Spero di aver fatto giusto.
Search Navipromo version 3.7.1 began on 24/01/2009 at 17.15.53,01

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!

Fix running from C:\Programmi\navilog1

Updated on 02.01.2009 at 19h00 by IL-MAFIOSO

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : AMD Turion(tm) 64 X2 Mobile Technology TL-50 )
BIOS : Ver 1.00PARTTBL
USER : Anna_M ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1296 [VPS 090123-0] 4.8.1296 (Activated)


C:\ (Local Disk) - FAT32 - Total:43 Go (Free:22 Go)
D:\ (Local Disk) - FAT32 - Total:44 Go (Free:44 Go)
F:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)


Search done in normal mode

*** Searching for installed Software ***

Favorit

*** Search folders in "C:\WINDOWS" ***


*** Search folders in "C:\Programmi" ***


*** Search folders in "C:\Documents and Settings\All Users\menuav~1\progra~1" ***


*** Search folders in "C:\Documents and Settings\All Users\menuav~1" ***


*** Search folders in "c:\docume~1\alluse~1\datiap~1" ***


*** Search folders in "C:\Documents and Settings\Anna_M\datiap~1" ***


*** Search folders in "C:\Documents and Settings\Anna_M\impost~1\datiap~1" ***


*** Search folders in "C:\Documents and Settings\Anna_M\menuav~1\progra~1" ***


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\WINDOWS\system32" *

* Scan in "C:\Documents and Settings\Anna_M\impost~1\datiap~1" *



*** Search files ***



*** Search specific Registry keys ***
!! Following keys are not certainly all infected !!

HKEY_CURRENT_USER\Software\Lanconfig

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"oqcem"="\"c:\\documents and settings\\anna_m\\impostazioni locali\\dati applicazioni\\oqcem.exe\" oqcem"


*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\WINDOWS\system32" :


* In "C:\Documents and Settings\Anna_M\impost~1\datiap~1" :

oqcem.exe found !
oqcem.dat found !
oqcem_nav.dat found !
oqcem_navps.dat found !

3)Certificates Search :

Egroup certificate found !
Electronic-Group certificate found !
Montorgueil certificate not found !
OOO-Favorit certificate found !
Sunny-Day-Design-Ltd certificate not found !

4)Search others known folders and files :



*** Search completed on 24/01/2009 at 17.17.19,98 *