BKA Warnung ...Trojaner verweist auf eine Pornoseite

Rosi

All processes killed
========== OTL ==========
No active process named Updater.exe was found!
No active process named TeaTimer.exe was found!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Yahoo" removed from browser.search.defaultenginename
Prefs.js: "hxxp://de.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=" removed from browser.search.defaulturl
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "moz2-ytff-tyc" removed from browser.search.param.yahoo-fr
Prefs.js: "moz2-ytff-tyc" removed from browser.search.param.yahoo-fr-cjkt
Prefs.js: "Google" removed from browser.search.selectedEngine
Prefs.js: true removed from browser.search.useDBForOrder
Prefs.js: "www.yahoo.de" removed from browser.startup.homepage
Prefs.js: tineye@ideeinc.com:1.1 removed from extensions.enabledItems
Prefs.js: "hxxp://de.search.yahoo.com/search?ei=UTF-8&fr=ytff-tyc&p=" removed from keyword.URL
Prefs.js: "127.0.0.1" removed from network.proxy.http
Prefs.js: 59111 removed from network.proxy.http_port
Prefs.js: 0 removed from network.proxy.type
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\META-INF folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\defaults\preferences folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\defaults folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\askcom.xml moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\bing.xml moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\web-search.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{043C5167-00BB-4324-AF7E-62013FAEDACF} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{043C5167-00BB-4324-AF7E-62013FAEDACF} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SpybotSD TeaTimer deleted successfully.
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe moved successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\1C546\E191C.exe deleted successfully.
========== FILES ==========
C:\Programme\4679B folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\1C546 folder moved successfully.
C:\Programme\LP\1C81 folder moved successfully.
C:\Programme\LP folder moved successfully.
C:\Programme\Ask.com\Updater folder moved successfully.
C:\Programme\Ask.com\assets\oobe folder moved successfully.
C:\Programme\Ask.com\assets folder moved successfully.
C:\Programme\Ask.com folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Anmeldung Tennis

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 3738391 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1242057 bytes

User: Toro
->Temp folder emptied: 121524153 bytes
->Temporary Internet Files folder emptied: 163974 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 149624056 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 8989 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2148906 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 24192 bytes
Windows Temp folder emptied: 1886436 bytes
RecycleBin emptied: 1198629 bytes

Total Files Cleaned = 269,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.31.0 log created on 01172012_211129

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...