Copy/Paste the information inside the quotebox below into the panel where it says "Paste fix here" and then click the Run Fix button.
[Kill All Processes]
[Unregister Dlls]
[Processes - Safe List]
YY -> ld12.exe -> C:\windows\ld12.exe
YY -> pp10.exe -> C:\windows\pp10.exe
[Win32 Services - Safe List]
YY -> (sfx) sfx [Win32_Shared | Auto | Running] -> C:\Program Files\sFX\SfX.DlL
[Driver Services - Safe List]
YY -> (sFxdrv) sFxdrv [Kernel | System | Running] -> C:\Program Files\sFX\sfX.sYs
[Registry - Safe List]
< HOSTS File > (24 bytes and 2 lines) -> C:\WINDOWS\System32\drivers\etc\Hosts
YN -> Reset Hosts ->
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
YY -> {D76AB2A1-00F3-42BD-F434-00BBC39C8953} [HKLM] -> C:\WINDOWS\System32\grffr83hn.dll [C:\WINDOWS\system32\grffr83hn.dll]
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YY -> "pp" -> C:\windows\pp10.exe [C:\windows\pp10.exe]
YY -> "sysldtray" -> C:\windows\ld12.exe [C:\windows\ld12.exe]
< Run [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YY -> "" -> C:\WINDOWS\TEMP\msxgpm34.exe [C:\WINDOWS\TEMP\msxgpm34.exe]
YY -> "hsf7husjnfg98gi498aejhiugjkdg4" -> C:\WINDOWS\TEMP\msxgpm34.exe [C:\WINDOWS\TEMP\msxgpm34.exe]
YY -> "Windows System Recover!" -> C:\WINDOWS\TEMP\csrss.exe [C:\WINDOWS\TEMP\csrss.exe]
< Run [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YY -> "" -> C:\WINDOWS\TEMP\msxgpm34.exe [C:\WINDOWS\TEMP\msxgpm34.exe]
YY -> "hsf7husjnfg98gi498aejhiugjkdg4" -> C:\WINDOWS\TEMP\msxgpm34.exe [C:\WINDOWS\TEMP\msxgpm34.exe]
YY -> "Windows System Recover!" -> C:\WINDOWS\TEMP\csrss.exe [C:\WINDOWS\TEMP\csrss.exe]
< CurrentVersion Policy Settings [HKEY_USERS\.DEFAULT] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
YN -> \\"DisableRegistryTools" -> [1]
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-18] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
YN -> \\"DisableRegistryTools" -> [1]
< SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
YY -> "{7849596a-48ea-486e-8937-a2a3009f31a9}" [HKLM] -> C:\WINDOWS\TEMP\1972771740.dll [PostBootReminder]
< SharedTaskScheduler [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
YY -> "{D76AB2A1-00F3-42BD-F434-00BBC39C8953}" [HKLM] -> C:\WINDOWS\System32\grffr83hn.dll [rtasgvfu76ew8ndkfno94]
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2
YN -> \{959cb60f-6f60-11de-9274-000d3a21f2f2}\Shell\AutoRun\command\\"" -> I:\A0003534.EXE [I:\A0003534.EXE]
[Files/Folders - Created Within 30 Days]
NY -> 9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp
NY -> 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp
NY -> grffr83hn.dll -> C:\WINDOWS\System32\grffr83hn.dll
NY -> sFX -> C:\Program Files\sFX
NY -> pp10.exe -> C:\WINDOWS\pp10.exe
NY -> 0101120101464849.dat -> C:\WINDOWS\0101120101464849.dat
NY -> 010112010146118114.dat -> C:\WINDOWS\010112010146118114.dat
NY -> 934fdfg34fgjf23 -> C:\WINDOWS\934fdfg34fgjf23
NY -> ld12.exe -> C:\WINDOWS\ld12.exe
[Files/Folders - Modified Within 30 Days]
NY -> 1972771740.dll -> C:\WINDOWS\Temp\1972771740.dll
NY -> 8000689118.dll -> C:\WINDOWS\Temp\8000689118.dll
NY -> 7888415288.dll -> C:\WINDOWS\Temp\7888415288.dll
NY -> install.exe -> C:\WINDOWS\Temp\install.exe
NY -> system.exe -> C:\WINDOWS\Temp\system.exe
NY -> debug.exe -> C:\WINDOWS\Temp\debug.exe
NY -> taskmgr.exe -> C:\WINDOWS\Temp\taskmgr.exe
NY -> csrss.exe -> C:\WINDOWS\Temp\csrss.exe
NY -> 2681865394.exe -> C:\WINDOWS\Temp\2681865394.exe
NY -> msxgpm34.exe -> C:\WINDOWS\Temp\msxgpm34.exe
NY -> grffr83hn.dll -> C:\WINDOWS\System32\grffr83hn.dll
NY -> ewcs73nf.exe -> C:\WINDOWS\Temp\ewcs73nf.exe
NY -> pp10.exe -> C:\WINDOWS\pp10.exe
NY -> 0101120101464849.dat -> C:\WINDOWS\0101120101464849.dat
NY -> 010112010146118114.dat -> C:\WINDOWS\010112010146118114.dat
NY -> 934fdfg34fgjf23 -> C:\WINDOWS\934fdfg34fgjf23
NY -> ld12.exe -> C:\WINDOWS\ld12.exe
[Purity]
[Empty Temp Folders]
[Start Explorer]
[Reboot]
The fix should only take a very short time. When the fix is completed a message box will popup either telling you that it is finished, or that a reboot is needed to complete the fix. If the fix is complete, click the Ok button and Notepad will open with a log of actions taken during the fix. Post that log back here in your next reply.
If a reboot is required, click the "Yes" button to reboot the machine. After the reboot, OTS will finish moving any files that could not be moved during the fix and NotePad will open with the final results at that time. Post that log back here in your next reply.