[Arquivado] Vundo Variant impossível de tirar

[jotaeo 0]

Senhores,

Tentei seguir algumas dicas aqui, mas não consegui. Eu rodo por várias vezes o superantispyware e acusa Vundu variant e trojan winfixer, e os elimino, mas continua persistindo no computador, que fica travando qdo estou do IE e desaparece meus icones do dektop.

Segue meu log e obrigado.

 

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &http://home.microsoft.com/intl/br/access/allinone.asp

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Arquivos de programas\Mindjet\MindManager 6\Mm6InternetExplorer.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [skyTel] SkyTel.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [avast!] C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [RemoteControl] "C:\Arquivos de programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [inCD] C:\Arquivos de programas\Ahead\InCD\InCD.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [LGODDFU] "C:\Arquivos de programas\lg_fwupdate\fwupdate.exe" blrun

O4 - HKLM\..\Run: [MMReminderService] C:\Arquivos de programas\Mindjet\MindManager 6\MMReminderService.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Arquivos de programas\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Arquivos de programas\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: WinZip Quick Pick.lnk = C:\Arquivos de programas\WinZip\WZQKPICK.EXE

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Arquivos de programas\Mindjet\MindManager 6\Mm6InternetExplorer.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)

O12 - Plugin for .spop: C:\Arquivos de programas\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownlo.../sysreqlab2.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Arquivos de programas\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: Sony SPTI Service for DVE (ICDSPTSV) - Sony Corporation - C:\WINDOWS\system32\IcdSptSv.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Arquivos de programas\Ahead\InCD\InCDsrv.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

[jotaeo 0]

gostaria de complementar...rodei o combofix e log ficou assim:

 

ComboFix 07-12-02.6 - user 2007-12-05 1:07:09.2 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1046.18.564 [GMT -2:00]

Executando de: E:\ComboFix.exe

.

 

((((((((((((((((((((((( Ficheiros criados de 2007-11-05 to 2007-12-05 ))))))))))))))))))))))))))))))))

.

 

2007-12-05 00:32 . 2007-12-05 00:42 <DIR> d-------- C:\HijackThis

2007-12-04 23:55 . 2007-12-05 00:17 <DIR> d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Spybot - Search & Destroy

2007-12-04 23:41 . 2007-12-05 00:54 7,555 --ahs---- C:\WINDOWS\system32\ttstv.ini

2007-12-04 23:41 . 2007-12-05 00:51 7,356 --ahs---- C:\WINDOWS\system32\ttstv.ini2

2007-12-04 22:56 . 2007-12-04 22:56 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab

2007-12-04 22:56 . 2007-12-04 22:56 <DIR> d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Kaspersky Lab

2007-12-04 00:10 . 2007-12-04 08:14 7,821 --ahs---- C:\WINDOWS\system32\aybeg.ini

2007-12-04 00:10 . 2007-12-04 08:13 7,622 --ahs---- C:\WINDOWS\system32\aybeg.ini2

2007-12-04 00:06 . 2007-12-04 23:37 <DIR> d-------- C:\VundoFix Backups

2007-12-03 23:35 . 2007-12-03 23:35 <DIR> d-------- C:\WINDOWS\system32\config\systemprofile\Configurações locais

2007-12-03 23:35 . 2007-12-03 23:35 <DIR> d-------- C:\Documents and Settings\user\Configurações locais

2007-12-03 23:35 . 2007-12-03 23:35 <DIR> d-------- C:\Documents and Settings\NetworkService\Configurações locais

2007-12-03 23:35 . 2007-12-03 23:35 <DIR> d-------- C:\Documents and Settings\LocalService\Configurações locais

2007-12-03 23:35 . 2007-12-03 23:35 <DIR> d-------- C:\Documents and Settings\Default User\Configurações locais

2007-12-03 09:16 . 2007-12-03 09:16 37,376 --a------ C:\WINDOWS\system32\opnmlmk.dll

2007-12-03 09:14 . 2007-12-03 09:14 <DIR> d-------- C:\Arquivos de programas\Arquivos comuns\SolidDocuments

2007-12-03 09:14 . 2002-12-28 10:33 20,569 --a------ C:\WINDOWS\system32\pxc25pm.dll

2007-12-03 08:54 . 2007-12-03 08:54 <DIR> d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Lavasoft

2007-12-03 08:54 . 2007-12-03 08:54 <DIR> d-------- C:\Arquivos de programas\Lavasoft

