All processes killed ========== FILES ========== C:\Windows\SysWow64\d3dim7003.dll moved successfully. C:\Windows\tasks\Unlsy.job moved successfully. C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\ffxtlbr@Facemoods.com\defaults\preferences folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\ffxtlbr@Facemoods.com\defaults folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\ffxtlbr@Facemoods.com\content\preferences folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\ffxtlbr@Facemoods.com\content\images folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\ffxtlbr@Facemoods.com\content folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\ffxtlbr@Facemoods.com\components folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\ffxtlbr@Facemoods.com\chrome folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\ffxtlbr@Facemoods.com folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\DTToolbar@toolbarnet.com\components\Resources folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\DTToolbar@toolbarnet.com\components folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\DTToolbar@toolbarnet.com\chrome\content folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\DTToolbar@toolbarnet.com\chrome folder moved successfully. C:\Users\Clameur\AppData\Roaming\mozilla\Firefox\Profiles\oplx8e79.default\extensions\DTToolbar@toolbarnet.com folder moved successfully. C:\Users\Clameur\AppData\Roaming\Mozilla\Firefox\Profiles\oplx8e79.default\searchplugins\askcom.xml moved successfully. C:\Users\Clameur\AppData\Roaming\Mozilla\Firefox\Profiles\oplx8e79.default\searchplugins\daemon-search.xml moved successfully. C:\Users\Clameur\AppData\Local\Tempah5872.html moved successfully. C:\Users\Clameur\AppData\Local\TempaJ3548.html moved successfully. C:\Users\Clameur\AppData\Local\Tempam3088.html moved successfully. C:\Users\Clameur\AppData\Local\Tempan5476.html moved successfully. C:\Users\Clameur\AppData\Local\Tempao5188.html moved successfully. C:\Users\Clameur\AppData\Local\TempAP2260.html moved successfully. C:\Users\Clameur\AppData\Local\Tempaz5540.html moved successfully. C:\Users\Clameur\AppData\Local\TempBdZ584.html moved successfully. C:\Users\Clameur\AppData\Local\TempbH3432.html moved successfully. C:\Users\Clameur\AppData\Local\Tempbm4252.html moved successfully. C:\Users\Clameur\AppData\Local\TempBP4564.html moved successfully. C:\Users\Clameur\AppData\Local\TempbqU712.html moved successfully. C:\Users\Clameur\AppData\Local\TempbS3684.html moved successfully. C:\Users\Clameur\AppData\Local\TempBV5720.html moved successfully. C:\Users\Clameur\AppData\Local\TempbW5192.html moved successfully. C:\Users\Clameur\AppData\Local\Tempby5776.html moved successfully. C:\Users\Clameur\AppData\Local\TempCe5992.html moved successfully. C:\Users\Clameur\AppData\Local\TempCF6500.html moved successfully. C:\Users\Clameur\AppData\Local\TempcI4156.html moved successfully. C:\Users\Clameur\AppData\Local\Tempcm6116.html moved successfully. C:\Users\Clameur\AppData\Local\TempCP5272.html moved successfully. C:\Users\Clameur\AppData\Local\TempcT1800.html moved successfully. C:\Users\Clameur\AppData\Local\TempCU2836.html moved successfully. C:\Users\Clameur\AppData\Local\Tempcv5260.html moved successfully. C:\Users\Clameur\AppData\Local\TempCw6040.html moved successfully. C:\Users\Clameur\AppData\Local\TempCX8020.html moved successfully. C:\Users\Clameur\AppData\Local\TempdB3560.html moved successfully. C:\Users\Clameur\AppData\Local\Tempdc5776.html moved successfully. C:\Users\Clameur\AppData\Local\Tempdc5836.html moved successfully. C:\Users\Clameur\AppData\Local\Tempdd1800.html moved successfully. C:\Users\Clameur\AppData\Local\TempDeM340.html