All processes killed ========== OTL ========== Service 9e7ql0ne.sys stopped successfully! Service 9e7ql0ne.sys deleted successfully! File C:\WINDOWS\system32\drivers\9e7ql0ne.sys not found. Registry key HKEY_USERS\S-1-5-21-4197362544-953040410-2358175516-1006\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@java.com/JavaPlugin\ deleted successfully. C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll moved successfully. C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF\chrome\content folder moved successfully. C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF\chrome folder moved successfully. C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF folder moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_USERS\S-1-5-21-4197362544-953040410-2358175516-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{00000000-0000-0000-0000-000000000000} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-0000-0000-0000-000000000000}\ not found. Registry value HKEY_USERS\S-1-5-21-4197362544-953040410-2358175516-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{043C5167-00BB-4324-AF7E-62013FAEDACF} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found. Registry value HKEY_USERS\S-1-5-21-4197362544-953040410-2358175516-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found. Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2d7a9c82-b2c3-11df-aa40-0025d38bf17d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2d7a9c82-b2c3-11df-aa40-0025d38bf17d}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2d7a9c82-b2c3-11df-aa40-0025d38bf17d}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2d7a9c82-b2c3-11df-aa40-0025d38bf17d}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2d7a9c82-b2c3-11df-aa40-0025d38bf17d}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2d7a9c82-b2c3-11df-aa40-0025d38bf17d}\ not found. File "D:\WD SmartWare.exe" autoplay=true not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{55a0f828-1111-11e0-aa67-0025d38bf17d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{55a0f828-1111-11e0-aa67-0025d38bf17d}\ not found. File F:\PMBP not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5f1b6854-a34e-11df-aa32-0025d38bf17d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5f1b6854-a34e-11df-aa32-0025d38bf17d}\ not found. File WDSetup.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7489f2b6-3d09-11e0-aa83-0025d38bf17d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7489f2b6-3d09-11e0-aa83-0025d38bf17d}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7489f2b6-3d09-11e0-aa83-0025d38bf17d}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7489f2b6-3d09-11e0-aa83-0025d38bf17d}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7489f2b6-3d09-11e0-aa83-0025d38bf17d}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7489f2b6-3d09-11e0-aa83-0025d38bf17d}\ not found. File "D:\WD SmartWare.exe" autoplay=true not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c7cf2138-863c-11de-bb57-806d6172696f}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c7cf2138-863c-11de-bb57-806d6172696f}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c7cf2138-863c-11de-bb57-806d6172696f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c7cf2138-863c-11de-bb57-806d6172696f}\ not found. File E:\setup.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb1cff58-6042-11e0-aa99-0025d38bf17d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fb1cff58-6042-11e0-aa99-0025d38bf17d}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb1cff58-6042-11e0-aa99-0025d38bf17d}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fb1cff58-6042-11e0-aa99-0025d38bf17d}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb1cff58-6042-11e0-aa99-0025d38bf17d}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fb1cff58-6042-11e0-aa99-0025d38bf17d}\ not found. File E:\HPLauncher.exe not found. Registry key HKEY_USERS\S-1-5-21-4197362544-953040410-2358175516-1006_Classes\.exe\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-4197362544-953040410-2358175516-1006_Classes\exefile\ not found. HKEY_LOCAL_MACHINE\Software\Classes\.exe\\|exefile /E : value set successfully! C:\Documents and Settings\joe brewen\My Documents\[isoHunt] Sunbelt_CounterSpy_Antispyware_4.0.3904___Keygen_[RH].5828600.TPB.torrent moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\[ www.TorrentDay.com ] - Tosh.0.S03E29.HDTV.XviD-MOMENTUM folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\[ www.TorrentDay.com ] - The.Walking.Dead.S02E12.Better.Angels.480p.WEB-DL.x264-mSD folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\[ www.TorrentDay.com ] - Jersey.Shore.S04E06.Fist.Pump.Pushups.Chapstick.WS.PDTV.XviD-FQM folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\[ UsaBit.com ] - Young Adult 2011 CAM XViD DTRG folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Young Adult 2011 DVDScr XviD AC3-EVOLUTiON folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\The.Three.Stooges.2012.WORKPRiNT.XViD.AC3-SiNiSTER folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\The Walking Dead S2E8-YIAB folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\The Very Best of Robert Palmer folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\The Tudors Season 1 - 4 Complete