All processes killed ========== OTL ========== Registry key HKEY_USERS\S-1-5-21-1993962763-113007714-854245398-1003\Software\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found. C:\Program Files\v9Soft folder moved successfully. C:\WINDOWS\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805}.job moved successfully. C:\WINDOWS\Tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}.job moved successfully. Service OMSI download service stopped successfully! Service OMSI download service deleted successfully! Service SirefefRemover stopped successfully! Service SirefefRemover deleted successfully! File C:\DOCUME~1\Private\USTAWI~1\Temp\73d167cc38.tmp not found. Service nczvrrt stopped successfully! Service nczvrrt deleted successfully! File system32\drivers\yhkedse.sys not found. Error: No service named dwshd was found to stop! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dwshd deleted successfully. File C:\WINDOWS\System32\drivers\dwshd.sys not found. Starting removal of ActiveX control {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56475 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 1445105 bytes User: Private ->Temp folder emptied: 6234631 bytes ->Temporary Internet Files folder emptied: 655655 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 58393572 bytes ->Google Chrome cache emptied: 116985013 bytes ->Flash cache emptied: 4437 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 81920 bytes RecycleBin emptied: 137974944 bytes Total Files Cleaned = 307,00 mb OTL by OldTimer - Version 3.2.42.1 log created on 05072012_070837 Files\Folders moved on Reboot... File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...