danke erstma dass du mir hilfst

so nun hier das was mir navilog ausgespuckt hat :

Search Navipromo version 3.6.5 began on 09.09.2008 at 17:49:01,56

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Programme\navilog1
Actual User Account : "Jule" 

Updated on 22.08.2008 at 17h30 by IL-MAFIOSO


Microsoft Windows XP [Version 5.1.2600]
Version Internet Explorer : 6.0.2900.5512
Filesystem type : NTFS

Search done in normal mode

*** Searching for installed Software ***

Favorit
WebMediaPlayer

*** Search folders in "C:\WINDOWS" ***


*** Search folders in "C:\Programme" ***

...\WebMediaPlayer found !

*** Search folders in "C:\Dokumente und Einstellungen\All Users\startm~1\progra~1" ***

...\WebMediaPlayer found !

*** Search folders in "C:\Dokumente und Einstellungen\All Users\startm~1" ***


*** Search folders in "c:\dokume~1\alluse~1\anwend~1" ***


*** Search folders in "C:\Dokumente und Einstellungen\Jule\anwend~1" *** 


*** Search folders in "C:\DOKUME~1\MR5267~1.ALL\anwend~1" *** 


*** Search folders in "C:\Dokumente und Einstellungen\Jule\lokale~1\anwend~1" *** 


*** Search folders in "C:\DOKUME~1\MR5267~1.ALL\lokale~1\anwend~1" *** 


*** Search folders in "C:\Dokumente und Einstellungen\Jule\startm~1\progra~1" *** 


*** Search folders in "C:\DOKUME~1\MR5267~1.ALL\startm~1\progra~1" *** 


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\WINDOWS\system32" *

* Scan in "C:\Dokumente und Einstellungen\Jule\lokale~1\anwend~1" * 

Files found :

yiqawis.exe found ! 
yiqawis.dat found ! 
yiqawis_nav.dat found ! 
yiqawis_navps.dat found ! 

* Scan in "C:\DOKUME~1\MR5267~1.ALL\lokale~1\anwend~1" * 



*** Search files *** 



*** Search specific Registry keys ***

HKEY_CURRENT_USER\Software\Lanconfig found ! 

*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\WINDOWS\system32" :


* In "C:\Dokumente und Einstellungen\Jule\lokale~1\anwend~1" : 

yiqawis.dat found !
yiqawis.exe found !
yiqawis_nav.dat found !
yiqawis_navps.dat found !

* In "C:\DOKUME~1\MR5267~1.ALL\lokale~1\anwend~1" : 


3)Certificates Search :

Egroup certificate found !
Electronic-Group certificate found !
Montorgueil certificate not found !
OOO-Favorit certificate found !
Sunny-Day-Design-Ltd certificate not found !

4)Search known files :



*** Search completed on 09.09.2008 at 18:21:05,56 ***

so was soll ich jetzt tun bevor ich noch was falsch mach

jetzt den nächsten schritt mit navilog, log posten. und dann combofix.


gruß

schrauber

ok jetzt steht hier " press a key to continue " was soll ich jetzt eingeben

heißt soviel wie "drück irgendeine taste um weiter zu machen"

gut hab ich getan hier noch mal die file :

Navipromo Removal version 3.6.5 started on 09.09.2008 at 18:38:38,12

Fix running from C:\Programme\navilog1
Actual User Account : "Jule" 

Updated on 22.08.2008 at 17h30 by IL-MAFIOSO


Microsoft Windows XP [Version 5.1.2600]
Internet Explorer : 6.0.2900.5512
Filesystem type : NTFS

Automatic removal 
with Catchme and GNS results


Cleanning stage done on Reboot

 
*** fsbl1.txt not found ***
(Check that Catchme found nothing in Search Mode)
 

*** Deleting with Backups GenericNaviSearch results ***

* Deletion in "C:\WINDOWS\System32" *


C:\WINDOWS\prefetch\yiqawis*.pf found ! 
Copy C:\WINDOWS\prefetch\yiqawis*.pf done !
C:\WINDOWS\prefetch\yiqawis*.pf deleted !


* Deletion in "C:\Dokumente und Einstellungen\Jule\lokale~1\anwend~1" * 


yiqawis.exe found ! 
Copy yiqawis.exe done !
yiqawis.exe deleted !

yiqawis.dat found ! 
Copy yiqawis.dat done !
yiqawis.dat deleted !

yiqawis_nav.dat found ! 
Copy yiqawis_nav.dat done !
yiqawis_nav.dat deleted !

yiqawis_navps.dat found ! 
Copy yiqawis_navps.dat done !
yiqawis_navps.dat deleted !


* Deletion in "C:\DOKUME~1\MR5267~1.ALL\lokale~1\anwend~1" * 



*** Deleting folders in "C:\WINDOWS" ***


*** Deleting folders in "C:\Programme" ***

...\WebMediaPlayer ...deleting... 
...\WebMediaPlayer deleted ! 


*** Deleting folders in "C:\Dokumente und Einstellungen\All Users\startm~1\progra~1" ***

...\WebMediaPlayer ...deleting... 
...\WebMediaPlayer deleted ! 


*** Deleting folders in "C:\Dokumente und Einstellungen\All Users\startm~1" ***


*** Deleting folders in "c:\dokume~1\alluse~1\anwend~1" ***


*** Deleting folders in "C:\Dokumente und Einstellungen\Jule\anwend~1" *** 


*** Deleting folders in "C:\DOKUME~1\MR5267~1.ALL\anwend~1" *** 


*** Deleting folders in "C:\Dokumente und Einstellungen\Jule\lokale~1\anwend~1" *** 


*** Deleting folders in "C:\DOKUME~1\MR5267~1.ALL\lokale~1\anwend~1" *** 


*** Deleting folders in "C:\Dokumente und Einstellungen\Jule\startm~1\progra~1" *** 


*** Deleting folders in "C:\DOKUME~1\MR5267~1.ALL\startm~1\progra~1" *** 



*** Deleting files ***


*** Deleting temporary files ***

Cleaning of C:\WINDOWS\Temp done !
Cleaning of C:\Dokumente und Einstellungen\Jule\lokale~1\Temp done !

*** Complementary Search ***
(Search specific files)

1)Deletion with backups new Instant Access files:

2)Heuristic search and deletion with backups :


* In "C:\WINDOWS\system32" *


* In "C:\Dokumente und Einstellungen\Jule\lokale~1\anwend~1" * 


* In "C:\DOKUME~1\MR5267~1.ALL\lokale~1\anwend~1" * 


*** Copy Registry to Safebackup folder ***

Backing up Registry done !

*** Cleaning Registry ***

Registry cleaned


*** Certificates ***

Egroup Certificate deleted !
Electronic-Group Certificate deleted !
Montorgueil Certificate not found !
OOO-Favorit Certificate deleted !
Sunny-Day-Design-Ltd Certificate not found !

*** Cleaning stage complete on 09.09.2008 at 18:50:55,10 ***

bestätige mir bitte das ich jetzt mit combofix beginnen kann

Wenn Du nach/während Navilog neu gestartet hast, kannst Du jetzt Combofix machen .

Irgendwie wird mir das ganze hier etwas zu heiß was ist denn wenn ich meine brauchbaren dateien, bilder musik , etc einfach auf ne externe festplatte mache dann das betriebssytem neu installieren, dann müsste doch der trojaner weg sein oder??