All processes killed ========== OTL ========== HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully! HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ECC46D41-74DB-484A-B92F-6F93D4EBB0D6}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECC46D41-74DB-484A-B92F-6F93D4EBB0D6}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Runonce deleted successfully. File move failed. C:\Windows\SysWOW64\runouce.exe scheduled to be moved on reboot. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\sxstrace deleted successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\1472\sxstrace.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableLUA deleted successfully. 1 moved successfully. ========== FILES ========== C:\Users\PC\AppData\Roaming\hellomoto folder moved successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\1472 folder moved successfully. C:\Users\PC\M-10-8754-86589-55555 folder moved successfully. C:\Users\PC\M-10-6897-8685-3464 folder moved successfully. File\Folder attrib -r -s -h C:\Windows\SysNative\drivers\etc\hosts not found. ========== REGISTRY ========== HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"|"{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: PC ->Temp folder emptied: 720792 bytes ->Temporary Internet Files folder emptied: 56827762 bytes ->FireFox cache emptied: 0 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 1515 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 13806 bytes %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 2448016 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 57,00 mb OTL by OldTimer - Version 3.2.56.0 log created on 08082012_100942 Files\Folders moved on Reboot... C:\Windows\SysWOW64\runouce.exe moved successfully. File move failed. C:\Users\PC\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot. C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OAL15SZW\ai[11].htm moved successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OAL15SZW\messaging_upload[1].htm moved successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HEF280JN\ai[5].htm moved successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HEF280JN\ai[6].htm moved successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HEF280JN\facebook_com[1].htm moved successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HEF280JN\fastbutton[1].htm moved successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\23COTR8G\12[2].htm moved successfully. C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\23COTR8G\ai[9].htm moved successfully. PendingFileRenameOperations files... File C:\Windows\SysWOW64\runouce.exe not found! [2012-08-07 16:01:59 | 000,000,000 | ---- | M] () C:\Users\PC\AppData\Local\Temp\FXSAPIDebugLogFile.txt : Unable to obtain MD5 File C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OAL15SZW\ai[11].htm not found! File C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OAL15SZW\messaging_upload[1].htm not found! File C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HEF280JN\ai[5].htm not found! File C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HEF280JN\ai[6].htm not found! File C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HEF280JN\facebook_com[1].htm not found! File C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HEF280JN\fastbutton[1].htm not found! File C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\23COTR8G\12[2].htm not found! File C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\23COTR8G\ai[9].htm not found! Registry entries deleted on Reboot...