All processes killed ========== OTL ========== HKU\S-1-5-21-2607256538-2259513182-3634248968-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Prefs.js: "qooqlle" removed from browser.search.selectedEngine Prefs.js: "http://www.qooqlle.com/" removed from browser.startup.homepage Registry value HKEY_USERS\S-1-5-21-2607256538-2259513182-3634248968-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\csrs deleted successfully. C:\ProgramData\csrs.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\svhost deleted successfully. C:\Program Files\Common Files\svhost.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\winloqon deleted successfully. C:\ProgramData\winloqon.exe moved successfully. C:\Program Files\Mozilla Firefox\searchplugins\MyHeritage.xml moved successfully. ========== FILES ========== C:\Users\Msi\AppData\Local\TempAH4716.html moved successfully. C:\Users\Msi\AppData\Local\TempAi3764.html moved successfully. C:\Users\Msi\AppData\Local\Tempais980.html moved successfully. C:\Users\Msi\AppData\Local\TempAl1424.html moved successfully. C:\Users\Msi\AppData\Local\TempAM4580.html moved successfully. C:\Users\Msi\AppData\Local\TempAM5832.html moved successfully. C:\Users\Msi\AppData\Local\TempAO3696.html moved successfully. C:\Users\Msi\AppData\Local\Tempas3896.html moved successfully. C:\Users\Msi\AppData\Local\TempAt4008.html moved successfully. C:\Users\Msi\AppData\Local\TempAW4236.html moved successfully. C:\Users\Msi\AppData\Local\TempaX2620.html moved successfully. C:\Users\Msi\AppData\Local\TempBA1032.html moved successfully. C:\Users\Msi\AppData\Local\TempBB1648.html moved successfully. C:\Users\Msi\AppData\Local\TempBb3540.html moved successfully. C:\Users\Msi\AppData\Local\TempBG1284.html moved successfully. C:\Users\Msi\AppData\Local\TempBG2564.html moved successfully. C:\Users\Msi\AppData\Local\TempBj4788.html moved successfully. C:\Users\Msi\AppData\Local\TempBJ5840.html moved successfully. C:\Users\Msi\AppData\Local\TempBL4880.html moved successfully. C:\Users\Msi\AppData\Local\Tempbq4660.html moved successfully. C:\Users\Msi\AppData\Local\TempBt3764.html moved successfully. C:\Users\Msi\AppData\Local\TempBU1488.html moved successfully. C:\Users\Msi\AppData\Local\TempbU4980.html moved successfully. C:\Users\Msi\AppData\Local\Tempca3776.html moved successfully. C:\Users\Msi\AppData\Local\TempCD2460.html moved successfully. C:\Users\Msi\AppData\Local\Tempcd4060.html moved successfully. C:\Users\Msi\AppData\Local\TempCm4464.html moved successfully. C:\Users\Msi\AppData\Local\Tempcm5604.html moved successfully. C:\Users\Msi\AppData\Local\Tempcq4232.html moved successfully. C:\Users\Msi\AppData\Local\Tempcq4760.html moved successfully. C:\Users\Msi\AppData\Local\TempCQ5840.html moved successfully. C:\Users\Msi\AppData\Local\TempCs5588.html moved successfully. C:\Users\Msi\AppData\Local\TempcY5640.html moved successfully. C:\Users\Msi\AppData\Local\TempCZ1296.html moved successfully. C:\Users\Msi\AppData\Local\TempDD4356.html moved successfully. C:\Users\Msi\AppData\Local\TempdE4784.html moved successfully. C:\Users\Msi\AppData\Local\TempDeh956.html moved successfully. C:\Users\Msi\AppData\Local\TempdH4604.html moved successfully. C:\Users\Msi\AppData\Local\TempdK6120.html