Usamos cookies para medir audiência e melhorar sua experiência. Você pode aceitar ou recusar a qualquer momento. Veja sobre o iMasters.
Olá pessoal sou novo aqui no iMasters, e queria pedir ajuda : Meu desktop e os icones SUMIRAM!!!!!!!!!!!!!! :wacko:
Tudo começou num domingo eu tava fazendo um trabalho e desliguei o PC. No dia seguinte quando eu fui ligar...
o desktop e os icones tinham sumido. Só da pra abrir pelo Gerenciador de Tarefas Ctrl+Alt+Del.
Já baixei o avast, e uma lista de outros mais não consigo resolver o problema. Ja restaurei o sistema e nada.
Já vi varios casos igual ao meu que tiveram solução.
Não sei se ajuda mas tá aqui o meu log do HiJackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:33:13, on 23/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe
C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Arquivos de programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Arquivos de programas\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe
C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe
C:\Arquivos de programas\Arquivos comuns\Ahead\lib\NMBgMonitor.exe
C:\Arquivos de programas\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\explorer.exe
C:\Arquivos de programas\Spybot - Search & Destroy\SpybotSD.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\explorer.exe
C:\Arquivos de programas\MSN Messenger\msnmsgr.exe
C:\Arquivos de programas\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Hijack\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://br.rd.yahoo.com/customize/ycomp/def...://br.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Arquivos de programas\Yahoo!\Companion\Installs\cpn1\yt.dll
R3 - URLSearchHook: SrchHook Class - {F4F10C1D-87C7-404A-B4B3-000000000000} - (no file)
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Arquivos de programas\free-downloads.net\tbfree.dll
O1 - Hosts: <HTML><HEAD><TITLE>Yahoo!</TITLE>
O1 - Hosts: </HEAD><BODY BGCOLOR=white vlink=blue>O1 - Hosts: <!-- following code added by server. PLEASE REMOVE -->
O1 - Hosts: <!-- preceding code added by server. PLEASE REMOVE --><center>
O1 - Hosts: <table width=675 cellpadding=0 cellspacing=2 border=0>
O1 - Hosts: <tr>
O1 - Hosts: <td width=1% valign=top><a href="[http://www.yahoo.com">http://us.i1.yimg.com/us.yimg.com/i/yahoo.gif width=147 height=31 border=0 alt="Yahoo"></a></td>
O1 - Hosts: <td align=right><font face=arial size=-1><a href="/404/*http://www.yahoo.com">Yahoo!</a> - <a href="[http://help.yahoo.com">Help](http://search.yahoo.com/search%22)
O1 - Hosts: <input size="14" name="p" value="">
O1 - Hosts: <input type="SUBMIT" value="Search">
O1 - Hosts: <font face=arial size=-2> <a href="[http://search.yahoo.com/search/options?p=">advanced](http://search.yahoo.com/search/options?p=%22) search</a> <a href="[http://buzz.yahoo.com">most](http://buzz.yahoo.com%22) popular</a></font>
O1 - Hosts: </form></td></tr></table>
O1 - Hosts: <table width=100% border=0 cellspacing=0 cellpadding=3 bgcolor=ffffff>
O1 - Hosts: <tr bgcolor=ccccff><td>
O1 - Hosts: <FONT face=arial size=+1>Yahoo! Web Hosting</font>
O1 - Hosts: </td></tr>
O1 - Hosts: <tr><td>
O1 - Hosts: <a href=http://webhosting.yahoo.com/ps/wh/prod/><img align=left src=http://us.i1.yimg.com/us.yimg.com/i/us/wh/gr/j_advan48.gif width=48 height=48 border=0 alt="Yahoo! Web Hosting"></a>
O1 - Hosts: <font face=arial size=-1>Yahoo! Web Hosting has <a href="[http://webhosting.yahoo.com/ps/wh/prod/">three](http://webhosting.yahoo.com/ps/wh/prod/%22) affordable plans</a> to meet your needs - starting at just $11.95.
