[Arquivado] Retirando CID do PC

BENTO26 · Dezembro 26, 2008

TA AEW O RELATORIO

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 09:56:52, on 26/12/2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\System32\snmp.exe

C:\WINDOWS\system32\svchost.exe

C:\ARQUIV~1\SPEEDB~1\VideoAcceleratorService.exe

C:\WINDOWS\system32\VTTimer.exe

C:\Arquivos de programas\Java\jre1.6.0_07\bin\jusched.exe

C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe

C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE

C:\ARQUIV~1\AVG\AVG8\avgrsx.exe

C:\ARQUIV~1\AVG\AVG8\avgemc.exe

C:\Arquivos de Programas\Mozilla Firefox\firefox.exe

C:\ARQUIV~1\FREEDO~1\fdm.exe

C:\ARQUIV~1\SPEEDB~1\VideoAcceleratorEngine.exe

C:\Arquivos de Programas\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com.br/0SEPTBR/SAOS01?FORM=TOOLBR

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com.br/0SEPTBR/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.baixaki.com.br/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://farejador.ig.com.br/ie/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://farejador.ig.com.br

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://farejador.ig.com.br/ie/

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com.br/0SEPTBR/SAOS01?FORM=TOOLBR

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R3 - URLSearchHook: Barra de Ferramentas do Yahoo! com bloqueador de pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)

O2 - BHO: (no name) - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - (no file)

O2 - BHO: Google Web Accelerator Helper - {69A87B7D-DE56-4136-9655-716BA50C19C7} - C:\Arquivos de programas\Google\Web Accelerator\GoogleWebAccToolbar.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de programas\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\arquivos de programas\google\googletoolbar2.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Arquivos de programas\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll

O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Arquivos de programas\Free Download Manager\iefdm2.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\arquivos de programas\google\googletoolbar2.dll

O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Arquivos de programas\Google\Web Accelerator\GoogleWebAccToolbar.dll

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Arquivos de programas\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [RemoteControl] "C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [VTPreset] VTPreset.exe

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [TkBellExe] "C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [QuickTime Task] "C:\Arquivos de programas\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [1 mags 16 more] C:\Documents and Settings\All Users\Dados de aplicativos\Admin Inter 1 Mags\Error view.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Baixar com o FDM - file://C:\Arquivos de programas\Free Download Manager\dllink.htm

O8 - Extra context menu item: Baixar tudo com o FDM - file://C:\Arquivos de programas\Free Download Manager\dlall.htm

O8 - Extra context menu item: Download selecionado pelo FDM - file://C:\Arquivos de programas\Free Download Manager\dlselected.htm

O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Arquivos de programas\Free Download Manager\dlfvideo.htm

O8 - Extra context menu item: Translate with &Babylon - res://C:\Arquivos de programas\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O14 - IERESET.INF: START_PAGE_URL=http://www.positivoinformatica.com.br/

O16 - DPF: {0CBF7EDC-17EC-442C-8AE9-5E804707B6CA} (NeffyClient Class) - http://dist.cdnetworks.co.kr/cdndist/neffy/Neffy.cab

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.mail.live.com/mail/w1/resources/MSNPUpld.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1164887255703

O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://gimme-three-wishes.spaces.live.com/...ad/MsnPUpld.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/in...l/installer.exe

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Arquivos de programas\AVG\AVG8\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Arquivos de programas\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: Adobe LM Service - Adobe Systems - C:\Arquivos de programas\Arquivos comuns\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\ARQUIV~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Arquivos de Programas\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\ARQUIV~1\SPEEDB~1\VideoAcceleratorService.exe

O24 - Desktop Component 0: (no name) - file:///C:/Arquivos%20de%20Programas/Games/Atrativa/SabreWing%202/WEB/loading.gif

--

End of file - 9135 bytes

MGuitar · Dezembro 26, 2008

- Faça download do Lop S&D e salve-o no desktop;

● Para instalá-lo, na primeira tela escolha a opção "Je suis d'accord avec..." e clique em Suivant, depois em Quitter.

