Logfile bitte mal durchschauen

JohannesK

Hallo, könnte bitte mal jemand dieses Logfile durchschauen und bewerten, ob das System neuaufgesetzt werden muss?

Logfile of HijackThis v1.99.1
Scan saved at 17:47:42, on 18.04.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Programme\Lexmark X1100 Series\lxbkbmgr.exe
C:\Programme\McAfee.com\VSO\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Programme\McAfee.com\VSO\oasclnt.exe
C:\Programme\Java\jre1.5.0_09\bin\jusched.exe
C:\Programme\Lexmark X1100 Series\lxbkbmon.exe
C:\Programme\iTunes\iTunesHelper.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Programme\QuickTime\qttask.exe
C:\WINDOWS\System32\Msmst.exe
C:\Program Files\VaccinePro\VaccPD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\MSN Messenger\MsnMsgr.Exe
C:\Programme\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
c:\programme\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\System32\svchost.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\iPod\bin\iPodService.exe
C:\Programme\RPlatinum\pltsvc.exe
C:\Programme\RPlatinum\cekmok.exe
C:\Programme\WinZip\WZQKPICK.EXE
C:\WINDOWS\nvdualhd.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Mozilla Thunderbird\thunderbird.exe
C:\Dokumente und Einstellungen\Ki-De Yoon\Eigene Dateien\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
h**p://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
h**p://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
h**p://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
h**p://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar -
{EF99BD32-C1FB-11D2-892F-0090271D4F88} -
C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670}
- C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat
7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1AD3A632-7E9D-4458-9995-566505CE3609} -
C:\Programme\bonuspack\rebag.dll
O2 - BHO: ViewSource Class - {1D5A9C38-93C7-4C9D-AFCC-87A949DDFFBB} -
C:\Programme\internetlink\internetlink.dll
O2 - BHO: (no name) - {28D7C773-3AAE-4216-BDAA-91A11F88AEAF} -
C:\WINDOWS\system32\wmdsmsdk.dll
O2 - BHO: (no name) - {43308DE2-4238-4A3A-B7CD-17B88BA1D492} -
C:\WINDOWS\system32\assured.dll
O2 - BHO: NetCtrl Class - {68FACDB7-76C2-481F-BED0-5176BFC06F40} -
C:\WINDOWS\system32\jng.dll
O2 - BHO: Platinum Class - {6F100783-3B02-4A0F-8995-CF4450A1AE99} -
C:\Programme\RPlatinum\platinum.dll
O2 - BHO: asetapp Class - {73289162-036F-467D-921C-8DDC081693A5} -
C:\WINDOWS\system32\appset.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Programme\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: SRead.Set - {766617CE-5CA7-42ED-ACE2-DE56B387547B} -
C:\WINDOWS\system32\SysRead.dll
O2 - BHO: Windows Live Sign-in Helper -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame
Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ¹ÙÀÌÅø¹Ù(&B) - {9F7B92E8-D3BF-4849-9BEF-46C04D4AEB8E} -
C:\Program Files\ByToolbar\ByToolbar1\ByToolbar1.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7}
- c:\programme\google\googletoolbar4.dll
O2 - BHO: upg Class - {AD4A14F9-1BA1-49EC-B721-E1D79AD768F6} -
C:\WINDOWS\system32\upl.dll
O2 - BHO: Anchor.Bar - {B8A85F00-5E88-4A49-8C24-47116FB801DF} -
C:\WINDOWS\system32\Anchor.dll
O2 - BHO: ShopPoint Class - {DA18CDFC-11E1-48e4-BFEE-775890B9AE44} -
C:\Program Files\ShopPoint\ShopPoint.dll (file missing)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655}
- c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: ¹ÙÀÌÅø¹Ù(&B) - {9F7B92E8-D3BF-4849-9BEF-46C04D4AEB8E} -
C:\Program Files\ByToolbar\ByToolbar1\ByToolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -
c:\programme\google\googletoolbar4.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Programme\Lexmark X1100
Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [VSOCheckTask]
"C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online]
C:\Programme\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [OASClnt] C:\Programme\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched]
"C:\Programme\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [Msmst] C:\WINDOWS\System32\Msmst.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [MsgCenterExe] "C:\Programme\Gemeinsame
Dateien\Real\Update_OB\RealOneMessageCenter.exe" -osboot
O4 - HKLM\..\Run: [NerCheck] C:\WINDOWS\svchsot.exe
O4 - HKLM\..\Run: [verify] C:\WINDOWS\system32\verify.exe
