Win32:Rootkit-gen Virus was soll ich tun??!!??

big_kelly

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 16.07.2009 22:23:57
System Uptime: 18.12.2009 20:25:04 (2 hours ago)

Motherboard: Foxconn | | 9657AA
Processor: Intel(R) Pentium(R) D CPU 2.66GHz | Socket 775 | 2678/133mhz
Processor: Intel(R) Pentium(R) D CPU 2.66GHz | Socket 775 | 2678/133mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 932 GiB total, 454,26 GiB free.
D: is CDROM ()
E: is Removable
F: is CDROM ()
G: is CDROM ()
I: is Removable
J: is Removable
K: is Removable

==== Disabled Device Manager Items =============

Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
Description: Standardtastatur (101/102 Tasten) oder Microsoft Natural Keyboard (PS/2)
Device ID: ACPI\PNP0303\4&6CD354D&0
Manufacturer: (Standardtastaturen)
Name: Standardtastatur (101/102 Tasten) oder Microsoft Natural Keyboard (PS/2)
PNP Device ID: ACPI\PNP0303\4&6CD354D&0
Service: i8042prt

==== System Restore Points ===================

RP1: 08.12.2009 08:26:52 - Systemprüfpunkt
RP2: 08.12.2009 08:38:10 - Driver Detective wurde installiert.
RP3: 08.12.2009 09:07:50 - Konfiguriert JMicron JMB36X Driver
RP4: 08.12.2009 09:09:15 - Installiert Realtek High Definition Audio Driver
RP5: 11.12.2009 22:39:11 - Systemprüfpunkt
RP6: 12.12.2009 00:39:57 - Installed Logitech Gaming Software
RP7: 12.12.2009 21:50:51 - Steam wird entfernt
RP8: 13.12.2009 01:03:56 - DirectX wurde installiert
RP9: 13.12.2009 01:05:30 - Steam wird installiert
RP10: 14.12.2009 00:01:41 - Installiert NVIDIA nTune
RP11: 14.12.2009 00:20:45 - Removed Adobe Photoshop Lightroom 2.
RP12: 14.12.2009 00:29:28 - Driver Detective wurde entfernt.
RP13: 14.12.2009 00:35:17 - Removed QUAD RegistryCleaner
RP14: 14.12.2009 01:38:59 - Steam wird entfernt
RP15: 15.12.2009 01:57:20 - Systemprüfpunkt
RP16: 17.12.2009 02:37:24 - Systemprüfpunkt
RP17: 17.12.2009 23:41:33 - Entfernt Call of Juarez - Bound in Blood
RP18: 17.12.2009 23:52:53 - TuneUp Utilities wird installiert
RP19: 18.12.2009 04:04:01 - TuneUp Utilities 2006 wird entfernt
RP20: 18.12.2009 04:07:18 - Wiederherstellungspunkt mit 18.12.2009
RP21: 18.12.2009 21:22:50 - Software Distribution Service 3.0