moved successfully. C:\Users\Msi\AppData\Local\Tempdm2524.html moved successfully. C:\Users\Msi\AppData\Local\TempdP4588.html moved successfully. C:\Users\Msi\AppData\Local\Tempdq1344.html moved successfully. C:\Users\Msi\AppData\Local\TempED4540.html moved successfully. C:\Users\Msi\AppData\Local\TempEK5280.html moved successfully. C:\Users\Msi\AppData\Local\Tempen3580.html moved successfully. C:\Users\Msi\AppData\Local\TempEN6056.html moved successfully. C:\Users\Msi\AppData\Local\TempEv3264.html moved successfully. C:\Users\Msi\AppData\Local\TempEw1580.html moved successfully. C:\Users\Msi\AppData\Local\TempeX5236.html moved successfully. C:\Users\Msi\AppData\Local\TempEy4040.html moved successfully. C:\Users\Msi\AppData\Local\TempFa1740.html moved successfully. C:\Users\Msi\AppData\Local\TempFc2756.html moved successfully. C:\Users\Msi\AppData\Local\TempFD5244.html moved successfully. C:\Users\Msi\AppData\Local\TempFd5536.html moved successfully. C:\Users\Msi\AppData\Local\Tempfk3672.html moved successfully. C:\Users\Msi\AppData\Local\TempfN4460.html moved successfully. C:\Users\Msi\AppData\Local\Tempfo5512.html moved successfully. C:\Users\Msi\AppData\Local\TempFs2968.html moved successfully. C:\Users\Msi\AppData\Local\TempfWj876.html moved successfully. C:\Users\Msi\AppData\Local\TempFZ2564.html moved successfully. C:\Users\Msi\AppData\Local\Tempgb4928.html moved successfully. C:\Users\Msi\AppData\Local\TempGc3184.html moved successfully. C:\Users\Msi\AppData\Local\Tempgc4344.html moved successfully. C:\Users\Msi\AppData\Local\TempgF4704.html moved successfully. C:\Users\Msi\AppData\Local\TempgK5300.html moved successfully. C:\Users\Msi\AppData\Local\TempgP4040.html moved successfully. C:\Users\Msi\AppData\Local\TempgR2812.html moved successfully. C:\Users\Msi\AppData\Local\TempgS5288.html moved successfully. C:\Users\Msi\AppData\Local\TempGt6128.html moved successfully. C:\Users\Msi\AppData\Local\TempGw1296.html moved successfully. C:\Users\Msi\AppData\Local\Tempgy5760.html moved successfully. C:\Users\Msi\AppData\Local\TempHg2304.html moved successfully. C:\Users\Msi\AppData\Local\TempHh3752.html moved successfully. C:\Users\Msi\AppData\Local\TempHI5116.html moved successfully. C:\Users\Msi\AppData\Local\TempHn4952.html moved successfully. C:\Users\Msi\AppData\Local\TemphN5324.html moved successfully. C:\Users\Msi\AppData\Local\TempHt4688.html moved successfully. C:\Users\Msi\AppData\Local\TemphU4788.html moved successfully. C:\Users\Msi\AppData\Local\TempHY5500.html moved successfully. C:\Users\Msi\AppData\Local\Temphz3868.html moved successfully. C:\Users\Msi\AppData\Local\TempIf5244.html moved successfully. C:\Users\Msi\AppData\Local\Tempig3108.html moved successfully. C:\Users\Msi\AppData\Local\TempiK3704.html moved successfully. C:\Users\Msi\AppData\Local\Tempiq1648.html moved successfully. C:\Users\Msi\AppData\Local\Tempir3704.html moved successfully. C:\Users\Msi\AppData\Local\TempIt3756.html moved successfully. C:\Users\Msi\AppData\Local\TempIw4660.html moved successfully. C:\Users\Msi\AppData\Local\TempIY2636.html moved successfully. C:\Users\Msi\AppData\Local\Tempja2304.html moved successfully. C:\Users\Msi\AppData\Local\TempjE9112.html