[Resolvido!] Scaneamento HijackThis

John_RS · Fevereiro 11, 2009

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 02:40:17, on 10/2/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\Mixer.exe

C:\Arquivos de programas\Stardock\ObjectDock\ObjectDock.exe

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\Arquivos de programas\Windows Live\Messenger\usnsvc.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\HijackThis\HijackThis.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1046

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de programas\Java\jre6\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {9BF0C8D7-CC03-4CB1-BA8D-72418972272E} - c:\windows\system32\ahhivah.dll (file missing)

O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Arquivos de programas\BS.Player ControlBar\BSToolbar.dll

O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: Stardock ObjectDock.lnk = C:\Arquivos de programas\Stardock\ObjectDock\ObjectDock.exe

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O17 - HKLM\System\CCS\Services\Tcpip\..\{3676693A-FD1D-4F29-BBED-6E64384BFBA0}: NameServer = 200.180.136.242,200.180.136.200

O20 - Winlogon Notify: mziclgxz - ahhivah.dll (file missing)

O23 - Service: Adobe LM Service - Adobe Systems - C:\Arquivos de programas\Arquivos comuns\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

--

End of file - 4301 bytes

DigRam · Fevereiro 12, 2009

Bom Dia! John_RS

<@> Baixe: < OTViewIt > ( ...by OldTimer )

<@> Salve-o no desktop!

<@> Execute-o! --> Marque a caixa: "Scan All Users"

<@> Aperte "Run Scan" --> Aguarde a conclusão!

<@> Poste os relatórios: OTViewIt.txt + Extra.txt <-- Estará minimizado!

Abraços!

John_RS · Fevereiro 12, 2009

O problema que identifiquei é que sempre quando passo um limpador de registros, como o Ccleaner ou o MV o meu pc reinicia, qualquer programa de limpeza de registro que passo ao final o computador reinicia sempre, já formatei umas 8 vezes e o problema se repete...

Bem, segue o resultado do EXTRAS

OTViewIt Extras logfile created on: 11/2/2009 16:00:37 - Run 2

OTViewIt by OldTimer - Version 1.0.21.0 Folder = E:\Cristiano\Programas\Otimizadores

Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.2180)

Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: d/M/yyyy

1023,36 Mb Total Physical Memory | 614,74 Mb Available Physical Memory | 60,07% Memory free

2,40 Gb Paging File | 1,94 Gb Available in Paging File | 80,77% Paging File free

Paging file location(s): C:\pagefile.sys 1536 3072;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Arquivos de programas

Drive C: | 20,00 Gb Total Space | 14,46 Gb Free Space | 72,32% Space Free | Partition Type: NTFS

Drive D: | 37,27 Gb Total Space | 30,53 Gb Free Space | 81,92% Space Free | Partition Type: NTFS

Drive E: | 54,55 Gb Total Space | 18,97 Gb Free Space | 34,77% Space Free | Partition Type: NTFS

F: Drive not present or media not loaded

Drive G: | 539,56 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: PARTICUL-0EE655

Current User Name: Home

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Whitelist: On

File Age = 30 Days

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled"=1

"AntiVirusDisableNotify"=0

"FirewallDisableNotify"=1

"UpdatesDisableNotify"=0

"AntiVirusOverride"=0

"FirewallOverride"=1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[2004/08/04 00:45:42 | 00,159,744 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019

[2008/12/02 21:44:52 | 00,582,992 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call

[2008/12/02 22:30:04 | 03,882,312 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

[2004/08/04 00:45:42 | 00,159,744 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019

[2008/07/03 01:33:00 | 00,307,712 | ---- | M] (Mozilla Corporation) -- C:\Arquivos de programas\Mozilla Firefox\firefox.exe:*:Enabled:Firefox

[2004/08/04 00:45:46 | 00,504,320 | ---- | M] (Microsoft Corporation) -- \??\C:\WINDOWS\system32\winlogon.exe:*:enabled:@shell32.dll,-1

[2008/12/02 21:44:52 | 00,582,992 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call

[2008/12/02 22:30:04 | 03,882,312 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger

