[Resolvido] &nbspInternet lenta

Olá matmaibat

:seta: Cole o relatório do Combofix

C:\combofix.txt

ComboFix 13-06-03.06 - Matheus 04/06/2013 0:16.1.6 - x64

Microsoft Windows 7 Ultimate 6.1.7600.0.1252.55.1046.18.7934.5148 [GMT -3:00]

Executando de: c:\users\Matheus\Desktop\ComboFix.exe

AV: avast! Antivirus Disabled/Updated {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus Disabled/Updated {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Spybot - Search and Destroy Enabled/Outdated {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

SP: Windows Defender Enabled/Outdated {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((( Outras Exclusões )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\windows\SysWow64\Config.ini

c:\windows\wininit.ini

.

.

(((((((((((((((( Arquivos/Ficheiros criados de 2013-05-04 to 2013-06-04 ))))))))))))))))))))))))))))

.

.

2013-06-04 03:19 . 2013-06-04 03:19 -------- d-----w- c:\users\Default\AppData\Local\temp

2013-06-04 02:16 . 2013-06-04 02:16 -------- d-----w- c:\windows\ERUNT

2013-06-04 02:15 . 2013-06-04 02:15 -------- d-----w- C:\JRT

2013-06-03 05:03 . 2013-06-03 05:03 -------- d-----w- c:\windows\system32\SPReview

2013-05-23 04:19 . 2013-05-23 04:19 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%

2013-05-19 08:19 . 2013-05-19 08:19 -------- d-----w- c:\program files\Common Files\DESIGNER

2013-05-19 08:18 . 2013-05-19 08:18 -------- d-----w- c:\program files\Microsoft.NET

2013-05-19 08:18 . 2013-05-19 08:18 -------- d-----w- c:\program files (x86)\Microsoft SQL Server

2013-05-19 08:18 . 2013-05-19 08:18 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft

2013-05-19 08:17 . 2013-05-19 08:18 -------- d-----w- c:\program files\Microsoft SQL Server

2013-05-19 08:17 . 2013-05-19 08:17 -------- d-----w- c:\windows\PCHEALTH

2013-05-19 08:14 . 2013-05-19 08:14 -------- d-----w- c:\program files\Microsoft Analysis Services

2013-05-19 08:14 . 2013-05-19 08:14 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services

2013-05-19 07:33 . 2013-05-19 07:33 -------- d-----w- c:\windows\CheckSur

2013-05-19 06:59 . 2013-05-19 06:59 -------- d-----w- c:\users\Matheus\AppData\Local\ElevatedDiagnostics

2013-05-19 06:53 . 2013-05-19 06:53 -------- d-----w- c:\program files (x86)\Microsoft

2013-05-15 20:04 . 2013-05-15 20:04 -------- d-----w- c:\programdata\ATI

2013-05-15 20:04 . 2013-05-15 20:04 -------- d-----w- c:\program files (x86)\AMD AVT

2013-05-15 17:24 . 2013-05-15 17:24 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller

2013-05-15 17:23 . 2008-10-15 09:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll

2013-05-10 03:38 . 2013-05-15 16:56 -------- d-----w- c:\program files (x86)\Origin Games

2013-05-10 03:38 . 2013-05-15 16:52 -------- d-----w- c:\users\Matheus\AppData\Roaming\Origin

2013-05-10 03:37 . 2013-05-10 03:37 -------- d-----w- c:\users\Matheus\AppData\Local\Origin

2013-05-10 03:21 . 2013-05-15 17:25 -------- d-----w- c:\programdata\Origin

2013-05-10 03:21 . 2013-05-15 17:25 -------- d-----w- c:\programdata\Electronic Arts

2013-05-10 03:21 . 2013-05-10 03:37 -------- d-----w- c:\program files (x86)\Origin

.

.

.