moved successfully. C:\Users\Msi\AppData\Local\TempjH4704.html moved successfully. C:\Users\Msi\AppData\Local\Tempjn4060.html moved successfully. C:\Users\Msi\AppData\Local\TempjP6120.html moved successfully. C:\Users\Msi\AppData\Local\TempJT3052.html moved successfully. C:\Users\Msi\AppData\Local\Tempka1616.html moved successfully. C:\Users\Msi\AppData\Local\Tempkc4952.html moved successfully. C:\Users\Msi\AppData\Local\TempKD4060.html moved successfully. C:\Users\Msi\AppData\Local\TempKe5908.html moved successfully. C:\Users\Msi\AppData\Local\TempKi3052.html moved successfully. C:\Users\Msi\AppData\Local\Tempkj5428.html moved successfully. C:\Users\Msi\AppData\Local\TempKM4540.html moved successfully. C:\Users\Msi\AppData\Local\TempKo3652.html moved successfully. C:\Users\Msi\AppData\Local\TempKQ3592.html moved successfully. C:\Users\Msi\AppData\Local\TempkS2128.html moved successfully. C:\Users\Msi\AppData\Local\TempKS2756.html moved successfully. C:\Users\Msi\AppData\Local\TempKT1032.html moved successfully. C:\Users\Msi\AppData\Local\Tempkt4280.html moved successfully. C:\Users\Msi\AppData\Local\Tempku1740.html moved successfully. C:\Users\Msi\AppData\Local\TempKu5604.html moved successfully. C:\Users\Msi\AppData\Local\TempleT876.html moved successfully. C:\Users\Msi\AppData\Local\TemplF2128.html moved successfully. C:\Users\Msi\AppData\Local\TempLf4604.html moved successfully. C:\Users\Msi\AppData\Local\TempLJ3992.html moved successfully. C:\Users\Msi\AppData\Local\Templn1956.html moved successfully. C:\Users\Msi\AppData\Local\Templn4188.html moved successfully. C:\Users\Msi\AppData\Local\Templo3184.html moved successfully. C:\Users\Msi\AppData\Local\TempLR3428.html moved successfully. C:\Users\Msi\AppData\Local\TempLr4360.html moved successfully. C:\Users\Msi\AppData\Local\TempLR6080.html moved successfully. C:\Users\Msi\AppData\Local\TemplT5280.html moved successfully. C:\Users\Msi\AppData\Local\Templu2948.html moved successfully. C:\Users\Msi\AppData\Local\TempLwZ948.html moved successfully. C:\Users\Msi\AppData\Local\Templx5980.html moved successfully. C:\Users\Msi\AppData\Local\TemplZ2684.html moved successfully. C:\Users\Msi\AppData\Local\TempMA5216.html moved successfully. C:\Users\Msi\AppData\Local\Tempmc3184.html moved successfully. C:\Users\Msi\AppData\Local\TempmC4360.html moved successfully. C:\Users\Msi\AppData\Local\TempmC4588.html moved successfully. C:\Users\Msi\AppData\Local\Tempmj2464.html moved successfully. C:\Users\Msi\AppData\Local\Tempmn4016.html moved successfully. C:\Users\Msi\AppData\Local\TempmR3540.html moved successfully. C:\Users\Msi\AppData\Local\TempNa4016.html moved successfully. C:\Users\Msi\AppData\Local\TempNb9112.html moved successfully. C:\Users\Msi\AppData\Local\Tempnfj864.html moved successfully. C:\Users\Msi\AppData\Local\TempNG2352.html moved successfully. C:\Users\Msi\AppData\Local\TempnG3264.html moved successfully. C:\Users\Msi\AppData\Local\TempNg5760.html moved successfully. C:\Users\Msi\AppData\Local\Tempnq3992.html moved successfully. C:\Users\Msi\AppData\Local\TempNQ5428.html moved successfully. C:\Users\Msi\AppData\Local\Tempnv4928.html moved successfully. C:\Users\Msi\AppData\Local\TempNW2192.html moved