All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adwcleaner_4.204.exe\ deleted successfully. File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AnVir.exe\ deleted successfully. File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutoLogger.exe\ deleted successfully. File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleaner64.exe\ deleted successfully. File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FRST.exe\ deleted successfully. File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FRST64.exe\ deleted successfully. File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegWorks.exe\ deleted successfully. File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSITx64.exe\ deleted successfully. File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. ========== FILES ========== C:\Users\Mateusz\AppData\Local\{C4587263-B2E9-4ED4-8E6D-2C934E697A38} folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Mateusz ->Temp folder emptied: 71481720 bytes ->Temporary Internet Files folder emptied: 153362071 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 25900874 bytes ->Google Chrome cache emptied: 362656215 bytes ->Flash cache emptied: 841 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 1075408 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 58470981 bytes RecycleBin emptied: 1405187752 bytes Total Files Cleaned = 1 982,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 06102015_183709 Files\Folders moved on Reboot... File move failed. C:\Windows\SysWOW64\svchost.exe scheduled to be moved on reboot. C:\Users\Mateusz\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\Mateusz\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully. File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot...