MessengerSkinner

BlackSheep26

Hallo....

hatte mir wohl irgendwie was eingefangen. Via Spybot lies sich der MessengerSkinner.rtk nicht entfernen (aussser in Admin-Ausführung, kam beim nächsten Lauf trotzdem wieder). Danach habe ich Anti-Malware laufen lassen und alles gemeldete löschen können. Nachdem ich mich vorab "einlesen" musste (bin absoluter laie) habe ich noch Navilog1 laufen lassen. Inzwischen bin ich absolut verwirrt und habe keine Ahnung ob ich noch was drauf habe oder nicht. Hier mal das Ergebnis von Navilog1.

Search Navipromo version 3.6.1 began on 21.07.2008 at 0:39:24,63

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Program Files\navilog1
Actual User Account : "Melanie"

Updated on 19.07.2008 at 20h00 by IL-MAFIOSO

Microsoft Windows Vista 6.0.6000
Version Internet Explorer : 7.0.6000.16681
Filesystem type : NTFS

Search done in normal mode

*** Searching for installed Software ***


*** Search folders in "C:\Windows" ***


*** Search folders in "C:\Program Files" ***


*** Search folders in "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Search folders in "c:\progra~2\micros~1\windows\startm~1" ***


*** Search folders in "C:\ProgramData" ***


*** Search folders in "c:\users\melanie\appdata\roaming\micros~1\windows\startm~1\programs" ***


*** Search folders in "C:\Users\Melanie\AppData\Local\virtualstore\Program Files" ***


*** Search folders in "C:\Users\Melanie\AppData\Roaming" ***

*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net

No Navipromo file found


*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\Windows\system32" *

* Scan in "C:\Users\Melanie\AppData\Local\Microsoft" *

* Scan in "C:\Users\Melanie\AppData\Local\virtualstore\windows\system32" *

* Scan in "C:\Users\Melanie\AppData\Local" *



*** Search files ***



*** Search specific Registry keys ***

HKEY_CURRENT_USER\Software\Lanconfig found !

*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\Windows\system32" :


* In "C:\Users\Melanie\AppData\Local\Microsoft" :


* In "C:\Users\Melanie\AppData\Local\virtualstore\windows\system32" :


* In "C:\Users\Melanie\AppData\Local" :

zgtfti.dat found !
zgtfti_nav.dat found !
zgtfti_navps.dat found !

3)Certificates Search :

Egroup certificate found !
Electronic-Group certificate found !
OOO-Favorit certificate found !
Sunny-Day-Design-Ltd certificate not found !

4)Search known files :



*** Search completed on 21.07.2008 at 0:43:59,82 ***


Wenn mir irgendwer sagen kann was nun STand der Dingeist wäre das toll.... vielen lieben Dank schonmal

Liebe Grüsse BlackSheep