O4 - HKLM\..\Run: [Platinum] C:\Programme\RPlatinum\pltup.exe
O4 - HKLM\..\Run: [VaccP] "C:\Program Files\VaccinePro\VaccPD.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe"
/background
O4 - HKCU\..\Run: [FlashPlayer] C:\Program
Files\FlashPlayer\FlashPlayer.exe /WS
O4 - HKCU\..\Run: [ProgramControl] C:\WINDOWS\ProgramControl.exe /WS
O4 - HKCU\..\Run: [dalgonaTVPlayer] C:\Program
Files\dalgonaTVPlayer\dalgonaTVPlayer.exe /WS
O4 - HKCU\..\Run: [tooin1] c:\Program Files\zeroscan\tooin1.exe
O4 - HKCU\..\Run: [AutoRun] c:\Windows\System32\AutoRun.exe
O4 - HKCU\..\Run: [winPJvib] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winPJvib.exe
O4 - HKCU\..\Run: [ByToolbar1] C:\Program
Files\ByToolbar\ByToolbar1\\ByToolbar1.exe
O4 - HKCU\..\Run: [swg]
C:\Programme\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [winoMWnM] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winoMWnM.exe
O4 - HKCU\..\Run: [winDrZTy] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winDrZTy.exe
O4 - HKCU\..\Run: [winAdHcE] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winAdHcE.exe
O4 - HKCU\..\Run: [winHOFix] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHOFix.exe
O4 - HKCU\..\Run: [winpzepV] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winpzepV.exe
O4 - HKCU\..\Run: [winvhDOI] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winvhDOI.exe
O4 - HKCU\..\Run: [winLzzsG] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winLzzsG.exe
O4 - HKCU\..\Run: [winhWCdA] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winhWCdA.exe
O4 - HKCU\..\Run: [winpPmpL] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winpPmpL.exe
O4 - HKCU\..\Run: [wineHhBW] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wineHhBW.exe
O4 - HKCU\..\Run: [winZTeqv] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winZTeqv.exe
O4 - HKCU\..\Run: [winVcGsI] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winVcGsI.exe
O4 - HKCU\..\Run: [wingVmYc] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wingVmYc.exe
O4 - HKCU\..\Run: [winNVATe] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winNVATe.exe
O4 - HKCU\..\Run: [winokAag] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winokAag.exe
O4 - HKCU\..\Run: [winUvOqw] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winUvOqw.exe
O4 - HKCU\..\Run: [winaYvLl] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winaYvLl.exe
O4 - HKCU\..\Run: [winklhyw] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winklhyw.exe
O4 - HKCU\..\Run: [winRrJSv] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winRrJSv.exe
O4 - HKCU\..\Run: [winYcqEM] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winYcqEM.exe
O4 - HKCU\..\Run: [wineJCPJ] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wineJCPJ.exe
O4 - HKCU\..\Run: [winwTCFV] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winwTCFV.exe
O4 - HKCU\..\Run: [winOllmb] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winOllmb.exe
O4 - HKCU\..\Run: [winGAfxN] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winGAfxN.exe
O4 - HKCU\..\Run: [winMWzhs] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winMWzhs.exe
O4 - HKCU\..\Run: [winhAATQ] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winhAATQ.exe
O4 - HKCU\..\Run: [wineqcvP] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wineqcvP.exe
O4 - HKCU\..\Run: [winJWsag] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winJWsag.exe
O4 - HKCU\..\Run: [winjuknF] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winjuknF.exe
O4 - HKCU\..\Run: [winHEBvf] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHEBvf.exe
O4 - HKCU\..\Run: [winmmJOZ] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winmmJOZ.exe
O4 - HKCU\..\Run: [winzofth] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winzofth.exe
O4 - HKCU\..\Run: [winZtyLy] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winZtyLy.exe
O4 - HKCU\..\Run: [winUuNTA] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winUuNTA.exe
O4 - HKCU\..\Run: [winuvvId] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winuvvId.exe
O4 - HKCU\..\Run: [SOFTWARE\IMKPMIG] C:\WINDOWS\system32\IMKPMIG.exe
O4 - HKCU\..\Run: [website_controller]
C:\WINDOWS\system32\website_controller.exe /WS
O4 - HKCU\..\Run: [winHdapb] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHdapb.exe
