Yahoo Account versendet Spam. Trojaner-Verdacht. Windows 7 64bit

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=929ca3be32824c438d63664c7ac84d33
# engine=18780
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-19 08:38:22
# local_time=2014-06-19 10:38:22 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 95 71483 78378 0 0
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 4596 10798657 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 16886008 154796952 0 0
# scanned=579
# found=3
# cleaned=0
# scan_time=320
sh=CA1E7166903284C55C470E91B8BF10D4BE1B2E8A ft=1 fh=b6afad38a6c487cc vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$R6P2PSI.exe"
sh=963FA4F701B4CA2675ED150A0547C144915597F9 ft=1 fh=54ed2f64ac01dc91 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$RG902EL.exe"
sh=76A4AB6767FB5ECED2DE2AF14AA61EB85C5701BD ft=1 fh=8a9c4a5871ad09f7 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$RGO3YPV.exe"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=929ca3be32824c438d63664c7ac84d33
# engine=18795
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-06-20 10:24:54
# local_time=2014-06-20 12:24:54 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 95 164275 171170 0 0
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 10520 10891449 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 16982400 154889744 0 0
# scanned=306918
# found=18
# cleaned=0
# scan_time=9824
sh=CA1E7166903284C55C470E91B8BF10D4BE1B2E8A ft=1 fh=b6afad38a6c487cc vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$R6P2PSI.exe"
sh=832BF5093617711948105FF65094819FB6830C79 ft=1 fh=d853b354b0134743 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$REWIFFO.exe"
sh=963FA4F701B4CA2675ED150A0547C144915597F9 ft=1 fh=54ed2f64ac01dc91 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$RG902EL.exe"
sh=1F086C18C59F6F0CBE7C0A03C111F4F5B43DDCDB ft=1 fh=f9b46d7c76787cfa vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$RHT29YO.exe"
sh=18CD6E982F1C2DC68CB0F655109C160A7F890AE9 ft=1 fh=73973d65ece782a2 vn="Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$RMLC9EY.exe"
sh=DBF1E317D326148085583D8B17A3ED88B5F485E7 ft=1 fh=058fe24cd1b7da44 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$RQEM1QX.exe"
sh=FA85DB367546515697172741B51A75A0DE498575 ft=1 fh=a4ac0d07a953f3fb vn="Win32/Conduit.SearchProtect.K evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$RQGJ862.exe"
sh=DE37DA5B4FE7B229CC013BDE5DA9887CFB5B26E5 ft=1 fh=a49fe996bad59974 vn="möglicherweise Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-827630684-1256357398-1835506337-1000\$RYSOK5P.exe"
sh=4F55D4BA017B76A086E01603094E9EFB0C0104E8 ft=1 fh=ac019d8a7dbf5519 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Bofinium\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"
sh=B9A96D9AE94C4B42CA5499933F6DF218B3903768 ft=1 fh=966b3592656dc188 vn="Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\offercast_avirav7_.exe"
sh=FE95B799B357B45891F6FC8C572EDC3618C7994B ft=1 fh=8b3de3e69bbf5e50 vn="möglicherweise Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\NCH Software\Scribe\scribe.exe"
sh=DE37DA5B4FE7B229CC013BDE5DA9887CFB5B26E5 ft=1 fh=a49fe996bad59974 vn="möglicherweise Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\NCH Software\Scribe\scribesetup_v5.64.exe"
sh=D07B8A6EF6038FEB9AEBEBE6568C548CB38DB3BC ft=1 fh=a3498771be7e312f vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Bofinium\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NRT274TS\FreeYouTubeToMP3Converter-3.12.9.725.exe"
sh=9FE7B1669161E3CF1E3B9E5E6B987BD4FC0A4016 ft=1 fh=7bda106797aa3408 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Bofinium\AppData\Roaming\DVDVideoSoft\FreeYouTubeToMP3Converter.exe"
sh=76A4AB6767FB5ECED2DE2AF14AA61EB85C5701BD ft=1 fh=8a9c4a5871ad09f7 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Bofinium\Desktop\Virenprogramme\AdwCleaner - CHIP-Installer.exe"
sh=DC3C29A963871A9FF0613FFEC4FC39AB04760924 ft=1 fh=aa8756f8c51680cf vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\Installer\MSI5FAA.tmp"
sh=DC3C29A963871A9FF0613FFEC4FC39AB04760924 ft=1 fh=aa8756f8c51680cf vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\Installer\MSIA375.tmp"
sh=EEA83DB49F52CDCC3BDB69A3E3FDF2FD91419233 ft=1 fh=f78ee07fd38aa416 vn="Win32/Toolbar.AskSBar evtl. unerwünschte Anwendung" ac=I fn="D:\Dokumente\Programme\Office und Nero\Nero\Nero.8.3.2.1 Ultra Edition Deutsch ohne Patent Activation inkl. New Keygen\Nero 8.3.2.1.exe"