==== Installed Programs ======================

1500
1500_Help
1500Trb
Adobe Acrobat 8 Professional - English, Français, Deutsch
Adobe After Effects CS3
Adobe After Effects CS3 Presets
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe BridgeTalk Plugin CS3
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color - Photoshop Specific
Adobe Color Common Settings
Adobe Color EU Recommended Settings
Adobe Color JA Extra Settings
Adobe Color NA Extra Settings
Adobe Contribute CS3
Adobe Creative Suite 3 Master Collection
Adobe Creative Suite 3 Master Collection hinzufügen oder entfernen
Adobe Default Language CS3
Adobe Device Central CS3
Adobe Dreamweaver CS3
Adobe Encore CS3
Adobe Encore CS3 Codecs
Adobe ExtendScript Toolkit 2
Adobe Extension Manager CS3
Adobe Fireworks CS3
Adobe Flash CS3
Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Adobe Flash Video Encoder
Adobe Fonts All
Adobe Help Viewer CS3
Adobe Illustrator CS3
Adobe InDesign CS3
Adobe InDesign CS3 Icon Handler
Adobe Linguistics CS3
Adobe MotionPicture Color Files
Adobe OnLocation CS3
Adobe PDF Library Files
Adobe Photoshop CS3
Adobe Premiere Pro CS3
Adobe Premiere Pro CS3 Functional Content
Adobe Premiere Pro CS3 Third Party Content
Adobe Setup
Adobe SING CS3
Adobe Soundbooth CS3
Adobe Soundbooth CS3 Codecs
Adobe Stock Photos CS3
Adobe Type Support
Adobe Ultra CS3
Adobe Ultra CS3 - MSL Legacy Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe Version Cue CS3 Server {ko_KR}
Adobe Video Profiles
Adobe WAS CS3
Adobe WinSoft Linguistics Plugin
Adobe XMP DVA Panels CS3
Adobe XMP Panels CS3
AHV content for Acrobat and Flash
AiO_Scan
AiOSoftware
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArtMoney SE v7.31
avast! Antivirus
AviSynth 2.5
AVS Update Manager 1.0
AVS Video Converter 6
AVS4YOU Software Navigator 1.3
BD/HD Advisor 1.0
Bonjour
BufferChm
Call of Duty: Modern Warfare 2
Call of Duty: Modern Warfare 2 - Multiplayer
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
CustomerResearchQFolder
CyberLink Hi-Def Suite
CyberLink PowerDVD
DAEMON Tools Toolbar
Destinations
DeviceManagementQFolder
DocProc
Driver Genius Professional Edition
DualCoreCenter
eSupportQFolder
Exact Audio Copy 0.99pb4
Fax
Firstload Ikarus
FLAC 1.2.1b (remove only)
FOX DMI
FOX LOGO
FOX ONE
Free Video Converter V 2.3
FTDI USB Serial Converter Drivers
FW LiveUpdate
Game Booster
Golden Records Vinyl to CD Converter
GoodMEM
Google Gears
Google Update Helper
High Definition Audio Driver Package - KB888111
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows XP (KB926239)
HP Extended Capabilities 5.3
HP Image Zone Express
HP Imaging Device Functions 5.3
HP Product Assistant
HP PSC & OfficeJet 5.3.B
HP Solution Center & Imaging Support Tools 5.3
HP Update
HPProductAssistant
ICQ Toolbar
ICQ6.5
IncrediMail
iPhone-Konfigurationsprogramm
iTunes
Java(TM) 6 Update 17
JMicron JMB36X Driver
K-Lite Codec Pack 5.0.0 (Basic)
LabelPrint
LG ODD Auto Firmware Update
LightScribe Optical Disc Kit
LightScribe System Software
LockBox
Logitech Gaming Software
MarketResearch
Marvell Miniport Driver
MediaBar 2.0
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
Microsoft .NET Framework 3.5 Language Pack SP1 - deu
Microsoft .NET Framework 3.5 SP1
Microsoft Baseline Security Analyzer 1.2.1
Microsoft Office Access MUI (German) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (German) 2007
Microsoft Office Groove MUI (German) 2007
Microsoft Office InfoPath MUI (German) 2007
Microsoft Office OneNote MUI (German) 2007
Microsoft Office Outlook MUI (German) 2007
Microsoft Office PowerPoint MUI (German) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Italian) 2007
Microsoft Office Proofing (German) 2007
Microsoft Office Publisher MUI (German) 2007
Microsoft Office Shared MUI (German) 2007
Microsoft Office Word MUI (German) 2007
Microsoft Software Update for Web Folders (German) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Miles Sound Tools
MobileMe Control Panel
MozBackup 1.4.9
Mozilla Firefox (3.5.6)
MSXML 4.0 SP2 Parser and SDK
MSXML 6.0 Parser (KB933579)
Need for Speed™ SHIFT
Nero Suite
NewCopy
NVIDIA Drivers
NVIDIA nTune
NVIDIA nView Desktop Manager
NVIDIA PhysX
O&O DiskImage Professional
O&O DiskRecovery
O&O SafeErase
O&O UnErase
OLYMPUS Master 2
OLYMPUS Raw Codec
OLYMPUS Studio 2
oZone3D.Net FurMark v1.7.0
PC SpeedScan Pro
PDF Settings
Power2Go 5.0
PowerBackup
PowerProducer
Prism Video Converter
ProductContext
QuickPar 0.9
QuickTime
Readme
RealPlayer
Realtek High Definition Audio Driver
Safari
Scan
ScannerCopy
SecureDoc
Skype™ 4.1
SolutionCenter
Status
Steam
System Requirements Lab
TrayApp
TuneUp Utilities
TuneUp Utilities Language Pack (de-DE)
Uninstall 1.0.0.1
Unload
Update für Windows XP (KB898461)
VLC media player 1.0.3
Vuze
Vuze Toolbar
WebFldrs XP
WebReg
Windows-Treiberpaket - OLYMPUS IMAGING CORP. (OlyFirCam) OlyFirCam (06/28/2007 2.2.0.0)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. (OlyUsbCam) OlyUsbCam (12/28/2006 1.0.0.0)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Media Format 11 runtime
WinRAR
WinSCP 4.1.9
WinZip 12.1
XML Paper Specification Shared Components Language Pack 1.0
XML Paper Specification Shared Components Pack 1.0
Xvid 1.2.2 final uninstall

==== Event Viewer Messages From Past Week ========

12.12.2009 20:51:04, Informationen: Windows File Protection [64002] - Es wurde versucht, die geschützte Systemdatei nv4_mini.sys zu ersetzen. Diese Datei wurde von der Originalversion wiederhergestellt, um die Systemstabilität zu gewährleisten. Die Dateiversion der Systemdatei ist 6.14.10.5673.
12.12.2009 20:51:04, Informationen: Windows File Protection [64002] - Es wurde versucht, die geschützte Systemdatei nv4_disp.dll zu ersetzen. Diese Datei wurde von der Originalversion wiederhergestellt, um die Systemstabilität zu gewährleisten. Die Dateiversion der Systemdatei ist 6.14.10.5673.
12.12.2009 20:50:43, Informationen: Windows File Protection [64002] - Es wurde versucht, die geschützte Systemdatei nv4_mini.sys zu ersetzen. Diese Datei wurde von der Originalversion wiederhergestellt, um die Systemstabilität zu gewährleisten. Die Dateiversion der Systemdatei ist 6.14.10.5673.
12.12.2009 20:50:43, Informationen: Windows File Protection [64002] - Es wurde versucht, die geschützte Systemdatei nv4_disp.dll zu ersetzen. Diese Datei wurde von der Originalversion wiederhergestellt, um die Systemstabilität zu gewährleisten. Die Dateiversion der Systemdatei ist 6.14.10.5673.

==== End Of File ===========================