All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-975107765-3179683928-3549602319-1000\Software\Microsoft\Windows\CurrentVersion\Run\\sqlncli deleted successfully. C:\Users\user\AppData\Local\Microsoft\Windows\2575\sqlncli.exe moved successfully. Service UIUSys stopped successfully! Service UIUSys deleted successfully! File system32\DRIVERS\UIUSYS.SYS not found. Service NVHDA stopped successfully! Service NVHDA deleted successfully! File system32\drivers\nvhda32v.sys not found. Service catchme stopped successfully! Service catchme deleted successfully! File C:\Users\user\AppData\Local\Temp\catchme.sys not found. ========== FILES ========== C:\Users\user\AppData\Local\Microsoft\Windows\2575 folder moved successfully. C:\Users\user\AppData\Roaming\hellomoto folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 41620 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes User: user ->Temp folder emptied: 262681 bytes ->Temporary Internet Files folder emptied: 324154981 bytes ->Java cache emptied: 583761 bytes ->FireFox cache emptied: 914517438 bytes ->Flash cache emptied: 75242 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3548 bytes RecycleBin emptied: 411764 bytes Total Files Cleaned = 1 183,00 mb OTL by OldTimer - Version 3.2.53.1 log created on 07072012_115841 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...