O4 - HKCU\..\Run: [wintvyPK] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wintvyPK.exe
O4 - HKCU\..\Run: [winobAGv] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winobAGv.exe
O4 - HKCU\..\Run: [winHQuTp] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHQuTp.exe
O4 - HKCU\..\Run: [winkapNw] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winkapNw.exe
O4 - HKCU\..\Run: [winXOpQP] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winXOpQP.exe
O4 - HKCU\..\Run: [winERKlL] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winERKlL.exe
O4 - HKCU\..\Run: [internet_webplayer] C:\Program
Files\internet_webplayer\internet_webplayer.exe /WS
O4 - HKCU\..\Run: [winVunSx] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winVunSx.exe
O4 - HKCU\..\Run: [winvLXuR] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winvLXuR.exe
O4 - HKCU\..\Run: [winVtRby] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winVtRby.exe
O4 - HKCU\..\Run: [winRCLPm] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winRCLPm.exe
O4 - HKCU\..\Run: [winnGPDK] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winnGPDK.exe
O4 - HKCU\..\Run: [kanibar] C:\WINDOWS\kanibar.exe /WS
O4 - HKCU\..\Run: [winkrqJd] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winkrqJd.exe
O4 - HKCU\..\Run: [winGTOjF] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winGTOjF.exe
O4 - HKCU\..\Run: [winUZpLO] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winUZpLO.exe
O4 - HKCU\..\Run: [winjCACh] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winjCACh.exe
O4 - HKCU\..\Run: [winxxFOj] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winxxFOj.exe
O4 - HKCU\..\Run: [winmJqYM] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winmJqYM.exe
O4 - HKCU\..\Run: [winUwwep] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winUwwep.exe
O4 - HKCU\..\Run: [winEetlw] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winEetlw.exe
O4 - HKCU\..\Run: [winQqzuS] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winQqzuS.exe
O4 - HKCU\..\Run: [winTcATk] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winTcATk.exe
O4 - HKCU\..\Run: [winHFBxD] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHFBxD.exe
O4 - HKCU\..\Run: [winUxFXt] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winUxFXt.exe
O4 - HKCU\..\Run: [wineYTru] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wineYTru.exe
O4 - HKCU\..\Run: [winWyXPR] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winWyXPR.exe
O4 - HKCU\..\Run: [winyxuhT] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winyxuhT.exe
O4 - HKCU\..\Run: [winYRqCB] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winYRqCB.exe
O4 - HKCU\..\Run: [winWXJNQ] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winWXJNQ.exe
O4 - HKCU\..\Run: [winGQExg] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winGQExg.exe
O4 - HKCU\..\Run: [winEpyTv] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winEpyTv.exe
O4 - HKCU\..\Run: [wintbnfw] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wintbnfw.exe
O4 - HKCU\..\Run: [winyzkiq] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winyzkiq.exe
O4 - HKCU\..\Run: [winkNYnP] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winkNYnP.exe
O4 - HKCU\..\Run: [winuLUyq] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winuLUyq.exe
O4 - HKCU\..\Run: [winEWJwN] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winEWJwN.exe
O4 - HKCU\..\Run: [find_zipcode]
C:\Programme\Find_Zipcode\FindZipcodeUpdate.exe
O4 - HKCU\..\Run: [winSGXnc] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winSGXnc.exe
O4 - HKCU\..\Run: [winfKnbM] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winfKnbM.exe
O4 - HKCU\..\Run: [winOyWro] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winOyWro.exe
O4 - HKCU\..\Run: [winvNzSJ] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winvNzSJ.exe
O4 - HKCU\..\Run: [wingnXQt] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wingnXQt.exe
O4 - HKCU\..\Run: [winBiUll] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winBiUll.exe
O4 - HKCU\..\Run: [winqCRTU] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winqCRTU.exe
O4 - HKCU\..\Run: [winsHopm] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winsHopm.exe
O4 - HKCU\..\Run: [winaclHp] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winaclHp.exe