((((((((((((((((((((((((((((((((((((( Relatório Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-05-16 03:04 . 2013-03-15 03:19 75016696 ----a-w- c:\windows\system32\MRT.exe

2013-05-14 18:06 . 2013-03-13 05:31 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-05-14 18:06 . 2013-03-13 05:31 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2013-05-09 08:59 . 2013-03-13 05:23 378432 ----a-w- c:\windows\system32\drivers\aswSP.sys

2013-05-09 08:59 . 2013-03-13 05:23 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys

2013-05-09 08:59 . 2013-03-13 05:23 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys

2013-05-09 08:59 . 2013-03-13 05:23 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys

2013-05-09 08:59 . 2013-03-13 05:23 1025808 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2013-05-09 08:59 . 2013-03-13 05:23 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys

2013-05-09 08:59 . 2013-03-13 05:23 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

2013-05-09 08:59 . 2013-03-13 05:23 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2013-05-09 08:58 . 2013-03-13 05:22 41664 ----a-w- c:\windows\avastSS.scr

2013-05-09 08:58 . 2013-03-13 05:23 287840 ----a-w- c:\windows\system32\aswBoot.exe

2013-04-12 14:36 . 2013-04-24 15:40 1653096 ----a-w- c:\windows\system32\drivers\ntfs.sys

2013-04-04 17:50 . 2013-03-31 05:38 25928 ----a-w- c:\windows\system32\drivers\mbam.sys

2013-04-04 08:35 . 2013-05-04 21:28 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-03-29 02:13 . 2013-03-29 02:13 222720 ----a-w- c:\windows\system32\clinfo.exe

2013-03-29 02:13 . 2013-03-29 02:13 798734 ----a-w- c:\windows\SysWow64\amdocl_ld32.exe

2013-03-29 02:13 . 2013-03-29 02:13 1187342 ----a-w- c:\windows\system32\amdocl_as64.exe

2013-03-29 02:13 . 2013-03-29 02:13 1061902 ----a-w- c:\windows\system32\amdocl_ld64.exe

2013-03-29 02:13 . 2013-03-29 02:13 995342 ----a-w- c:\windows\SysWow64\amdocl_as32.exe

2013-03-29 02:13 . 2013-03-29 02:13 76288 ----a-w- c:\windows\system32\OpenVideo64.dll

2013-03-29 02:13 . 2013-03-29 02:13 65536 ----a-w- c:\windows\SysWow64\OpenVideo.dll

2013-03-29 02:13 . 2013-03-29 02:13 64000 ----a-w- c:\windows\system32\OVDecode64.dll

2013-03-29 02:12 . 2013-03-29 02:12 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll

2013-03-29 02:12 . 2013-03-29 02:12 29150720 ----a-w- c:\windows\system32\amdocl64.dll

2013-03-29 02:10 . 2013-03-29 02:10 23810560 ----a-w- c:\windows\SysWow64\amdocl.dll

2013-03-29 02:09 . 2013-03-29 02:09 54784 ----a-w- c:\windows\system32\OpenCL.dll

2013-03-29 02:09 . 2013-03-29 02:09 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll

2013-03-29 01:35 . 2013-03-29 01:35 442368 ----a-w- c:\windows\system32\atidemgy.dll

2013-03-29 01:11 . 2013-03-29 01:11 79360 ----a-w- c:\windows\system32\amdave64.dll

2013-03-29 01:11 . 2013-03-29 01:11 78336 ----a-w- c:\windows\SysWow64\amdave32.dll

2013-03-29 01:11 . 2013-03-29 01:11 74240 ----a-w- c:\windows\system32\atisamu64.dll

2013-03-29 01:11 . 2013-03-29 01:11 71168 ----a-w- c:\windows\SysWow64\atisamu32.dll

2013-03-25 17:26 . 2009-07-13 23:52 65536 ----a-w- c:\windows\system32\sppuinotify.dll

2013-03-25 17:26 . 2009-07-13 23:51 381952 ----a-w- c:\windows\system32\sppcommdlg.dll

2013-03-25 17:25 . 2009-07-13 23:52 349696 ----a-w- c:\windows\system32\slui.exe

2013-03-21 01:19 . 2013-03-21 01:19 5067264 ----a-w- c:\windows\system32\amdsc64.dll

2013-03-21 01:19 . 2013-03-21 01:19 4083200 ----a-w- c:\windows\SysWow64\amdsc.dll