● Na sua área de trabalho irá aparecer o ícone do Lop S&D. Clique sobre ele.

● Dê um duplo clique no Lop S&D, Na janela que abrir pressione a tecla P e tecle Enter;

● Na próxima tela pressione o numero 2 e tecle Enter;

● Sua tela irá piscar. Isso é normal. Aguarde até que seja gerado um relatório.

Poste este log do Lop S&D aqui, juntamente com um novo log do HijackThis.

BENTO26 · Dezembro 29, 2008

1) RELATORIO LOP S&D

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3

X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.00GHz )

BIOS : Default System BIOS

USER : Maiko ( Administrator )

BOOT : Normal boot

Antivirus : AVG Anti-Virus Free 8.0 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total:76 Go (Free:27 Go)

D:\ (CD or DVD)

E:\ (CD or DVD)

G:\ (USB)

H:\ (USB)

I:\ (USB)

J:\ (USB)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )

Option : [2] ( seg 29/12/2008|18:32 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ REMOVIDOS

Deletado! - C:\WINDOWS\Tasks\AC3C6F37918BE0AB.job

Deletado! - C:\DOCUME~1\ALLUSE~1\DADOSD~1\Admin Inter 1 Mags\Error view.dat

Deletado! - C:\DOCUME~1\ALLUSE~1\DADOSD~1\Admin Inter 1 Mags\slow remote.exe

Deletado! - C:\DOCUME~1\Maiko\Cookies\maiko@www.lop[1].txt

Deletado! - C:\DOCUME~1\Maiko\Cookies\maiko@www.lop[2].txt

Deletado! - C:\DOCUME~1\Maiko\Cookies\maiko@www.lop[3].txt

Deletado! - C:\DOCUME~1\Maiko\Cookies\maiko@www.lop[4].txt

Deletado! - C:\DOCUME~1\Maiko\Cookies\maiko@www.lop[5].txt

Deletado! - C:\DOCUME~1\ALLUSE~1\DADOSD~1\Admin Inter 1 Mags

Deletado! - C:\Arquivos de programas\rdr4su~1

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Lista de pastas em DADOSD~1

[28/08/2008|17:11] C:\DOCUME~1\1\DADOSD~1\Adobe

[28/08/2008|17:15] C:\DOCUME~1\1\DADOSD~1\AdobeUM

[21/08/2006|17:54] C:\DOCUME~1\1\DADOSD~1\CyberLink

[28/08/2008|17:28] C:\DOCUME~1\1\DADOSD~1\Google

[01/03/2006|21:03] C:\DOCUME~1\1\DADOSD~1\Identities

[28/08/2008|17:36] C:\DOCUME~1\1\DADOSD~1\Macromedia

[28/08/2008|16:56] C:\DOCUME~1\1\DADOSD~1\Microsoft

[28/08/2008|17:44] C:\DOCUME~1\1\DADOSD~1\Real

[21/08/2006|17:54] C:\DOCUME~1\2\DADOSD~1\CyberLink

[19/10/2008|22:01] C:\DOCUME~1\2\DADOSD~1\Google

[01/03/2006|21:03] C:\DOCUME~1\2\DADOSD~1\Identities

[23/09/2008|15:40] C:\DOCUME~1\2\DADOSD~1\Microsoft

[23/09/2008|15:39] C:\DOCUME~1\2\DADOSD~1\Real

[16/10/2008|14:39] C:\DOCUME~1\2\DADOSD~1\WinRAR

[17/07/2008|20:38] C:\DOCUME~1\3\DADOSD~1\Adobe

[21/08/2006|17:54] C:\DOCUME~1\3\DADOSD~1\CyberLink

[18/06/2008|22:36] C:\DOCUME~1\3\DADOSD~1\Google

[01/03/2006|21:03] C:\DOCUME~1\3\DADOSD~1\Identities

[18/06/2008|22:39] C:\DOCUME~1\3\DADOSD~1\Macromedia

[20/08/2008|22:59] C:\DOCUME~1\3\DADOSD~1\Microsoft

[15/06/2008|10:52] C:\DOCUME~1\3\DADOSD~1\Real

[21/08/2006|17:54] C:\DOCUME~1\ADMINI~1\DADOSD~1\CyberLink

[01/03/2006|21:03] C:\DOCUME~1\ADMINI~1\DADOSD~1\Identities

[16/05/2008|20:05] C:\DOCUME~1\ADMINI~1\DADOSD~1\Microsoft

[02/04/2008|23:12] C:\DOCUME~1\ALLUSE~1\DADOSD~1\001

[02/06/2008|21:15] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Adobe

[16/12/2006|21:40] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Adobe Systems

