-21-1801674531-838170752-725345543-1005\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found. Registry value HKEY_USERS\S-1-5-21-1801674531-838170752-725345543-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 55947 bytes ->Temporary Internet Files folder emptied: 71246 bytes ->FireFox cache emptied: 3136552 bytes User: All Users User: All Users.WINDOWS User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User.WINDOWS ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Gość ->Temp folder emptied: 1367958 bytes ->Temporary Internet Files folder emptied: 49723939 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 45484772 bytes ->Google Chrome cache emptied: 314830594 bytes ->Flash cache emptied: 10324 bytes User: Ksiegowa ->Temp folder emptied: 568184689 bytes ->Temporary Internet Files folder emptied: 157753267 bytes ->Java cache emptied: 36758953 bytes ->FireFox cache emptied: 120921706 bytes ->Google Chrome cache emptied: 433170758 bytes ->Flash cache emptied: 1087 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: LocalService.ZARZĄDZANIE NT ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService.ZARZĄDZANIE NT ->Temp folder emptied: 901120 bytes ->Temporary Internet Files folder emptied: 33237 bytes User: OEM ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32768 bytes User: raster ->Temp folder emptied: 12929980 bytes ->Temporary Internet Files folder emptied: 394281 bytes ->Flash cache emptied: 348 bytes User: raster.SKLAD_02 ->Temp folder emptied: 748524806 bytes ->Temporary Internet Files folder emptied: 5857512 bytes ->Java cache emptied: 574284 bytes ->Google Chrome cache emptied: 5880286 bytes ->Flash cache emptied: 22972 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2148726 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2387332 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 2 395,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 05182013_165650 Files\Folders moved on Reboot... C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temp\AviraLog.txt moved successfully. File\Folder C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temp\Perflib_Perfdata_1d00.dat not found! C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temporary Internet Files\Content.IE5\RT6RG6ZF\ticker[4].htm moved successfully. C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temporary Internet Files\Content.IE5\KZWUJ50V\18025-trcryptxpackgen3-wolne-ładowanie-systemu[1].txt moved successfully. C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temporary Internet Files\Content.IE5\KZWUJ50V\f[1].txt moved successfully. C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temporary Internet Files\Content.IE5\G18IIPSZ\xd_arbiter[2].php moved successfully. C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temporary Internet Files\Content.IE5\E640AXNS\ticker[6].htm moved successfully. C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temporary Internet Files\Content.IE5\E640AXNS\xd_arbiter[2].php moved successfully. C:\Documents and Settings\Ksiegowa\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. File\Folder C:\Documents and Settings\NetworkService.ZARZĄDZANIE NT\Ustawienia lokalne\Temp\Perflib_Perfdata_714.dat not found! PendingFileRenameOperations files... Registry entries deleted on Reboot...