2007-12-03 08:18 . 2007-12-03 08:18 73,280 --a------ C:\WINDOWS\system32\eaofrtfd.dll

2007-11-30 01:07 . 2007-11-30 01:07 37,376 --a------ C:\WINDOWS\system32\iifccya.dll

2007-11-30 01:06 . 2007-11-30 01:06 37,376 --a------ C:\WINDOWS\system32\khfccyx.dll

2007-11-29 22:53 . 2007-11-30 18:30 <DIR> d-------- C:\Arquivos de programas\Arquivos comuns\SolidDocuments(4)

2007-11-29 21:56 . 2007-11-29 21:56 143 --a------ C:\WINDOWS\system32\mcrh.tmp

2007-11-21 21:42 . 2001-08-17 21:56 7,552 --a------ C:\WINDOWS\system32\drivers\SONYPVU1.SYS

2007-11-21 21:42 . 2001-08-17 21:56 7,552 --a--c--- C:\WINDOWS\system32\dllcache\sonypvu1.sys

2007-11-13 22:49 . 2007-11-13 23:22 <DIR> d--h----- C:\Arquivos de programas\Scpad

2007-11-13 22:46 . 2002-02-18 07:34 313,856 --a------ C:\WINDOWS\system32\dx3j.dll

2007-11-13 22:46 . 2002-02-18 10:22 171,280 --a------ C:\WINDOWS\system32\jit.dll

2007-11-13 22:46 . 2002-02-18 10:22 139,536 --a------ C:\WINDOWS\system32\javaee.dll

2007-11-13 22:46 . 2002-02-18 10:23 46,352 --a------ C:\WINDOWS\setdebug.exe

2007-11-13 22:46 . 2002-02-18 07:55 7,315 --a------ C:\WINDOWS\system32\javasup.vxd

2007-11-13 22:46 . 2002-02-18 07:35 6,550 --a------ C:\WINDOWS\jautoexp.dat

2007-11-06 00:24 . 2007-11-12 21:55 <DIR> d-------- C:\Arquivos de programas\SONY

2007-11-05 22:31 . 2007-11-12 21:55 <DIR> d-------- C:\Arquivos de programas\vso(2)

 

.

((((((((((((((((((((((((((((((((((((( Relat¢rio Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2007-12-05 03:09 --------- d-----w C:\Arquivos de programas\lg_fwupdate

2007-12-05 03:01 --------- d-----w C:\Arquivos de programas\SUPERAntiSpyware

2007-12-05 02:33 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\SolidDocuments

2007-12-04 14:41 --------- d-----w C:\Arquivos de programas\Soliddocuments

2007-12-03 10:53 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Wise Installation Wizard

2007-12-03 10:19 --------- d-----w C:\Arquivos de programas\CCleaner

2007-12-01 03:42 --------- d-----w C:\Arquivos de programas\eMule

2007-11-28 16:02 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\uTorrent

2007-11-14 00:46 155,995 ----a-w C:\WINDOWS\java\Packages\08WNV71Z.ZIP

2007-11-12 23:55 --------- d--h--w C:\Arquivos de programas\InstallShield Installation Information

2007-11-12 23:55 --------- d-----w C:\Arquivos de programas\Kazaa Lite K++(2)

2007-11-12 23:55 --------- d-----w C:\Arquivos de programas\AC3Filter

2007-11-07 09:19 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\Vso

2007-11-02 00:59 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\Kazaa Lite

2007-10-31 00:07 --------- d-----w C:\Arquivos de programas\uTorrent

2007-10-30 02:53 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\SolidDocuments

2007-10-26 22:21 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\Shareaza

2007-10-26 22:21 --------- d-----w C:\Arquivos de programas\Shareaza

2007-10-26 04:22 --------- d-----w C:\Arquivos de programas\Arquivos comuns\SolidDocuments(3)

2007-10-25 11:32 --------- d-----w C:\Arquivos de programas\K-Lite Codec Pack

2007-10-25 09:44 --------- d-----w C:\Arquivos de programas\MSXML 4.0

2007-10-25 04:08 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\Media Player Classic

2007-10-25 04:07 --------- d-----w C:\Arquivos de programas\Real Alternative

2007-10-25 04:07 --------- d-----w C:\Arquivos de programas\Media Player Classic

2007-10-25 03:03 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\SUPERAntiSpyware.com

2007-10-25 03:03 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\SUPERAntiSpyware.com

2007-10-25 02:31 --------- d-----w C:\Arquivos de programas\APDFPRP

2007-10-24 22:59 19,576 ----a-w C:\Documents and Settings\user\Dados de aplicativos\GDIPFONTCACHEV1.DAT