[09/01/2007|18:29] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Age of Empires 3

[16/05/2008|20:07] C:\DOCUME~1\ALLUSE~1\DADOSD~1\avg8

[22/11/2008|23:20] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Babylon

[01/03/2006|22:11] C:\DOCUME~1\ALLUSE~1\DADOSD~1\CyberLink

[30/04/2007|21:54] C:\DOCUME~1\ALLUSE~1\DADOSD~1\DVD Shrink

[07/07/2008|08:15] C:\DOCUME~1\ALLUSE~1\DADOSD~1\EmTec

[29/04/2008|15:15] C:\DOCUME~1\ALLUSE~1\DADOSD~1\FreeDownloadManager.ORG

[21/12/2006|15:50] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Google

[12/12/2006|19:52] C:\DOCUME~1\ALLUSE~1\DADOSD~1\HP

[03/09/2006|11:47] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Kaspersky Anti-Virus Personal

[08/04/2008|20:05] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Kaspersky Lab Setup Files

[17/06/2008|10:53] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Lavasoft

[04/11/2008|18:29] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Messenger Plus!

[09/01/2007|18:26] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Microsoft

[09/07/2008|07:41] C:\DOCUME~1\ALLUSE~1\DADOSD~1\NVIDIA

[13/10/2008|21:50] C:\DOCUME~1\ALLUSE~1\DADOSD~1\PlayFirst

[26/05/2008|23:13] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Spybot - Search & Destroy

[14/02/2008|13:31] C:\DOCUME~1\ALLUSE~1\DADOSD~1\TEMP

[23/09/2006|19:02] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Windows Genuine Advantage

[04/02/2007|14:58] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Windows Live Toolbar