2013-03-19 06:19 . 2013-04-10 15:52 5497688 ----a-w- c:\windows\system32\ntoskrnl.exe

2013-03-19 05:54 . 2013-04-10 15:52 43520 ----a-w- c:\windows\system32\csrsrv.dll

2013-03-19 05:06 . 2013-04-10 15:52 3958120 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe

2013-03-19 05:06 . 2013-04-10 15:52 3902312 ----a-w- c:\windows\SysWow64\ntoskrnl.exe

2013-03-19 04:53 . 2013-04-10 15:52 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll

2013-03-19 03:19 . 2013-04-10 15:52 112640 ----a-w- c:\windows\system32\smss.exe

2013-03-17 08:07 . 2013-03-17 08:07 40960 ----a-r- c:\users\Matheus\AppData\Roaming\Microsoft\Installer\{9559F7CA-5E34-4237-A2D9-D856464AD727}\NewShortcut1_9559F7CA5E344237A2D9D856464AD727.exe

2013-03-17 08:07 . 2013-03-17 08:07 40960 ----a-r- c:\users\Matheus\AppData\Roaming\Microsoft\Installer\{9559F7CA-5E34-4237-A2D9-D856464AD727}\ARPPRODUCTICON.exe

2013-03-15 06:28 . 2013-04-09 15:54 9311288 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B231A960-CDFF-437F-8824-2F698FAD4B3F}\mpengine.dll

2013-03-13 22:33 . 2013-03-13 22:33 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

2013-03-13 22:33 . 2013-03-13 22:33 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe

2013-03-13 22:33 . 2013-03-13 22:33 89088 ----a-w- c:\windows\system32\ie4uinit.exe

2013-03-13 22:33 . 2013-03-13 22:33 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll

2013-03-13 22:33 . 2013-03-13 22:33 85504 ----a-w- c:\windows\system32\iesetup.dll

2013-03-13 22:33 . 2013-03-13 22:33 82432 ----a-w- c:\windows\system32\icardie.dll

2013-03-13 22:33 . 2013-03-13 22:33 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe

2013-03-13 22:33 . 2013-03-13 22:33 76800 ----a-w- c:\windows\system32\tdc.ocx

2013-03-13 22:33 . 2013-03-13 22:33 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe

2013-03-13 22:33 . 2013-03-13 22:33 74752 ----a-w- c:\windows\SysWow64\iesetup.dll

2013-03-13 22:33 . 2013-03-13 22:33 65024 ----a-w- c:\windows\system32\pngfilt.dll

2013-03-13 22:33 . 2013-03-13 22:33 63488 ----a-w- c:\windows\SysWow64\tdc.ocx

2013-03-13 22:33 . 2013-03-13 22:33 55296 ----a-w- c:\windows\system32\msfeedsbs.dll

2013-03-13 22:33 . 2013-03-13 22:33 534528 ----a-w- c:\windows\system32\ieapfltr.dll

2013-03-13 22:33 . 2013-03-13 22:33 49664 ----a-w- c:\windows\system32\imgutil.dll

2013-03-13 22:33 . 2013-03-13 22:33 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll

2013-03-13 22:33 . 2013-03-13 22:33 48640 ----a-w- c:\windows\system32\mshtmler.dll

2013-03-13 22:33 . 2013-03-13 22:33 452608 ----a-w- c:\windows\system32\dxtmsft.dll

2013-03-13 22:33 . 2013-03-13 22:33 448512 ----a-w- c:\windows\system32\html.iec

2013-03-13 22:33 . 2013-03-13 22:33 403248 ----a-w- c:\windows\system32\iedkcs32.dll

2013-03-13 22:33 . 2013-03-13 22:33 39936 ----a-w- c:\windows\system32\iernonce.dll

2013-03-13 22:33 . 2013-03-13 22:33 3695416 ----a-w- c:\windows\system32\ieapfltr.dat

2013-03-13 22:33 . 2013-03-13 22:33 367104 ----a-w- c:\windows\SysWow64\html.iec

2013-03-13 22:33 . 2013-03-13 22:33 35840 ----a-w- c:\windows\SysWow64\imgutil.dll

