All processes killed ========== FILES ========== [color=#A23BEC]< C:\Windows\system32\fsutil.exe reparsepoint delete C:\Windows\$NtUninstallKB40952$ /C >[/color] C:\Users\Daniel\Desktop\cmd.bat deleted successfully. C:\Users\Daniel\Desktop\cmd.txt deleted successfully. C:\Windows\$NtUninstallKB40952$\1847201309\U folder moved successfully. C:\Windows\$NtUninstallKB40952$\1847201309\L folder moved successfully. C:\Windows\$NtUninstallKB40952$\1847201309 folder moved successfully. C:\Windows\$NtUninstallKB40952$ folder moved successfully. C:\Windows\System32\%APPDATA%\Microsoft\Windows\IETldCache folder moved successfully. C:\Windows\System32\%APPDATA%\Microsoft\Windows folder moved successfully. C:\Windows\System32\%APPDATA%\Microsoft folder moved successfully. C:\Windows\System32\%APPDATA% folder moved successfully. C:\Users\Daniel\AppData\Local\6e1a0e1d\U folder moved successfully. C:\Users\Daniel\AppData\Local\6e1a0e1d folder moved successfully. C:\Windows\System32\dds_log_ad13.cmd moved successfully. C:\Program Files\mozilla firefox\searchplugins\v9.xml moved successfully. C:\ProgramData\Spybot - Search & Destroy\Recovery folder moved successfully. C:\ProgramData\Spybot - Search & Destroy\Logs folder moved successfully. C:\ProgramData\Spybot - Search & Destroy folder moved successfully. ========== SERVICES/DRIVERS ========== Service VGPU stopped successfully! Service VGPU deleted successfully! Service mcproxy stopped successfully! Service mcproxy deleted successfully! Service EverestDriver stopped successfully! Service EverestDriver deleted successfully! ========== REGISTRY ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\\"Default_Page_URL"|"about:blank" /E : value set successfully! HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! HKEY_USERS\S-1-5-21-2861096368-1483153516-3102804274-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\"Default_Page_URL"|"about:blank" /E : value set successfully! HKEY_USERS\S-1-5-21-2861096368-1483153516-3102804274-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\"Start Page"|"about:blank" /E : value set successfully! Registry value HKEY_USERS\S-1-5-21-2861096368-1483153516-3102804274-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell not found. ========== OTL ========== Prefs.js: "http://www.v9.com/v9tb/v9tb_1332938099_434680" removed from browser.startup.homepage Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TaskTray deleted successfully. Registry value HKEY_USERS\S-1-5-21-2861096368-1483153516-3102804274-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update deleted successfully. Registry value HKEY_USERS\S-1-5-21-2861096368-1483153516-3102804274-1000\Software\Microsoft\Windows\CurrentVersion\Run\\LightScribe Control Panel deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Daniel ->Temp folder emptied: 36537229 bytes ->Temporary Internet Files folder emptied: 59746932 bytes ->Java cache emptied: 2824793 bytes ->FireFox cache emptied: 65179213 bytes ->Flash cache emptied: 93128 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 159154432 bytes RecycleBin emptied: 362706 bytes Total Files Cleaned = 309,00 mb OTL by OldTimer - Version 3.2.39.2 log created on 03292012_144904 Files\Folders moved on Reboot... Registry entries deleted on Reboot...