[09/04/2008|22:39] C:\DOCUME~1\ALLUSE~1\DADOSD~1\WLInstaller

[13/10/2008|21:50] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Zylom

[14/07/2008|12:49] C:\DOCUME~1\CONVID~1\DADOSD~1\Adobe

[21/08/2006|17:54] C:\DOCUME~1\CONVID~1\DADOSD~1\CyberLink

[27/06/2008|23:12] C:\DOCUME~1\CONVID~1\DADOSD~1\Google

[24/05/2008|19:20] C:\DOCUME~1\CONVID~1\DADOSD~1\HP

[01/03/2006|21:03] C:\DOCUME~1\CONVID~1\DADOSD~1\Identities

[25/06/2008|11:53] C:\DOCUME~1\CONVID~1\DADOSD~1\Macromedia

[22/05/2008|20:43] C:\DOCUME~1\CONVID~1\DADOSD~1\Microsoft

[20/07/2008|22:59] C:\DOCUME~1\CONVID~1\DADOSD~1\OpenOffice.org2

[22/05/2008|20:43] C:\DOCUME~1\CONVID~1\DADOSD~1\Real

[25/06/2008|11:54] C:\DOCUME~1\CONVID~1\DADOSD~1\Sun

[21/08/2006|17:54] C:\DOCUME~1\DEFAUL~1\DADOSD~1\CyberLink

[01/03/2006|21:03] C:\DOCUME~1\DEFAUL~1\DADOSD~1\Identities

[03/03/2006|11:29] C:\DOCUME~1\DEFAUL~1\DADOSD~1\Microsoft

[20/10/2008|19:38] C:\DOCUME~1\iii\DADOSD~1\Adobe

[22/11/2008|23:22] C:\DOCUME~1\iii\DADOSD~1\Babylon

[21/08/2006|17:54] C:\DOCUME~1\iii\DADOSD~1\CyberLink

[01/03/2006|21:03] C:\DOCUME~1\iii\DADOSD~1\Identities

[20/10/2008|19:38] C:\DOCUME~1\iii\DADOSD~1\Macromedia

[21/12/2008|14:11] C:\DOCUME~1\iii\DADOSD~1\Microsoft

[20/10/2008|19:37] C:\DOCUME~1\iii\DADOSD~1\Mozilla

[19/10/2008|13:04] C:\DOCUME~1\iii\DADOSD~1\Real

[16/05/2008|20:05] C:\DOCUME~1\LOCALS~1\DADOSD~1\Microsoft

[02/06/2008|20:54] C:\DOCUME~1\Maiko\DADOSD~1\Adobe

[02/06/2008|20:54] C:\DOCUME~1\Maiko\DADOSD~1\AdobeUM

[06/12/2006|20:33] C:\DOCUME~1\Maiko\DADOSD~1\ArcSoft

[14/11/2008|19:25] C:\DOCUME~1\Maiko\DADOSD~1\Babylon

[21/08/2006|17:54] C:\DOCUME~1\Maiko\DADOSD~1\CyberLink

[25/04/2008|21:50] C:\DOCUME~1\Maiko\DADOSD~1\DAEMON Tools

[27/12/2008|17:38] C:\DOCUME~1\Maiko\DADOSD~1\Free Download Manager

[05/04/2008|21:39] C:\DOCUME~1\Maiko\DADOSD~1\Go!Zilla

[13/01/2007|21:53] C:\DOCUME~1\Maiko\DADOSD~1\Google

[23/03/2008|10:44] C:\DOCUME~1\Maiko\DADOSD~1\Hamachi

[07/09/2006|10:27] C:\DOCUME~1\Maiko\DADOSD~1\Help

[13/12/2006|21:27] C:\DOCUME~1\Maiko\DADOSD~1\HP

[13/10/2008|21:50] C:\DOCUME~1\Maiko\DADOSD~1\Identities

[25/06/2008|22:41] C:\DOCUME~1\Maiko\DADOSD~1\Image Zone Express

[08/09/2008|15:25] C:\DOCUME~1\Maiko\DADOSD~1\LandoSoft

[27/11/2007|22:22] C:\DOCUME~1\Maiko\DADOSD~1\LimeWire

[30/10/2008|18:26] C:\DOCUME~1\Maiko\DADOSD~1\Lingoes

[10/12/2006|17:37] C:\DOCUME~1\Maiko\DADOSD~1\Macromedia

[30/04/2008|22:30] C:\DOCUME~1\Maiko\DADOSD~1\Media Player Classic

[16/05/2008|20:06] C:\DOCUME~1\Maiko\DADOSD~1\Microsoft

[09/12/2007|14:19] C:\DOCUME~1\Maiko\DADOSD~1\Microsoft Games

[03/06/2008|14:53] C:\DOCUME~1\Maiko\DADOSD~1\MMToolz

[17/06/2008|16:00] C:\DOCUME~1\Maiko\DADOSD~1\Mozilla

[01/05/2008|15:33] C:\DOCUME~1\Maiko\DADOSD~1\My Games

[11/12/2008|23:46] C:\DOCUME~1\Maiko\DADOSD~1\OpenOffice.org2

[16/12/2006|22:11] C:\DOCUME~1\Maiko\DADOSD~1\Opera

[09/04/2008|21:12] C:\DOCUME~1\Maiko\DADOSD~1\Orbit

