All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\crrss deleted successfully.
C:\Windows\SysWOW64\crrss.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TaskTray deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3569006367-407916940-3798159857-1000\Software\Microsoft\Windows\CurrentVersion\Run\\jushed deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3569006367-407916940-3798159857-1000\Software\Microsoft\Windows\CurrentVersion\Run\\winlogon deleted successfully.
File C:\Users\aaa\winlogon.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit:C:\Windows\system32\crrss.exe deleted successfully.
File C:\Windows\SysWOW64\crrss.exe not found.
========== FILES ==========
C:\Users\aaa\AppData\Local\nircmd.exe moved successfully.
C:\Users\aaa\AppData\Local\Codecs.exe moved successfully.
C:\Users\aaa\AppData\Local\operaprefs.ini moved successfully.
C:\Users\aaa\AppData\Roaming\System.dat moved successfully.
C:\Users\aaa\AppData\Roaming\DirectX.dat moved successfully.
File\Folder C:\Users\aaa\AppData\Roaming\System.dat not found.
C:\Users\aaa\AppData\Roaming\Windows.dat moved successfully.
C:\Users\aaa\AppData\Roaming\etc.dat moved successfully.
File\Folder C:\Users\aaa\AppData\Roaming\DirectX.dat not found.
C:\ProgramData\operaprefs.ini moved successfully.
C:\ProgramData\timerxfile moved successfully.
C:\ProgramData\datesavefile moved successfully.
C:\ProgramData\varsavefile moved successfully.
C:\Windows\Tasks\At1.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully!
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: aaa
->Temp folder emptied: 2637402280 bytes
->Temporary Internet Files folder emptied: 284011783 bytes
->Java cache emptied: 2015283 bytes
->FireFox cache emptied: 158723739 bytes
->Opera cache emptied: 1369629 bytes
->Flash cache emptied: 997454 bytes
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 4857104 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 175458609 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50534 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 3 114,00 mb
 
 
OTL by OldTimer - Version 3.2.33.0 log created on 02202012_163931

Files\Folders moved on Reboot...
C:\Users\aaa\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...