[Resolvido] &nbspDispositivo removivel protegido contra gravação

Olá...

Uso o w7 e a algum tempo meu pc começou a nao aceitar nenhuma gravação em nenhum dispositivo de memória...

Testei vários, mas nenhum funcionou.

Estou achando que seja virus.

Se alguem puder me ajudar, ficarei mt agradecido...

obrigado

Yhasmani

Olá Yhasmani

*Baixe o USBFix e salve-o no desktop

*Conecte o pen drive no PC

*Execute o USBFix (Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador)

*Clique [Pesquisa]

*****Cole o relatório apresentado

>
Olá Yhasmani

*Baixe o USBFix e salve-o no desktop

*Conecte o pen drive no PC

*Execute o USBFix (Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador)

*Clique [Pesquisa]

*****Cole o relatório apresentado

 

Aí está...

Usei o meu cartao de memória pra fazer isso...

 

############################## | UsbFix V 7.071 | [Pesquisa]

 

Usuário: Yhasmani B. Cabral (Administrador) # YHASMANI

Atualizado em 30/11/2011 por El Desaparecido

Começou em 14:26:30 | 02/12/2011

 

Site: http://eldesaparecido.com

Arquivo suspeito ? : http://eldesaparecido.com/support.php

Contato: contact@eldesaparecido.com

 

PC: Acer (Aspire 5741) (x64-based PC) # Notebook

CPU: Intel® Core i3 CPU M 350 @ 2.27GHz (2266)

RAM -> [ Total : 2807 | Free : 1519 ]

BIOS: InsydeH2O Version V1.15

BOOT: Normal boot

 

OS: Microsoft Windows 7 Home Basic (6.1.7600 64-Bit) #

WB: Windows Internet Explorer 8.0.7600.16385

 

SC: Security Center Service [ Enabled ]

WU: Windows Update Service [ Enabled ]

AS: Windows Defender [ Enabled | (!) Outdated ]

FW: Windows FireWall Service [ Enabled ]

 

C:\ (%systemdrive%) -> Disco fixo # 286 Gb (161 Mb livre - 56%) [Acer] # NTFS

D:\ -> CD-ROM

E:\ -> Disco removível # 2 Gb (2 Mb livre - 100%) [] # FAT

 

################## | Processos Ativos |

 

C:\Windows\system32\csrss.exe (492)

C:\Windows\system32\wininit.exe (548)

C:\Windows\system32\csrss.exe (580)

C:\Windows\system32\services.exe (616)

C:\Windows\system32\lsass.exe (640)

C:\Windows\system32\lsm.exe (648)

C:\Windows\system32\svchost.exe (748)

C:\Windows\system32\svchost.exe (848)

C:\Windows\System32\svchost.exe (924)

C:\Windows\System32\svchost.exe (968)

C:\Windows\system32\svchost.exe (1000)

C:\Windows\system32\winlogon.exe (300)

C:\Windows\system32\svchost.exe (884)

C:\Windows\system32\svchost.exe (1040)

C:\Windows\system32\WLANExt.exe (1148)

C:\Windows\system32\conhost.exe (1156)

C:\Windows\System32\spoolsv.exe (1336)

C:\Windows\system32\svchost.exe (1416)

C:\Windows\system32\taskhost.exe (1452)

C:\Windows\system32\Dwm.exe (1624)

C:\Windows\Explorer.EXE (1652)

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (1820)

C:\Program Files (x86)\Launch Manager\dsiwmis.exe (1864)

C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (1872)

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (1968)

C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (1980)

C:\Windows\System32\hkcmd.exe (2000)

C:\Windows\System32\igfxpers.exe (2040)

C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe (1664)

C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (1232)

C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (1172)

C:\Windows\SysWOW64\svchost.exe (1252)

C:\Windows\SysWOW64\srvany.exe (2072)

C:\Windows\kmsem\KMService.exe (2096)