[02/01/2007|10:18] C:\DOCUME~1\Maiko\DADOSD~1\Petroglyph

[13/10/2008|21:50] C:\DOCUME~1\Maiko\DADOSD~1\PlayFirst

[25/06/2008|16:44] C:\DOCUME~1\Maiko\DADOSD~1\Printer Info Cache

[07/05/2008|18:32] C:\DOCUME~1\Maiko\DADOSD~1\Real

[14/04/2007|18:32] C:\DOCUME~1\Maiko\DADOSD~1\Screenshot Sender

[31/07/2007|13:37] C:\DOCUME~1\Maiko\DADOSD~1\SecondLife

[16/12/2007|21:56] C:\DOCUME~1\Maiko\DADOSD~1\Sony Corporation

[19/10/2008|10:03] C:\DOCUME~1\Maiko\DADOSD~1\SpaceMonger

[04/09/2006|18:30] C:\DOCUME~1\Maiko\DADOSD~1\Sun

[08/10/2007|20:31] C:\DOCUME~1\Maiko\DADOSD~1\teamspeak2

[06/06/2008|22:51] C:\DOCUME~1\Maiko\DADOSD~1\VSRevoGroup

[14/08/2007|16:09] C:\DOCUME~1\Maiko\DADOSD~1\WinRAR

[13/10/2008|21:50] C:\DOCUME~1\Maiko\DADOSD~1\Zylom

[12/07/2008|10:56] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Adobe

[21/08/2006|17:54] C:\DOCUME~1\ME1FB0~1\DADOSD~1\CyberLink

[22/03/2008|10:50] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Go!Zilla

[05/04/2007|16:43] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Google

[06/02/2008|18:07] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Hamachi

[15/01/2008|12:21] C:\DOCUME~1\ME1FB0~1\DADOSD~1\HP

[01/03/2006|21:03] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Identities

[01/06/2007|09:00] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Image Zone Express

[31/05/2007|12:07] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Macromedia

[16/05/2008|20:05] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Microsoft

[12/12/2008|11:31] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Microsoft Games

[27/12/2008|12:57] C:\DOCUME~1\ME1FB0~1\DADOSD~1\OpenOffice.org2

[09/04/2008|09:43] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Orbit

[15/01/2008|12:51] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Real

[12/11/2007|18:39] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Sony Corporation

[10/07/2007|13:41] C:\DOCUME~1\ME1FB0~1\DADOSD~1\Sun

[13/08/2007|08:43] C:\DOCUME~1\ME1FB0~1\DADOSD~1\WinRAR

[16/05/2008|20:05] C:\DOCUME~1\NETWOR~1\DADOSD~1\Microsoft

[22/07/2008|00:13] C:\DOCUME~1\PAI\DADOSD~1\Adobe

[21/08/2006|17:54] C:\DOCUME~1\PAI\DADOSD~1\CyberLink

[24/03/2008|01:26] C:\DOCUME~1\PAI\DADOSD~1\Go!Zilla

[16/12/2007|21:23] C:\DOCUME~1\PAI\DADOSD~1\Google

[04/11/2007|10:39] C:\DOCUME~1\PAI\DADOSD~1\HP

[01/03/2006|21:03] C:\DOCUME~1\PAI\DADOSD~1\Identities

[12/11/2007|23:13] C:\DOCUME~1\PAI\DADOSD~1\Macromedia

[28/11/2008|00:21] C:\DOCUME~1\PAI\DADOSD~1\Microsoft

[18/12/2008|05:32] C:\DOCUME~1\PAI\DADOSD~1\OpenOffice.org2

[24/03/2008|01:38] C:\DOCUME~1\PAI\DADOSD~1\Orbit

[27/12/2008|17:22] C:\DOCUME~1\PAI\DADOSD~1\Real

[25/01/2008|00:00] C:\DOCUME~1\PAI\DADOSD~1\WinRAR

--------------------\\ Tarefas Agendadas na pasta C:\WINDOWS\Tasks

[29/12/2008 18:26][--ah-----] C:\WINDOWS\tasks\SA.DAT

[13/10/2005 14:02][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Lista de pastas em C:\Arquivos de programas

