ciao scusami se non ho risposto prima probblemi adsl

si infatti quelli di prima comunque ti ringrazio per la tua tempestiva risposta lo so che sei veramente unica

ho fatto la scansione te la posto

Search Navipromo version 3.7.7 began on 13/05/2009 at 21.15.16,91

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!

Fix running from C:\Program Files\navilog1

Updated on 12.05.2009 at 18h00 by IL-MAFIOSO

Microsoft® Windows Vista™ Home Basic ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz )
BIOS : Ver 1.00PARTTBL
USER : gianni ( Administrator )
BOOT : Fail-safe boot


C:\ (Local Disk) - NTFS - Total:32 Go (Free:3 Go)
D:\ (Local Disk) - NTFS - Total:32 Go (Free:16 Go)
E:\ (CD or DVD)
G:\ (CD or DVD)


Search done in safe mode


*** Search folders in "C:\Windows" ***


*** Search folders in "C:\Program Files" ***


*** Search folders in "c:\progra~2\micros~1\windows\startm~1\program s" ***

...\WebMediaPlayer found !

*** Search folders in "c:\progra~2\micros~1\windows\startm~1" ***


*** Search folders in "C:\ProgramData" ***


*** Search folders in "c:\users\gianni\appdata\roaming\micros~1\windows\ startm~1\programs" ***


*** Search folders in "C:\Users\gianni\AppData\Local\virtualstore\Progra m Files" ***



*** Search folders in "C:\Users\gianni\AppData\Local" ***




*** Search folders in "C:\Users\gianni\AppData\Roaming" ***


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\Windows\system32" *

* Scan in "C:\Users\gianni\AppData\Local\Microsoft" *

* Scan in "C:\Users\gianni\AppData\Local\virtualstore\window s\system32" *

* Scan in "C:\Users\gianni\AppData\Local" *



*** Search files ***



*** Search specific Registry keys ***
!! Following keys are not certainly all infected !!


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"wysiwks"="\"c:\\users\\gianni\\appdata\\local\\wy siwks.exe\" wysiwks"


*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\Windows\system32" :


* In "C:\Users\gianni\AppData\Local\Microsoft" :


* In "C:\Users\gianni\AppData\Local\virtualstore\window s\system32" :


* In "C:\Users\gianni\AppData\Local" :

wysiwks.exe found !
wysiwks.dat found !
wysiwks_nav.dat found !
wysiwks_navps.dat found !

3)Certificates Search :

Egroup certificate not found !
Electronic-Group certificate found !
Montorgueil certificate not found !
OOO-Favorit certificate found !
Sunny-Day-Design-Ltd certificate not found !

4)Search others known folders and files :



*** Search completed on 13/05/2009 at 21.27.16,01 ***