O4 - HKCU\..\Run: [winXJdVz] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winXJdVz.exe
O4 - HKCU\..\Run: [winVfBsX] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winVfBsX.exe
O4 - HKCU\..\Run: [winzYWbe] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winzYWbe.exe
O4 - HKCU\..\Run: [winohmQs] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winohmQs.exe
O4 - HKCU\..\Run: [winHoNLF] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHoNLF.exe
O4 - HKCU\..\Run: [winilYsR] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winilYsR.exe
O4 - HKCU\..\Run: [winKJKxS] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winKJKxS.exe
O4 - HKCU\..\Run: [winyMpNJ] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winyMpNJ.exe
O4 - HKCU\..\Run: [winIwgGT] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winIwgGT.exe
O4 - HKCU\..\Run: [winRFzzu] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winRFzzu.exe
O4 - HKCU\..\Run: [winHbPou] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHbPou.exe
O4 - HKCU\..\Run: [winIHmPB] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winIHmPB.exe
O4 - HKCU\..\Run: [windKCVy] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\windKCVy.exe
O4 - HKCU\..\Run: [winAMIfW] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winAMIfW.exe
O4 - HKCU\..\Run: [winFAGCQ] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winFAGCQ.exe
O4 - HKCU\..\Run: [winPsTxC] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winPsTxC.exe
O4 - HKCU\..\Run: [winYmnem] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winYmnem.exe
O4 - HKCU\..\Run: [winboTlB] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winboTlB.exe
O4 - HKCU\..\Run: [winowTRn] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winowTRn.exe
O4 - HKCU\..\Run: [windxFWu] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\windxFWu.exe
O4 - HKCU\..\Run: [winklNPw] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winklNPw.exe
O4 - HKCU\..\Run: [winRjkXQ] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winRjkXQ.exe
O4 - HKCU\..\Run: [winhoemj] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winhoemj.exe
O4 - HKCU\..\Run: [winwchEH] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winwchEH.exe
O4 - HKCU\..\Run: [winqreDq] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winqreDq.exe
O4 - HKCU\..\Run: [winAtSCA] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winAtSCA.exe
O4 - HKCU\..\Run: [winbCoNf] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winbCoNf.exe
O4 - HKCU\..\Run: [winYLKyR] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winYLKyR.exe
O4 - HKCU\..\Run: [winfnBFu] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winfnBFu.exe
O4 - HKCU\..\Run: [winSKcUW] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winSKcUW.exe
O4 - HKCU\..\Run: [winwTISg] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winwTISg.exe
O4 - HKCU\..\Run: [winkXhrP] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winkXhrP.exe
O4 - HKCU\..\Run: [winJqVAX] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winJqVAX.exe
O4 - HKCU\..\Run: [winaEUpO] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winaEUpO.exe
O4 - HKCU\..\Run: [winOakAu] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winOakAu.exe
O4 - HKCU\..\Run: [winHtupi] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHtupi.exe
O4 - HKCU\..\Run: [winIDqhh] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winIDqhh.exe
O4 - HKCU\..\Run: [winAiSRF] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winAiSRF.exe
O4 - HKCU\..\Run: [wineexKE] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wineexKE.exe
O4 - HKCU\..\Run: [winRwohu] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winRwohu.exe
O4 - HKCU\..\Run: [winSWFms] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winSWFms.exe
O4 - HKCU\..\Run: [winzvonV] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winzvonV.exe
O4 - HKCU\..\Run: [winQiMLE] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winQiMLE.exe
O4 - HKCU\..\Run: [winTxiws] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winTxiws.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Programme\Adobe\Acrobat
7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [winohWwi] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winohWwi.exe
