Firefox öffnet Werbefenster - Bitte um Hilfe

Rheingold

Hallo nochdigger,
erstmal herzlichen Dank für deine Hilfe! Ja, Super hatte ich mal kurz, ist aber eigentlich schon lange wieder deinstalliert.
Navi habe ich (offline) ausgeführt und zu dem Zweck die firewall etc. vorübergehend ausgeschaltet, da ich nicht wußte, ob sich Probleme hinsichtlich der Kompatibilität ergeben können. In dem Report habe ich die Nutzernamen durch drei Sternchen ersetzt. Hoffe, das war alles richtig so.

Viele Grüße
Jasmina/Rheingold


So, hier nun der Report:

Search Navipromo version 3.7.1 began on 23.01.2009 at 16:32:25,80

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!

Fix running from C:\Program Files\navilog1

Updated on 02.01.2009 at 19h00 by IL-MAFIOSO

Microsoft® Windows Vista™ Home Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2130 @ 1.86GHz )
BIOS : Ver 1.00PARTTBL
USER : *** ( Administrator )
BOOT : Normal boot


Firewall : ZoneAlarm Firewall 7.1.254.000 (Not Activated)

C:\ (Local Disk) - NTFS - Total:118 Go (Free:52 Go)
D:\ (Local Disk) - FAT32 - Total:30 Go (Free:20 Go)
E:\ (CD or DVD)


Search done in normal mode

*** Searching for installed Software ***


*** Search folders in "C:\Windows" ***


*** Search folders in "C:\Program Files" ***


*** Search folders in "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Search folders in "c:\progra~2\micros~1\windows\startm~1" ***


*** Search folders in "C:\ProgramData" ***


*** Search folders in "c:\users\***\appdata\roaming\micros~1\windows\startm~1\programs" ***


*** Search folders in "C:\Users\***\AppData\Local\virtualstore\Program Files" ***



*** Search folders in "C:\Users\***\AppData\Local" ***



*** Search folders in "C:\Users\ADMINI~1\AppData\Local" ***



*** Search folders in "C:\Users\***\AppData\Local" ***



*** Search folders in "C:\Users\***~1.000\AppData\Local" ***




*** Search folders in "C:\Users\***\AppData\Roaming" ***


*** Search folders in "C:\Users\ADMINI~1\appdata\roaming" ***


*** Search folders in "C:\Users\***\appdata\roaming" ***


*** Search folders in "C:\Users\***~1.MIS\appdata\roaming" ***


*** Search folders in "C:\Users\***MI~1.000\appdata\roaming" ***


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\Windows\system32" *

* Scan in "C:\Users\***\AppData\Local\Microsoft" *

* Scan in "C:\Users\***\AppData\Local" *

* Scan in "C:\Users\ADMINI~1\AppData\Local" *

* Scan in "C:\Users\***\AppData\Local" *

* Scan in "C:\Users\***MI~1.000\AppData\Local" *



*** Search files ***



*** Search specific Registry keys ***
!! Following keys are not certainly all infected !!


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"xqjtmdw"="\"c:\\users\\***\\appdata\\local\\xqjtmdw.exe\" xqjtmdw"


*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\Windows\system32" :


* In "C:\Users\***\AppData\Local\Microsoft" :


* In "C:\Users\***\AppData\Local" :

xqjtmdw.exe found !
xqjtmdw.dat found !
xqjtmdw_nav.dat found !
xqjtmdw_navps.dat found !

* In "C:\Users\ADMINI~1\AppData\Local" :


* In "C:\Users\***\AppData\Local" :


* In "C:\Users\***MI~1.000\AppData\Local" :


3)Certificates Search :

Egroup certificate not found !
Electronic-Group certificate not found !
Montorgueil certificate not found !
OOO-Favorit certificate not found !
Sunny-Day-Design-Ltd certificate not found !

4)Search others known folders and files :



*** Search completed on 23.01.2009 at 16:45:44,57 ***