Windows 7: Interpol Trojaner

Miltibo

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=9c574c6163e99f42aa84bde98076ff37
# engine=16102
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-02 01:27:19
# local_time=2013-12-02 02:27:19 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 68232 137620689 0 0
# scanned=89331
# found=3
# cleaned=0
# scan_time=2901
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir"
sh=806FFD2D8EFC18946C488A413C48DAA1ABA12FF4 ft=1 fh=33afee46afad3f9d vn="a variant of Win64/Kryptik.FG trojan" ac=I fn="C:\FRST\Quarantine\12wledw.pss"
sh=8CEE80EA9D85F02EE968374F41933465A6579CE2 ft=1 fh=a52d25af1ec6b8d5 vn="a variant of Win32/Kryptik.BNPR trojan" ac=I fn="C:\FRST\Quarantine\wdelw21.dss"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=9c574c6163e99f42aa84bde98076ff37
# engine=16102
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-02 07:21:05
# local_time=2013-12-02 08:21:05 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 22137 137641915 0 0
# scanned=808062
# found=20
# cleaned=0
# scan_time=21094
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir"
sh=806FFD2D8EFC18946C488A413C48DAA1ABA12FF4 ft=1 fh=33afee46afad3f9d vn="a variant of Win64/Kryptik.FG trojan" ac=I fn="C:\FRST\Quarantine\12wledw.pss"
sh=8CEE80EA9D85F02EE968374F41933465A6579CE2 ft=1 fh=a52d25af1ec6b8d5 vn="a variant of Win32/Kryptik.BNPR trojan" ac=I fn="C:\FRST\Quarantine\wdelw21.dss"
sh=9BA293D2783D7E115CC1FBA1CA34A80FB181A18E ft=0 fh=0000000000000000 vn="HTML/Iframe.B.Gen virus" ac=I fn="C:\Users\Mitonga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4W0SQNL0\JIsmkjYNeli8[1].htm"
sh=679C5D2822F87F3810059EBA0D42DEA4CCE09190 ft=0 fh=0000000000000000 vn="HTML/Iframe.B.Gen virus" ac=I fn="C:\Users\Mitonga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XNOKWRZK\3a52f3c22ed6fcde5bf696a6c02c9e73[1].htm"
sh=414EC2288BED4C2D457177B270910725CB316180 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2011-3544.DE trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\31405a20-21f11f22"
sh=414EC2288BED4C2D457177B270910725CB316180 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2011-3544.DE trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\31405a20-2d3be303"
sh=414EC2288BED4C2D457177B270910725CB316180 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2011-3544.DE trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\31405a20-5def206b"
sh=414EC2288BED4C2D457177B270910725CB316180 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2011-3544.DE trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\31405a20-7191e11a"
sh=CF7734ED47E21AC32C298D941B63164DF5309E57 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CU trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\1a863eae-35c0dad8"
sh=CF7734ED47E21AC32C298D941B63164DF5309E57 ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CU trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\1a863eae-650b5c92"
sh=ADCE69196F393A856402B98AEBA631F755D1D86F ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CT trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\1a65e572-1c01f2c8"
sh=ADCE69196F393A856402B98AEBA631F755D1D86F ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CT trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\1a65e572-1ecd5a29"
sh=ADCE69196F393A856402B98AEBA631F755D1D86F ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CT trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\1a65e572-5ae07772"
sh=ADCE69196F393A856402B98AEBA631F755D1D86F ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CT trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\1a65e572-7c777089"
sh=ADCE69196F393A856402B98AEBA631F755D1D86F ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CT trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\1a65e572-7d20e6bd"
sh=ADCE69196F393A856402B98AEBA631F755D1D86F ft=0 fh=0000000000000000 vn="a variant of Java/Exploit.CVE-2012-4681.CT trojan" ac=I fn="C:\Users\Mitonga\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\1a65e572-7d9f20a2"
sh=1B97E0A1A042580F517B9EBDB36B3922B480647F ft=1 fh=eb71b8caee48aeb4 vn="Win32/TrojanDropper.Binder.NBH trojan" ac=I fn="F:\neu\Musik\Interpreten\Far East Movement\Alben\Dirty Bass\01-far_east_movement-dirty_bass_(feat_tyga).exe"
sh=984984D92E9D257E2131E142C46164BCF39F750D ft=1 fh=eb71b8ca1881711e vn="Win32/TrojanDropper.Binder.NBH trojan" ac=I fn="F:\neu\Musik\Interpreten\Far East Movement\Alben\Dirty Bass\11-far_east_movement-live_my_life_(feat_justin_bieber_redfoo_of_lmfao)_(party_rock_remix).exe"
sh=30323B2E6076B6CAD5F1B962C9D887E050AEA646 ft=1 fh=eb71b8ca56912321 vn="Win32/TrojanDropper.Binder.NBH trojan" ac=I fn="F:\neu\Musik\Interpreten\Far East Movement\Alben\Dirty Bass\15-far_east_movement-like_a_g6_(feat_the_cataracs_and_dev).exe"