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (2104)

C:\Windows\system32\conhost.exe (2112)

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (2292)

C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe (2320)

C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (2380)

C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (2404)

C:\Program Files (x86)\RocketDock\RocketDock.exe (2424)

C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (2440)

C:\Windows\System32\spool\drivers\x64\3\E_IATIGEB.EXE (2548)

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (2584)

C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (2668)

C:\Windows\System32\svchost.exe (2732)

C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (2876)

C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (2900)

C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe (2236)

C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe (1392)

C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe (2248)

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (1920)

C:\Windows\System32\svchost.exe (1124)

C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe (2752)

C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (1484)

C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (3016)

C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (2092)

C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWlan.exe (1696)

C:\Windows\system32\svchost.exe (2836)

C:\Program Files\Acer\Acer Updater\UpdaterService.exe (3204)

C:\Windows\SysWOW64\UTSCSI.EXE (3232)

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (3260)

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3440)

C:\Program Files (x86)\Launch Manager\LManager.exe (3488)

C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (3652)

C:\Windows\system32\igfxext.exe (3712)

C:\Windows\system32\igfxsrvc.exe (3744)

C:\Windows\system32\wbem\unsecapp.exe (3792)

C:\Windows\system32\wbem\wmiprvse.exe (3856)

C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (3924)

C:\Program Files (x86)\Launch Manager\LMworker.exe (4000)

**C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (4028)**

**C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (4036)**

C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (4068)

C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe (4092)

C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (3968)

C:\Windows\system32\SearchIndexer.exe (4144)

C:\Windows\system32\svchost.exe (4256)

C:\Windows\system32\svchost.exe (4336)

C:\Windows\system32\WUDFHost.exe (4488)

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4680)

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe (4892)

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (5008)

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (5052)

C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (840)

C:\Program Files (x86)\Mozilla Firefox\firefox.exe (4832)

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (116)

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (4652)

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (4208)

C:\Windows\System32\svchost.exe (2648)

C:\Windows\system32\wuauclt.exe (3864)

C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (3952)

C:\Windows\system32\wbem\wmiprvse.exe (5080)

C:\Windows\system32\SearchProtocolHost.exe (3476)

C:\Windows\system32\SearchFilterHost.exe (4932)

C:\UsbFix\UsbFix.exe (1424)

 

################## | Ficheiros # pastas infeciosos |

 

Presente ! C:\Users\YHASMA~1.CAB\AppData\Local\Temp\AutoRun.exe

Presente ! D:\SETUP.EXE

Presente ! D:\Autorun.inf

 

################## | Registro |

 

 

################## | Mountpoints2 |

 

HKCU\.\.\.\.\Explorer\MountPoints2\F

Shell\AutoRun\Command = F:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{03878bde-b894-11e0-9dfe-4c0f6e1bd13e}

Shell\AutoRun\Command = F:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{03878be1-b894-11e0-9dfe-4c0f6e1bd13e}

Shell\AutoRun\Command = F:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{17667ecd-4be2-11e0-acbe-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{30e879a5-540e-11e0-ae8a-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{46b292f1-9dee-11e0-a734-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{46b292f7-9dee-11e0-a734-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{46b292fb-9dee-11e0-a734-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{4dec73fa-1ae5-11e1-bfaa-4c0f6e1bd13e}

Shell\AutoRun\Command = F:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{5f98558e-5171-11e0-9261-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{65b57c71-1568-11e1-8788-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{65b57c80-1568-11e1-8788-4c0f6e1bd13e}

Shell\AutoRun\Command = F:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{6f0cf8b9-4e64-11e0-85d4-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{6f0cf8be-4e64-11e0-85d4-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{b816425f-9ecf-11e0-80c4-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{e444fef7-b6d9-11e0-ad4a-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{e444fefb-b6d9-11e0-ad4a-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{e5c4e775-b645-11e0-9e2f-4c0f6e1bd13e}

Shell\AutoRun\Command = E:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{fd8025e7-9d90-11e0-850d-4c0f6e1bd13e}

Shell\AutoRun\Command = F:\setup.exe AUTORUN=1

 

HKCU\.\.\.\.\Explorer\MountPoints2\{fdc45e91-f7be-11df-8e53-806e6f6e6963}

Shell\AutoRun\Command = D:\SETUP.EXE

 

 

 

################## | Vaccin |

 

(!) Este computador não é vacinada!