[06/06/2008|20:58] C:\Arquivos de programas\3B Software

[05/10/2006|18:49] C:\Arquivos de programas\Addgames

[06/06/2008|22:55] C:\Arquivos de programas\Adobe

[01/03/2006|22:08] C:\Arquivos de programas\Ahead

[24/06/2007|10:45] C:\Arquivos de programas\Alwil Software

[06/12/2006|11:32] C:\Arquivos de programas\ArcSoft

[17/06/2008|10:03] C:\Arquivos de programas\Arquivos comuns

[11/10/2008|20:34] C:\Arquivos de programas\Ashampoo

[25/05/2008|13:57] C:\Arquivos de programas\a-squared Free

[07/07/2008|08:15] C:\Arquivos de programas\AtomSync

[15/05/2007|15:20] C:\Arquivos de programas\AVerTV

[16/05/2008|20:07] C:\Arquivos de programas\AVG

[13/11/2008|17:22] C:\Arquivos de programas\Babylon

[12/11/2007|12:24] C:\Arquivos de programas\BWorks

[03/05/2008|20:40] C:\Arquivos de programas\CABAL Online (BRAZIL)

[01/03/2006|21:00] C:\Arquivos de programas\ComPlus Applications

[17/02/2006|04:41] C:\Arquivos de programas\CONEXANT

[01/03/2006|22:11] C:\Arquivos de programas\CyberLink

[25/04/2008|21:55] C:\Arquivos de programas\DAEMON Tools Lite

[14/02/2008|13:33] C:\Arquivos de programas\DAP

[06/06/2008|23:21] C:\Arquivos de programas\DEMO DA DISNEY

[26/12/2007|20:08] C:\Arquivos de programas\Disney

[01/03/2006|21:55] C:\Arquivos de programas\Disney Interactive

[14/11/2006|20:43] C:\Arquivos de programas\DVD Shrink

[25/04/2008|22:08] C:\Arquivos de programas\EA GAMES

[31/10/2008|21:38] C:\Arquivos de programas\FastDictionary 2007

[01/05/2008|14:56] C:\Arquivos de programas\Firaxis Games

[29/04/2008|15:15] C:\Arquivos de programas\Free Download Manager

[19/10/2008|10:37] C:\Arquivos de programas\Free Window Registry Repair

[25/03/2007|14:39] C:\Arquivos de programas\freecol

[29/12/2008|16:15] C:\Arquivos de programas\Google

[09/03/2008|15:41] C:\Arquivos de programas\Half-life

[12/12/2006|19:47] C:\Arquivos de programas\Hewlett-Packard

[22/10/2007|20:06] C:\Arquivos de programas\HP

[21/11/2007|09:33] C:\Arquivos de programas\iGv6

[09/11/2008|14:15] C:\Arquivos de programas\INS

[20/05/2008|21:28] C:\Arquivos de programas\InstallShield Installation Information

