Windows restore / Daten wiederherstellbar?

:OTL
[2011.04.14 09:23:18 | 000,000,254 | ---- | C] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011.04.14 08:16:08 | 000,118,272 | -H-- | C] () -- C:\WINDOWS\System32\drivers\1228.sys
[2011.04.14 08:15:07 | 000,000,829 | -H-- | C] () -- C:\Dokumente und Einstellungen\EuFH\Desktop\Windows Fix Disk.lnk
[2011.04.14 08:15:07 | 000,000,128 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~18734900r
[2011.04.14 08:15:07 | 000,000,096 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~18734900
[2011.04.14 08:15:02 | 000,118,272 | -H-- | C] () -- C:\WINDOWS\System32\drivers\7895.sys
[2011.04.14 08:15:01 | 000,000,336 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\18734900
[2011.04.12 18:58:24 | 000,008,947 | -H-- | C] () -- C:\Dokumente und Einstellungen\EuFH\Desktop\Prüfungsanmeldung.pdf
[2011.04.10 19:57:59 | 000,000,136 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~18407220r
[2011.04.10 19:57:58 | 000,000,104 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~18407220
[2011.04.10 19:57:37 | 000,000,336 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\18407220
[2011.04.10 18:47:47 | 000,000,136 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~19717940r
[2011.04.10 18:47:45 | 000,000,104 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\~19717940
[2011.04.10 18:47:31 | 000,000,328 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\19717940
[2011.04.14 08:15:06 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\EuFH\Startmenü\Programme\Windows Fix Disk
[2011.04.13 17:52:25 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\EuFH\Desktop\Windows_restore
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.10.24 08:33:12 | 000,000,000 | -H-- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{01a1b78b-f9de-11de-bb40-001a6b7a9d4e}\Shell\AutoRun\command - "" = cold\hott\sysdiag64.exe
O33 - MountPoints2\{01a1b78b-f9de-11de-bb40-001a6b7a9d4e}\Shell\Explore\Command - "" = cold\hott\sysdiag64.exe
O33 - MountPoints2\{01a1b78b-f9de-11de-bb40-001a6b7a9d4e}\Shell\open\command - "" = cold\hott\sysdiag64.exe
O33 - MountPoints2\{1cbf077a-fc4d-11de-bb45-001a6b7a9d4e}\Shell\AutoRun\command - "" = F:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{1cbf077a-fc4d-11de-bb45-001a6b7a9d4e}\Shell\Explore\Command - "" = F:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{1cbf077a-fc4d-11de-bb45-001a6b7a9d4e}\Shell\open\command - "" = F:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{3e4ad4f6-eb00-11de-bb28-001a6b7a9d4e}\Shell - "" = AutoRun
O33 - MountPoints2\{3e4ad4f6-eb00-11de-bb28-001a6b7a9d4e}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{3e4ad4f6-eb00-11de-bb28-001a6b7a9d4e}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{3e4ad4f7-eb00-11de-bb28-001a6b7a9d4e}\Shell\AutoRun\command - "" = G:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{3e4ad4f7-eb00-11de-bb28-001a6b7a9d4e}\Shell\Explore\Command - "" = G:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{3e4ad4f7-eb00-11de-bb28-001a6b7a9d4e}\Shell\open\command - "" = G:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{3e4ad503-eb00-11de-bb28-001c2390cc69}\Shell\AutoRun\command - "" = cold\hott\sysdiag64.exe
O33 - MountPoints2\{3e4ad503-eb00-11de-bb28-001c2390cc69}\Shell\Explore\Command - "" = cold\hott\sysdiag64.exe
O33 - MountPoints2\{3e4ad503-eb00-11de-bb28-001c2390cc69}\Shell\open\command - "" = cold\hott\sysdiag64.exe
O33 - MountPoints2\{65b10c4e-ebb3-11de-bb2a-001a6b7a9d4e}\Shell\AutoRun\command - "" = F:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{65b10c4e-ebb3-11de-bb2a-001a6b7a9d4e}\Shell\Explore\Command - "" = F:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{65b10c4e-ebb3-11de-bb2a-001a6b7a9d4e}\Shell\open\command - "" = F:\cold\hott\sysdiag64.exe
O33 - MountPoints2\{db85db26-c52e-11de-bad9-001a6b7a9d4e}\Shell\AutoRun\command - "" = cold\hott\sysdiag64.exe
O33 - MountPoints2\{db85db26-c52e-11de-bad9-001a6b7a9d4e}\Shell\Explore\Command - "" = cold\hott\sysdiag64.exe
O33 - MountPoints2\{db85db26-c52e-11de-bad9-001a6b7a9d4e}\Shell\open\command - "" = cold\hott\sysdiag64.exe
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\WebBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&q="
FF - prefs.js..network.proxy.backup.ftp: ""
FF - prefs.js..network.proxy.backup.ftp_port: 0
FF - prefs.js..network.proxy.backup.gopher: ""
FF - prefs.js..network.proxy.backup.gopher_port: 0
FF - prefs.js..network.proxy.backup.socks: ""
FF - prefs.js..network.proxy.backup.socks_port: 0
FF - prefs.js..network.proxy.backup.ssl: ""
FF - prefs.js..network.proxy.backup.ssl_port: 0
FF - prefs.js..network.proxy.ftp: "Proxy"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "Proxy"
FF - prefs.js..network.proxy.gopher_port: 3128
FF - prefs.js..network.proxy.http: "Proxy"
FF - prefs.js..network.proxy.http_port: 3128
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "Proxy"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "Proxy"
FF - prefs.js..network.proxy.ssl_port: 3128
FF - prefs.js..network.proxy.type: 4
SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
:Commands
[purity]
[resethosts]
[emptytemp]