O4 - HKCU\..\Run: [winIOZWe] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winIOZWe.exe
O4 - HKCU\..\Run: [winEIrPK] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winEIrPK.exe
O4 - HKCU\..\Run: [winyIWhi] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winyIWhi.exe
O4 - HKCU\..\Run: [wineASHg] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wineASHg.exe
O4 - HKCU\..\Run: [winjRwwN] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winjRwwN.exe
O4 - HKCU\..\Run: [winolBqo] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winolBqo.exe
O4 - HKCU\..\Run: [winnsgKb] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winnsgKb.exe
O4 - HKCU\..\Run: [wingnvuT] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wingnvuT.exe
O4 - HKCU\..\Run: [winTprrr] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winTprrr.exe
O4 - HKCU\..\Run: [winIhWjy] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winIhWjy.exe
O4 - HKCU\..\Run: [winwRhqq] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winwRhqq.exe
O4 - HKCU\..\Run: [winVREOD] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winVREOD.exe
O4 - HKCU\..\Run: [winZUVCv] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winZUVCv.exe
O4 - HKCU\..\Run: [winHCXfC] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winHCXfC.exe
O4 - HKCU\..\Run: [winQSMyj] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winQSMyj.exe
O4 - HKCU\..\Run: [winWnrel] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winWnrel.exe
O4 - HKCU\..\Run: [winTxMln] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winTxMln.exe
O4 - HKCU\..\Run: [winUmZnG] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winUmZnG.exe
O4 - HKCU\..\Run: [winLjKua] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winLjKua.exe
O4 - HKCU\..\Run: [winEaSDI] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winEaSDI.exe
O4 - HKCU\..\Run: [winIXXIj] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winIXXIj.exe
O4 - HKCU\..\Run: [winbkzfC] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winbkzfC.exe
O4 - HKCU\..\Run: [winVbJHu] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winVbJHu.exe
O4 - HKCU\..\Run: [winKiltP] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winKiltP.exe
O4 - HKCU\..\Run: [winTnlOl] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winTnlOl.exe
O4 - HKCU\..\Run: [winMYGOy] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winMYGOy.exe
O4 - HKCU\..\Run: [winZPvUr] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winZPvUr.exe
O4 - HKCU\..\Run: [winKinLL] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winKinLL.exe
O4 - HKCU\..\Run: [winNybuL] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winNybuL.exe
O4 - HKCU\..\Run: [winJrpUk] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winJrpUk.exe
O4 - HKCU\..\Run: [winKCaSv] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winKCaSv.exe
O4 - HKCU\..\Run: [winKdakm] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winKdakm.exe
O4 - HKCU\..\Run: [winPtHZk] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winPtHZk.exe
O4 - HKCU\..\Run: [winhCRrW] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winhCRrW.exe
O4 - HKCU\..\Run: [winCCcjG] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winCCcjG.exe
O4 - HKCU\..\Run: [winJqDxM] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winJqDxM.exe
O4 - HKCU\..\Run: [winjSXHP] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winjSXHP.exe
O4 - HKCU\..\Run: [wincOUPs] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\wincOUPs.exe
O4 - HKCU\..\Run: [winLCzmi] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winLCzmi.exe
O4 - HKCU\..\Run: [winznjma] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winznjma.exe
O4 - HKCU\..\Run: [winUdUep] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winUdUep.exe
O4 - HKCU\..\Run: [winJGTdy] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winJGTdy.exe
O4 - HKCU\..\Run: [winKWOdS] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winKWOdS.exe
O4 - HKCU\..\Run: [winytntP] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winytntP.exe
O4 - HKCU\..\Run: [winyxylw] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winyxylw.exe
O4 - HKCU\..\Run: [winDDXgk] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\winDDXgk.exe
O4 - HKCU\..\Run: [windIZJr] C:\DOKUME~1\KI-DEY~1\LOKALE~1\Temp\windIZJr.exe