Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes - denk bitte vorher daran, Malwarebytes über den Updatebutton zu aktualisieren

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

So, das habe ich auch erledigt. Malwarebytes hat nichts gefunden!

Malwarebytes Anti-Rootkit BETA 1.05.0.1001
www.malwarebytes.org

Database version: v2013.04.16.05

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
Jürg :: JÜRG-PC [administrator]

16.04.2013 12:43:33
mbar-log-2013-04-16 (12-43-33).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled: 
Objects scanned: 28990
Time elapsed: 11 minute(s), 28 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
         

Und nach über 8 Stunden scannen hat auch ESET seine Arbeit beendet. Aber für mich mit einem benuruhigenden Ergebnis!

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=138c4996a28ce549ae8be8e8acaeb521
# engine=13627
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-04-16 07:02:47
# local_time=2013-04-16 09:02:47 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3591 16777213 100 93 821548 128735552 0 0
# compatibility_mode=5893 16776574 100 94 59387612 117770158 0 0
# scanned=345623
# found=75
# cleaned=0
# scan_time=29461
sh=113183BBC82A9148F83B197DE337F1C0855CCA78 ft=1 fh=e0dfd5bc4d877576 vn="a variant of Win32/BHO.OGC trojan" ac=I fn="C:\Qoobox\Quarantine\C\Windows\System32\Wininetd.exe.vir"
sh=CF512E5CE4F45FA6431A24C4C60BBA18B9E05BFD ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Users\Jürg\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdpinghmeehgjadadgndmibaiognimil\3.2_0\50c5ba10ddfe67.41695670.js"
sh=AF1BED768816E392AD8023F95AE4675E77832B08 ft=1 fh=f5971bb2343416c0 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="C:\Users\Jürg\Downloads\WhiteSmokeWriterGeo9141_en.exe"
sh=B8C9D2118B5742AFE707E1F0363CEC099A062BBF ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="K:\JÜRG-PC\Backup Set 2011-01-29 155720\Backup Files 2011-01-30 190000\Backup files 1.zip"
sh=C0CB755EB4D13B16FB657E32B24B9215509087BC ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-01-29 155720\Backup Files 2011-02-06 190000\Backup files 1.zip"
sh=75E8550F7F21FEE78EB17351021124B3223C447D ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-01-29 155720\Backup Files 2011-02-14 103200\Backup files 1.zip"
sh=7953DBF954F5BD1D845876925306605A65397A9B ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-01-29 155720\Backup Files 2011-02-20 190000\Backup files 1.zip"
sh=C497FA7995A1F83434C1BC3F06D1B07F676C9AD5 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-01-29 155720\Backup Files 2011-03-06 190001\Backup files 3.zip"
sh=C2E00A1129BB615DF8605C97EE6E5D28D6C06E60 ft=0 fh=0000000000000000 vn="Win32/Adware.Bandoo application" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-03-15 181025\Backup files 4.zip"
sh=9E82F2C77AAB55AC6373DF72F0D99317A0D4FD46 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-03-15 181025\Backup files 6.zip"
sh=070B256F3B00A424240781B987DC6385649D992D ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-03-20 190000\Backup files 1.zip"
sh=593FCEDFBBE61A40AD67E775FDFCFFC7596AFE77 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-04-04 103617\Backup files 1.zip"
sh=72C75BE4888AE56426278D3094822F3AB8C95093 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-04-13 192306\Backup files 2.zip"
sh=68BE3A1E4AECE484DBA3FF2A24393B0166729C68 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-04-26 172230\Backup files 1.zip"
sh=2EFF9211EC36235D389757BE4DB6F5B1DFD6C934 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-05-01 200211\Backup files 1.zip"
sh=176395709CBB4BD09436CD5D7E8559394ABCA298 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-05-08 190000\Backup files 1.zip"
sh=0F51E6EBD9464B8658D008F347F73DB963745AFB ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-05-16 132611\Backup files 1.zip"
sh=38F64112A164BEB9746B4DED5189AB6D54584143 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-05-30 121311\Backup files 1.zip"
sh=726ACCE4AD9EE6D6D32C0FD11B454E2629ABA08D ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-06-06 095301\Backup files 1.zip"
sh=52645153631ED616A58D1342B375E503225DB10B ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-06-13 175804\Backup files 1.zip"
sh=95F9DB8EA9ADDA32155A41F8A3F89EA47AB87FFB ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-06-20 140126\Backup files 1.zip"