========== (O18) Protocol Handlers ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

ipp: [HKLM - No CLSID value]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers

[2003/07/11 02:25:22 | 00,842,816 | ---- | M] (Microsoft Corporation) C:\Arquivos de programas\Arquivos comuns\System\Ole DB\MSDAIPP.DLL ipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2008/12/02 22:37:44 | 00,062,280 | ---- | M] (Microsoft Corporation) C:\Arquivos de programas\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (livecall:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

msdaipp: [HKLM - No CLSID value]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers

[2003/07/11 02:25:22 | 00,842,816 | ---- | M] (Microsoft Corporation) C:\Arquivos de programas\Arquivos comuns\System\Ole DB\MSDAIPP.DLL msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers

[2003/07/11 02:25:22 | 00,842,816 | ---- | M] (Microsoft Corporation) C:\Arquivos de programas\Arquivos comuns\System\Ole DB\MSDAIPP.DLL msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAIPP.BINDER]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2008/12/02 22:37:44 | 00,062,280 | ---- | M] (Microsoft Corporation) C:\Arquivos de programas\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (msnim:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

[2003/08/01 23:09:04 | 08,086,072 | ---- | M] (Microsoft Corporation) C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Web Components\11\OWC11.DLL (mso-offdap11:{32505114-5902-49B2-880A-1F7738E5A384} (HKLM) [Data Page Plugable Protocal mso-offdap11 Handler])

========== (O18) Protocol Filters ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters

[2003/07/15 06:45:12 | 00,039,488 | ---- | M] (Microsoft Corporation) C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\OFFICE11\MSOXMLMF.DLL text/xml:{807553E5-5146-11D5-A672-00B0D022E945} (HKLM) [Reg Error: Value does not exist or could not be read.]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{00E15D21-B68B-D7C4-574B-636E2D1ECEBE}"=Catalyst Control Center HydraVision Full

"{02DFF6B1-1654-411C-8D7B-FD6052EF016F}"=Apple Software Update

"{055EE59D-217B-43A7-ABFF-507B966405D8}"=ATI Catalyst Control Center

"{08CA9554-B5FE-4313-938F-D4A417B81175}"=QuickTime

"{1170F665-2359-E439-5BC5-932B87423EF1}"=ccc-utility

"{205C6BDD-7B73-42DE-8505-9A093F35A238}"=Ferramenta de Carregamento do Windows Live

"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}"=MSVCRT

"{26A24AE4-039D-4CA4-87B4-2F83216011FF}"=Java 6 Update 11

"{350C9416-3D7C-4EE8-BAA9-00BCB3D54227}"=WebFldrs XP

"{39D74E81-5DED-C7EE-8807-91A8800212FA}"=ccc-core-preinstall

"{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}"=DAEMON Tools

"{41C01225-45FD-7BCE-1EDA-F7E50945ADD7}"=Catalyst Control Center Core Implementation

"{51A857F8-35FA-42B2-A7BE-FBD5BAFDD84A}"=Assistente de Conexão do Windows Live

"{5E8E1294-7951-6DA9-10F1-C877871346F3}"=Skins

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}"=Windows Media Player Firefox Plugin

"{826F3B4F-C597-AF1D-4CB1-2F441BE8E2BF}"=ccc-core-static

"{844649F4-8B62-4B1F-85D9-F3098DF32F3C}"=Windows Live Call

"{87B20692-9E9D-FAE0-76C7-E75E3CC7B0D1}"=Catalyst Control Center Graphics Full Existing

"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}"=Choice Guard

"{90110416-6000-11D3-8CFE-0150048383C9}"=Microsoft Office Professional Edição 2003

"{95120000-00B9-0409-0000-0000000FF1CE}"=Microsoft Application Error Reporting

"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}"=Segoe UI

"{C29769BE-BEDF-DC9E-67A9-5E7AEFF039CF}"=CCC Help English

"{C740289B-FC90-D938-8317-1FFEBF7C04DB}"=Catalyst Control Center Graphics Previews Common

