All processes killed ========== FILES ========== C:\Users\KAROLINKA\youitew.exe moved successfully. C:\Windows\System32\youitew.exe moved successfully. C:\Windows\System32\autorun.inf moved successfully. C:\Windows\System32\...lnk moved successfully. C:\Windows\System32\..lnk moved successfully. C:\Windows\System32\0409.lnk moved successfully. C:\Windows\System32\0415.lnk moved successfully. C:\Windows\System32\AdvancedInstallers.lnk moved successfully. C:\Windows\System32\ar-SA.lnk moved successfully. C:\Windows\System32\bg-BG.lnk moved successfully. C:\Windows\System32\Boot.lnk moved successfully. C:\Windows\System32\Branding.lnk moved successfully. C:\Windows\System32\ca-ES.lnk moved successfully. C:\Windows\System32\catroot.lnk moved successfully. C:\Windows\System32\catroot2.lnk moved successfully. C:\Windows\System32\CodeIntegrity.lnk moved successfully. C:\Windows\System32\com.lnk moved successfully. C:\Windows\System32\config.lnk moved successfully. C:\Windows\System32\cs-CZ.lnk moved successfully. C:\Windows\System32\da-DK.lnk moved successfully. C:\Windows\System32\de-DE.lnk moved successfully. C:\Windows\System32\directx.lnk moved successfully. C:\Windows\System32\Documents.lnk moved successfully. C:\Windows\System32\drivers.lnk moved successfully. C:\Windows\System32\DriverStore.lnk moved successfully. C:\Windows\System32\el-GR.lnk moved successfully. C:\Windows\System32\en-US.lnk moved successfully. C:\Windows\System32\en.lnk moved successfully. C:\Windows\System32\ENU.lnk moved successfully. C:\Windows\System32\es-ES.lnk moved successfully. C:\Windows\System32\et-EE.lnk moved successfully. C:\Windows\System32\eu-ES.lnk moved successfully. C:\Windows\System32\EventProviders.lnk moved successfully. C:\Windows\System32\fi-FI.lnk moved successfully. C:\Windows\System32\fr-FR.lnk moved successfully. C:\Windows\System32\GroupPolicy.lnk moved successfully. C:\Windows\System32\GroupPolicyUsers.lnk moved successfully. C:\Windows\System32\he-IL.lnk moved successfully. C:\Windows\System32\hr-HR.lnk moved successfully. C:\Windows\System32\hu-HU.lnk moved successfully. C:\Windows\System32\ias.lnk moved successfully. C:\Windows\System32\icsxml.lnk moved successfully. C:\Windows\System32\IME.lnk moved successfully. C:\Windows\System32\inetsrv.lnk moved successfully. C:\Windows\System32\it-IT.lnk moved successfully. C:\Windows\System32\ja-JP.lnk moved successfully. C:\Windows\System32\ko-KR.lnk moved successfully. C:\Windows\System32\Lang.lnk moved successfully. C:\Windows\System32\licensing.lnk moved successfully. C:\Windows\System32\LogFiles.lnk moved successfully. C:\Windows\System32\lt-LT.lnk moved successfully. C:\Windows\System32\lv-LV.lnk moved successfully. C:\Windows\System32\Macromed.lnk moved successfully. C:\Windows\System32\manifeststore.lnk moved successfully. C:\Windows\System32\Microsoft.lnk moved successfully. C:\Windows\System32\migration.lnk moved successfully. C:\Windows\System32\migwiz.lnk moved successfully. C:\Windows\System32\Msdtc.lnk moved successfully. C:\Windows\System32\MUI.lnk moved successfully. C:\Windows\System32\Music.lnk moved successfully. C:\Windows\System32\nb-NO.lnk moved successfully. C:\Windows\System32\NDF.lnk moved successfully. C:\Windows\System32\networklist.lnk moved successfully. C:\Windows\System32\New Folder.lnk moved successfully. C:\Windows\System32\nl-NL.lnk moved successfully. C:\Windows\System32\no-NO.lnk moved successfully. C:\Windows\System32\oem.lnk moved successfully. C:\Windows\System32\oobe.lnk moved successfully. C:\Windows\System32\Passwords.lnk moved successfully. C:\Windows\System32\Pictures.lnk moved successfully. C:\Windows\System32\pl-PL.lnk moved successfully. C:\Windows\System32\pl.lnk moved successfully. C:\Windows\System32\Printing_Admin_Scripts.lnk moved successfully. C:\Windows\System32\pt-BR.lnk moved successfully. C:\Windows\System32\pt-PT.lnk moved successfully. C:\Windows\System32\ras.lnk moved successfully. C:\Windows\System32\RemInst.lnk moved successfully. C:\Windows\System32\restore.lnk moved successfully. C:\Windows\System32\ro-RO.lnk moved successfully. C:\Windows\System32\ru-RU.lnk moved successfully. C:\Windows\System32\setup.lnk moved successfully. C:\Windows\System32\sk-SK.lnk moved successfully. C:\Windows\System32\sl-SI.lnk moved successfully. C:\Windows\System32\slmgr.lnk moved successfully. C:\Windows\System32\SLUI.lnk moved successfully. C:\Windows\System32\SMI.lnk moved successfully. C:\Windows\System32\Speech.lnk moved successfully. C:\Windows\System32\spool.lnk moved successfully. C:\Windows\System32\SPReview.lnk moved successfully. C:\Windows\System32\sr-Latn-CS.lnk moved successfully. C:\Windows\System32\SRSLabs.lnk moved successfully. C:\Windows\System32\sv-SE.lnk moved successfully. C:\Windows\System32\sysprep.lnk moved successfully. C:\Windows\System32\Tasks.lnk moved successfully. C:\Windows\System32\th-TH.lnk moved successfully. C:\Windows\System32\tr-TR.lnk moved successfully. C:\Windows\System32\uk-UA.lnk moved successfully. C:\Windows\System32\vi-VN.lnk moved successfully. C:\Windows\System32\Video.lnk moved successfully. C:\Windows\System32\Vistalizator.lnk moved successfully. C:\Windows\System32\vs08.lnk moved successfully. C:\Windows\System32\wbem.lnk moved successfully. C:\Windows\System32\WCN.lnk moved successfully. C:\Windows\System32\WDI.lnk moved successfully. C:\Windows\System32\wfp.lnk moved successfully. C:\Windows\System32\winevt.lnk moved successfully. C:\Windows\System32\winrm.lnk moved successfully. C:\Windows\System32\XPSViewer.lnk moved successfully. C:\Windows\System32\zh-CN.lnk moved successfully. C:\Windows\System32\zh-HK.lnk moved successfully. C:\Windows\System32\zh-TW.lnk moved successfully. E:\autorun.inf moved successfully. ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-572202707-500456837-2452355869-1000\Software\Microsoft\Windows\CurrentVersion\Run\\youitew deleted successfully. File C:\Users\KAROLINKA\youitew.exe not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default User: Default User User: KAROLINKA ->Flash cache emptied: 52617 bytes User: Public Total Flash Files Cleaned = 0.00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: KAROLINKA ->Temp folder emptied: 208721056 bytes ->Temporary Internet Files folder emptied: 356999164 bytes ->Java cache emptied: 10284 bytes ->FireFox cache emptied: 87388486 bytes ->Flash cache emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 40888985 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 9930297 bytes Total Files Cleaned = 671.00 mb OTL by OldTimer - Version 3.2.17.3 log created on 11192010_174435 Files\Folders moved on Reboot... Registry entries deleted on Reboot...