Windows Update Trojaner - verschlüsselte Daten

========== OTL ==========
Registry value HKEY_USERS\user5_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\2F860542 deleted successfully.
C:\WINDOWS\system32\17A89E822F86054200E4.exe moved successfully.
Registry value HKEY_USERS\user2_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\anti_troj deleted successfully.
Registry value HKEY_USERS\user1_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\2F860542 deleted successfully.
File C:\WINDOWS\system32\17A89E822F86054200E4.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableTaskMgr deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegedit deleted successfully.
Registry value HKEY_USERS\user1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegistryTools deleted successfully.
Registry value HKEY_USERS\user1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegedit deleted successfully.
Registry value HKEY_USERS\user1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableTaskMgr deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit:C:\WINDOWS\system32\17A89E822F86054200E4.exe deleted successfully.
File C:\WINDOWS\system32\17A89E822F86054200E4.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\ deleted successfully.
========== FILES ==========
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: All Users
 
User: user1
->Temp folder emptied: 5835116 bytes
->Temporary Internet Files folder emptied: 129062237 bytes
->Java cache emptied: 148058142 bytes
->FireFox cache emptied: 49278909 bytes
->Google Chrome cache emptied: 12308358 bytes
->Flash cache emptied: 257407 bytes
 
User: user2
->Temp folder emptied: 10282123 bytes
->Temporary Internet Files folder emptied: 13860311 bytes
->Java cache emptied: 377216 bytes
->Flash cache emptied: 300 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 65536 bytes
 
User: user3
->Temp folder emptied: 10345005 bytes
->Temporary Internet Files folder emptied: 70035351 bytes
->Java cache emptied: 559397 bytes
->Flash cache emptied: 2067 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 227071 bytes
->Flash cache emptied: 300 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: user4
->Temp folder emptied: 4835885 bytes
->Temporary Internet Files folder emptied: 30586115 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 300 bytes
 
User: user5
->Temp folder emptied: 1093512 bytes
->Temporary Internet Files folder emptied: 35313189 bytes
->Java cache emptied: 92035 bytes
->Flash cache emptied: 300 bytes
 
Total Flash Files Cleaned = 498.00 mb
 
 
[EMPTYTEMP]
 
User: All Users
 
User: user1
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: user2
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: user3
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: user4
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: user5
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 25322712 bytes
 
Total Files Cleaned = 24.00 mb
 
 
OTLPE by OldTimer - Version 3.1.48.0 log created on 05252012_215443