"{C8DD4EAD-674B-461B-94D5-4C80CCFB8401}"=Windows Live Messenger

"{D3B1C799-CB73-42DE-BA0F-2344793A095C}"=Catalyst Control Center - Branding

"{E8A1D4A3-26BE-4115-9CFC-612ED3954B20}"=Windows Live Essentials

"{EC16B64A-38A7-4D7D-BA2E-671ED441304F}"=ULi PCI to AGP Controller Driver

"{F30A8BF7-288C-57C0-357E-6D67BB694682}"=Catalyst Control Center Graphics Full New

"{F54543CF-EC73-D847-1780-84A6420EA229}"=Catalyst Control Center Graphics Light

"{F69E83CF-B440-43F8-89E6-6EA80712109B}"=Windows Live Communications Platform

"Adobe Flash Player Plugin"=Adobe Flash Player 10 Plugin

"All ATI Software"=ATI - Software Uninstall Utility

"ATI Display Driver"=ATI Display Driver

"avast!"=avast! Antivirus

"CCleaner"=CCleaner (remove only)

"Haihaisoft PDF Reader"=Haihaisoft PDF Reader

"LimeWire"=LimeWire 4.18.6

"Malwarebytes' Anti-Malware_is1"=Malwarebytes' Anti-Malware

"Mozilla Firefox (3.0.1)"=Mozilla Firefox (3.0.1)

"MSCompPackV1"=Microsoft Compression Client Pack 1.0 for Windows XP

"MV AntiSpy 4.0_is1"=MV AntiSpy 4.0

"MV RegClean 5.5_is1"=MV RegClean 5.5

"Nero - Burning Rom!UninstallKey"=Nero OEM

"ObjectDock"=ObjectDock

"PCI Audio Driver"=PCI Audio Driver

"RealAlt_is1"=Real Alternative 1.8.2

"ULi LAN Driver"=ULi PCI 10-100 Fast Ethernet Controller Driver

"ULi M5289 SATA Controller Driver"=ULi M5289 SATA Controller Driver

"Winamp"=Winamp

"Windows Media Format Runtime"=Windows Media Format 11 runtime

"Windows Media Player"=Windows Media Player 11

"WinGimp-2.0_is1"=GIMP 2.6.4

"WinLiveSuite_Wave3"=Windows Live Essentials

"WinRAR archiver"=Arquivo do WinRAR

"WMFDist11"=Windows Media Format 11 runtime

"wmp11"=Windows Media Player 11

"Wudf01000"=Microsoft User-Mode Driver Framework Feature Pack 1.0

========== Last 10 Event Log Errors ==========

[ System Events ]

Error - 11/2/2009 13:15:22 | Computer Name = PARTICUL-0EE655 | Source = SideBySide | ID = 16842811

Description = Falha de Generate Activation Context para C:\Arquivos de programas\Stardock\ObjectDock\Docklets\Weather\WeatherDocklet.dll.

Mensagem

de erro de referência: A operação foi concluída com êxito. .

Error - 11/2/2009 13:26:17 | Computer Name = PARTICUL-0EE655 | Source = SideBySide | ID = 16842784

Description = Não foi possível encontrar Assembly dependente Microsoft.VC80.CRT

e o último erro foi A montagem a que foi feita referência não está instalada no

sistema.

Error - 11/2/2009 13:26:17 | Computer Name = PARTICUL-0EE655 | Source = SideBySide | ID = 16842811

Description = Falha de Resolve Partial Assembly para Microsoft.VC80.CRT. Mensagem

de erro de referência: A montagem a que foi feita referência não está instalada

no sistema. .

Error - 11/2/2009 13:26:17 | Computer Name = PARTICUL-0EE655 | Source = SideBySide | ID = 16842811

Description = Falha de Generate Activation Context para C:\WINDOWS\system32\atiadlxx.dll.

Mensagem

de erro de referência: A operação foi concluída com êxito. .

Error - 11/2/2009 13:26:18 | Computer Name = PARTICUL-0EE655 | Source = SideBySide | ID = 16842784

Description = Não foi possível encontrar Assembly dependente Microsoft.VC80.CRT

e o último erro foi A montagem a que foi feita referência não está instalada no

sistema.

