How to remove Trojan-PSW.OnLineGames (pop up)

processes files:
yuiabct.exe
%SYSTEMROOT%system32olhrwef.exe
olhrwef.exe
%USERPROFILE%LOCALS~1Tempwinlogin.exe

registry entries:
Zt.ztatl.1
Zt.ztatl
E6ED0F88-01D3-435F-9913-5F30B83B84AC
D3F8FCC5-C74A-468E-9997-800CCFE59E04
C0CD7A93-0E42-4593-962C-3AF1784B3064
94EE2B4F-5560-4392-AEFB-A4C98F9FE315
5B589B2C-54A2-4F41-9461-D26B6364D587
4464BC65-F3FC-48B5-B3B5-AC2700F89B4F
3EA9EA6C-1E3B-475F-9266-2BE2C0D8788D
2200AF18-3A4F-4A5B-82F8-D8DC11B48597
TLBB.tlbbatl.1
TLBB.tlbbatl
RXCQ.ASKCQTL.1
RXCQ.ASKCQTL
Qqhx.gzqqhxatl.1
Qqhx.gzqqhxatl
MY.gbmyatl.1
MY.gbmyatl
MHXY.gzmhatl.1
MHXY.gzmhatl
F350EB80-6952-4B51-8F1C-CD2F29F456FE
E043AED1-4D87-47D2-8CAB-EFD811E3632A
C306ECAB-1B87-4308-B59D-0A4711EB9BCD
BF7243B5-E1E9-4E58-8803-23DC54C0879E
B38F5793-DFE3-4773-A3FF-8B9CC38FFB60
4150AB00-F8E9-4BFF-BDD4-EDA97BDD30FF
3AAA8090-9D8D-4C2C-9D8C-B68BCB6A7BAA
1638A53E-0627-45B6-AD57-E48B07AC20E0
DNF.gzdnfatl.1
DNF.gzdnfatl
DCBC4DF7-09A8-42D0-BCF4-299F72F40EAD
C85CB78B-8D31-4C27-8533-149683423BF7
B8F4C7B3-74C8-4380-80B6-B66E5486B904
8FF71D28-9FC0-4D5D-9FF1-6E24F96DE4B7
815EDE81-767D-4636-80F5-141578667A98
77AC4257-6781-430B-80C1-BCA6D20C950F
526403AC-FEDD-4350-946A-BC0B8114C65A
06768E0B-AB67-451A-BC21-CD38C6194080
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksDCBC4DF7-09A8-42D0-BCF4-299F72F40EAD
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksC85CB78B-8D31-4C27-8533-149683423BF7
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks8FF71D28-9FC0-4D5D-9FF1-6E24F96DE4B7
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks815EDE81-767D-4636-80F5-141578667A98
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks77AC4257-6781-430B-80C1-BCA6D20C950F
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks526403AC-FEDD-4350-946A-BC0B8114C65A
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks6768E0B-AB67-451A-BC21-CD38C6194080
E31C565C-F152-482D-A8C9-B0F6757539C9
DFB3DAC5-B0B5-4B05-BFCF-FB42737778FA
CBD32EAC-7ABA-4E81-90FA-9C2EA013A525
C9FB7946-5871-4396-AAFE-9F4ABBFA00FA
C97A0B4A-9182-4B64-8CCE-40DF369074E4
C7577A8E-04AE-4551-B89A-200CF6F6EF7C
C704C461-5339-419A-9732-AD0054BD1110
BEC07E68-F449-4E60-9D8B-052FE074410F
8BE76351-82E3-4E6F-B8EE-289C987DD602
890F52A4-AB83-4C2B-94D5-36F36EB8F43D
809E127E-78DA-4A71-AE5E-442A07833645
7BCAF997-6F01-4DC5-B5F4-395A89459721
5041E91C-0B55-40C8-9E07-F592E5F5737E
46E543E2-06D5-4961-BE3C-304FBD63F86A
1998D2F4-4F89-4950-89C4-958FDCC64FB7
04250F54-2E41-4645-B5C3-54C0197B29C3
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksE31C565C-F152-482D-A8C9-B0F6757539C9
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksDFB3DAC5-B0B5-4B05-BFCF-FB42737778FA
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksCBD32EAC-7ABA-4E81-90FA-9C2EA013A525
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksC9FB7946-5871-4396-AAFE-9F4ABBFA00FA
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksC97A0B4A-9182-4B64-8CCE-40DF369074E4
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksC7577A8E-04AE-4551-B89A-200CF6F6EF7C
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksC704C461-5339-419A-9732-AD0054BD1110
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksBEC07E68-F449-4E60-9D8B-052FE074410F
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks8BE76351-82E3-4E6F-B8EE-289C987DD602
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks890F52A4-AB83-4C2B-94D5-36F36EB8F43D
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks809E127E-78DA-4A71-AE5E-442A07833645
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks7BCAF997-6F01-4DC5-B5F4-395A89459721
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks5AD9956D-FEB3-4FF6-B719-00C02FCAD126
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks5041E91C-0B55-40C8-9E07-F592E5F5737E
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks46E543E2-06D5-4961-BE3C-304FBD63F86A
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks1998D2F4-4F89-4950-89C4-958FDCC64FB7
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks4250F54-2E41-4645-B5C3-54C0197B29C3
F45D2DB6-1DC5-4C32-87F4-C47FBF0D8BA2
EECE5F2B-BD93-4477-8027-D3BE0EE7EB1A
E87B80D7-842E-40A7-86B4-76A0E5D76674
A9019268-F38D-43F4-9E85-7443037BEDC6
A3083642-8392-48D2-BAB7-35075F86C3DD
8FD84462-BE2A-4E47-8CA0-E7AA55C62527
744B92E0-B771-478B-80DC-CD9E77E5A8D8
697F9864-6D8E-4FD4-8686-7162C6FF67AA
5BE7E1FC-1503-4FA4-AD6A-A71BE13C9FA0
52DD5A51-643A-419F-A202-C037912A7C5C
4CFA36E0-94A0-41C2-A656-6A10DF213015
1AF47292-E866-4E01-AF5C-C542C084925E
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksF45D2DB6-1DC5-4C32-87F4-C47FBF0D8BA2
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksEECE5F2B-BD93-4477-8027-D3BE0EE7EB1A
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksE87B80D7-842E-40A7-86B4-76A0E5D76674
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksA9019268-F38D-43F4-9E85-7443037BEDC6
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooksA3083642-8392-48D2-BAB7-35075F86C3DD
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks8FD84462-BE2A-4E47-8CA0-E7AA55C62527
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks744B92E0-B771-478B-80DC-CD9E77E5A8D8
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks697F9864-6D8E-4FD4-8686-7162C6FF67AA
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks5BE7E1FC-1503-4FA4-AD6A-A71BE13C9FA0
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks52DD5A51-643A-419F-A202-C037912A7C5C
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks4CFA36E0-94A0-41C2-A656-6A10DF213015
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks47665FA5-FCF5-4444-B552-DF6549ECCA27
SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellExecuteHooks1AF47292-E866-4E01-AF5C-C542C084925E
735CA461-6C66-4BCA-8290-B0B27B8E9312
6A6779ED-A95C-4946-8B3F-39F33E2D2140
09EB15FA-17D8-4D60-8598-3F549A848DF2
47665FA5-FCF5-4444-B552-DF6549ECCA27