Fatto..questo è il log :
Search Navipromo version 3.6.6 began on 21/10/2008 at 21.59.20,15
!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Programmi\navilog1
Actual User Account : "Mary"
Updated on 29.09.2008 at 17h30 by IL-MAFIOSO
Microsoft Windows XP [Versione 5.1.2600]
Version Internet Explorer : 7.0.5730.11
Filesystem type : NTFS
Search done in normal mode
*** Searching for installed Software ***
WebMediaPlayer
*** Search folders in "C:\WINDOWS" ***
*** Search folders in "C:\Programmi" ***
...\WebMediaPlayer found !
*** Search folders in "C:\Documents and Settings\All Users\menuav~1\progra~1" ***
...\WebMediaPlayer found !
*** Search folders in "C:\Documents and Settings\All Users\menuav~1" ***
*** Search folders in "c:\docume~1\alluse~1\datiap~1" ***
*** Search folders in "C:\Documents and Settings\Mary\datiap~1" ***
*** Search folders in "C:\Documents and Settings\Mary\impost~1\datiap~1" ***
*** Search folders in "C:\Documents and Settings\Mary\menuav~1\progra~1" ***
*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net
*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!
* Scan in "C:\WINDOWS\system32" *
* Scan in "C:\Documents and Settings\Mary\impost~1\datiap~1" *
*** Search files ***
C:\WINDOWS\system32\nvs2.inf found !
*** Search specific Registry keys ***
HKEY_CURRENT_USER\Software\Lanconfig found !
*** Complementary Search ***
(Search specific files)
1)Search new Instant Access files :
2)Heuristic Search :
* In "C:\WINDOWS\system32" :
* In "C:\Documents and Settings\Mary\impost~1\datiap~1" :
3)Certificates Search :
Egroup certificate found !
Electronic-Group certificate found !
Montorgueil certificate not found !
OOO-Favorit certificate found !
Sunny-Day-Design-Ltd certificate not found !
4)Search known files :
C:\WINDOWS\system32\Utstttwa.ini2 found ! Possible Vundo infection, not cleaned with this tool !
C:\WINDOWS\system32\WHNWxyxx.ini2 found ! Possible Vundo infection, not cleaned with this tool !
*** Search completed on 21/10/2008 at 22.06.47,09 ***