moved successfully. C:\Users\Clameur\AppData\Local\TempdF3900.html moved successfully. C:\Users\Clameur\AppData\Local\TempdH5600.html moved successfully. C:\Users\Clameur\AppData\Local\TempdK6028.html moved successfully. C:\Users\Clameur\AppData\Local\TempDL4808.html moved successfully. C:\Users\Clameur\AppData\Local\TempDM5396.html moved successfully. C:\Users\Clameur\AppData\Local\TempDr4704.html moved successfully. C:\Users\Clameur\AppData\Local\TempDt4456.html moved successfully. C:\Users\Clameur\AppData\Local\TempEE3684.html moved successfully. C:\Users\Clameur\AppData\Local\TempeH3392.html moved successfully. C:\Users\Clameur\AppData\Local\Tempej2112.html moved successfully. C:\Users\Clameur\AppData\Local\TempEj3788.html moved successfully. C:\Users\Clameur\AppData\Local\TempeU2968.html moved successfully. C:\Users\Clameur\AppData\Local\TempEW2180.html moved successfully. C:\Users\Clameur\AppData\Local\TempeY4580.html moved successfully. C:\Users\Clameur\AppData\Local\TempfC5344.html moved successfully. C:\Users\Clameur\AppData\Local\TempFf3468.html moved successfully. C:\Users\Clameur\AppData\Local\TempFF3684.html moved successfully. C:\Users\Clameur\AppData\Local\TempfI3676.html moved successfully. C:\Users\Clameur\AppData\Local\TempfS5276.html moved successfully. C:\Users\Clameur\AppData\Local\TempFS6028.html moved successfully. C:\Users\Clameur\AppData\Local\Tempfu3936.html moved successfully. C:\Users\Clameur\AppData\Local\TempfU5076.html moved successfully. C:\Users\Clameur\AppData\Local\Tempfw5652.html moved successfully. C:\Users\Clameur\AppData\Local\Tempg10140.html moved successfully. C:\Users\Clameur\AppData\Local\Tempgk5592.html moved successfully. C:\Users\Clameur\AppData\Local\Tempgn6280.html moved successfully. C:\Users\Clameur\AppData\Local\TempgO5884.html moved successfully. C:\Users\Clameur\AppData\Local\TempGT5020.html moved successfully. C:\Users\Clameur\AppData\Local\TempGU5260.html moved successfully. C:\Users\Clameur\AppData\Local\TempgX5948.html moved successfully. C:\Users\Clameur\AppData\Local\TempGZ5728.html moved successfully. C:\Users\Clameur\AppData\Local\TempHj2760.html moved successfully. C:\Users\Clameur\AppData\Local\TempHP5640.html moved successfully. C:\Users\Clameur\AppData\Local\Temphr1276.html moved successfully. C:\Users\Clameur\AppData\Local\TempHR4840.html moved successfully. C:\Users\Clameur\AppData\Local\TempIa5828.html moved successfully. C:\Users\Clameur\AppData\Local\Tempih3728.html moved successfully. C:\Users\Clameur\AppData\Local\TempIJ1128.html moved successfully. C:\Users\Clameur\AppData\Local\Tempik4580.html moved successfully. C:\Users\Clameur\AppData\Local\TempIN3680.html moved successfully. C:\Users\Clameur\AppData\Local\TempIO5836.html moved successfully. C:\Users\Clameur\AppData\Local\TempIu5872.html moved successfully. C:\Users\Clameur\AppData\Local\TempIW3316.html moved successfully. C:\Users\Clameur\AppData\Local\TempIx5192.html moved successfully. C:\Users\Clameur\AppData\Local\TempJC6972.html moved successfully. C:\Users\Clameur\AppData\Local\TempJH4160.html moved successfully. C:\Users\Clameur\AppData\Local\TempjI4580.html moved successfully. C:\Users\Clameur\AppData\Local\TempJK6116.html moved successfully. C:\Users\Clameur\AppData\Local\TempJm4228.html moved successfully. C:\Users\Clameur\AppData\Local\TempKD3112.html moved successfully. C:\Users\Clameur\AppData\Local\TempkF2344.html moved successfully. C:\Users\Clameur\AppData\Local\TempkL3088.html moved successfully. C:\Users\Clameur\AppData\Local\Tempkp6004.html moved successfully. C:\Users\Clameur\AppData\Local\TempkQ5812.html moved successfully. C:\Users\Clameur\AppData\Local\TemplB2892.html