 

################## | E.O.F |

*Mantenha conectado o cartão, execute o UsbFix e clique [supressão]

*Ao finalizar, desconecte o cartão e cole o relatório apresentado

>
*Mantenha conectado o cartão, execute o UsbFix e clique [supressão]

*Ao finalizar, desconecte o cartão e cole o relatório apresentado

Ai está.

vlw

############################## | UsbFix V 7.071 | [supressão]

Usuário: Yhasmani B. Cabral (Administrador) # YHASMANI

Atualizado em 30/11/2011 por El Desaparecido

Começou em 15:45:17 | 02/12/2011

Site: http://eldesaparecido.com

Arquivo suspeito ? : http://eldesaparecido.com/support.php

Contato: contact@eldesaparecido.com

PC: Acer (Aspire 5741) (x64-based PC) # Notebook

CPU: Intel® Core i3 CPU M 350 @ 2.27GHz (2266)

RAM -> [ Total : 2807 | Free : 1648 ]

BIOS: InsydeH2O Version V1.15

BOOT: Normal boot

OS: Microsoft Windows 7 Home Basic (6.1.7600 64-Bit) #

WB: Windows Internet Explorer 8.0.7600.16385

SC: Security Center Service [ Enabled ]

WU: Windows Update Service [ Enabled ]

AS: Windows Defender [ Enabled | (!) Outdated ]

FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disco fixo # 286 Gb (160 Mb livre - 56%) [Acer] # NTFS

D:\ -> CD-ROM

E:\ -> Disco removível # 2 Gb (2 Mb livre - 100%) [] # FAT

################## | Processos Ativos |

C:\Windows\system32\csrss.exe (484)

C:\Windows\system32\wininit.exe (540)

C:\Windows\system32\csrss.exe (572)

C:\Windows\system32\services.exe (608)

C:\Windows\system32\lsass.exe (636)

C:\Windows\system32\lsm.exe (644)

C:\Windows\system32\svchost.exe (744)

C:\Windows\system32\svchost.exe (828)

C:\Windows\System32\svchost.exe (892)

C:\Windows\System32\svchost.exe (928)

C:\Windows\system32\svchost.exe (964)

C:\Windows\system32\winlogon.exe (128)

C:\Windows\system32\svchost.exe (764)

C:\Windows\system32\svchost.exe (384)

C:\Windows\system32\WLANExt.exe (1120)

C:\Windows\system32\conhost.exe (1128)

C:\Windows\System32\spoolsv.exe (1308)

C:\Windows\system32\svchost.exe (1376)

C:\Windows\system32\taskhost.exe (1436)

C:\Windows\system32\Dwm.exe (1612)

C:\Windows\Explorer.EXE (1644)

C:\Windows\system32\taskeng.exe (1736)

C:\Program Files (x86)\Launch Manager\dsiwmis.exe (1744)

C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (1868)

C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (1896)

C:\Windows\SysWOW64\svchost.exe (1920)

C:\Windows\SysWOW64\srvany.exe (1944)

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (1968)

C:\Windows\kmsem\KMService.exe (1976)

C:\Windows\system32\conhost.exe (1988)

C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe (2036)

C:\Windows\System32\svchost.exe (1572)

C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (2016)

C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (1356)

C:\Windows\System32\svchost.exe (1552)

C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe (1700)

C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (2088)

C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWlan.exe (2100)