sh=7F6B90805B23CEA83FD2631B2E0944D0FB007C6F ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-06-28 174620\Backup files 2.zip"
sh=91436050A9F32A07BD63FDFA5E313149ECDDEE26 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-07-03 190001\Backup files 1.zip"
sh=327A32261ACC79B03D00692279A26597A59CC921 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-07-10 194547\Backup files 1.zip"
sh=4CCAFF333DE3493C8A44EC732DA5F1AC5C9CBB66 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-07-18 172236\Backup files 1.zip"
sh=26595988FFE5FBB31744C2EE95123CEFE1C97D46 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-03-15 181025\Backup Files 2011-07-24 190002\Backup files 1.zip"
sh=A67751496F222D3EAE39C0AF836388403715B100 ft=0 fh=0000000000000000 vn="Win32/Adware.Bandoo application" ac=I fn="K:\JÜRG-PC\Backup Set 2011-08-08 174224\Backup Files 2011-08-08 174224\Backup files 5.zip"
sh=F30947F3619ACAEC326B7867BBB6E44AC38B5ABB ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-08-08 174224\Backup Files 2011-08-08 174224\Backup files 7.zip"
sh=CF4F451B787B230B32A5D76AD3583BBFE580F544 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-08-08 174224\Backup Files 2011-08-29 100429\Backup files 5.zip"
sh=C63D5236176EB5E255D5D4A9FB5A60812C7E73D1 ft=0 fh=0000000000000000 vn="Win32/Adware.Bandoo application" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-09-05 133326\Backup files 6.zip"
sh=BF25ECE5707146A433B6E954BCC7B502E4B3374C ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-09-05 133326\Backup files 8.zip"
sh=6EA8634150DBE6F15D609DAA4CC97444636512F3 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-09-15 171816\Backup files 1.zip"
sh=B8FEA6B10F8193B727089D97AB498C78F946A86A ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-09-26 125702\Backup files 1.zip"
sh=056AF68C9DC204F5278545F4FCA57C6F41AC4D22 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-10-12 102434\Backup files 1.zip"
sh=C7B434E7FF060E1BD127BA837069C3FD6897E011 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-10-23 190001\Backup files 2.zip"
sh=B124EBEE430E35303A3F58597FB1C7F565EE5C26 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-11-11 192924\Backup files 1.zip"
sh=269615FE5F9A603D35D186BACA48AF5EC74660F8 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-11-21 115237\Backup files 3.zip"
sh=077DE640AECED15C6684C5DD10729B06C1C723EE ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2011-12-12 105600\Backup files 3.zip"
sh=D3895A838AEA20D986EB0D19AB1B8C29064D48BE ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2012-01-01 131841\Backup files 2.zip"
sh=9D39D68EA3E63CE14F92D7C77F7CBC22AA8F2B11 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2012-01-02 170529\Backup files 1.zip"
sh=C59ECCFE57FDDACCB4976624B45D6F50F29B7EA3 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2011-09-05 133326\Backup Files 2012-01-16 101909\Backup files 1.zip"
sh=8C184181AF9D652F7FF6780CADA6987D62FB24CD ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-01-31 154755\Backup files 10.zip"
sh=8D7BF4F8C0BDE34C212E7D1B90978D98DBD399E8 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-02-20 153725\Backup files 3.zip"
sh=C68CD0208FF8569BA92D5DE2E73CE5832BA2786D ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-02-28 183219\Backup files 1.zip"
sh=9AA95A2E70CEED84ABB30030E317C7686E4FAB4D ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-03-13 212455\Backup files 1.zip"
sh=169D025997626FC823D5FA5D6CD7C392AB4A8A61 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-03-26 161949\Backup files 4.zip"
sh=9C115EE127D35020E1ADF08E55DF3B66A292AC23 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-04-02 162321\Backup files 1.zip"
sh=E117DD05E77E74731363CDA6DA4F306F0D210C45 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-04-13 203305\Backup files 1.zip"
sh=31F90BD066170CB8057F107A8F776FAA2B096BC3 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-04-23 194613\Backup files 3.zip"
sh=92D788010BDF6A244C3420CCD014A2F2CBBCFD01 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-05-07 145003\Backup files 1.zip"
sh=CBAF9DDCAD42E09BD02D6D0E17E8F3CDEFC7DE45 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-01-31 154755\Backup Files 2012-05-14 190711\Backup files 2.zip"
sh=A996968FF56C4F9EFC8D0EAE2FD9E398BB49952C ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-06-06 154601\Backup files 13.zip"