[28/12/2008|01:49] C:\Arquivos de programas\Internet Explorer

[10/09/2008|15:13] C:\Arquivos de programas\Java

[03/09/2006|11:47] C:\Arquivos de programas\Kaspersky Lab

[30/04/2008|20:59] C:\Arquivos de programas\K-Lite Codec Pack

[25/09/2008|22:03] C:\Arquivos de programas\KONAMI

[11/11/2008|17:15] C:\Arquivos de programas\Lavalys

[17/06/2008|10:50] C:\Arquivos de programas\Lavasoft

[29/03/2008|22:11] C:\Arquivos de programas\LevelUpGames

[09/12/2007|13:14] C:\Arquivos de programas\LimeWire

[30/10/2008|18:23] C:\Arquivos de programas\Lingoes

[24/12/2007|10:51] C:\Arquivos de programas\MAIET

[04/07/2008|22:27] C:\Arquivos de programas\Marcos Velasco Security

[25/09/2008|18:51] C:\Arquivos de programas\Maxis

[12/11/2007|12:30] C:\Arquivos de programas\MeeSoft

[19/10/2008|10:47] C:\Arquivos de programas\Megacubo

[15/10/2008|20:55] C:\Arquivos de programas\Messenger

[04/11/2008|14:02] C:\Arquivos de programas\Messenger Plus! Live

[01/03/2006|21:03] C:\Arquivos de programas\microsoft frontpage

[20/05/2008|21:55] C:\Arquivos de programas\Microsoft Games

[15/10/2008|20:50] C:\Arquivos de programas\Movie Maker

[29/12/2008|18:28] C:\Arquivos de programas\Mozilla Firefox

[04/09/2006|13:50] C:\Arquivos de programas\MSN Gaming Zone

[20/11/2006|08:09] C:\Arquivos de programas\MSXML 4.0

[25/03/2007|15:51] C:\Arquivos de programas\my-world

[02/04/2007|20:31] C:\Arquivos de programas\Neffy

[15/10/2008|20:45] C:\Arquivos de programas\NetMeeting

[09/11/2008|16:05] C:\Arquivos de programas\NTFS Undelete

[28/09/2008|15:01] C:\Arquivos de programas\OnGame

[01/03/2006|21:46] C:\Arquivos de programas\OpenOffice.org 2.0

[15/10/2008|20:45] C:\Arquivos de programas\Outlook Express

[04/05/2008|18:19] C:\Arquivos de programas\Pcsx2_0.9.4

[02/10/2006|18:37] C:\Arquivos de programas\Project64 1.6

[05/11/2006|21:13] C:\Arquivos de programas\QuickTime

[07/06/2008|23:14] C:\Arquivos de programas\RAM Idle LE

[11/11/2008|17:06] C:\Arquivos de programas\RamBooster 2.0

[07/05/2008|18:28] C:\Arquivos de programas\Real

[20/05/2008|21:58] C:\Arquivos de programas\RF Online

[24/04/2008|23:08] C:\Arquivos de programas\Rockstar Games

[01/03/2006|21:01] C:\Arquivos de programas\Servi‡os on-line

[11/04/2008|20:12] C:\Arquivos de programas\Sierra On-Line

[02/11/2007|00:16] C:\Arquivos de programas\Sony

[02/06/2008|21:38] C:\Arquivos de programas\SopCast

[19/10/2008|10:04] C:\Arquivos de programas\SpaceMonger

[14/08/2008|20:17] C:\Arquivos de programas\SpeedBit Video Accelerator

[26/05/2008|22:32] C:\Arquivos de programas\Spybot - Search & Destroy

[26/12/2008|09:56] C:\Arquivos de programas\Trend Micro

[01/03/2006|21:09] C:\Arquivos de programas\Uninstall Information

[03/04/2008|21:00] C:\Arquivos de programas\Valve

[28/11/2007|21:50] C:\Arquivos de programas\Virtools

[06/06/2008|22:39] C:\Arquivos de programas\VS Revo Group

[09/04/2008|22:39] C:\Arquivos de programas\Windows Live

[19/05/2008|20:26] C:\Arquivos de programas\Windows Live Safety Center

[19/10/2008|10:51] C:\Arquivos de programas\Windows Live Toolbar

[22/07/2008|09:18] C:\Arquivos de programas\Windows Media Connect 2

[15/11/2008|00:23] C:\Arquivos de programas\Windows Media Player

[15/10/2008|20:45] C:\Arquivos de programas\Windows NT

[30/05/2007|19:43] C:\Arquivos de programas\WindowsUpdate

[07/06/2008|00:52] C:\Arquivos de programas\WinRAR

[16/12/2007|13:43] C:\Arquivos de programas\WinZip

[01/03/2006|21:03] C:\Arquivos de programas\xerox

[09/04/2008|21:32] C:\Arquivos de programas\Yahoo!

[14/10/2008|13:48] C:\Arquivos de programas\Zylom Games

--------------------\\ Lista de pastas em C:\Arquivos de programas\Arquivos comuns

