All processes killed ========== FILES ========== C:\Windows\System32\winn folder moved successfully. C:\Users\Piotr\AppData\Roaming\winvdia.exe moved successfully. C:\Users\Piotr\AppData\Roaming\EAeh777HitAl moved successfully. C:\Users\Piotr\AppData\Roaming\IfLIGJAhHedh moved successfully. C:\Users\Piotr\AppData\Roaming\K1Jrdldtg71E moved successfully. C:\Users\Piotr\AppData\Roaming\Edg1yFHEEhjE moved successfully. C:\Users\Piotr\AppData\Roaming\tJytjgdllIFl moved successfully. C:\Users\Piotr\AppData\Roaming\Ft8F6Gi00fk0 moved successfully. C:\Users\Piotr\AppData\Roaming\k0jhEMErf801 moved successfully. C:\Users\Piotr\AppData\Roaming\E767d0kH81KJ moved successfully. C:\Users\Piotr\AppData\Roaming\fDhfE7JFFt71 moved successfully. C:\Users\Piotr\AppData\Roaming\liflJr6LLH07 moved successfully. C:\Users\Piotr\AppData\Roaming\dlEdM6Fggk7f moved successfully. C:\Users\Piotr\AppData\Roaming\Eg767KrII1yi moved successfully. C:\Users\Piotr\AppData\Roaming\dh1dg0766Ai6 moved successfully. C:\Users\Piotr\AppData\Roaming\chrtmp moved successfully. C:\Users\Piotr\AppData\Roaming\5B3C.tmp moved successfully. C:\Users\Piotr\AppData\Roaming\9B88.tmp moved successfully. C:\Users\Piotr\AppData\Roaming\CDF2.tmp moved successfully. C:\Users\Piotr\AppData\Roaming\D1A8.tmp moved successfully. C:\Users\Piotr\AppData\Roaming\F8BA.tmp moved successfully. File\Folder H:\RECYCLER not found. File\Folder H:\*.lnk not found. [color=#A23BEC]< attrib /d /s -s -h H:\* /C >[/color] Nie moľna odnale«† ˜cieľki - H:\. c:\Users\Piotr\Downloads\cmd.bat deleted successfully. c:\Users\Piotr\Downloads\cmd.txt deleted successfully. ========== REGISTRY ========== Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2\ deleted successfully. ========== OTL ========== Service stllssvr stopped successfully! Service stllssvr deleted successfully! Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HomeKeyLogger deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\winn deleted successfully. File C:\WINDOWS\System32\winn\winn.exe not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B4B52284-A248-4c51-9F7C-F0A0C67FCC9D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4B52284-A248-4c51-9F7C-F0A0C67FCC9D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B4B52284-A248-4c51-9F7C-F0A0C67FCC9D}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4B52284-A248-4c51-9F7C-F0A0C67FCC9D}\ not found. Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} C:\Windows\Downloaded Program Files\erma.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Piotr ->Temp folder emptied: 121201354 bytes ->Temporary Internet Files folder emptied: 3206386 bytes ->Java cache emptied: 4555117 bytes ->FireFox cache emptied: 106924173 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 1921326 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2673176 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 229.00 mb OTL by OldTimer - Version 3.2.31.0 log created on 10182011_112348 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...