2007-10-24 19:49 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\CyberLink

2007-10-24 19:49 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\CyberLink

2007-10-24 16:33 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\Mindjet

2007-10-24 16:33 --------- d-----w C:\Arquivos de programas\Tracker Software

2007-10-24 16:33 --------- d-----w C:\Arquivos de programas\Mindjet

2007-10-24 15:10 --------- d-----w C:\Arquivos de programas\Arquivos comuns\InstallShield

2007-10-24 15:06 --------- d-----w C:\Arquivos de programas\WinZip Self-Extractor

2007-10-24 14:55 --------- d-----w C:\Arquivos de programas\Arquivos comuns\SolidDocuments(2)

2007-10-23 21:13 --------- d-----w C:\Arquivos de programas\Intelligent Converters

2007-10-21 13:47 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Adobe

2007-10-20 00:05 --------- d-----w C:\Arquivos de programas\MSN Messenger

2007-10-19 21:06 --------- d-----w C:\Arquivos de programas\SystemRequirementsLab

2007-10-19 21:05 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\nView_Profiles

2007-10-19 20:55 --------- d-----w C:\Documents and Settings\user\Dados de aplicativos\InterTrust

2007-10-19 20:51 --------- d-----w C:\Arquivos de programas\Ahead

2007-10-19 20:50 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Ahead

2007-10-19 20:49 --------- d-----w C:\Arquivos de programas\Alwil Software

2007-10-19 20:48 --------- d-----w C:\Arquivos de programas\CyberLink

2007-10-19 20:41 --------- d-----w C:\Arquivos de programas\Attansic

2007-10-19 20:38 --------- d-----w C:\Arquivos de programas\Realtek

2007-10-19 20:37 315,392 ----a-w C:\WINDOWS\HideWin.exe

2007-10-19 20:35 --------- d-----w C:\Arquivos de programas\Intel

2007-10-19 20:29 --------- d-----w C:\Arquivos de programas\microsoft frontpage

2007-10-19 20:28 --------- d-----w C:\Arquivos de programas\Serviços on-line

2007-10-19 20:27 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Serviços

2007-10-19 20:27 --------- d-----w C:\Arquivos de programas\Arquivos comuns\MSSoap

2007-10-19 17:22 --------- d-----w C:\Arquivos de programas\Arquivos comuns\SpeechEngines

2007-10-19 17:22 --------- d-----w C:\Arquivos de programas\Arquivos comuns\ODBC

2004-10-01 18:00 40,960 ----a-w C:\Arquivos de programas\Uninstall_CDS.exe

.

 

((((((((((((((((((((((((((((( snapshot@2007-12-03_23.35.16.54 )))))))))))))))))))))))))))))))))))))))))

.

+ 2005-05-24 14:27:16 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll

+ 2007-08-29 17:47:20 94,208 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe

+ 2007-08-29 17:49:54 950,272 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll

+ 2007-12-05 03:09:00 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_604.dat

.

(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Nota* entradas vazias & leg¡timas por defeito nÆo sÆo mostradas.

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{20748116-293F-4F5B-830D-193891B8F25B}]

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8E3FBDE2-7DBD-4040-85D9-29BBC559C129}]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:45]

"SUPERAntiSpyware"="C:\Arquivos de programas\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-02-27 12:39]

"PowerBar"="C:\Arquivos de programas\CyberLink DVD Solution\Multimedia Launcher\PowerBar.exe" []

"SpybotSD TeaTimer"="C:\Arquivos de programas\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDCPL"="RTHDCPL.EXE" [2007-01-30 08:54 C:\WINDOWS\RTHDCPL.exe]

"SkyTel"="SkyTel.EXE" [2006-05-16 08:04 C:\WINDOWS\SkyTel.exe]

"NvCplDaemon"="RUNDLL32.exe" [2004-08-04 01:45 C:\WINDOWS\system32\rundll32.exe]

"nwiz"="nwiz.exe" [2007-05-21 05:31 C:\WINDOWS\system32\nwiz.exe]

"NvMediaCenter"="RUNDLL32.exe" [2004-08-04 01:45 C:\WINDOWS\system32\rundll32.exe]

"avast!"="C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 08:06]

"RemoteControl"="C:\Arquivos de programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" []

"InCD"="C:\Arquivos de programas\Ahead\InCD\InCD.exe" [2006-07-12 07:58]

"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 12:50]

