папка _OTL\MovedFiles у меня была не на диске С: а на диске D: файла mmddyyyy_hhmmss.log не нашел, но при загрузке сразу был открыт файл 11222013_220149
вот его содержимое и публикую тут
Теперь когда загружал браузер Опера аваст уже молчал
щас еще буду пробовать работать в браузерах
All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_USERS\S-1-5-21-324034569-846724871-1184152779-500\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{71238372-3743-33ab-8a9f-93722af74c97}\chrome\content folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{71238372-3743-33ab-8a9f-93722af74c97}\chrome folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{71238372-3743-33ab-8a9f-93722af74c97} folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\itinfo@new-come.ru\defaults\preferences folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\itinfo@new-come.ru\defaults folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\itinfo@new-come.ru\chrome\skin folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\itinfo@new-come.ru\chrome\locale\en-us folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\itinfo@new-come.ru\chrome\locale folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\itinfo@new-come.ru\chrome\content folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\itinfo@new-come.ru\chrome folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\itinfo@new-come.ru folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\firefox\profiles\nahd6ha2.default\searchplugins\webalta-search.xml moved successfully.
C:\Users\Администратор\AppData\Local\Google\Chrome\User Data\Default\Extensions\hffpndpljemgdfjjkijcidbhadeiillo\1.2_0 folder moved successfully.
C:\Users\Администратор\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.5\mz folder moved successfully.
C:\Users\Администратор\AppData\Local\Google\Chrome\User Data\Default\Extensions\mocblcnaofikinigmceddfghppkkjbog\1.0.0.5 folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{0634c8be-e700-47b3-9843-1695590313b5}\defaults\preferences folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{0634c8be-e700-47b3-9843-1695590313b5}\defaults folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{0634c8be-e700-47b3-9843-1695590313b5}\chrome\content folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{0634c8be-e700-47b3-9843-1695590313b5}\chrome folder moved successfully.
C:\Users\Администратор\AppData\Roaming\mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{0634c8be-e700-47b3-9843-1695590313b5} folder moved successfully.
Prefs.js: itinfo%40new-come.ru:13.11.16O3 - HKLM\..\Toolbar: (no name) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No CLSID value found. removed from extensions.enabledAddons
Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ scheduled to be deleted on reboot.
ADS C:\ProgramData\TEMP:41ADDB8A deleted successfully.
ADS C:\ProgramData\TEMP:A064CECC deleted successfully.
========== FILES ==========
C:\Users\Администратор\AppData\Roaming\smwdgt folder moved successfully.
C:\Program Files (x86)\smilfld folder moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktopy.ru folder moved successfully.
C:\Program Files (x86)\desktopy folder moved successfully.
C:\Users\Администратор\AppData\Roaming\smw_inst moved successfully.
C:\Users\Администратор\AppData\Roaming\desktopy.ru folder moved successfully.
File\Folder C:\Users\Администратор\AppData\Roaming\File Scout not found.
C:\Users\Администратор\AppData\Roaming\eCyber\sysicons folder moved successfully.
C:\Users\Администратор\AppData\Roaming\eCyber folder moved successfully.
C:\Users\Администратор\AppData\Local\Opera\Opera\widgets\extension.oex moved successfully.
File\Folder C:\Users\Администратор\AppData\Roaming\closer.exe not found.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 57472 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Public
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Администратор
->Temp folder emptied: 5416797 bytes
->Temporary Internet Files folder emptied: 3743140 bytes
->Java cache emptied: 37038 bytes
->FireFox cache emptied: 52293373 bytes
->Opera cache emptied: 19236703 bytes
->Flash cache emptied: 58929 bytes
User: Все пользователи
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1042 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 69229 bytes
RecycleBin emptied: 24907764 bytes
Total Files Cleaned = 101,00 mb
Restore point Set: OTL Restore Point
OTL by OldTimer - Version 3.2.69.0 log created on 11222013_220149
Files\Folders moved on Reboot...
C:\Users\Администратор\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ scheduled to be deleted on reboot.