moved successfully. C:\Users\Clameur\AppData\Local\TempLf3432.html moved successfully. C:\Users\Clameur\AppData\Local\Templk3936.html moved successfully. C:\Users\Clameur\AppData\Local\TempLp3676.html moved successfully. C:\Users\Clameur\AppData\Local\TempLq5828.html moved successfully. C:\Users\Clameur\AppData\Local\Templr1900.html moved successfully. C:\Users\Clameur\AppData\Local\TemplR3560.html moved successfully. C:\Users\Clameur\AppData\Local\TempLR4280.html moved successfully. C:\Users\Clameur\AppData\Local\TempLs5592.html moved successfully. C:\Users\Clameur\AppData\Local\TempLT1712.html moved successfully. C:\Users\Clameur\AppData\Local\TempLT3104.html moved successfully. C:\Users\Clameur\AppData\Local\TempLY5076.html moved successfully. C:\Users\Clameur\AppData\Local\TemplZj340.html moved successfully. C:\Users\Clameur\AppData\Local\TempMB4808.html moved successfully. C:\Users\Clameur\AppData\Local\TempME1312.html moved successfully. C:\Users\Clameur\AppData\Local\TempMg4020.html moved successfully. C:\Users\Clameur\AppData\Local\Tempmj2252.html moved successfully. C:\Users\Clameur\AppData\Local\TempMK2180.html moved successfully. C:\Users\Clameur\AppData\Local\TempMO5728.html moved successfully. C:\Users\Clameur\AppData\Local\TempMW4280.html moved successfully. C:\Users\Clameur\AppData\Local\TempMy5756.html moved successfully. C:\Users\Clameur\AppData\Local\TempnE4148.html moved successfully. C:\Users\Clameur\AppData\Local\TempNF1896.html moved successfully. C:\Users\Clameur\AppData\Local\Tempnf3956.html moved successfully. C:\Users\Clameur\AppData\Local\TempNI3360.html moved successfully. C:\Users\Clameur\AppData\Local\TempNi4160.html moved successfully. C:\Users\Clameur\AppData\Local\TempNi5000.html moved successfully. C:\Users\Clameur\AppData\Local\TempnI6004.html moved successfully. C:\Users\Clameur\AppData\Local\TempNK4020.html moved successfully. C:\Users\Clameur\AppData\Local\Tempnr4156.html moved successfully. C:\Users\Clameur\AppData\Local\TempNr5212.html moved successfully. C:\Users\Clameur\AppData\Local\TempNT5884.html moved successfully. C:\Users\Clameur\AppData\Local\Tempof2260.html moved successfully. C:\Users\Clameur\AppData\Local\TempoF2836.html moved successfully. C:\Users\Clameur\AppData\Local\Tempok4564.html moved successfully. C:\Users\Clameur\AppData\Local\TempOQ5216.html moved successfully. C:\Users\Clameur\AppData\Local\TempOQ5608.html moved successfully. C:\Users\Clameur\AppData\Local\TemppA4956.html moved successfully. C:\Users\Clameur\AppData\Local\TempPE5812.html moved successfully. C:\Users\Clameur\AppData\Local\Temppi2968.html moved successfully. C:\Users\Clameur\AppData\Local\Temppi5020.html moved successfully. C:\Users\Clameur\AppData\Local\TemppJ3548.html moved successfully. C:\Users\Clameur\AppData\Local\Temppt1312.html moved successfully. C:\Users\Clameur\AppData\Local\TempPV3316.html moved successfully. C:\Users\Clameur\AppData\Local\Temppv3788.html moved successfully. C:\Users\Clameur\AppData\Local\TemppW5476.html moved successfully. C:\Users\Clameur\AppData\Local\TempPW6500.html moved successfully. C:\Users\Clameur\AppData\Local\TempPX5192.html moved successfully. C:\Users\Clameur\AppData\Local\TemppX5216.html moved successfully. C:\Users\Clameur\AppData\Local\TempPY4600.html moved successfully. C:\Users\Clameur\AppData\Local\TempQb2892.html moved successfully. C:\Users\Clameur\AppData\Local\TempQh6720.html moved successfully. C:\Users\Clameur\AppData\Local\TempQj5720.html moved successfully. C:\Users\Clameur\AppData\Local\TempQk5276.html moved successfully. C:\Users\Clameur\AppData\Local\Tempqk8880.html moved successfully. C:\Users\Clameur\AppData\Local\TempqL4456.html