All processes killed ========== OTL ========== Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ASRockIES deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ASRockOCTuner deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gbvhnfijpggfijy deleted successfully. C:\ProgramData\gbvhnfij.exe moved successfully. C:\ProgramData\boplvsqrpfzepft folder moved successfully. C:\ProgramData\eglgoxowlsifocb moved successfully. File C:\ProgramData\gbvhnfij.exe not found. C:\Users\yooot\0.8890107872203196.exe moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Linkury.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\1.2.0.0 folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Linkury.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\DistributionFiles\RollBack folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\DistributionFiles\Profiles folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\DistributionFiles\Configs folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\DistributionFiles folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Common\ServicesPlugins folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Common\iconsWide folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Common\icons folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Common\Configs folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Common folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\pt folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\it folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\helperbar@helperbar.com folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\he folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\fr folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\es folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\de folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\Configs folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\ChromeFiles folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application\ar folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar\Application folder moved successfully. C:\Users\yooot\AppData\Local\Smartbar folder moved successfully. C:\Users\yooot\Documents\My Cheat Tables folder moved successfully. C:\Users\yooot\AppData\Roaming\OpenCandy\OpenCandy_F6CED53D0E0B4B249139BC217EDAD4EF folder moved successfully. C:\Users\yooot\AppData\Roaming\OpenCandy\OpenCandy_7357D3860DC046389FAAD37F92DD8D8F folder moved successfully. C:\Users\yooot\AppData\Roaming\OpenCandy\OpenCandy_5039987FFFBF4A7BBE298AF451FCBCB5 folder moved successfully. C:\Users\yooot\AppData\Roaming\OpenCandy\F6CED53D0E0B4B249139BC217EDAD4EF folder moved successfully. C:\Users\yooot\AppData\Roaming\OpenCandy\7357D3860DC046389FAAD37F92DD8D8F folder moved successfully. C:\Users\yooot\AppData\Roaming\OpenCandy\5039987FFFBF4A7BBE298AF451FCBCB5 folder moved successfully. C:\Users\yooot\AppData\Roaming\OpenCandy folder moved successfully. C:\Users\yooot\AppData\Roaming\Mozilla\Firefox\Profiles\lisl3ejq.default\searchplugins\funmoods.xml moved successfully. C:\Users\yooot\AppData\Roaming\Mozilla\Firefox\Profiles\lisl3ejq.default\searchplugins\startsear.xml moved successfully. C:\Users\yooot\AppData\Roaming\Mozilla\Firefox\Profiles\lisl3ejq.default\searchplugins\sweetim.xml moved successfully. Prefs.js: "Web Search" removed from browser.search.defaultengine Prefs.js: "SweetIM Search" removed from browser.search.defaultenginename Prefs.js: "Web Search" removed from browser.search.order.1 Prefs.js: "http://home.sweetim.com/?crg=3.1010000&st=12&barid={8C8E3F5A-4D7B-469A-B8D3-06D9F2E6FBAD}" removed from browser.startup.homepage Prefs.js: "http://startsear.ch/?aff=2&src=sp&cf=d4d0e91c-23f5-11e1-ac6f-00252272be4f&q=" removed from keyword.URL Prefs.js: "Web Search" removed from sweetim.toolbar.previous.browser.search.defaultenginename Prefs.js: "http://start.funmoods.com/?f=1&a=wbst" removed from browser.startup.homepage Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1D6C8E91-D2A3-4BCF-AB77-AC3E1C3F90B3}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1D6C8E91-D2A3-4BCF-AB77-AC3E1C3F90B3}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully! HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully! ========== REGISTRY ========== HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{20902962-0572-4620-B08F-D6BB89AA1BA7}" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{20902962-0572-4620-B08F-D6BB89AA1BA7}" /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56468 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public User: yooot ->Temp folder emptied: 432079587 bytes ->Temporary Internet Files folder emptied: 95966098 bytes ->Java cache emptied: 18886659 bytes ->FireFox cache emptied: 110585631 bytes ->Google Chrome cache emptied: 7224696 bytes ->Opera cache emptied: 70658088 bytes ->Flash cache emptied: 43923956 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 1269956667 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50668 bytes RecycleBin emptied: 1593498313 bytes Total Files Cleaned = 3 474,00 mb OTL by OldTimer - Version 3.2.54.0 log created on 07132012_191223 Files\Folders moved on Reboot... C:\Users\yooot\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File\Folder C:\Windows\temp\hsperfdata_YOOOT-KOMPUTER$\3068 not found! PendingFileRenameOperations files... File C:\Users\yooot\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found! File C:\Windows\temp\hsperfdata_YOOOT-KOMPUTER$\3068 not found! Registry entries deleted on Reboot...