All processes killed ========== OTL ========== 64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\wrwcpyfpvpktqna deleted successfully. C:\ProgramData\wrwcpyfp.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1528030528-93823963-2258503987-1000\Software\Microsoft\Windows\CurrentVersion\Run\\wrwcpyfpvpktqna deleted successfully. File C:\ProgramData\wrwcpyfp.exe not found. 64bit-Registry value HKEY_USERS\S-1-5-21-1528030528-93823963-2258503987-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\Run:C:\windows\system32\config\Win.exe deleted successfully. C:\Windows\SysWOW64\config\Win.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1528030528-93823963-2258503987-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\Run:C:\windows\system32\config\Win.exe deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\windows\system32\WinSit.exe deleted successfully. C:\Windows\SysWOW64\WinSit.exe moved successfully. C:\ProgramData\huskzckuqkhaasw folder moved successfully. C:\ProgramData\nksvachlcytfmck moved successfully. C:\Windows\SysWOW64\Penx.dat moved successfully. File C:\windows\SysWow64\WinSit.exe not found. C:\Windows\SysWOW64\Xpen.dat moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56475 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Kubus05_2007 ->Temp folder emptied: 64310154 bytes ->Temporary Internet Files folder emptied: 10311683 bytes ->Java cache emptied: 9582086 bytes ->FireFox cache emptied: 278290558 bytes ->Google Chrome cache emptied: 91076606 bytes ->Apple Safari cache emptied: 171440128 bytes ->Flash cache emptied: 15221073 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 119699484 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 68032 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 725,00 mb OTL by OldTimer - Version 3.2.53.1 log created on 07062012_160553 Files\Folders moved on Reboot... C:\Users\Kubus05_2007\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. PendingFileRenameOperations files... File C:\Users\Kubus05_2007\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found! Registry entries deleted on Reboot...