moved successfully. C:\Users\Clameur\AppData\Local\TempQn5540.html moved successfully. C:\Users\Clameur\AppData\Local\Tempqp2112.html moved successfully. C:\Users\Clameur\AppData\Local\TempQT5260.html moved successfully. C:\Users\Clameur\AppData\Local\TempqU4228.html moved successfully. C:\Users\Clameur\AppData\Local\TempqU6956.html moved successfully. C:\Users\Clameur\AppData\Local\Tempqx4180.html moved successfully. C:\Users\Clameur\AppData\Local\TemprE4132.html moved successfully. C:\Users\Clameur\AppData\Local\TemprM5288.html moved successfully. C:\Users\Clameur\AppData\Local\Tempro3964.html moved successfully. C:\Users\Clameur\AppData\Local\Temprs5992.html moved successfully. C:\Users\Clameur\AppData\Local\Temprx2360.html moved successfully. C:\Users\Clameur\AppData\Local\TempryP712.html moved successfully. C:\Users\Clameur\AppData\Local\TemprZ4180.html moved successfully. C:\Users\Clameur\AppData\Local\Tempsj4580.html moved successfully. C:\Users\Clameur\AppData\Local\Tempsk5640.html moved successfully. C:\Users\Clameur\AppData\Local\Tempsl4252.html moved successfully. C:\Users\Clameur\AppData\Local\TempSp3360.html moved successfully. C:\Users\Clameur\AppData\Local\TempSp4132.html moved successfully. C:\Users\Clameur\AppData\Local\Tempst4060.html moved successfully. C:\Users\Clameur\AppData\Local\TempsV2596.html moved successfully. C:\Users\Clameur\AppData\Local\TempSz2344.html moved successfully. C:\Users\Clameur\AppData\Local\TempTC2360.html moved successfully. C:\Users\Clameur\AppData\Local\TempTO1128.html moved successfully. C:\Users\Clameur\AppData\Local\TemptQ6956.html moved successfully. C:\Users\Clameur\AppData\Local\TempTT2728.html moved successfully. C:\Users\Clameur\AppData\Local\Temptt6280.html moved successfully. C:\Users\Clameur\AppData\Local\TempTV5192.html moved successfully. C:\Users\Clameur\AppData\Local\Tempua5412.html moved successfully. C:\Users\Clameur\AppData\Local\TempUe3392.html moved successfully. C:\Users\Clameur\AppData\Local\TempuJ4704.html moved successfully. C:\Users\Clameur\AppData\Local\TempUKn584.html moved successfully. C:\Users\Clameur\AppData\Local\TempuR2656.html moved successfully. C:\Users\Clameur\AppData\Local\Tempuu3964.html moved successfully. C:\Users\Clameur\AppData\Local\TempUu4840.html moved successfully. C:\Users\Clameur\AppData\Local\TempV10140.html moved successfully. C:\Users\Clameur\AppData\Local\Tempvb3956.html moved successfully. C:\Users\Clameur\AppData\Local\TempVg2908.html moved successfully. C:\Users\Clameur\AppData\Local\TempVi5212.html moved successfully. C:\Users\Clameur\AppData\Local\Tempvj2596.html moved successfully. C:\Users\Clameur\AppData\Local\TempVP5396.html moved successfully. C:\Users\Clameur\AppData\Local\TempVQ6720.html moved successfully. C:\Users\Clameur\AppData\Local\TempVS4956.html moved successfully. C:\Users\Clameur\AppData\Local\Tempwe5608.html moved successfully. C:\Users\Clameur\AppData\Local\TempWH1712.html moved successfully. C:\Users\Clameur\AppData\Local\TempWl6040.html moved successfully. C:\Users\Clameur\AppData\Local\TempWN5756.html moved successfully. C:\Users\Clameur\AppData\Local\TempwP6972.html moved successfully. C:\Users\Clameur\AppData\Local\Tempwr2656.html moved successfully. C:\Users\Clameur\AppData\Local\TempwV5412.html moved successfully. C:\Users\Clameur\AppData\Local\TempWX4600.html moved successfully. C:\Users\Clameur\AppData\Local\TempXA5600.html moved successfully. C:\Users\Clameur\AppData\Local\Tempxd2908.html moved successfully. C:\Users\Clameur\AppData\Local\Tempxd3104.html moved successfully. C:\Users\Clameur\AppData\Local\Tempxd5344.html moved successfully. C:\Users\Clameur\AppData\Local\TempxE5176.html