All processes killed ========== OTL ========== HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8532a8b7-c06a-41bb-936a-8ce73e4711ed}\ deleted successfully. C:\Program Files\gry\tbgry.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8532a8b7-c06a-41bb-936a-8ce73e4711ed}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8532a8b7-c06a-41bb-936a-8ce73e4711ed}\ not found. File C:\Program Files\gry\tbgry.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{8532a8b7-c06a-41bb-936a-8ce73e4711ed} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8532a8b7-c06a-41bb-936a-8ce73e4711ed}\ not found. File C:\Program Files\gry\tbgry.dll not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\9028929FCAB19A5C00009028027DA034 deleted successfully. C:\Documents and Settings\All Users\Dane aplikacji\9028929FCAB19A5C00009028027DA034\9028929FCAB19A5C00009028027DA034.exe moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0ddc465b-b4fb-11e1-a42d-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ddc465b-b4fb-11e1-a42d-806d6172696f}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0ddc465b-b4fb-11e1-a42d-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ddc465b-b4fb-11e1-a42d-806d6172696f}\ not found. File E:\Run.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1fa38b6b-c55a-11dc-9f18-00241d63bcc5}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1fa38b6b-c55a-11dc-9f18-00241d63bcc5}\ not found. File F:\SanDiskMediaManager.EXE not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d9f07124-d5ff-11dc-9f3b-00241d63bcc5}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d9f07124-d5ff-11dc-9f3b-00241d63bcc5}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d9f07124-d5ff-11dc-9f3b-00241d63bcc5}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d9f07124-d5ff-11dc-9f3b-00241d63bcc5}\ not found. File F:\iStudio.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ not found. File move failed. E:\BlueBirds.exe scheduled to be moved on reboot. ========== FILES ========== AUTORUN.INF not found in C:\ AUTORUN.INF not found in D:\ File move failed. E:\autorun.inf scheduled to be moved on reboot. AUTORUN.INF not found in F:\ $RECYCLE.BIN not found in C:\ $RECYCLE.BIN not found in D:\ $RECYCLE.BIN not found in E:\ $RECYCLE.BIN not found in F:\ C:\RECYCLER\S-1-5-21-117609710-1972579041-682003330-1003 folder moved successfully. C:\RECYCLER folder moved successfully. D:\RECYCLER\S-1-5-21-789336058-2111687655-1801674531-1003 folder moved successfully. D:\RECYCLER\S-1-5-21-117609710-1972579041-682003330-1003 folder moved successfully. D:\RECYCLER folder moved successfully. RECYCLER not found in E:\ RECYCLER not found in F:\ C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk moved successfully. C:\WINDOWS\tasks\Norton Security Scan for Tomek.job moved successfully. C:\WINDOWS\tasks\DriverScanner.job moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\9028929FCAB19A5C00009028027DA034 folder moved successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->FireFox cache emptied: 5902259 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Tomek ->Temp folder emptied: 4470514025 bytes ->Temporary Internet Files folder emptied: 459259 bytes ->FireFox cache emptied: 1314862075 bytes ->Google Chrome cache emptied: 233374620 bytes ->Flash cache emptied: 221184 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 2084612 bytes %systemroot% .tmp files removed: 2352022 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 107 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 5 751,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 06022008_141700 Files\Folders moved on Reboot... File move failed. E:\BlueBirds.exe scheduled to be moved on reboot. File move failed. E:\autorun.inf scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot...