All processes killed ========== FILES ========== C:\Windows\System32\%APPDATA%\Microsoft\Windows\IETldCache folder moved successfully. C:\Windows\System32\%APPDATA%\Microsoft\Windows folder moved successfully. C:\Windows\System32\%APPDATA%\Microsoft folder moved successfully. C:\Windows\System32\%APPDATA% folder moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@ad.yieldmanager[1].txt moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@adnetwork[1].txt moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@adnxs[2].txt moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@ads.adk2[1].txt moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@hit.gemius[1].txt moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@media6degrees[2].txt moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@quantserve[1].txt moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@www.fhserve[1].txt moved successfully. C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\system@yahoo[1].txt moved successfully. C:\Windows\Installer\{bdb23022-5c80-8338-07c7-94b27bd41c87}\U folder moved successfully. C:\Windows\Installer\{bdb23022-5c80-8338-07c7-94b27bd41c87}\L folder moved successfully. C:\Windows\Installer\{bdb23022-5c80-8338-07c7-94b27bd41c87} folder moved successfully. C:\Users\Asia\AppData\Local\{bdb23022-5c80-8338-07c7-94b27bd41c87}\U folder moved successfully. C:\Users\Asia\AppData\Local\{bdb23022-5c80-8338-07c7-94b27bd41c87}\L folder moved successfully. C:\Users\Asia\AppData\Local\{bdb23022-5c80-8338-07c7-94b27bd41c87} folder moved successfully. C:\Users\Asia\AppData\Roaming\5765.exe moved successfully. C:\Users\Asia\Local Settings\Temp folder moved successfully. C:\Users\Asia\Local Settings folder moved successfully. C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml moved successfully. ========== OTL ========== Prefs.js: "AVG Secure Search" removed from browser.search.defaultenginename Prefs.js: "http://isearch.avg.com/search?cid=%7Bb246a327-937d-489c-b424-b3ee90084e93%7D&mid=5b1b57dccd2d49809f7d798fa69a90d8-4b8a601313cc79b43ce67ce4443a9b0b66d5c417&ds=hk011&v=11.1.0.12&lang=en&pr=sa&d=2012-07-10%2016%3A01%3A42&sap=ku&q=" removed from keyword.URL ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Asia ->Temp folder emptied: 815264 bytes ->Temporary Internet Files folder emptied: 1033093 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 104053678 bytes ->Google Chrome cache emptied: 6389008 bytes ->Flash cache emptied: 6576 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 9988804 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 117,00 mb OTL by OldTimer - Version 3.2.63.0 log created on 09242012_091146 Files\Folders moved on Reboot... C:\Windows\temp\HS.log moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...