moved successfully. C:\Users\Clameur\AppData\Local\TempXH8880.html moved successfully. C:\Users\Clameur\AppData\Local\Tempxj5948.html moved successfully. C:\Users\Clameur\AppData\Local\TempXQ3900.html moved successfully. C:\Users\Clameur\AppData\Local\TempXs3728.html moved successfully. C:\Users\Clameur\AppData\Local\Tempxu2760.html moved successfully. C:\Users\Clameur\AppData\Local\TempxV5288.html moved successfully. C:\Users\Clameur\AppData\Local\TempxX5652.html moved successfully. C:\Users\Clameur\AppData\Local\TempyD1896.html moved successfully. C:\Users\Clameur\AppData\Local\TempYF2728.html moved successfully. C:\Users\Clameur\AppData\Local\TempYf5176.html moved successfully. C:\Users\Clameur\AppData\Local\TempYg3468.html moved successfully. C:\Users\Clameur\AppData\Local\Tempyo4060.html moved successfully. C:\Users\Clameur\AppData\Local\Tempyt2252.html moved successfully. C:\Users\Clameur\AppData\Local\TempYW1276.html moved successfully. C:\Users\Clameur\AppData\Local\TempZC5260.html moved successfully. C:\Users\Clameur\AppData\Local\TempzG3112.html moved successfully. C:\Users\Clameur\AppData\Local\Tempzg7552.html moved successfully. C:\Users\Clameur\AppData\Local\TempZh4148.html moved successfully. C:\Users\Clameur\AppData\Local\Tempzi3680.html moved successfully. C:\Users\Clameur\AppData\Local\TempZM3684.html moved successfully. C:\Users\Clameur\AppData\Local\TempZR1900.html moved successfully. C:\Users\Clameur\AppData\Local\TempZt5272.html moved successfully. C:\Users\Clameur\AppData\Local\Tempzv5188.html moved successfully. C:\Users\Clameur\AppData\Local\Tempzw5000.html moved successfully. C:\Users\Clameur\AppData\Local\TempzZ7552.html moved successfully. [color=#A23BEC]< sc config wscsvc start= delayed-auto /C >[/color] [SC] ChangeServiceConfig SUKCES C:\Users\Clameur\Downloads\cmd.bat deleted successfully. C:\Users\Clameur\Downloads\cmd.txt deleted successfully. ========== OTL ========== HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully! HKU\S-1-5-21-614235650-3472308271-149237455-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Prefs.js: "Ask.com" removed from browser.search.defaultengine Prefs.js: "Facemoods Search" removed from browser.search.defaultenginename Prefs.js: "Ask.com" removed from browser.search.order.1 Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com deleted successfully. File C:\Program Files (x86)\MyWebSearch\bar\1.bin not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D}\ not found. Registry value HKEY_USERS\S-1-5-21-614235650-3472308271-149237455-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skrybot deleted successfully. ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Clameur ->Flash cache emptied: 783 bytes User: Classic .NET AppPool User: Default ->Flash cache emptied: 0 bytes User: Default User ->Flash cache emptied: 0 bytes User: DefaultAppPool User: Public Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: All Users User: Clameur ->Temp folder emptied: 6336 bytes ->Temporary Internet Files folder emptied: 10842923 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 0 bytes ->Google Chrome cache emptied: 30773272 bytes ->Flash cache emptied: 0 bytes User: Classic .NET AppPool ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: DefaultAppPool ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 96190 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 183 bytes Total Files Cleaned = 40,00 mb OTL by OldTimer - Version 3.2.24.0 log created on 06152011_015249 Files\Folders moved on Reboot... C:\Users\Clameur\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File\Folder C:\Windows\temp\kls72FA.tmp not found! Registry entries deleted on Reboot...