C:\Windows\system32\svchost.exe (2144)

C:\Program Files\Acer\Acer Updater\UpdaterService.exe (2212)

C:\Windows\SysWOW64\UTSCSI.EXE (2268)

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2296)

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2408)

C:\Windows\system32\svchost.exe (2840)

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3036)

C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (3044)

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (3060)

C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (2056)

C:\Windows\System32\hkcmd.exe (1664)

C:\Windows\system32\igfxsrvc.exe (2808)

C:\Windows\System32\igfxpers.exe (2904)

C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe (3188)

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (3224)

C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (3260)

C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe (3272)

C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (3292)

C:\Program Files (x86)\RocketDock\RocketDock.exe (3352)

C:\Windows\system32\igfxext.exe (3388)

C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (3440)

C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (3492)

C:\Windows\system32\SearchIndexer.exe (3536)

C:\Windows\System32\spool\drivers\x64\3\E_IATIGEB.EXE (3600)

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (3816)

C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (3828)

C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe (3840)

C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe (3876)

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (3884)

C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe (3944)

C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (4064)

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe (4076)

C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (3144)

C:\Program Files (x86)\Launch Manager\LManager.exe (3256)

C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (3636)

C:\Program Files (x86)\Launch Manager\LMworker.exe (3976)

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (3100)

C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (1092)

C:\Windows\system32\svchost.exe (4148)

C:\Windows\system32\wbem\unsecapp.exe (4232)

C:\Windows\system32\wbem\wmiprvse.exe (4388)

C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (4504)

C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (4772)

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4840)

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe (5084)

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (4492)

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (2924)

C:\Windows\system32\wbem\wmiprvse.exe (1264)

C:\Windows\system32\WUDFHost.exe (4708)

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (3344)

C:\Windows\system32\sppsvc.exe (2616)

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (4728)

C:\Windows\System32\svchost.exe (1044)

C:\UsbFix\UsbFix.exe (4928)

################## | Processos parados |

Parado! C:\Windows\system32\WLANExt.exe (1120)

Parado! C:\Windows\System32\spoolsv.exe (1308)

Parado! C:\Windows\system32\taskhost.exe (1436)

Parado! C:\Windows\system32\taskeng.exe (1736)

Parado! C:\Program Files (x86)\Launch Manager\dsiwmis.exe (1744)

Parado! C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (1868)

Parado! C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (1896)

Parado! C:\Windows\SysWOW64\srvany.exe (1944)

Parado! C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (1968)

Parado! C:\Windows\kmsem\KMService.exe (1976)

Parado! C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe (2036)

Parado! C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (2016)

Parado! C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (1356)

Parado! C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe (1700)

Parado! C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (2088)

Parado! C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWlan.exe (2100)

Parado! C:\Program Files\Acer\Acer Updater\UpdaterService.exe (2212)

Parado! C:\Windows\SysWOW64\UTSCSI.EXE (2268)

Parado! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2296)

Parado! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3036)

Parado! C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (3044)

Parado! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (3060)

Parado! C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (2056)

Parado! C:\Windows\System32\hkcmd.exe (1664)

Parado! C:\Windows\system32\igfxsrvc.exe (2808)

Parado! C:\Windows\System32\igfxpers.exe (2904)

Parado! C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe (3188)

Parado! C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (3224)

Parado! C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (3260)

Parado! C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe (3272)

Parado! C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (3292)

Parado! C:\Program Files (x86)\RocketDock\RocketDock.exe (3352)

Parado! C:\Windows\system32\igfxext.exe (3388)

Parado! C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (3440)

Parado! C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (3492)

Parado! C:\Windows\system32\SearchIndexer.exe (3536)

Parado! C:\Windows\System32\spool\drivers\x64\3\E_IATIGEB.EXE (3600)

Parado! C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (3816)

Parado! C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (3828)

Parado! C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFGuage.exe (3840)

