All processes killed
========== FILES ==========
C:\autorun.inf moved successfully.
D:\autorun.inf moved successfully.
autorun.inf not found in E:\
File\Folder C:\WINDOWS\system32\arking0.dll not found.
========== OTL ==========
HKU\S-1-5-21-1757981266-484763869-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Prefs.js: "qooqlle" removed from browser.search.selectedEngine
C:\Documents and Settings\drelyy\Dane aplikacji\Mozilla\Firefox\Profiles\ccumxluz.default\searchplugins\search.xml moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DC deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Readar_sl deleted successfully.
C:\Documents and Settings\drelyy\Dane aplikacji\Readar_sl.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TunesHelper deleted successfully.
C:\Documents and Settings\All Users\TunesHelper.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1757981266-484763869-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run\\AKiller deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1757981266-484763869-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run\\api32 deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1757981266-484763869-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run\\King_ar deleted successfully.
C:\WINDOWS\system32\arking.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1757981266-484763869-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run\\Rubin deleted successfully.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"SuperHidden"|dword:00000001 /E : value set successfully!
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"Hidden"|dword:00000001 /E : value set successfully!
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\\"ShowSuperHidden"|dword:00000001 /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\\"CheckedValue"|dword:00000001 /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden\Policy\DontShowSuperHidden\\@|"" /E : value set successfully!
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: All Users
 
User: Default User
 
User: drelyy
->Flash cache emptied: 1007608 bytes
 
User: LocalService
 
User: NetworkService
 
Total Flash Files Cleaned = 1,00 mb
 
 
[EMPTYTEMP]
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: drelyy
->Temp folder emptied: 356844131 bytes
->Temporary Internet Files folder emptied: 19517636 bytes
->Java cache emptied: 4712203 bytes
->FireFox cache emptied: 114966277 bytes
->Flash cache emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2134153 bytes
%systemroot%\System32 .tmp files removed: 124452 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2611136 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 478,00 mb
 
 
OTL by OldTimer - Version 3.2.20.6 log created on 02052011_131948

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...