O1 - Hosts: </td></tr>
O1 - Hosts: <tr><td align=right>
O1 - Hosts: <b><font face=arial size=-1><a href=http://webhosting.yahoo.com/ps/wh/prod/>Learn more...</a></font></b>
O1 - Hosts: </td></tr>
O1 - Hosts: </table>
O1 - Hosts: </td></tr></table>
O1 - Hosts: </td>
O1 - Hosts: <td width=1> </td>
O1 - Hosts: <td valign=top align=center width=445>O1 - Hosts: < script language="JavaScript" type="text/javascript"
O1 - Hosts: src="http://adserver.yahoo.com/a?f=76001284&p=geocities&l=MON&c=sr" >
O1 - Hosts: < /script >
O1 - Hosts: <noscript>
O1 - Hosts: <iframe
O1 - Hosts: src="http://adserver.yahoo.com/a?f=76001284&p=geocities&l=MON&c=sh&bg=ffffff"
O1 - Hosts: width=470 height=580 marginwidth=0 marginheight=0 hspace=0
O1 - Hosts: vspace=0 frameborder=0 scrolling=no>
O1 - Hosts: </iframe>
O1 - Hosts: </noscript>
O1 - Hosts: </td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: <br>
O1 - Hosts: <table cellpadding=0 cellspacing=0 border=0 width=675><tr><td bgcolor=a0b8c8>
O1 - Hosts: <table cellpadding=1 cellspacing=1 border=0 width="100%">
O1 - Hosts: <tr valign=top bgcolor=ffffff><td align=center>
O1 - Hosts: <font face=arial size=-2><A
O1 - Hosts: href="[http://rd.yahoo.com/footer/?http://address.yahoo.com/">Address](http://rd.yahoo.com/footer/?http://address.yahoo.com/%22) Book</A> · <AO1 - Hosts: href="http://rd.yahoo.com/footer/?http://alerts.yahoo.com/">Alerts · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://auctions.yahoo.com/">Auctions · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://billpay.yahoo.com/">Bill Pay</A> · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://bookmarks.yahoo.com/">Bookmarks · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://briefcase.yahoo.com/">Briefcase · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://broadcast.yahoo.com/">Broadcast · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://calendar.yahoo.com/">Calendar · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://chat.yahoo.com/">Chat · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://classifieds.yahoo.com/">Classifieds · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://clubs.yahoo.com/">Clubs · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://companion.yahoo.com/">Companion · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://experts.yahoo.com/">Experts · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://games.yahoo.com/">Games · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://greetings.yahoo.com/">Greetings · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://geocities.yahoo.com/">Home Pages</A> · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://invites.yahoo.com/">Invites · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://mail.yahoo.com/">Mail · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://maps.yahoo.com/">Maps · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://members.yahoo.com/">Member Directory</A> · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://messenger.yahoo.com/">Messenger · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://my.yahoo.com/">My Yahoo!</A> · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://news.yahoo.com/">News · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://paydirect.yahoo.com/">PayDirect · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://people.yahoo.com/">People Search</A> · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://personals.yahoo.com/">Personals · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://photos.yahoo.com/">Photos · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://shopping.yahoo.com/">Shopping · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://sports.yahoo.com/">Sports · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://finance.yahoo.com/">Stock Quotes</A> · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://tv.yahoo.com/">TV · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://travel.yahoo.com/">Travel · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://weather.yahoo.com/">Weather · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://www.yahooligans.com/">Yahooligans · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://yp.yahoo.com/">Yellow Pages</A> · <A
O1 - Hosts: href="http://rd.yahoo.com/footer/?http://docs.yahoo.com/docs/family/more.html">more...
O1 - Hosts: </font></td></tr></table></td></tr></table>
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\ARQUIV~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\ARQUIV~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Arquivos de programas\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de programas\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Extensão do Navegador - {937833BF-40FC-46BC-806F-34201374A953} - C:\WINDOWS\system32\wgapre32.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\arquivos de programas\google\googletoolbar2.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Arquivos de programas\free-downloads.net\tbfree.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\ARQUIV~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\arquivos de programas\google\googletoolbar2.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Arquivos de programas\free-downloads.net\tbfree.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Arquivos de programas\Styler\TB\StylerTB.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Arquivos de programas\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kav] "C:\Arquivos de programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MRT] "C:\WINDOWS\system32\MRT.exe" /R
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Arquivos de programas\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [lphc943j0e73j] C:\WINDOWS\system32\lphc943j0e73j.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast!] "C:\Arquivos de programas\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\RunOnce: [spybotDeletingA2682] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\BlockedCookies.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingC2222] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\BlockedCookies.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingA9101] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\DirectoryDefinition.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingC6453] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\DirectoryDefinition.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingA3721] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\ENoSignature.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingC1936] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\ENoSignature.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingA705] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\ExeDefinition.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingC2136] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\ExeDefinition.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingA797] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\FileDefinition.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingC8245] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\FileDefinition.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingA3934] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\RegistryDefinition.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingC3310] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\RegistryDefinition.dat"
