Win XP - BKA Trojaner - kein abgesicherter Modus - Logfile OTLPE

========== OTL ==========
C:\Dokumente und Einstellungen\Roland\Startmenü\Programme\Autostart\Greenshot.lnk moved successfully.
C:\Programme\Greenshot\Greenshot.exe moved successfully.
C:\Dokumente und Einstellungen\Roland\Startmenü\Programme\Autostart\jwiodfr0.lnk moved successfully.
File move failed. X:\I386\SYSTEM32\RUNDLL32.EXE scheduled to be moved on reboot.
C:\Dokumente und Einstellungen\Roland\Startmenü\Programme\Autostart\lfbew7tfr.lnk moved successfully.
File move failed. X:\I386\SYSTEM32\RUNDLL32.EXE scheduled to be moved on reboot.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\rft7webfl.plz moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\0rfdoiwj.plz moved successfully.
C:\WINDOWS\System32\CONFIG.TMP deleted successfully.
C:\WINDOWS\System32\PerfStringBackup.TMP deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCall.dll deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCalla.dll deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCalla17.dll deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCalla18.exe deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCalla19.dll deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCalla2.dll deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCalla20.dll deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCalla21.dll deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseCustomCalla21.exe deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP\WiseData.ini deleted successfully.
C:\WINDOWS\820C0EEB9B124AD5B39DD15ED1DBDD06.TMP folder deleted successfully.
C:\WINDOWS\msdownld.tmp folder deleted successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\jwiodfr0.pff moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\lfbew7tfr.ctrl moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\jwiodfr0.ctrl moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\lfbew7tfr.pff moved successfully.
File C:\Dokumente und Einstellungen\Roland\Startmenü\Programme\Autostart\lfbew7tfr.lnk not found.
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\rft7webfl.plz not found.
File C:\Dokumente und Einstellungen\Roland\Startmenü\Programme\Autostart\jwiodfr0.lnk not found.
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\0rfdoiwj.plz not found.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 180224 bytes
->Temporary Internet Files folder emptied: 2166260 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 37867 bytes
->Flash cache emptied: 434 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Roland
->Temp folder emptied: 9943783 bytes
->Temporary Internet Files folder emptied: 345445489 bytes
->Java cache emptied: 6664857 bytes
->FireFox cache emptied: 55450243 bytes
->Flash cache emptied: 3781 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 147830 bytes
 
Total Files Cleaned = 401.00 mb
 
 
OTLPE by OldTimer - Version 3.1.48.0 log created on 09092013_114034

Files\Folders moved on Reboot...
File\Folder X:\I386\SYSTEM32\RUNDLL32.EXE not found!

Registry entries deleted on Reboot...