"LGODDFU"="C:\Arquivos de programas\lg_fwupdate\fwupdate.exe" [2007-10-19 18:56]

"pdfSaver3"="" []

"MMReminderService"="C:\Arquivos de programas\Mindjet\MindManager 6\MMReminderService.exe" [2005-09-13 03:02]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 01:45]

 

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Inicializar\

Microsoft Office.lnk - C:\Arquivos de programas\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04]

WinZip Quick Pick.lnk - C:\Arquivos de programas\WinZip\WZQKPICK.EXE [2007-10-24 13:00:27]

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]

"{A3717295-941D-416F-9384-ED1736729F1C}"= C:\Arquivos de programas\Scpad\scpLIB.dll [2007-03-27 01:29 128512]

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Arquivos de programas\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

"CompIBBrd"= {A3717295-941D-416F-9384-ED1736729F1C} - C:\Arquivos de programas\Scpad\scpLIB.dll [2007-03-27 01:29 128512]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

C:\Arquivos de programas\SUPERAntiSpyware\SASWINLO.dll 2007-02-27 12:39 282624 C:\Arquivos de programas\SUPERAntiSpyware\SASWINLO.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\byxxwww]

byxxwww.dll

 

R3 AtcL002;NDIS Miniport Driver for Attansic L2 Fast Ethernet Controller;C:\WINDOWS\system32\DRIVERS\atl02_xp.sys

 

.

**************************************************************************

 

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2007-12-05 01:09:20

Windows 5.1.2600 Service Pack 2 NTFS

 

Procurando processos ocultos ...

 

Procurando entradas auto inicializ veis ocultas ...

 

Procurando ficheiros ocultos ...

 

Varredura completada com sucesso

Ficheiros ocultos: 0

 

**************************************************************************

.

Tempo para conclusÆo: 2007-12-05 1:09:38 - machine was rebooted

C:\ComboFix2.txt ... 2007-11-08 00:08

.

--- E O F ---

[DigRam 144]

Boa Tarde jotaeo!

 

>@< Configure o Windows para que mostre: Ver todos os Arquivos,até os ocultos!

>@< Desabilite as proteções residentes de AntiVírus e AntiSpywares!

>@< Faça o download da EliStarA.

>@< Baixe-a para o Disco Local-C e crie uma pasta para a ferramenta,estabelecendo um caminho para o Desktop! ( Atalho. )

>@< Faça o download do ELINOTIF.DLL.

>@< Salve-o no interior da pasta criada para EliStarA!

>@< Faça o download do EliTriIP.

>@< Baixe-a para o Desktop!

>@< Ps: Ambas,as ferramentas,estarão na página descargas ( Descargas > Utilidades SATINFO ).

>@< Selecione as ferramentas ( Uma por vez! ) e clique ao pé da página,no botão Descargar Eli....

>@< Faça o download do Clean.

>@< Salve-o no Disco Local-C e descompacte-o aí mesmo,enviando o executável para o Desktop! ( Atalho. )

>@< O executável é um ícone denominado: clean.cmd.

>@< Reinicie o computador e entre em Modo de Segurança.

>@< Execute,primeiro,a ferramenta: EliStartA.

>@< Vá ao seu ícone e execute-a!

>@< Aceite as condições propostas e aguarde o término do scan.Aguarde!Pois vai demorar um pouco para concluir a varredura do PC.

>@< Terminando,execute a ferramenta EliTriIP.

>@< O scan desta ferramenta é mais rápido!

>@< Terminando,execute o programa de limpeza profunda ( clean ) com um duplo clique no seu executável.

>@< Abrir-se-á um prompt com três opções: Escolha o dois ( 2 )!

>@< Aperte Enter! >> Aperte Enter,novamente! >> Aguarde!

>@< Aperte Enter,novamente!

>@< Surgirá um relatório ( rapport_clean ),que voçê deverá copiar e postar para análise.

______________________________

 

>@< Poste o relatório infoSAT.txt que está na raíz C:\ ( Disco Local-C ) + rapport_clean.

>@< Poste,também,um nôvo Log do HijackThis,feito em Modo Normal,na sua resposta.

>@< Ps: A ferramenta EliStarA,deletará (Opcional! ) a sua página inicial!Posteriormente,voçê à configurará novamente.

 

Abraços!

[Mário Monteiro 179]

Tópico Arquivado

 

Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado.

 

Caso você seja o autor do tópico e quer reabrir, envie uma mensagem privada para um moderador da área juntamente com o link para este tópico e explique o motivo da reabertura.