Schwarzer Bildschirm, alle dateien versteckt, hdd angeblich defekt

Smithe

hi
ich hab wohl einen trojaner
symtome sind Schwarzer Bildschirm, alle dateien versteckt, hdd angeblich defekt
startmenu ist leer

hier der scan von malwarebytes

danke schonmal für die hilfe

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6667

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

25.05.2011 14:41:54
mbam-log-2011-05-25 (14-41-54).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 384356
Laufzeit: 1 Stunde(n), 40 Minute(n), 45 Sekunde(n)

Infizierte Speicherprozesse: 1
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 1
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 6
Infizierte Verzeichnisse: 0
Infizierte Dateien: 12

Infizierte Speicherprozesse:
c:\programdata\51961592.exe (Trojan.Agent) -> 1016 -> Unloaded process successfully.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\William Hill Poker (PUP.Casino) -> Not selected for removal.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallPaper (PUM.Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Users\Simon\AppData\Local\oyh.exe" -a "C:\Program Files (x86)\Mozilla Firefox\firefox.exe") Good: (firefox.exe) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Users\Simon\AppData\Local\oyh.exe" -a "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode) Good: (firefox.exe -safe-mode) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Users\Simon\AppData\Local\oyh.exe" -a "C:\Program Files (x86)\Internet Explorer\iexplore.exe") Good: (iexplore.exe) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Poker\william hill poker\_setuppoker_4869ed_de.exe (PUP.Casino) -> Not selected for removal.
c:\program files (x86)\mozilla firefox\null0.6601442352610286.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Simon\AppData\Local\Temp\adobe_flash_player.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\Simon\AppData\Local\Temp\jar_cache2260393136405923223.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Simon\AppData\Local\Temp\ldr5ef0.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\Simon\downloads\setuppoker_4869ed_de.exe (PUP.Casino) -> Not selected for removal.
c:\Users\Simon\AppData\Local\Temp\0.4644238617531775.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Users\Simon\AppData\Local\Temp\0.7601907429009671.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Users\Simon\AppData\Local\Temp\0.8100517526709623.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Users\Simon\AppData\Local\Temp\0.8208856952762723.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Users\Simon\AppData\Local\Temp\0.9352228907855535.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\programdata\51961592.exe (Trojan.Agent) -> Quarantined and deleted successfully.