All processes killed ========== OTL ========== C:\Windows\SysNative\roboot64.exe moved successfully. C:\Users\Laurent\AppData\Roaming\betadeeal folder moved successfully. C:\ProgramData\uninstall_Deeal.exe moved successfully. Folder C:\Users\Laurent\AppData\Roaming\betadeeal\ not found. C:\WINDOWS\8A809006C25A4A3A9DAB94659BCDB107.TMP\WiseCustomCalla.dll deleted successfully. C:\WINDOWS\8A809006C25A4A3A9DAB94659BCDB107.TMP folder deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCall.dll deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla.dll deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla2.dll deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla21.dll deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla31.exe deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla32.dll deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla33.dll deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla34.dll deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla37.dll deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla37.exe deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseData.ini deleted successfully. C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP folder deleted successfully. C:\WINDOWS\msdownld.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\1A5077DA.TMP deleted successfully. C:\Users\Laurent\Local Settings\Temp\38D3540D.TMP deleted successfully. C:\Users\Laurent\Local Settings\Temp\5CD3.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\AIBB_2156.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\AIBB_4800.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\B9AB.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\CFG250C.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\CFGB1BE.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\CFGBD82.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\CFGD4D.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\is-9S8MK.tmp\_isetup\_setup64.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\is-9S8MK.tmp\_isetup\_shfoldr.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\is-9S8MK.tmp\_isetup folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\is-9S8MK.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\jar_cache2561042564731645603.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\jar_cache5345306900520262936.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\nscCC12.tmp\NSIS_Picasa_Unicode.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\nscCC12.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\nse7C9F.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsm3F92.tmp\System.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsm3F92.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssA009.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssA00A.tmp\icon.ico deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssA00A.tmp\splash.png deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssA00A.tmp\System.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssA00A.tmp\___ocnsis.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssA00A.tmp\___ocnsis64.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssA00A.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssC455.tmp\___ocnsis.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\nssC455.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsuA2A1.tmp\help_page.ini deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsuA2A1.tmp\ie9install.bmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsuA2A1.tmp\UAC.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsuA2A1.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsy20A3.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsy20A4.tmp\___ocnsis.dll deleted successfully. C:\Users\Laurent\Local Settings\Temp\nsy20A4.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct374D.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct4571.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct7782.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct7BB8.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct7C84.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct80F8.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct816F.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct8231.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct8434.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct8FFC.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct9EA2.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\octA1E8.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\octA420.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\octAF6B.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\octB297.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\octB518.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\octB641.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\octD88E.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\octDC61.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\RD2409.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\RD2E6F.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\RD320D.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\RD5888.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\RD5B6B.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\RD6FC.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\RD8403.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\RD9C37.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp3A1D.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6505.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6843.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6882.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp68C2.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6901.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6931.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6971.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp69C0.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp69F0.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6A2F.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6A5F.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6A9E.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6ADE.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6B1D.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6B5D.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6B8D.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6BCC.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6C0C.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6C3C.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp6C7B.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp7274.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp9048.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp907B.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp909B.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp90AC.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp90D6.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp90E6.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmp98AC.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpAFCF.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpB03B.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpB4D0.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpB53E.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpB974.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpBE09.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpCCCF.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpD617.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpDBF3.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpEE09.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpEE1.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpF464.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\tmpF475.tmp deleted successfully. C:\Users\Laurent\Local Settings\Temp\_Temp_qbzismr.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\_Temp_tfghisj.tmp folder deleted successfully. C:\Users\Laurent\Local Settings\Temp\oct4A7A.tmp.exe moved successfully. C:\Users\Laurent\Local Settings\Temp\oct9AFB.tmp.exe moved successfully. Service esgiguard stopped successfully! Service esgiguard deleted successfully! File C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys not found. C:\Users\Laurent\Local Settings\Temp\setup.exe moved successfully. C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\MpCmdRun-30-53C9D589-6B66-4F30-9BAB-9A0193B0BAFC.lock moved successfully. ========== REGISTRY ========== HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command\\""|""%1" %*" /E : value set successfully! ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 57472 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default.migrated User: Laurent ->Temp folder emptied: 501495354 bytes ->Temporary Internet Files folder emptied: 10054656353 bytes ->Java cache emptied: 1397386 bytes ->Google Chrome cache emptied: 369888364 bytes ->Flash cache emptied: 53063 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 50693337 bytes RecycleBin emptied: 5708464562 bytes Total Files Cleaned = 15 914,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 07052014_000725 Files\Folders moved on Reboot... C:\Users\Laurent\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_e330f25ac01818f1_0_0.bin moved successfully. C:\Users\Laurent\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_e330f25ac01818f1_0_0.toc moved successfully. C:\Users\Laurent\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_e330f25ac01818f1_1_0.bin moved successfully. C:\Users\Laurent\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\6d1026b4fa6d4c49d77d65f8805a9c0_fce8395f8fd8a84b_e330f25ac01818f1_1_0.toc moved successfully. C:\Users\Laurent\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...