Error - 11/2/2009 13:26:18 | Computer Name = PARTICUL-0EE655 | Source = SideBySide | ID = 16842811

Description = Falha de Resolve Partial Assembly para Microsoft.VC80.CRT. Mensagem

de erro de referência: A montagem a que foi feita referência não está instalada

no sistema. .

Error - 11/2/2009 13:26:18 | Computer Name = PARTICUL-0EE655 | Source = SideBySide | ID = 16842811

Description = Falha de Generate Activation Context para C:\WINDOWS\system32\atiadlxx.dll.

Mensagem

de erro de referência: A operação foi concluída com êxito. .

Error - 11/2/2009 13:28:57 | Computer Name = PARTICUL-0EE655 | Source = Service Control Manager | ID = 7016

Description = O serviço Cliente da Web relatou um estado atual 3221225539 inválido.

Error - 11/2/2009 13:28:57 | Computer Name = PARTICUL-0EE655 | Source = Service Control Manager | ID = 7022

Description = Serviço Cliente da Web suspenso ao iniciar.

Error - 11/2/2009 13:33:39 | Computer Name = PARTICUL-0EE655 | Source = Service Control Manager | ID = 7023

Description = O serviço Localizador de computadores terminou com o erro: %%1460

< End of report >

John_RS · Fevereiro 12, 2009

Agora segue o resultado do OTViewIT

OTViewIt logfile created on: 11/2/2009 16:00:37 - Run 2

OTViewIt by OldTimer - Version 1.0.21.0 Folder = E:\Cristiano\Programas\Otimizadores

Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.2180)

Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: d/M/yyyy

1023,36 Mb Total Physical Memory | 614,74 Mb Available Physical Memory | 60,07% Memory free

2,40 Gb Paging File | 1,94 Gb Available in Paging File | 80,77% Paging File free

Paging file location(s): C:\pagefile.sys 1536 3072;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Arquivos de programas

Drive C: | 20,00 Gb Total Space | 14,46 Gb Free Space | 72,32% Space Free | Partition Type: NTFS

Drive D: | 37,27 Gb Total Space | 30,53 Gb Free Space | 81,92% Space Free | Partition Type: NTFS

Drive E: | 54,55 Gb Total Space | 18,97 Gb Free Space | 34,77% Space Free | Partition Type: NTFS

F: Drive not present or media not loaded

Drive G: | 539,56 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Computer Name: PARTICUL-0EE655

Current User Name: Home

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Whitelist: On

File Age = 30 Days

========== Processes ==========

[2008/10/28 23:09:10 | 00,606,208 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe

[2009/02/11 15:59:52 | 00,056,321 | ---- | M] () -- C:\WINDOWS\services.exe

[2002/10/15 07:00:20 | 01,839,104 | R--- | M] (C-Media Electronic Inc. (www.cmedia.com.tw)) -- C:\WINDOWS\mixer.exe

[2009/02/11 14:38:53 | 00,047,616 | ---- | M] () -- C:\WINDOWS\system32\reader_s.exe

[2009/02/11 15:59:52 | 00,056,321 | ---- | M] () -- C:\WINDOWS\services.exe

[2009/02/11 14:38:53 | 00,047,616 | ---- | M] () -- C:\Documents and Settings\Home\reader_s.exe

[2009/02/11 15:59:52 | 00,056,321 | ---- | M] () -- C:\WINDOWS\services.exe

[2009/02/11 13:45:34 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Arquivos de programas\Java\jre6\bin\jqs.exe

[2008/07/03 01:33:00 | 00,307,712 | ---- | M] (Mozilla Corporation) -- C:\Arquivos de programas\Mozilla Firefox\firefox.exe

[2004/08/04 00:45:46 | 00,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiprvse.exe

[2009/02/11 15:59:52 | 00,056,321 | ---- | M] () -- C:\WINDOWS\services.exe

[2004/08/04 00:45:32 | 00,417,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\cmd.exe