========== OTL ========== Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\TaskMan:c:\documents and settings\administrator\dane aplikacji\yjty.exe deleted successfully. Registry value HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Documents and Settings\Administrator\msgvn.exe deleted successfully. Registry value HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Documents and Settings\Administrator\Dane aplikacji\yjty.exe deleted successfully. Registry value HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Documents and Settings\Administrator\Dane aplikacji\qmkin.exe deleted successfully. File move failed. X:\AUTORUN.INF scheduled to be moved on reboot. ========== FILES ========== C:\Documents and Settings\Administrator\Dane aplikacji\qmkin.exe moved successfully. C:\FOUND.004 folder moved successfully. C:\FOUND.003 folder moved successfully. C:\FOUND.002 folder moved successfully. C:\WINDOWS\System32\ATIDEMGR.dll moved successfully. C:\WINDOWS\System32\rrrc.yeo moved successfully. C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully. C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully. C:\_BLOCK.WB4 moved successfully. C:\WINDOWS\System32\ammppg.dll moved successfully. OTLPE by OldTimer - Version 3.1.39.0 log created on 08182010_175016