Windows Update Trojaner befall

 Malwarebytes Anti-Malware  (Trial) 1.61.0.1400
www.malwarebytes.org

Database version: v2012.06.11.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Arno :: ARNO [administrator]

Protection: Disabled

13.06.2012 21:32:09
mbam-log-2012-06-13 (21-32-09).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 463142
Time elapsed: 1 hour(s), 12 minute(s), 58 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 8
C:\Dokumente und Einstellungen\Arno\Eigene Dateien\dATEN VON sTICK\DecryptHelper-0.5.3.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Arno\Lokale Einstellungen\Temp\kkkkkkkkkk.pre (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Arno\Lokale Einstellungen\Temp\psffffffff.pre (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Arno\Lokale Einstellungen\Temp\sggggggggg.pre (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Esther\Lokale Einstellungen\Temp\Uninstall.exe (Heuristics.Shuriken) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Esther\Lokale Einstellungen\Temp\GMX_SmartUpdate.exe (Heuristics.Shuriken) -> Quarantined and deleted successfully.
C:\_OTL\MovedFiles\06122012_230139\C_Dokumente und Einstellungen\Arno\Anwendungsdaten\Qhhhhhhhhh\E2F2F9B6ECF59C89CB89.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\_OTL\MovedFiles\06122012_230139\C_WINDOWS\system32\4561002EECF59C896277.exe (Trojan.Agent) -> Quarantined and deleted successfully.

(end)
         

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=a66023b931764b459c7b8fd3a4c6ff55
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-06-15 07:18:01
# local_time=2012-06-15 09:18:01 (+0100, Westeuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=1792 16777191 100 0 3114089 3114089 0 0
# compatibility_mode=8192 67108863 100 0 324 324 0 0
# scanned=156790
# found=2
# cleaned=0
# scan_time=5153
C:\Dokumente und Einstellungen\Arno\Eigene Dateien\dATEN VON sTICK\MovedFiles.zip	Win32/Trustezeb.B Trojaner (Säubern nicht möglich)	00000000000000000000000000000000	I
C:\_OTL\MovedFiles.zip	Win32/Trustezeb.B Trojaner (Säubern nicht möglich)	00000000000000000000000000000000	I