sh=AB818259ACEB8066677301F740E1815BA4755808 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-06-11 125432\Backup files 1.zip"
sh=96433ACE17DA1FA17B08A0CB7BD673618058CFF2 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-06-17 203348\Backup files 1.zip"
sh=EF18F4B9FA0DE3F4ACF64389733ACE746323E57E ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-06-24 190013\Backup files 2.zip"
sh=563818F5A7E646C06BA5ED109FB4ECEAE02D4288 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-07-03 164434\Backup files 3.zip"
sh=E10731D977E3B1F9B4B69D4CC0908664DBBDF1A8 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-07-17 172301\Backup files 3.zip"
sh=B7772B5061E045C311B5E87B2E84D6B96F9E7BC8 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-07-23 164902\Backup files 1.zip"
sh=DAD20853ACF79C1906D1C849C3A5C8F9D43942A1 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-07-30 183004\Backup files 4.zip"
sh=8129D05FA62101A6D93E21A58EE2D974A37988BD ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-08-06 124431\Backup files 2.zip"
sh=DC455706600C2E36B76C56F3E88CCB98DB326FF5 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-08-12 190018\Backup files 2.zip"
sh=0F17D9355E13C2CA3B1D719BC4FE016E7A2D772A ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-08-21 164323\Backup files 1.zip"
sh=8561C002DA05CF5532E08987B2C5AA0907E83DC6 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-08-30 123740\Backup files 1.zip"
sh=6A7033BA267DC01EF1DBE8681FD2EC94A42C8C5E ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-09-04 170835\Backup files 1.zip"
sh=A4EBEB5EB70ABF6B6E1458457B213375B009889C ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-09-10 092114\Backup files 4.zip"
sh=86DC0BAF0152F2FAEAB380FC227508B35A18D1C8 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-06-06 154601\Backup Files 2012-09-25 131250\Backup files 4.zip"
sh=B1144409A928CB6A411BC377AE6FB2109080C842 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-10-08 192137\Backup Files 2012-10-08 192137\Backup files 14.zip"
sh=976707B9B8B3FA61C7A0B57C1358895AB0A7FB53 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-10-08 192137\Backup Files 2012-10-18 131230\Backup files 1.zip"
sh=CF8786874A59F995A4B05800E56F4B6B5D1614C5 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2012-10-08 192137\Backup Files 2012-10-29 115041\Backup files 3.zip"
sh=BF1F46C20F4E4393DF120A5FB014B61C4E595991 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="K:\JÜRG-PC\Backup Set 2012-10-08 192137\Backup Files 2012-12-16 190001\Backup files 1.zip"
sh=AB6B938A954FAD5547AE4D2BEB02A4745904CF88 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="K:\JÜRG-PC\Backup Set 2013-01-14 181521\Backup Files 2013-01-14 181521\Backup files 14.zip"
sh=9631CAF9969F3ACD8345A951511607088EC46A84 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2013-01-14 181521\Backup Files 2013-01-14 181521\Backup files 16.zip"
sh=5D4724A87326C9A8E11C23DCC4737160EE41E317 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="K:\JÜRG-PC\Backup Set 2013-01-14 181521\Backup Files 2013-03-04 131215\Backup files 14.zip"
sh=130E07ABAB6BFA803FFD26158F72FE1B88FA368F ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="K:\JÜRG-PC\Backup Set 2013-03-19 124516\Backup Files 2013-03-19 124516\Backup files 17.zip"
sh=4D0CB628CCC7B9E1B84C75316B7A7B8E030C07C7 ft=0 fh=0000000000000000 vn="Win32/TrojanDownloader.Whizelown.J trojan" ac=I fn="K:\JÜRG-PC\Backup Set 2013-03-19 124516\Backup Files 2013-03-19 124516\Backup files 20.zip"
         

Die alten Backup-Sets einfach löschen wenn sie nicht mehr benötigt werden

"C:\Qoobox\Quarantine\C\Windows\System32\Wininetd.exe.vir"

Datei in der Q von Combofix

"C:\Users\Jürg\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdpinghmeehgjadadgndmibaiognimil\3.2_0\50c5ba10ddfe67.41695670.js"
"C:\Users\Jürg\Downloads\WhiteSmokeWriterGeo9141_en.exe"

Überbleibsel-Schrott, löschen!!

Ich habe nun alle Backup Set gelöscht, die Überbleibsel ebenfalls und siehe da, keine erkannten infizierungen mehr!

Vielen Dank für die Hilfe!

Aber nun meine grosse Frage, was hatte ich auf meinen Rechner?????

Ist mein Rechner jetzt wieder sauber?

File: C:\Windows\system32\wininetd.exe **INFECTED** Win32:Agent-AQRH [Trj]

Ich denke das war der "dickste" Übeltäter

Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?