All processes killed ========== OTL ========== Registry key HKEY_USERS\S-1-5-21-3393852484-3681745173-1571707981-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_USERS\S-1-5-21-3393852484-3681745173-1571707981-1001\Software\Microsoft\Internet Explorer\SearchScopes\{B7318896-2E54-49AD-9E21-79CB2A7D4AD9}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7318896-2E54-49AD-9E21-79CB2A7D4AD9}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ROC_roc_ssl_v12 not found. File C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\yzlv4jpj.default\searchplugins\delta.xml not found. File C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml not found. Folder C:\Users\Daniel\AppData\Roaming\Babylon\ not found. Folder C:\Users\Daniel\AppData\Roaming\OpenCandy\ not found. ========== REGISTRY ========== HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Java cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: All Users User: Daniel ->Temp folder emptied: 400807 bytes ->Temporary Internet Files folder emptied: 126040 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 2102705 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 1740 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 3,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 05022013_131859 Files\Folders moved on Reboot... C:\Users\Daniel\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot...