Aus sicherheitsgründen wurde ihr Windowssystem blockiert - Trojaner /Dateien sichern/ Bekämpfung

:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\Player\cds300.dll -- (d1924acf-676b-4d21-8d72-4918d95eb7b6)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\Player\cds300.dll -- (70b153df-6d2f-4015-9cc5-001d3206cc2b)
IE - HKU\S-1-5-21-672109106-2816730104-1952358663-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchya.com/?chnl=tst-215&s=0&cr=1981885887&cd=2XzutAtN2Y1L1QzutDtDtC0C0B0FzztByE0AtDyEtByB0AtAtAtN0D0TzutBtDtCtBtDyEtDyD
IE - HKU\S-1-5-21-672109106-2816730104-1952358663-1005\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-672109106-2816730104-1952358663-1005\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=62927c4f-337c-4045-86f6-216b8087f175&apn_sauid=ECC67F4B-8BC3-4E9E-B183-3B98CE91F350
IE - HKU\S-1-5-21-672109106-2816730104-1952358663-1005\..\SearchScopes\{E9DDD5A2-8D43-4CA1-8B45-74EDE7BBFDD4}: "URL" = http://searchya.com/?chnl=tst-215&s=1&cr=1981885887&cd=2XzutAtN2Y1L1QzutDtDtC0C0B0FzztByE0AtDyEtByB0AtAtAtN0D0TzutBtDtCtBtDyEtDyD&q={searchTerms}
IE - HKU\S-1-5-21-672109106-2816730104-1952358663-1005\..\SearchScopes\{F3204948-62E4-4439-AC98-4BD938B0DAC3}: "URL" = http://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=937811&p={searchTerms}
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://searchya.com/?chnl=tst-215&s=0&cr=1981885887&cd=2XzutAtN2Y1L1QzutDtDtC0C0B0FzztByE0AtDyEtByB0AtAtAtN0D0TzutBtDtCtBtDyEtDyD"
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=DVS2&o=1586&locale=de_DE&apn_uid=62927c4f-337c-4045-86f6-216b8087f175&apn_ptnrs=^AAA&apn_sauid=ECC67F4B-8BC3-4E9E-B183-3B98CE91F350&apn_dtid=^YYYYYY^YY^DE&&q="
[2012.04.05 13:53:59 | 000,000,000 | ---D | M] (searchya.com) -- C:\Dokumente und Einstellungen\Tobias\Anwendungsdaten\Mozilla\Firefox\Profiles\c6ylfy8q.default\extensions\ffxtlbr@searchya.com
[2012.02.01 16:57:35 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Dokumente und Einstellungen\Tobias\Anwendungsdaten\Mozilla\Firefox\Profiles\c6ylfy8q.default\extensions\toolbar@ask.com
[2012.04.08 18:28:33 | 000,002,404 | ---- | M] () -- C:\Dokumente und Einstellungen\Tobias\Anwendungsdaten\Mozilla\Firefox\Profiles\c6ylfy8q.default\searchplugins\askcom.xml
[2012.04.05 12:40:26 | 000,001,498 | ---- | M] () -- C:\Dokumente und Einstellungen\Tobias\Anwendungsdaten\Mozilla\Firefox\Profiles\c6ylfy8q.default\searchplugins\searchya.xml
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-672109106-2816730104-1952358663-1005\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-672109106-2816730104-1952358663-1005\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Programme\Ask.com\Updater\Updater.exe (Ask)
O4 - HKU\S-1-5-21-672109106-2816730104-1952358663-1005..\Run: [SkypePM] C:\Dokumente und Einstellungen\Tobias\Lokale Einstellungen\Anwendungsdaten\Skype\SkypePM.exe File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.06.03 19:07:00 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{f4fac8ee-4cd4-11e0-afa7-001b380d620d}\Shell - "" = AutoRun
O33 - MountPoints2\{f4fac8ee-4cd4-11e0-afa7-001b380d620d}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{f4fac8ee-4cd4-11e0-afa7-001b380d620d}\Shell\AutoRun\command - "" = E:\iStudio.exe
[2012.04.05 12:40:31 | 000,000,057 | ---- | M] () -- C:\user.js
:Files
C:\Programme\Ask.com
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]