TR/Crypt.XPAC.Gen - Nach jedem Reboot

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:rundll32 uprd.zrf deleted successfully.
C:\WINDOWS\system32\uprd.zrf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:jmihxr3 deleted successfully.
C:\WINDOWS\system32\drivers\jxjt.sys moved successfully.
File C:\WINDOWS\System32\uprd.zrf not found.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: ****
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32969 bytes
 
User: **** (unter diesem User wurde der Virus erstmalig ausgeführt)
->Temp folder emptied: 12760559 bytes
->Temporary Internet Files folder emptied: 459033 bytes
->FireFox cache emptied: 54434250 bytes
->Flash cache emptied: 1696 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 129864 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7685628 bytes
RecycleBin emptied: 115989581 bytes
 
Total Files Cleaned = 183,00 mb
 
 
OTL by OldTimer - Version 3.2.6.1 log created on 06212010_215006

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...