========== OTL ========== 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\StmRst deleted successfully. F:\ProgramData\yjjigvfzokvznjw folder moved successfully. F:\ProgramData\azjphvcqaylidtk moved successfully. F:\ProgramData\ngnwarwu.exe moved successfully. File F:\ProgramData\azjphvcqaylidtk not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: ania User: Default User: Default User User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 47654010 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36046069 bytes Total Files Cleaned = 80.00 mb OTLPE by OldTimer - Version 3.1.48.0 log created on 07062012_014245