All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-1153022447-1756078470-3562381631-1000\Software\Microsoft\Windows\CurrentVersion\Run\\fimhuhohlcftopy deleted successfully. C:\ProgramData\fimhuhoh.exe moved successfully. ========== FILES ========== C:\Users\WRPLEGAL TG\ms.exe moved successfully. C:\ProgramData\evglcywplxysvlt folder moved successfully. C:\ProgramData\hncgvduudohtumb moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public User: WRPLEGAL TG ->Temp folder emptied: 6512530 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Google Chrome cache emptied: 0 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 492 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 2979 bytes RecycleBin emptied: 9400072 bytes Total Files Cleaned = 15,00 mb OTL by OldTimer - Version 3.2.54.0 log created on 07132012_231504 Files\Folders moved on Reboot... File\Folder C:\Windows\temp\mcmsc_fk1yvx694iD6Bw9 not found! PendingFileRenameOperations files... File C:\Windows\temp\mcmsc_fk1yvx694iD6Bw9 not found! Registry entries deleted on Reboot...