Parado! C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFRealTimeD.exe (3876)

Parado! C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (3884)

Parado! C:\Program Files (x86)\Clarus\Samsung Auto Backup\ISFTimerD.exe (3944)

Parado! C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (4064)

Parado! C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe (4076)

Parado! C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (3144)

Parado! C:\Program Files (x86)\Launch Manager\LManager.exe (3256)

Parado! C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (3636)

Parado! C:\Program Files (x86)\Launch Manager\LMworker.exe (3976)

Parado! C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (3100)

Parado! C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (1092)

Parado! C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (4504)

Parado! C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (4772)

Parado! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4840)

Parado! C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe (5084)

Parado! C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (4492)

Parado! C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (2924)

Parado! C:\Windows\system32\WUDFHost.exe (4708)

Parado! C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (3344)

Parado! C:\Windows\system32\sppsvc.exe (2616)

Parado! C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (4728)

################## | Ficheiros # pastas infeciosos |

Supprimido ! C:\Users\YHASMA~1.CAB\AppData\Local\Temp\AutoRun.exe

Não supprimido ! D:\SETUP.EXE

Supprimido ! C:\$RECYCLE.BIN\S-1-5-21-1281968239-2957193764-4082081314-500

Supprimido ! C:\$RECYCLE.BIN\S-1-5-21-4053060368-4000511306-1264876465-1000

Supprimido ! C:\$RECYCLE.BIN\S-1-5-21-4053060368-4000511306-1264876465-500

Não supprimido ! D:\Autorun.inf

(!) Ficheiros temporários suprimido.

################## | Registro |

################## | Mountpoints2 |

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\F

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{03878bde-b894-11e0-9dfe-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{17667ecd-4be2-11e0-acbe-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{30e879a5-540e-11e0-ae8a-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{46b292f1-9dee-11e0-a734-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{46b292fb-9dee-11e0-a734-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{5f98558e-5171-11e0-9261-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{65b57c80-1568-11e1-8788-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{6f0cf8b9-4e64-11e0-85d4-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{b816425f-9ecf-11e0-80c4-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{e444fef7-b6d9-11e0-ad4a-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{e5c4e775-b645-11e0-9e2f-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{fd8025e7-9d90-11e0-850d-4c0f6e1bd13e}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{fdc45e91-f7be-11df-8e53-806e6f6e6963}

