All processes killed ========== FILES ========== C:\WINDOWS\Bpulea.exe moved successfully. File\Folder C:\WINDOWS\Bpuleb.exe not found. C:\WINDOWS\tasks\Ytmysnm.job moved successfully. C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job moved successfully. C:\WINDOWS\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job moved successfully. C:\WINDOWS\tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job moved successfully. File\Folder C:\Documents and Settings\Paulina\mqxoq.exe not found. C:\Documents and Settings\Paulina\Dane aplikacji\Ruqife folder moved successfully. C:\Documents and Settings\Paulina\Dane aplikacji\Owlam folder moved successfully. C:\Documents and Settings\Paulina\Dane aplikacji\BabylonToolbar\BabylonToolbar folder moved successfully. C:\Documents and Settings\Paulina\Dane aplikacji\BabylonToolbar folder moved successfully. C:\Documents and Settings\Paulina\Dane aplikacji\FunWebProducts\Data\Paulina folder moved successfully. C:\Documents and Settings\Paulina\Dane aplikacji\FunWebProducts\Data folder moved successfully. C:\Documents and Settings\Paulina\Dane aplikacji\FunWebProducts folder moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Taskman deleted successfully. ========== OTL ========== Service AMService stopped successfully! Service AMService deleted successfully! C:\WINDOWS\Temp\piau\setup.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1202660629-963894560-1644491937-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\*{00A6FAF6-072E-44cf-8957-5838F569A31D} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\*{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found. Registry value HKEY_USERS\S-1-5-21-1202660629-963894560-1644491937-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\*{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\*{CFBFAE00-17A6-11D0-99CB-00C04FD64497}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BabylonToolbar deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Preeminence CD/DVD Helper deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\UIUCU deleted successfully. Registry value HKEY_USERS\S-1-5-21-1202660629-963894560-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Run\\5GUTNY6MFK deleted successfully. File C:\WINDOWS\Bpulea.exe not found. Registry value HKEY_USERS\S-1-5-21-1202660629-963894560-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Run\\ares deleted successfully. Registry value HKEY_USERS\S-1-5-21-1202660629-963894560-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Run\\iGoD deleted successfully. Registry value HKEY_USERS\S-1-5-21-1202660629-963894560-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Run\\mqxoq not found. File C:\Documents and Settings\Paulina\mqxoq.exe not found. Registry value HKEY_USERS\S-1-5-21-1202660629-963894560-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Run\\R8388QA8U8 deleted successfully. C:\Documents and Settings\Paulina\Menu Start\Programy\Autostart\Tchatche Messenger.lnk moved successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default User ->Flash cache emptied: 41044 bytes User: LocalService User: NetworkService ->Flash cache emptied: 1837 bytes User: Paulina ->Flash cache emptied: 135619 bytes Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 3510013 bytes ->Flash cache emptied: 0 bytes User: Paulina ->Temp folder emptied: 30593175 bytes ->Temporary Internet Files folder emptied: 67822480 bytes ->Java cache emptied: 34982004 bytes ->FireFox cache emptied: 84240324 bytes ->Opera cache emptied: 6158695 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2352022 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 287298432 bytes RecycleBin emptied: 15589742 bytes Total Files Cleaned = 508,00 mb OTL by OldTimer - Version 3.2.22.3 log created on 05132011_214846 Files\Folders moved on Reboot... Registry entries deleted on Reboot...