VBS/Agent.PF und worm.vbs.dinihou.bl

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=c9520bd89efddb418e42022987701f8c
# engine=23202
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-04-02 02:44:37
# local_time=2015-04-02 03:44:37 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 66 85 29871929 180450927 0 0
# scanned=180278
# found=32
# cleaned=0
# scan_time=12983
sh=1DC26BBEAFBAF69A274CAFE534156EACE3A49A8D ft=1 fh=07386e4897eae14b vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\Downloads\PDFCreator-2_0_2-setup.exe"
sh=66C5A81F475C4E95CE4E09BFAD23CB5598170679 ft=1 fh=7d83a6cb031e2e24 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\Downloads\zafwSetupWeb_132_015_000.exe"
sh=434238E15660618182F67150AA6677E0511601DA ft=1 fh=dc788dfa3665612c vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Name\Downloads\zafwSetupWeb_133_209_000.exe"
sh=ECA77DC552D59B38F5D8184EED3DD9EBACD73789 ft=1 fh=9569cc4dd5067fe9 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="D:\Downloads\Handy Recovery - CHIP-Installer.exe"
sh=2521DA7A35AA41697A3E00CD2C152A5F8973B611 ft=1 fh=e4d14cf4b775b5f4 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="D:\Downloads\Pandora Recovery - CHIP-Installer.exe"
sh=E2C028A886AA7352539DEE32CBB38770C529A76E ft=1 fh=d2aeb2930bcba9f7 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="D:\Downloads\PDFCreator-1_7_3_setup.exe"
sh=ECD492B55F874927393FF84813821572A9FA1120 ft=1 fh=813680ec73ebc64b vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="D:\Downloads\zaSetupWeb_102_078_000.exe"
sh=8512F745C3E0A5000188330E62342B760E3B3B92 ft=1 fh=5a9c9a4e2ed7b70d vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="D:\Downloads\zaSetupWeb_133_052_000.exe"
sh=ECA77DC552D59B38F5D8184EED3DD9EBACD73789 ft=1 fh=9569cc4dd5067fe9 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="D:\Software\Handy Recovery - CHIP-Installer.exe"
sh=2521DA7A35AA41697A3E00CD2C152A5F8973B611 ft=1 fh=e4d14cf4b775b5f4 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="D:\Software\Pandora Recovery - CHIP-Installer.exe"
sh=E2C028A886AA7352539DEE32CBB38770C529A76E ft=1 fh=d2aeb2930bcba9f7 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="D:\Software\PDFCreator-1_7_3_setup.exe"
sh=ECD492B55F874927393FF84813821572A9FA1120 ft=1 fh=813680ec73ebc64b vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="D:\Software\zaSetupWeb_102_078_000.exe"
sh=8512F745C3E0A5000188330E62342B760E3B3B92 ft=1 fh=5a9c9a4e2ed7b70d vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="D:\Software\zaSetupWeb_133_052_000.exe"
sh=ECD492B55F874927393FF84813821572A9FA1120 ft=1 fh=813680ec73ebc64b vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Laptop\Downloads\Software\zaSetupWeb_102_078_000.exe"
sh=9E1D954F54465E9A66453BD13867CDA6CEFD0AB2 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2013-08-14 184552\Backup Files 2013-08-14 184552\Backup files 3.zip"
sh=EC56C9A6679468A9A5FE8CFDC6D32E83A8522DE6 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2013-08-14 184552\Backup Files 2013-08-14 184552\Backup files 4.zip"
sh=A241B813908EFC7C7BC78335FC1395CB47E19B80 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2013-08-14 184552\Backup Files 2013-08-18 224603\Backup files 2.zip"
sh=139369DA998FD34B165412FC223B5E9007642BFB ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2013-09-08 190003\Backup Files 2013-09-08 190003\Backup files 2.zip"
sh=7B9F2F7E6DBF77D033CFCBDAEC99B5087A945B70 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2013-09-08 190003\Backup Files 2013-09-08 190003\Backup files 5.zip"
sh=AF06E3D8581E0695C18EA30FFC31B00268E8771D ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2013-09-29 193104\Backup Files 2013-09-29 193104\Backup files 3.zip"
sh=4CB897FEAB3EA855D487D6F3305F7CD8CF088B7E ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2013-09-29 193104\Backup Files 2013-09-29 193104\Backup files 6.zip"
sh=7AF4FD7CB6B47078529068E4E5E6CAED9D17A843 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2014-01-12 190006\Backup Files 2014-01-12 190006\Backup files 3.zip"
sh=FEB2D9A597B77E86E08BA83FD0E40DBE7448142A ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2014-01-12 190006\Backup Files 2014-01-12 190006\Backup files 7.zip"
sh=32A586B5B296A7F8D5D539388DF8A4EC6423ADE7 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="S:\Name-PC\Backup Set 2014-01-12 190006\Backup Files 2014-01-19 190003\Backup files 2.zip"
sh=4A554448FA38FAADCF0E50A5B70D7251E876F37D ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2014-02-02 190002\Backup Files 2014-02-02 190002\Backup files 2.zip"
sh=D7CA2CE05E777312CD6C3D8FD59DB53E90D25AE1 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="S:\Name-PC\Backup Set 2014-02-02 190002\Backup Files 2014-02-02 190002\Backup files 5.zip"
sh=D440BDAA7FA7987774A72ED2DEFB65680828EF89 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2014-02-02 190002\Backup Files 2014-02-02 190002\Backup files 7.zip"
sh=E3C10C1E07F91A5516670B78C925ECCCFD7593D8 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2014-03-30 190003\Backup Files 2014-03-30 190003\Backup files 3.zip"
sh=764B661CE7B5E5106C84184CBB2AF695883D4470 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="S:\Name-PC\Backup Set 2014-03-30 190003\Backup Files 2014-03-30 190003\Backup files 6.zip"
sh=1F85167D00AF7141624EAFD038709FD923A97612 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.V evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2014-03-30 190003\Backup Files 2014-03-30 190003\Backup files 7.zip"
sh=887EFBD8020088588880FFCB57DF775724E97F8F ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Name-PC\Backup Set 2014-03-30 190003\Backup Files 2014-03-30 190003\Backup files 8.zip"
sh=770220041FDC47C4D09573C726C46981E1101199 ft=1 fh=ae7ccec21b7f238d vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="S:\Sicherheit\zaSetupWeb_120_121_000.exe"