################## | Listing |

[02/12/2011 - 15:52:28 | SHD ] C:\$Recycle.Bin

[13/04/2011 - 18:56:25 | D ] C:\620aa57fa324c7765c98e4

[09/03/2011 - 20:55:29 | D ] C:\Arquivos de Programas

[01/04/2011 - 08:49:37 | D ] C:\audiences

[24/11/2010 - 09:42:28 | D ] C:\book

[20/09/2010 - 01:02:10 | N | 8192] C:\BOOTSECT.BAK

[06/05/2011 - 10:44:10 | D ] C:\Ciaf-701

[06/06/2011 - 21:41:33 | D ] C:\CM60S

[01/04/2011 - 08:49:37 | D ] C:\codecs

[01/04/2011 - 08:49:37 | D ] C:\common

[02/12/2011 - 00:44:44 | D ] C:\Config.Msi

[14/07/2009 - 03:08:56 | SHD ] C:\Documents and Settings

[07/11/2007 - 09:00:40 | N | 17734] C:\eula.1028.txt

[07/11/2007 - 09:00:40 | N | 17734] C:\eula.1031.txt

[07/11/2007 - 09:00:40 | N | 10134] C:\eula.1033.txt

[07/11/2007 - 09:00:40 | N | 17734] C:\eula.1036.txt

[07/11/2007 - 09:00:40 | N | 17734] C:\eula.1040.txt

[07/11/2007 - 09:00:40 | N | 118] C:\eula.1041.txt

[07/11/2007 - 09:00:40 | N | 17734] C:\eula.1042.txt

[07/11/2007 - 09:00:40 | N | 17734] C:\eula.2052.txt

[07/11/2007 - 09:00:40 | N | 17734] C:\eula.3082.txt

[07/11/2007 - 09:00:40 | N | 1110] C:\globdata.ini

[06/04/2004 - 01:02:00 | N | 188482] C:\helixprodctrl.dll

[02/12/2011 - 15:42:36 | ASH | 2207285248] C:\hiberfil.sys

[29/11/2011 - 14:40:31 | N | 388608] C:\HiJackThis.exe

[29/11/2011 - 14:46:32 | N | 16345] C:\hijackthis.log

[17/09/2011 - 14:55:57 | D ] C:\Install

[07/11/2007 - 09:44:20 | N | 855040] C:\install.exe

[07/11/2007 - 09:00:40 | N | 843] C:\install.ini

[07/11/2007 - 09:44:20 | N | 75280] C:\install.res.1028.dll

[07/11/2007 - 09:44:20 | N | 95248] C:\install.res.1031.dll

[07/11/2007 - 09:44:20 | N | 90128] C:\install.res.1033.dll

[07/11/2007 - 09:44:20 | N | 96272] C:\install.res.1036.dll

[07/11/2007 - 09:44:20 | N | 94224] C:\install.res.1040.dll

[07/11/2007 - 09:44:20 | N | 80400] C:\install.res.1041.dll

[07/11/2007 - 09:44:20 | N | 78864] C:\install.res.1042.dll

[07/11/2007 - 09:44:20 | N | 74768] C:\install.res.2052.dll

[07/11/2007 - 09:44:20 | N | 95248] C:\install.res.3082.dll

[24/11/2010 - 09:38:08 | D ] C:\Intel

[28/03/2011 - 14:23:47 | RHD ] C:\MSOCache

[09/03/2011 - 20:57:00 | D ] C:\OEM

[16/07/2011 - 19:27:44 | D ] C:\OtsLabs

[02/12/2011 - 15:42:51 | ASH | 2943049728] C:\pagefile.sys

[14/07/2009 - 01:20:08 | D ] C:\PerfLogs

[01/04/2011 - 08:49:37 | D ] C:\plugins

[06/12/2002 - 15:02:00 | N | 272896] C:\pncrt.dll

[02/12/2011 - 00:42:56 | D ] C:\Program Files

[02/12/2011 - 00:43:18 | D ] C:\Program Files (x86)

