All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\wtymgipkgmljhpu deleted successfully. C:\ProgramData\wtymgipk.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-975107765-3179683928-3549602319-1000\Software\Microsoft\Windows\CurrentVersion\Run\\wtymgipkgmljhpu deleted successfully. File C:\ProgramData\wtymgipk.exe not found. C:\ProgramData\rgsqozbsgheislt folder moved successfully. C:\ProgramData\uyolhezxyynjnib moved successfully. C:\Users\user\ms.exe moved successfully. C:\Users\user\0.7245073286554419.exe moved successfully. C:\ProgramData\WindowsSearch\MiniDumps folder moved successfully. C:\ProgramData\WindowsSearch folder moved successfully. ========== FILES ========== [color=#A23BEC]< rd /s /q C:\32788R22FWJFW /C >[/color] C:\Users\user\Desktop\OTL\cmd.bat deleted successfully. C:\Users\user\Desktop\OTL\cmd.txt deleted successfully. [color=#A23BEC]< rd /s /q C:\Windows\erdnt /C >[/color] C:\Users\user\Desktop\OTL\cmd.bat deleted successfully. C:\Users\user\Desktop\OTL\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes User: user ->Temp folder emptied: 257218490 bytes ->Temporary Internet Files folder emptied: 206179126 bytes ->Java cache emptied: 7327 bytes ->FireFox cache emptied: 355836869 bytes ->Flash cache emptied: 2024 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 1393704 bytes RecycleBin emptied: 269155237 bytes Total Files Cleaned = 1 039,00 mb OTL by OldTimer - Version 3.2.53.1 log created on 07262012_101157 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...