========== OTL ========== Prefs.js: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:4.1.0.2080 removed from extensions.enabledItems Prefs.js: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5290 removed from extensions.enabledItems Prefs.js: {E889F097-B0BE-471B-89AD-B86B6F04B506}:4.1.0.1960 removed from extensions.enabledItems Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D74E9DD-8987-448b-B2CB-67FFF2B8A932}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1D74E9DD-8987-448b-B2CB-67FFF2B8A932}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21608B66-026F-4DCB-9244-0DACA328DCED}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21608B66-026F-4DCB-9244-0DACA328DCED}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B72681C0-A222-4b21-A0E2-53A5A5CA3D41}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B72681C0-A222-4b21-A0E2-53A5A5CA3D41}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CAC89FF9-34A9-4431-8CFE-292A47F843BC}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAC89FF9-34A9-4431-8CFE-292A47F843BC}\ not found. ADS C:\ProgramData\TEMP:7C017FB1 deleted successfully. ADS C:\ProgramData\TEMP:522EA216 deleted successfully. ADS C:\ProgramData\TEMP:38760F1C deleted successfully. ADS C:\ProgramData\Microsoft:jzmEVGhiTPfMnmHDi7vg57JbjE deleted successfully. ADS C:\ProgramData\Microsoft:ENyUlAKjVf6osGdVFJUmKF7ps1 deleted successfully. ========== FILES ========== [color=#A23BEC]< ipconfig /flushdns /c >[/color] Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Users\Customer\Desktop\cmd.bat deleted successfully. C:\Users\Customer\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< xcopy %Temp%\smtmp\1 "%AllUsersProfile%\Start Menu" /H /I /S /Y /C >[/color] 0 File(s) copied C:\Users\Customer\Desktop\cmd.bat deleted successfully. C:\Users\Customer\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< xcopy %Temp%\smtmp\2 "%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch" /H /I /S /Y /C >[/color] 0 File(s) copied C:\Users\Customer\Desktop\cmd.bat deleted successfully. C:\Users\Customer\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< xcopy %Temp%\smtmp\3 "%AppData%\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar" /H /I /S /Y /C >[/color] 0 File(s) copied C:\Users\Customer\Desktop\cmd.bat deleted successfully. C:\Users\Customer\Desktop\cmd.txt deleted successfully. [color=#A23BEC]< xcopy %Temp%\smtmp\4 "%AllUsersProfile%\Desktop" /H /I /S /Y /C >[/color] 0 File(s) copied C:\Users\Customer\Desktop\cmd.bat deleted successfully. C:\Users\Customer\Desktop\cmd.txt deleted successfully. ========== REGISTRY ========== ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Customer ->Flash cache emptied: 2090 bytes User: Default ->Flash cache emptied: 41 bytes User: Default User ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.26.4 log created on 10122011_194723