Hi helplessin,
Check you have no suspicious processes running from these locations. Process Explorer from SysInternals is good. Highlight the process and the program will show you where it's running from. If it's a temp file, the process is very probably malware. HijackThis! will tell you if the process is known, unknown or malware. Research unknown processes on Google. Fix any known malware of course, and anything with an unrecognised filename running from a temp file- malware filenames are sometimes random.
I've seen CCleaner fail to delete temp files while Trojans are running from them. Cleaning up any remaining malware may allow you to delete them.