successfully. C:\Users\Msi\AppData\Local\Tempnz4016.html moved successfully. C:\Users\Msi\AppData\Local\TempOa3516.html moved successfully. C:\Users\Msi\AppData\Local\TempOe2136.html moved successfully. C:\Users\Msi\AppData\Local\TempOG3184.html moved successfully. C:\Users\Msi\AppData\Local\TempOHf956.html moved successfully. C:\Users\Msi\AppData\Local\Tempol2192.html moved successfully. C:\Users\Msi\AppData\Local\Tempop1488.html moved successfully. C:\Users\Msi\AppData\Local\TempoP4716.html moved successfully. C:\Users\Msi\AppData\Local\TempOQ2612.html moved successfully. C:\Users\Msi\AppData\Local\TempOz5300.html moved successfully. C:\Users\Msi\AppData\Local\TemppBv364.html moved successfully. C:\Users\Msi\AppData\Local\Temppc5916.html moved successfully. C:\Users\Msi\AppData\Local\Temppe3776.html moved successfully. C:\Users\Msi\AppData\Local\Temppl5640.html moved successfully. C:\Users\Msi\AppData\Local\TempPS4356.html moved successfully. C:\Users\Msi\AppData\Local\TempPZ5340.html moved successfully. C:\Users\Msi\AppData\Local\TempQA3744.html moved successfully. C:\Users\Msi\AppData\Local\TempQE3428.html moved successfully. C:\Users\Msi\AppData\Local\Tempqi4784.html moved successfully. C:\Users\Msi\AppData\Local\TempQK3968.html moved successfully. C:\Users\Msi\AppData\Local\TempQp1344.html moved successfully. C:\Users\Msi\AppData\Local\TempqQ4240.html moved successfully. C:\Users\Msi\AppData\Local\TempqQ5980.html moved successfully. C:\Users\Msi\AppData\Local\TempqX4236.html moved successfully. C:\Users\Msi\AppData\Local\TempRL3696.html moved successfully. C:\Users\Msi\AppData\Local\TempRP3612.html moved successfully. C:\Users\Msi\AppData\Local\TempRr6056.html moved successfully. C:\Users\Msi\AppData\Local\TemprZ3896.html moved successfully. C:\Users\Msi\AppData\Local\TempRz5916.html moved successfully. C:\Users\Msi\AppData\Local\TempSA4280.html moved successfully. C:\Users\Msi\AppData\Local\TempSJ2464.html moved successfully. C:\Users\Msi\AppData\Local\TempSq2636.html moved successfully. C:\Users\Msi\AppData\Local\TempSq5300.html moved successfully. C:\Users\Msi\AppData\Local\TempsS2612.html moved successfully. C:\Users\Msi\AppData\Local\TempSt3732.html moved successfully. C:\Users\Msi\AppData\Local\TempSz4240.html moved successfully. C:\Users\Msi\AppData\Local\TemptB3580.html moved successfully. C:\Users\Msi\AppData\Local\TemptcF948.html moved successfully. C:\Users\Msi\AppData\Local\TempTk3744.html moved successfully. C:\Users\Msi\AppData\Local\Tempub4016.html moved successfully. C:\Users\Msi\AppData\Local\TempUBY744.html moved successfully. C:\Users\Msi\AppData\Local\TempuF3804.html moved successfully. C:\Users\Msi\AppData\Local\Tempug5560.html moved successfully. C:\Users\Msi\AppData\Local\TempUl2900.html moved successfully. C:\Users\Msi\AppData\Local\TempUn2136.html moved successfully. C:\Users\Msi\AppData\Local\Tempuo6080.html moved successfully. C:\Users\Msi\AppData\Local\TempUw4688.html moved successfully. C:\Users\Msi\AppData\Local\TempUX3252.html moved successfully. C:\Users\Msi\AppData\Local\TempUZ3672.html moved successfully. C:\Users\Msi\AppData\Local\Tempuz3756.html moved successfully. C:\Users\Msi\AppData\Local\TempVA3752.html moved successfully. C:\Users\Msi\AppData\Local\TempVb4560.html