eto tova e log-a
All processes killed
========== OTL ==========
Process prxbhl.exe killed successfully!
No active process named evqjexvnhdolwcghawkbu.exe was found!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\bhrzjreluf deleted successfully.
File move failed. C:\Documents and Settings\UserXP\Local Settings\Temp\ivmbshbpfxexeggds.exe scheduled to be moved on reboot.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\vvzb deleted successfully.
File move failed. C:\WINDOWS\system32\ivmbshbpfxexeggds.exe scheduled to be moved on reboot.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cfmrydn deleted successfully.
File move failed. C:\WINDOWS\system32\rfxnfvqfwpxrzcdbrk.exe scheduled to be moved on reboot.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vvzb deleted successfully.
File move failed. C:\Documents and Settings\UserXP\Local Settings\Temp\rfxnfvqfwpxrzcdbrk.exe scheduled to be moved on reboot.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\efkns deleted successfully.
C:\WINDOWS\system32\ivmbshbpfxexeggds.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\inwdmtflt deleted successfully.
C:\Documents and Settings\UserXP\Local Settings\Temp\pfzrldarkfplvaddvqdt.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\efkns deleted successfully.
File C:\Documents and Settings\UserXP\Local Settings\Temp\pfzrldarkfplvaddvqdt.exe not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\rvdjrxin deleted successfully.
File C:\WINDOWS\System32\ivmbshbpfxexeggds.exe not found.
C:\autorun.inf moved successfully.
D:\autorun.inf moved successfully.
G:\autorun.inf moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{519e6564-ec84-11dd-b514-001b77acd5d2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{519e6564-ec84-11dd-b514-001b77acd5d2}\ not found.
G:\cfmrydn.bat moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{519e6564-ec84-11dd-b514-001b77acd5d2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{519e6564-ec84-11dd-b514-001b77acd5d2}\ not found.
G:\wdoxirfnxjk.bat moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{519e6564-ec84-11dd-b514-001b77acd5d2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{519e6564-ec84-11dd-b514-001b77acd5d2}\ not found.
G:\inwdmtflt.bat moved successfully.
C:\WINDOWS\vnjdztslgdpnzglnhetlfs.exe moved successfully.
C:\WINDOWS\rfxnfvqfwpxrzcdbrk.exe moved successfully.
C:\WINDOWS\pfzrldarkfplvaddvqdt.exe moved successfully.
C:\WINDOWS\ivmbshbpfxexeggds.exe moved successfully.
C:\WINDOWS\evqjexvnhdolwcghawkbu.exe moved successfully.
C:\WINDOWS\crkbulhxpjsnwacbsmy.exe moved successfully.
C:\WINDOWS\bndrhvobqhnflmlh.exe moved successfully.
File C:\autorun.inf not found.
C:\WINDOWS\system32\gbaxwtvrppefuemroogby.aif moved successfully.
C:\WINDOWS\gbaxwtvrppefuemroogby.aif moved successfully.
C:\Program Files\gbaxwtvrppefuemroogby.aif moved successfully.
C:\Documents and Settings\UserXP\Local Settings\Application Data\gbaxwtvrppefuemroogby.aif moved successfully.
C:\WINDOWS\system32\vnjdztslgdpnzglnhetlfs.exe moved successfully.
C:\WINDOWS\system32\pfzrldarkfplvaddvqdt.exe moved successfully.
C:\WINDOWS\system32\crkbulhxpjsnwacbsmy.exe moved successfully.
File C:\WINDOWS\System32\ivmbshbpfxexeggds.exe not found.
C:\WINDOWS\system32\bndrhvobqhnflmlh.exe moved successfully.
C:\WINDOWS\system32\inwdmtfltdcnmgynueglssognzenudk.cku moved successfully.
C:\WINDOWS\inwdmtfltdcnmgynueglssognzenudk.cku moved successfully.
C:\Program Files\inwdmtfltdcnmgynueglssognzenudk.cku moved successfully.
C:\Documents and Settings\UserXP\Local Settings\Application Data\inwdmtfltdcnmgynueglssognzenudk.cku moved successfully.
C:\WINDOWS\system32\rfxnfvqfwpxrzcdbrk.exe moved successfully.
C:\WINDOWS\system32\evqjexvnhdolwcghawkbu.exe moved successfully.
C:\WINDOWS\system32\bhrzjreluffrrmfvdorxfgdwerxhpzhu.kvv moved successfully.
C:\WINDOWS\bhrzjreluffrrmfvdorxfgdwerxhpzhu.kvv moved successfully.
C:\Program Files\bhrzjreluffrrmfvdorxfgdwerxhpzhu.kvv moved successfully.
C:\Documents and Settings\UserXP\Local Settings\Application Data\bhrzjreluffrrmfvdorxfgdwerxhpzhu.kvv moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: UserXP
->Temp folder emptied: 6689601 bytes
->Temporary Internet Files folder emptied: 74392 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 3015103 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 32768 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 9,39 mb
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
OTL by OldTimer - Version 3.1.17.0 log created on 12172009_211615
Files\Folders moved on Reboot...
C:\Documents and Settings\UserXP\Local Settings\Temp\ivmbshbpfxexeggds.exe moved successfully.
C:\WINDOWS\system32\ivmbshbpfxexeggds.exe moved successfully.
C:\WINDOWS\system32\rfxnfvqfwpxrzcdbrk.exe moved successfully.
C:\Documents and Settings\UserXP\Local Settings\Temp\rfxnfvqfwpxrzcdbrk.exe moved successfully.
C:\Documents and Settings\UserXP\Local Settings\Temp\bndrhvobqhnflmlh.exe moved successfully.
C:\Documents and Settings\UserXP\Local Settings\Temp\ersoiziuyfo.exe moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_a18.dat moved successfully.
Registry entries deleted on Reboot...
i pak se zatvarq i pak e sahstoto ...