Hi Maxi
Here is the latest OTL log
All processes killed
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files\iLivid\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\C:\Program Files\iLivid\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\iLividSetupV1.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2636723537-2607932590-1398714872-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files\iLivid\ not found.
Registry key HKEY_USERS\S-1-5-21-2636723537-2607932590-1398714872-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\C:\Program Files\iLivid\ not found.
========== FILES ==========
< ipconfig /flushdns /c >Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Liberty\Downloads\cmd.bat deleted successfully.
C:\Users\Liberty\Downloads\cmd.txt deleted successfully.
E:\Program Files\FoxTabFlvPlayer\FLVPlayer.exe moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Liberty
->Temp folder emptied: 44144787 bytes
->Temporary Internet Files folder emptied: 26530351 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 1916 bytes
User: NeroMediaHomeUser.4.Liberty-PC
->Temp folder emptied: 28696 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 19914434 bytes
RecycleBin emptied: 2032 bytes
Total Files Cleaned = 86.00 mb
Restore point Set: OTL Restore Point
OTL by OldTimer - Version 3.2.52.0 log created on 06272012_202731
Files\Folders moved on Reboot...
C:\Users\Liberty\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat moved successfully.
C:\Users\NeroMediaHomeUser.4.Liberty-PC\AppData\Local\Temp\etilqs_i8X51xBh7OCkSfIIWIlD moved successfully.
C:\Users\NeroMediaHomeUser.4.Liberty-PC\AppData\Local\Temp\etilqs_i8X51xBh7OCkSfIIWIlD-journal moved successfully.
Registry entries deleted on Reboot...
step 3
SystemLook 30.07.11 by jpshortstuff
Log created at 20:43 on 27/06/2012 by Liberty
Administrator - Elevation successful
========== filefind ==========
Searching for "*ilivid*"
C:\_OTL\MovedFiles\06252012_203613\C_Program Files\iLivid\ilivid.exe --a---- 2033152 bytes [21:32 18/01/2012] [14:20 05/08/2011] A485B5376A7BD86E17DA042A64EE3E86
Searching for "*trolltech*"
No files found.
========== folderfind ==========
Searching for "*ilivid*"
C:\_OTL\MovedFiles\06252012_203613\C_Program Files\iLivid d------ [21:32 18/01/2012]
C:\_OTL\MovedFiles\06252012_203613\C_Users\Liberty\AppData\Local\Ilivid Player d------ [20:04 25/10/2011]
Searching for "*trolltech*"
No folders found.
========== regfind ==========
Searching for "ilivid"
No data found.
Searching for "trolltech"
[HKEY_CURRENT_USER\Software\Trolltech]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.5\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.5\com.trolltech.Qt.QSqlDriverFactoryInterface:]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.5\com.trolltech.Qt.QTextCodecFactoryInterface:]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_USERS\S-1-5-21-2636723537-2607932590-1398714872-1000\Software\Trolltech]
[HKEY_USERS\S-1-5-21-2636723537-2607932590-1398714872-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.5\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_USERS\S-1-5-21-2636723537-2607932590-1398714872-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.5\com.trolltech.Qt.QSqlDriverFactoryInterface:]
[HKEY_USERS\S-1-5-21-2636723537-2607932590-1398714872-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.5\com.trolltech.Qt.QTextCodecFactoryInterface:]
[HKEY_USERS\S-1-5-21-2636723537-2607932590-1398714872-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
-= EOF =-
step 4
virus total
~$search 9.8.rtf
https://www.virustotal.com/file/d9ec3e1 ... 1340826751C:\Windows\ϛ~
https://www.virustotal.com/file/4dd8aaa ... 340827271/Jotti
~$search 9.8.rtf
http://virusscan.jotti.org/en/scanresul ... f1753b9ad9C:\Windows\ϛ~
http://virusscan.jotti.org/en/scanresul ... 6da2c4147cThe computer is fast but AVG still flashes to say'found tracking cookie'.
Many thanks
Mutepail