moved successfully. C:\Users\Msi\AppData\Local\TempVE3968.html moved successfully. C:\Users\Msi\AppData\Local\TempveN864.html moved successfully. C:\Users\Msi\AppData\Local\TempvH3916.html moved successfully. C:\Users\Msi\AppData\Local\TempvK4560.html moved successfully. C:\Users\Msi\AppData\Local\TempVL4188.html moved successfully. C:\Users\Msi\AppData\Local\Tempvt2812.html moved successfully. C:\Users\Msi\AppData\Local\TempVv3732.html moved successfully. C:\Users\Msi\AppData\Local\TempVV4060.html moved successfully. C:\Users\Msi\AppData\Local\Tempvv5304.html moved successfully. C:\Users\Msi\AppData\Local\TempVx5588.html moved successfully. C:\Users\Msi\AppData\Local\TempVY4964.html moved successfully. C:\Users\Msi\AppData\Local\TempWb6128.html moved successfully. C:\Users\Msi\AppData\Local\TempWn4496.html moved successfully. C:\Users\Msi\AppData\Local\TempWS2620.html moved successfully. C:\Users\Msi\AppData\Local\TempWW2684.html moved successfully. C:\Users\Msi\AppData\Local\Tempwz5184.html moved successfully. C:\Users\Msi\AppData\Local\TempXF1424.html moved successfully. C:\Users\Msi\AppData\Local\Tempxg4232.html moved successfully. C:\Users\Msi\AppData\Local\TempXK1956.html moved successfully. C:\Users\Msi\AppData\Local\TempxK2948.html moved successfully. C:\Users\Msi\AppData\Local\Tempxp4980.html moved successfully. C:\Users\Msi\AppData\Local\TempxQ3192.html moved successfully. C:\Users\Msi\AppData\Local\TempxRe980.html moved successfully. C:\Users\Msi\AppData\Local\TempXU5116.html moved successfully. C:\Users\Msi\AppData\Local\TempxX1284.html moved successfully. C:\Users\Msi\AppData\Local\TempYD5288.html moved successfully. C:\Users\Msi\AppData\Local\Tempye3692.html moved successfully. C:\Users\Msi\AppData\Local\TempYi2460.html moved successfully. C:\Users\Msi\AppData\Local\TempyT5252.html moved successfully. C:\Users\Msi\AppData\Local\TempZc3916.html moved successfully. C:\Users\Msi\AppData\Local\TempZE3804.html moved successfully. C:\Users\Msi\AppData\Local\Tempzh3252.html moved successfully. C:\Users\Msi\AppData\Local\TempZI2992.html moved successfully. C:\Users\Msi\AppData\Local\TempzM4580.html moved successfully. C:\Users\Msi\AppData\Local\TempzU3192.html moved successfully. C:\Users\Msi\AppData\Local\TempzU4060.html moved successfully. C:\Users\Msi\AppData\Local\TempZX2524.html moved successfully. C:\Users\Msi\AppData\Local\TempZX4880.html moved successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default User: Default User User: Msi ->Flash cache emptied: 3848077 bytes User: Public Total Flash Files Cleaned = 4,00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Msi ->Temp folder emptied: 2467723904 bytes ->Temporary Internet Files folder emptied: 103775626 bytes ->Java cache emptied: 173597 bytes ->FireFox cache emptied: 67781095 bytes ->Google Chrome cache emptied: 288046731 bytes ->Flash cache emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 19254797 bytes RecycleBin emptied: 220076145 bytes Total Files Cleaned = 3 020,00 mb OTL by OldTimer - Version 3.2.22.2 log created on 03012011_115538 Files\Folders moved on Reboot... File\Folder C:\Windows\temp\TMP0000000337EE99DA2956B3E4 not found! Registry entries deleted on Reboot...