[02/12/2011 - 00:44:06 | HD ] C:\ProgramData

[09/03/2011 - 20:55:30 | SHD ] C:\Recovery

[20/09/2010 - 00:28:16 | N | 3352] C:\RHDSetup.log

[02/12/2011 - 00:44:56 | SHD ] C:\System Volume Information

[01/04/2011 - 08:49:37 | D ] C:\tools

[01/04/2011 - 08:49:37 | N | 4760] C:\unins000.dat

[28/11/2003 - 05:00:00 | N | 75922] C:\unins000.exe

[12/08/2011 - 15:27:21 | D ] C:\UniScan

[02/12/2011 - 15:52:28 | D ] C:\UsbFix

[02/12/2011 - 15:45:42 | A | 15245] C:\UsbFix.txt

[16/04/2011 - 13:06:21 | D ] C:\Users

[07/11/2007 - 09:00:40 | N | 5686] C:\vcredist.bmp

[07/11/2007 - 09:50:40 | N | 1927956] C:\VC_RED.cab

[07/11/2007 - 09:53:12 | N | 242176] C:\VC_RED.MSI

[14/09/2011 - 15:48:52 | D ] C:\W7P_Backups

[02/12/2011 - 00:42:33 | D ] C:\Windows

[17/01/2009 - 16:58:36 | RH | 41] D:\Autorun.inf

[04/01/2009 - 04:49:28 | RH | 295606] D:\CDROM.ICO

[25/01/2010 - 00:47:38 | D ] D:\Common

[11/03/2009 - 04:01:32 | RH | 99840] D:\EPDEVLST.EXE

[19/01/2010 - 07:36:02 | RH | 66] D:\EPDEVLST.INI

[25/01/2010 - 08:22:04 | RH | 6730124] D:\Epson.exe

[25/01/2010 - 00:47:42 | D ] D:\Espanol

[21/01/2010 - 07:49:50 | RH | 1197] D:\lingo.ini

[25/01/2010 - 00:47:42 | D ] D:\Portugues

[04/01/2009 - 02:17:24 | R | 377648] D:\Setup.exe

[25/01/2010 - 00:47:46 | HD ] D:\xtras

################## | Vaccin |

C:\Autorun.inf -> Vacina criada por UsbFix (El Desaparecido)

################## | Upload |

Favor enviar o arquivo: C:\UsbFix_Upload_Me_YHASMANI.zip

http://eldesaparecido.com/upload.htmlp

Obrigado pela sua contribuição.

################## | Reboot |

(!) O computador não foi reiniciado!

################## | E.O.F |

1.

*Reinicie o PC

2.

*Execute o UsbFix e clique [uninstall]

3.

*Baixe o MKV e salve-o no desktop

Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar: /applications/core/interface/imageproxy/imageproxy.php?img=http://img256.imageshack.us/img256/2499/adminexec.png&key=12ed210b6a57b0c741bb51c43ab53e2f642ca39d3acaa3744a90d29279b3660a" alt="adminexec.png" />

*Conecte o cartão no PC e execute o MKV

*Clique [supprimer la vaccination]

*Reinicie o PC

4.O procedimento abaixo deve ser feito primeiramente sem o cartão conectado!

*Baixe o USB WriteProtector e salve-o no desktop

*Execute-o. Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador

*Selecione a linguagem para Portuguese

*Selecione a opção Proteção de escrita USB - Inactiva

 

/applications/core/interface/imageproxy/imageproxy.php?img=http://img254.imageshack.us/img254/8056/usbq.png&key=eb0854bb4f38a6c846eda37fb00b559e7799e242b0309979ffb69507cc6c12cc" alt="usbq.png" />

 

*Conecte o cartão e informe.

>
1.

*Reinicie o PC

2.

*Execute o UsbFix e clique [uninstall]

3.

*Baixe o MKV e salve-o no desktop

Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar: /applications/core/interface/imageproxy/imageproxy.php?img=http://img256.imageshack.us/img256/2499/adminexec.png&key=12ed210b6a57b0c741bb51c43ab53e2f642ca39d3acaa3744a90d29279b3660a" alt="adminexec.png" />

*Conecte o cartão no PC e execute o MKV

*Clique [supprimer la vaccination]

*Reinicie o PC

4.O procedimento abaixo deve ser feito primeiramente sem o cartão conectado!

*Baixe o USB WriteProtector e salve-o no desktop

*Execute-o. Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador

*Selecione a linguagem para Portuguese

*Selecione a opção Proteção de escrita USB - Inactiva

 

/applications/core/interface/imageproxy/imageproxy.php?img=http://img254.imageshack.us/img254/8056/usbq.png&key=eb0854bb4f38a6c846eda37fb00b559e7799e242b0309979ffb69507cc6c12cc" alt="usbq.png" />

 

*Conecte o cartão e informe.

 

Fiz oq foi pedido e nada aconteceu...

 

Meu pc continua com esse bloqueio...

 

:/

Há um tópico aqui no fórum. Veja se resolve. Este problema não tem relação com malwares.

http://forum.imasters.com.br/topic/323340-pen-drive-protegido-contra-gravacao/

Ou dê uma olhada neste link:

http://www.hardware.com.br/comunidade/usb-dica/1194743/

PROBLEMA RESOLVIDO

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.