All Processes Killed [Registry - Safe List] Registry value HKEY_USERS\S-1-5-21-1679214456-368351518-2209028700-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable deleted successfully. Registry value HKEY_USERS\S-1-5-21-1679214456-368351518-2209028700-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride deleted successfully. Registry value HKEY_USERS\S-1-5-21-1679214456-368351518-2209028700-1000\SOFTWARE\Microsoft\Internet Explorer\\ProxyServer not found. Prefs.js: 4 removed from network.proxy.type Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\NDSTray.exe deleted successfully. Registry value HKEY_USERS\S-1-5-21-1679214456-368351518-2209028700-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ggldadpe deleted successfully. C:\Users\Smashley\AppData\Local\bdibbjahd\ohupgcrtssd.exe moved successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{16e78b7b-4f5a-11df-a01c-00a0d17cf124}\shell\AutoRun\command\\ deleted successfully. File F:\EMP_UDSe.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4b0432f2-2436-11df-b00a-00a0d17cf124}\shell\AutoRun\command\\ deleted successfully. File F:\AutoRun.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4b0432fd-2436-11df-b00a-7a8020000200}\shell\AutoRun\command\\ deleted successfully. File F:\AutoRun.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4db79140-72ee-11de-8041-7a8020000200}\shell\AutoRun\command\\ deleted successfully. File F:\AutoRun.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5df7010f-dc25-11dd-b09c-00a0d17cf124}\shell\AutoRun\command\\ deleted successfully. File F:\LaunchU3.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8ba3e4b2-b470-11de-8642-00a0d17cf124}\shell\AutoRun\command\\ deleted successfully. File E:\setupSNK.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8ba3e4b5-b470-11de-8642-00a0d17cf124}\shell\AutoRun\command\\ deleted successfully. File F:\LaunchU3.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d9f2e680-af89-11de-ace1-00a0d17cf124}\shell\AutoRun\command\\ deleted successfully. File F:\LaunchU3.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f27f8b42-47e1-11de-a951-00a0d17cf124}\shell\AutoRun\command\\ deleted successfully. File E:\AutoRun.exe not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f27f8bba-47e1-11de-a951-7a8020000200}\shell\AutoRun\command\\ deleted successfully. File F:\AutoRun.exe not found. [Files/Folders - Modified Within 30 Days] LoadLibrary failed for C:\Users\Smashley\AppData\Local\oqalarejuc.dll C:\Users\Smashley\AppData\Local\oqalarejuc.dll moved successfully. C:\Users\Smashley\AppData\Local\Temp\7zSDFA4.tmp\avgrep.txt deleted successfully. C:\Users\Smashley\AppData\Local\Temp\7zSDFA4.tmp folder deleted successfully. C:\Users\Smashley\AppData\Local\Temp\bng63FB.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\DMI316E.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\DMI3D9E.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\DMI41E1.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MAR6882.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MAR6BAE.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MAR8371.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MAR8630.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MAR9CAB.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARABF8.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARB02B.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARB6E0.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARBD07.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARC2E2.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARC6E6.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARCE57.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARDC2B.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARE12C.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARE15A.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\MARE38D.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\STS2196.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\STS315D.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\STS497E.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\STS6DC0.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\STSBFA6.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\STSC1C9.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF1E89.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF2514.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF313C.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF455C.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF457C.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF577A.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF6B0D.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF80C8.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DF9E5D.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DFC17C.tmp deleted successfully. C:\Users\Smashley\AppData\Local\Temp\~DFE8D4.tmp deleted successfully. [Files - No Company Name] File C:\Users\Smashley\AppData\Local\oqalarejuc.dll not found! [File - Lop Check] C:\Windows\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job moved successfully. [Alternate Data Streams] ADS C:\ProgramData\TEMP:B9252F22 deleted successfully. ADS C:\ProgramData\TEMP:94A19129 deleted successfully. ADS C:\Users\Smashley\Ashley.bak.avi:TOC.WMV deleted successfully. Unable to delete ADS C:\Users\Smashley\Desktop\Ashley Video_AVI.avi:TOC.WMV . ADS C:\ProgramData\TEMP:9AEE100C deleted successfully. [Empty Temp Folders] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Guest ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->FireFox cache emptied: 0 bytes User: Public User: Smashley ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 3458048 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 52319535 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3059365 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes %systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes RecycleBin emptied: 931745543 bytes Total Files Cleaned = 945.00 mb OTS cannot create restorepoints on Vista OSs! < End of fix log > OTS by OldTimer - Version 3.1.20.1 fix logfile created on 07022010_001031 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...