All processes killed ========== OTL ========== 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TURegOpt deleted successfully. C:\Users\phenix11\AppData\Local\Microsoft\Windows\1049\TURegOpt.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WinampAgent deleted successfully. Registry value HKEY_USERS\S-1-5-21-1832937852-2116575123-337272265-474793\Software\Microsoft\Windows\CurrentVersion\RunOnce\\225932FD197BB33FE034953CF875EF60 deleted successfully. C:\Users\phenix11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk moved successfully. Registry value HKEY_USERS\S-1-5-21-1832937852-2116575123-337272265-474793\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoWindowsUpdate deleted successfully. Registry value HKEY_USERS\S-1-5-21-1832937852-2116575123-337272265-474793\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HideSCAHealth deleted successfully. ========== FILES ========== C:\ProgramData\225932FD197BB33FE034953CF875EF60 folder moved successfully. C:\Users\phenix11\AppData\Local\Microsoft\Windows\1049 folder moved successfully. C:\Users\phenix11\AppData\Roaming\hellomoto folder moved successfully. C:\Windows\SysWow64\crrss.exe moved successfully. C:\Users\phenix11\uidsave.dat moved successfully. C:\Users\phenix11\uz.dat moved successfully. C:\Users\phenix11\std.out moved successfully. ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 2277 bytes ->Temporary Internet Files folder emptied: 68754 bytes User: All Users User: CBKBuilder ->Temp folder emptied: 429819749 bytes ->Temporary Internet Files folder emptied: 143512 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: italtre ->Temp folder emptied: 3451 bytes ->Temporary Internet Files folder emptied: 70968 bytes User: pl-admin-mb ->Temp folder emptied: 142307 bytes ->Temporary Internet Files folder emptied: 68754 bytes User: phenix11 ->Temp folder emptied: 842295365 bytes ->Temporary Internet Files folder emptied: 85386642 bytes ->Java cache emptied: 6584784 bytes ->Opera cache emptied: 87088198 bytes ->Flash cache emptied: 13607 bytes User: Public User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 286502908 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 104298 bytes RecycleBin emptied: 7019777508 bytes Total Files Cleaned = 8 352.00 mb OTL by OldTimer - Version 3.2.61.2 log created on 09092012_084746 Files\Folders moved on Reboot... C:\Users\phenix11\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...