2013-03-13 22:33 . 2013-03-13 22:33 30720 ----a-w- c:\windows\system32\licmgr10.dll

2013-03-13 22:33 . 2013-03-13 22:33 282112 ----a-w- c:\windows\system32\dxtrans.dll

2013-03-13 22:33 . 2013-03-13 22:33 267776 ----a-w- c:\windows\system32\ieaksie.dll

2013-03-13 22:33 . 2013-03-13 22:33 249344 ----a-w- c:\windows\system32\webcheck.dll

2013-03-13 22:33 . 2013-03-13 22:33 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll

2013-03-13 22:33 . 2013-03-13 22:33 222208 ----a-w- c:\windows\system32\msls31.dll

2013-03-13 22:33 . 2013-03-13 22:33 197120 ----a-w- c:\windows\system32\msrating.dll

2013-03-13 22:33 . 2013-03-13 22:33 165888 ----a-w- c:\windows\system32\iexpress.exe

2013-03-13 22:33 . 2013-03-13 22:33 163840 ----a-w- c:\windows\system32\ieakui.dll

2013-03-13 22:33 . 2013-03-13 22:33 161792 ----a-w- c:\windows\SysWow64\msls31.dll

2013-03-13 22:33 . 2013-03-13 22:33 160256 ----a-w- c:\windows\system32\wextract.exe

2013-03-13 22:33 . 2013-03-13 22:33 160256 ----a-w- c:\windows\system32\ieakeng.dll

2013-03-13 22:33 . 2013-03-13 22:33 152064 ----a-w- c:\windows\SysWow64\wextract.exe

2013-03-13 22:33 . 2013-03-13 22:33 150528 ----a-w- c:\windows\SysWow64\iexpress.exe

2013-03-13 22:33 . 2013-03-13 22:33 149504 ----a-w- c:\windows\system32\occache.dll

2013-03-13 22:33 . 2013-03-13 22:33 145920 ----a-w- c:\windows\system32\iepeers.dll

2013-03-13 22:33 . 2013-03-13 22:33 135168 ----a-w- c:\windows\system32\IEAdvpack.dll

2013-03-13 22:33 . 2013-03-13 22:33 12288 ----a-w- c:\windows\system32\mshta.exe

2013-03-13 22:33 . 2013-03-13 22:33 11776 ----a-w- c:\windows\SysWow64\mshta.exe

2013-03-13 22:33 . 2013-03-13 22:33 114176 ----a-w- c:\windows\system32\admparse.dll

2013-03-13 22:33 . 2013-03-13 22:33 111616 ----a-w- c:\windows\system32\iesysprep.dll

2013-03-13 22:33 . 2013-03-13 22:33 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll

2013-03-13 22:33 . 2013-03-13 22:33 10752 ----a-w- c:\windows\system32\msfeedssync.exe

2013-03-13 22:33 . 2013-03-13 22:33 103936 ----a-w- c:\windows\system32\inseng.dll

2013-03-13 22:33 . 2013-03-13 22:33 101888 ----a-w- c:\windows\SysWow64\admparse.dll

2013-03-13 05:25 . 2009-07-13 23:56 419840 ----a-w- c:\windows\system32\systemcpl.dll

2013-03-13 05:25 . 2009-07-13 23:52 142336 ----a-w- c:\windows\system32\sppwmi.dll

2013-03-13 05:25 . 2009-07-13 23:38 1008640 ----a-w- c:\windows\system32\user32.dll

.

.

------- Sigcheck -------

Note: Unsigned files aren't necessarily malware.

.

[7] 2010-11-20 . FE70103391A64039A921DBFFF9C7AB1B . 1008128 . . [6.1.7601.17514] .. c:\windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll

[7] 2009-07-14 . 72D7B3EA16946E8F0CF7458150031CC6 . 1008640 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll

[-] 2013-03-13 . F78E7BD7ADC829D9DD92C558180E09DB . 1008640 . . [6.1.7600.16385] .. c:\windows\system32\user32.dll

.

(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))

.

.

Nota entradas vazias e legítimas por padrão não são apresentadas.