[01/05/2008|14:51] C:\Arquivos de programas\Arquivos comuns\Adobe

[16/12/2006|21:40] C:\Arquivos de programas\Arquivos comuns\Adobe Systems Shared

[01/03/2006|22:09] C:\Arquivos de programas\Arquivos comuns\Ahead

[02/04/2008|23:15] C:\Arquivos de programas\Arquivos comuns\DirectX

[12/12/2006|19:45] C:\Arquivos de programas\Arquivos comuns\Hewlett-Packard

[22/10/2007|20:01] C:\Arquivos de programas\Arquivos comuns\HP

[28/10/2006|21:05] C:\Arquivos de programas\Arquivos comuns\InstallShield

[01/03/2006|21:35] C:\Arquivos de programas\Arquivos comuns\Java

[09/04/2008|22:41] C:\Arquivos de programas\Arquivos comuns\Microsoft Shared

[01/03/2006|21:00] C:\Arquivos de programas\Arquivos comuns\MSSoap

[01/03/2006|17:53] C:\Arquivos de programas\Arquivos comuns\ODBC

[07/05/2008|18:28] C:\Arquivos de programas\Arquivos comuns\Real

[01/03/2006|21:00] C:\Arquivos de programas\Arquivos comuns\Servi‡os

[01/03/2006|17:53] C:\Arquivos de programas\Arquivos comuns\SpeechEngines

[03/02/2007|21:24] C:\Arquivos de programas\Arquivos comuns\SWF Studio

[11/05/2008|19:00] C:\Arquivos de programas\Arquivos comuns\Symantec Shared

[15/10/2008|20:44] C:\Arquivos de programas\Arquivos comuns\System

[01/03/2006|21:49] C:\Arquivos de programas\Arquivos comuns\TV

[09/04/2008|22:41] C:\Arquivos de programas\Arquivos comuns\WindowsLiveInstaller

[17/06/2008|10:03] C:\Arquivos de programas\Arquivos comuns\Wise Installation Wizard

[07/05/2008|18:28] C:\Arquivos de programas\Arquivos comuns\xing shared

--------------------\\ Process

( 35 Processes )

... OK !

--------------------\\ Procura pelo S_Lop

Não foram encontradas pastas com o Lop!

--------------------\\ Procura por Arquivos/Ficheiros e pastas do Lop

Não foram encontradas pastas com o Lop!

--------------------\\ Procura no Registro

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verificando o Arquivos/Ficheiros Hosts

Arquivos/Ficheiros Hosts LIMPO

--------------------\\ Procurando Arquivos/Ficheiros ocultos com o Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-12-29 18:35:33

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 7

--------------------\\ Procurando por outras infecções

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Maiko\Meus documentos\Meus Games\AGE OF EMPIRES TRIO\AGE2_X1 (D)\crack

C:\DOCUME~1\Maiko\Meus documentos\Meus Games\AGE OF EMPIRES TRIO\AGE2_X1 (D)\crack\age2_x1.exe

C:\DOCUME~1\Maiko\Recent\Crack.lnk

C:\DOCUME~1\Maiko\Shared\Rise of nations\Crack

C:\DOCUME~1\Maiko\Shared\Rise of nations\Crack\Logs

[F:90][D:11]-> C:\DOCUME~1\Maiko\CONFIG~1\Temp

[F:116][D:0]-> C:\DOCUME~1\Maiko\Cookies

[F:558][D:8]-> C:\DOCUME~1\Maiko\CONFIG~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - s b 08/11/2008|23:29 - Option : [2]

2 - "C:\Lop SD\LopR_2.txt" - seg 29/12/2008|18:38 - Option : [2]

--------------------\\ Verificação completa em 18:38:53

2) RELATORIO HIJACKTHIS

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:45:07, on 29/12/2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\System32\snmp.exe

C:\WINDOWS\system32\svchost.exe

C:\ARQUIV~1\SPEEDB~1\VideoAcceleratorService.exe

C:\ARQUIV~1\AVG\AVG8\avgrsx.exe

C:\ARQUIV~1\AVG\AVG8\avgemc.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\VTTimer.exe

C:\Arquivos de programas\Java\jre1.6.0_07\bin\jusched.exe

C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe

C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de Programas\Mozilla Firefox\firefox.exe

C:\Arquivos de Programas\Free Download Manager\fdm.exe

C:\ARQUIV~1\SPEEDB~1\VideoAcceleratorEngine.exe

C:\Arquivos de programas\WinRAR\WinRAR.exe

C:\DOCUME~1\Maiko\CONFIG~1\Temp\Rar$EX00.671\HijackThis.exe