O4 - HKLM\..\RunOnce: [spybotDeletingA3866] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\Quarantine\Quarantined files will be placed here.txt"
O4 - HKLM\..\RunOnce: [spybotDeletingC2876] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\Quarantine\Quarantined files will be placed here.txt"
O4 - HKLM\..\RunOnce: [spybotDeletingA5014] command /c del "C:\Arquivos de programas\MyWebSearch\bar\1.bin\M3SRCHMN.EXE_old"
O4 - HKLM\..\RunOnce: [spybotDeletingC5793] cmd /c del "C:\Arquivos de programas\MyWebSearch\bar\1.bin\M3SRCHMN.EXE_old"
O4 - HKLM\..\RunOnce: [spybotDeletingA6117] command /c del "C:\Arquivos de programas\MyWebSearch\bar\1.bin\MWSBAR.DLL_old"
O4 - HKLM\..\RunOnce: [spybotDeletingC2724] cmd /c del "C:\Arquivos de programas\MyWebSearch\bar\1.bin\MWSBAR.DLL_old"
O4 - HKLM\..\RunOnce: [spybotSnD] "C:\Arquivos de programas\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKLM\..\RunOnce: [*Restore] C:\WINDOWS\system32\restore\rstrui.exe -i
O4 - HKCU\..\Run: [ViOrb] C:\Arquivos de programas\ViOrb\ViOrb.exe
O4 - HKCU\..\Run: [VisualTaskTips] C:\Arquivos de programas\VisualTaskTips\VisualTaskTips.exe
O4 - HKCU\..\Run: [NitroPC] "C:\Arquivos de programas\NitroPC\NitroPC.exe" -minimized
O4 - HKCU\..\Run: [LClock] C:\Arquivos de programas\LClock\lclock.exe
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [kava] C:\WINDOWS\system32\kavo.exe
O4 - HKCU\..\Run: [ViStart] C:\Arquivos de programas\ViStart\ViStart
O4 - HKCU\..\Run: [viwc] C:\WINDOWS\system32\viwc.exe
O4 - HKCU\..\Run: [shockAero] C:\Documents and Settings\Casa\Meus documentos\ShockAero\ShockAero.exe
O4 - HKCU\..\Run: [PSwitch] C:\Arquivos de programas\Proxy Switcher Standard\ProxySwitcher.exe
O4 - HKCU\..\Run: [CMS_RSChecker] "D:\RS FAN v1.1.exe" -m
O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Arquivos de programas\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Arquivos de programas\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [spybotDeletingB3559] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\BlockedCookies.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingD8073] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\BlockedCookies.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingB9224] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\DirectoryDefinition.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingD9035] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\DirectoryDefinition.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingB1167] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\ENoSignature.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingD5612] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\ENoSignature.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingB9082] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\ExeDefinition.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingD2994] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\ExeDefinition.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingB4766] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\FileDefinition.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingD7262] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\FileDefinition.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingB4596] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\RegistryDefinition.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingD616] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\RegistryDefinition.dat"
O4 - HKCU\..\RunOnce: [spybotDeletingB4120] command /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\Quarantine\Quarantined files will be placed here.txt"
O4 - HKCU\..\RunOnce: [spybotDeletingD1353] cmd /c del "C:\Documents and Settings\Casa\Dados de aplicativos\AntiSpywareDAT\Quarantine\Quarantined files will be placed here.txt"
O4 - HKCU\..\RunOnce: [spybotDeletingB1355] command /c del "C:\Arquivos de programas\MyWebSearch\bar\1.bin\M3SRCHMN.EXE_old"
O4 - HKCU\..\RunOnce: [spybotDeletingD5945] cmd /c del "C:\Arquivos de programas\MyWebSearch\bar\1.bin\M3SRCHMN.EXE_old"
O4 - HKCU\..\RunOnce: [spybotDeletingB8714] command /c del "C:\Arquivos de programas\MyWebSearch\bar\1.bin\MWSBAR.DLL_old"
O4 - HKCU\..\RunOnce: [spybotDeletingD5925] cmd /c del "C:\Arquivos de programas\MyWebSearch\bar\1.bin\MWSBAR.DLL_old"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Styler.lnk = ?
O4 - Startup: Thoosje Vista Sidebar.lnk = C:\Arquivos de programas\Vista Sidebar\sidebar.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Arquivos de programas\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Windows Update.exe
O8 - Extra context menu item: &Search - ?p=ZCxdm451YYBR
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Arquivos de programas\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: Add to AMV Converter... - C:\Arquivos de programas\MP3 Player Utilities 4.04\AMVConverter\grab.html
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Arquivos de programas\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Antivírus para Web - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Arquivos de programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARQUIV~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARQUIV~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\ARQUIV~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\ARQUIV~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Arquivos de programas\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Arquivos de programas\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\ARQUIV~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Arquivos de programas\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia. - C:\Arquivos de programas\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Arquivos de programas\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
--
End of file - 23288 bytes
Carregando comentários...