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2012-10-01 23:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2012-10-01 23:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2012-10-01 23:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-05-09 18679400]

"Spybot-S&D Cleaning"="c:\program files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" [2012-11-13 3713032]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"TurboV EVO"="c:\program files\ASUS\TurboV EVO\TurboV_EVO.exe" [2010-04-22 9919104]

"Six Engine"="c:\program files (x86)\ASUS\EPU\EPU.exe" [2010-03-16 5309056]

"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]

"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]

"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2012-11-13 3825176]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2013-03-29 642656]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ autocheck autochk *\0sdnclean64.exe

.

R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 AIDA64Driver;FinalWire AIDA64 Kernel Driver;c:\program files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64;c:\program files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64 [x]

R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]

R3 AODDriver;AODDriver;c:\program files\ASUS\GPU Boost Driver\amd64\AODDriver.sys;c:\program files\ASUS\GPU Boost Driver\amd64\AODDriver.sys [x]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]

R3 cpuz136;cpuz136;c:\windows\TEMP\cpuz136\cpuz136_x64.sys;c:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]

R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [x]

R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]

R3 WatAdminSvc;Serviço de Tecnologias de Ativação do Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

R3 X6va012;X6va012;c:\windows\SysWOW64\Drivers\X6va012;c:\windows\SysWOW64\Drivers\X6va012 [x]

S0 aswRvrt;aswRvrt; [x]

S0 aswVmm;aswVmm; [x]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]

S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [x]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]

S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]

S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]

S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]

S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]

S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]

S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-05-25 02:26 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.94\Installer\chrmstp.exe

.

Conteúdo da pasta 'Tarefas Agendadas'

.

2013-06-04 c:\windows\Tasks\Adobe Flash Player Updater.job

• c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-13 18:06]

.

2013-06-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-13 05:15]

.

2013-06-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-13 05:15]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2012-10-01 23:37 2322576 ----a-w- c:\progra~1\MICROS~2\OFFICE15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2012-10-01 23:37 2322576 ----a-w- c:\progra~1\MICROS~2\OFFICE15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2012-10-01 23:37 2322576 ----a-w- c:\progra~1\MICROS~2\OFFICE15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-01-29 10038304]

"Chew7Hale"="c:\windows\System32\hale.exe" [2013-03-13 2169856]

.

------- Scan Suplementar -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://search.orbitdownloader.com

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: &Download by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/201

IE: &Enviar para o OneNote - c:\progra~1\MICROS~2\Office15\ONBttnIE.dll/105

IE: &Grab video by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/204

IE: Do&wnload selected by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/203

IE: Down&load all by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/202

IE: E&xportar para o Microsoft Excel - c:\progra~1\MICROS~2\Office15\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.1.1

Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL

.

• - - - ORFÃOS REMOVIDOS - - - -

.

Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe

Notify-SDWinLogon - SDWinLogon.dll

.

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\AIDA64Driver]

"ImagePath"="\??\c:\program files (x86)\FinalWire\AIDA64 Extreme Edition\kerneld.x64"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va012]

"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va012"

.

--------------------- CHAVES DO REGISTRO BLOQUEADAS ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Tempo para conclusão: 2013-06-04 00:21:33

ComboFix-quarantined-files.txt 2013-06-04 03:21

.

Pré-execução: 877.199.507.456 bytes disponíveis

Pós execução: 877.049.569.280 bytes disponíveis

.

• - End Of File - - 9FF7F0230497AC35301D3F9D6B15EC9B

O PC está limpo.

:seta: Renomei o Combofix para Uninstall

*Execute-o, aguarde a mensagem ComboFix foi desinstalado e clique [OK]

http://imgbox.com/abxm6gHv'>/applications/core/interface/imageproxy/imageproxy.php?img=http://t.imgbox.com/abxm6gHv.jpg&key=c185b58dddc50bcb66154bc4e53434633105834c69ece962aee5db9c8f23f6ba" alt="abxm6gHv.jpg" />

*Delete o arquivo C:\Combofix.txt

Um abraço....:bye:

PROBLEMA RESOLVIDO

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.