Help sono infetto!

[D4rk4ng3l]

Search Navipromo version 3.3.8 began on 23/12/2007 at 16.04.08,28

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Program Files\navilog1
Updated on 11.12.2007 at 18h00 by IL-MAFIOSO

Microsoft Windows Vista 6.0.6000 
Version Internet Explorer : 7.0.6000.16575
Filesystem type : NTFS

Done in normal mode

*** Searching for installed Software ***




*** Search folders in C:\Windows ***



*** Search folders in C:\Program Files ***


*** Search folders in C:\ProgramData ***


*** Search folders in C:\ProgramData\Microsoft\Windows\Start Menu\Programs ***

...\MessengerSkinner found !

*** Search folders in C:\Users\DarkAngel\AppData\Local\virtualstore\Program Files ***



*** Search folders in C:\Users\DarkAngel\AppData\Roaming ***


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net

Hidden file(s) :

C:\Users\Dark^Angel\AppData\Local\xclnhbsvfq.dat
C:\Users\Dark^Angel\AppData\Local\xclnhbsvfq.exe
C:\Users\Dark^Angel\AppData\Local\xclnhbsvfq_nav.dat
C:\Users\Dark^Angel\AppData\Local\xclnhbsvfq_navps.dat



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in C:\Windows\system32 *

* Scan in C:\Users\DarkAngel\AppData\Local\Microsoft *

* Scan in C:\Users\DarkAngel\AppData\Local *

Files found :

xclnhbsvfq.exe found ! 



*** Search files *** 




*** Search specific Registry keys ***

HKEY_CURRENT_USER\Software\Lanconfig found ! 

*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In C:\Windows\system32 :


* In C:\Users\DarkAngel\AppData\Local\Microsoft :


* In C:\Users\DarkAngel\AppData\Local :

xclnhbsvfq.dat found !

3)Certificates Search :

Egroup certificate found !

4)Search known files :



*** Search completed on 23/12/2007 at 16.09.53,85 ***

[Gabry 23]

Ok ho fatto cosa devo fare adersso