DvDRiP XviD-PhoenixRG\The Tudors Season 4 DvDRiP (2010) XviD-PhoenixRG folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\The Tudors Season 1 - 4 Complete DvDRiP XviD-PhoenixRG\The Tudors Season 3 DvDRiP (2009) XviD-PhoenixRG folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\The Tudors Season 1 - 4 Complete DvDRiP XviD-PhoenixRG\The Tudors Season 2 DvDRiP (2008) XviD-PhoenixRG folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\The Tudors Season 1 - 4 Complete DvDRiP XviD-PhoenixRG\The Tudors Season 1 DvDRiP (2007) XviD-PhoenixRG folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\The Tudors Season 1 - 4 Complete DvDRiP XviD-PhoenixRG folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Templario (2011) [BR-Screener][DUAL][Eng-Spa][WwW.ZoNaTorrent.CoM] folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Stone (2010) [TS-Screener][Spanish][WwW.ZoNaTorrent.CoM] folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Real.Steel.2011.TS.FULLVIDEO.XviD.AC3.HQ.Hive-CM8 folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\MIRROR - DIGITAL CRACK VOL 30 folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Hodejegerne 2011 720p BluRay DD5.1 x264-NorTV folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Haywire [2012] folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Friday.The.13th.2009.EXTENDED.BRRip.XviD.AC3-CaLLioPE_MoNTEDiaZ folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\ELF THE MOVIE-2003 IN H.264 BY WINKER folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Don Henley - The Very Best Of Don Henley (2009) vtwin88cube folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\dlimagecache folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\Cache folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\apps folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\American.Reunion.2012.DVDSCR.XViD.AC3-NoGrp folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\50 Cent - I Just Wanna {feat. Tony Yayo} 2012 folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent\21.Jump.Street.2012.LiMiTED.DVDSCR.XViD.AC3-SiC folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\BitTorrent folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\PriceGong\tmp folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\PriceGong\Data folder moved successfully. C:\Documents and Settings\joe brewen\Application Data\PriceGong folder moved successfully. Folder C:\Documents and Settings\joe brewen\Application\ not found. ========== FILES ========== [color=#A23BEC]< ipconfig /flushdns /c >[/color] Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Documents and Settings\joe brewen\Desktop\cmd.bat deleted successfully. C:\Documents and Settings\joe brewen\Desktop\cmd.txt deleted successfully. ========== REGISTRY ========== ========== COMMANDS ========== C:\WINDOWS\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: Administrator ->Temp folder emptied: 311296 bytes ->Temporary Internet Files folder emptied: 9487404 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: joe brewen ->Temp folder emptied: 1063205953 bytes ->Temporary Internet Files folder emptied: 36219796 bytes ->Java cache emptied: 571 bytes ->FireFox cache emptied: 139984206 bytes ->Google Chrome cache emptied: 18792816 bytes ->Flash cache emptied: 511 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 49554 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 1489153 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2577 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 243108142 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 182437740 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 1,617.00 mb Unable to start System Restore Service. Error code 1056 OTL by OldTimer - Version 3.2.42.3 log created on 05122012_122235 Files\Folders moved on Reboot... File\Folder C:\Documents and Settings\joe brewen\Local Settings\Temp\~DF109.tmp not found! File\Folder C:\Documents and Settings\joe brewen\Local Settings\Temp\~DF12F.tmp not found! File\Folder C:\Documents and Settings\joe brewen\Local Settings\Temp\~DF3FC.tmp not found! File\Folder C:\Documents and Settings\joe brewen\Local Settings\Temp\~DF439.tmp not found! File\Folder C:\Documents and Settings\joe brewen\Local Settings\Temp\~DFFF6B.tmp not found! File\Folder C:\Documents and Settings\joe brewen\Local Settings\Temp\~DFFF96.tmp not found! C:\Documents and Settings\joe brewen\Local Settings\Temporary Internet Files\Content.IE5\UDBXITTP\message[1].php moved successfully. C:\Documents and Settings\joe brewen\Local Settings\Temporary Internet Files\Content.IE5\97OQC89P\index[1].php moved successfully. C:\Documents and Settings\joe brewen\Local Settings\Temporary Internet Files\Content.IE5\97OQC89P\sidebar[1].php moved successfully. C:\Documents and Settings\joe brewen\Local Settings\Temporary Internet Files\SuggestedSites.dat moved successfully. C:\WINDOWS\temp\27e727e6 moved successfully. File move failed. C:\WINDOWS\temp\31e030c9 scheduled to be moved on reboot. File move failed. C:\WINDOWS\temp\578bfbb2 scheduled to be moved on reboot. File move failed. C:\WINDOWS\temp\a67a9543 scheduled to be moved on reboot. C:\WINDOWS\temp\Perflib_Perfdata_118.dat moved successfully. Registry entries deleted on Reboot...