[Resolvido!] Kaspersky detecta 3 vírus

Ionara · Junho 17, 2009

Olá,

dei um kaspersky e detectou 3 virus, dois deles em um jogo que meu filho instalou...

Logo em seguida dei um scan completo com o avast que nada detectou...

Então segue aí log do kaspersky e do hijackthis

Como vou retirar isso, já exclui o jogo...

Logfile of HijackThis v1.99.1

Scan saved at 23:39:14, on 16/6/2009

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16850)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\ARQUIV~1\GbPlugin\GbpSv.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe

C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Arquivos de programas\D-Link\AirPlus G\AirGCFG.exe

C:\Arquivos de programas\ANI\ANIWZCS2 Service\WZCSLDR2.exe

C:\Arquivos de programas\VIAudioi\SBADeck\ADeck.exe

C:\Arquivos de programas\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe

C:\Arquivos de programas\Unlocker\UnlockerAssistant.exe

C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe

C:\Arquivos de programas\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\Ares\Ares.exe

C:\Arquivos de programas\Windows Live\Messenger\MsnMsgr.Exe

C:\Arquivos de programas\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\Microsoft Office\Office12\ONENOTEM.EXE

C:\ARQUIV~1\borland\INTERB~1\Bin\ibguard.exe

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\IoctlSvc.exe

C:\WINDOWS\system32\svchost.exe

C:\ARQUIV~1\borland\INTERB~1\Bin\ibserver.exe

C:\Arquivos de programas\Windows Live\Messenger\usnsvc.exe

C:\Arquivos de programas\Microsoft Office\Office12\EXCEL.EXE

C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe

C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe

C:\Arquivos de programas\internet explorer\iexplore.exe

C:\Documents and Settings\user\Meus documentos\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R3 - URLSearchHook: SrchHook Class - {F4F10C1D-87C7-404A-B4B3-000000000000} - C:\ARQUIV~1\DAP\SBSearch.dll (file missing)

R3 - URLSearchHook: SpeedBitPlus Toolbar - {60270dc7-9ea0-472f-9b77-66652c06246e} - C:\Arquivos de programas\SpeedBitPlus\tbSpee.dll

O2 - BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: SpeedBitPlus Toolbar - {60270dc7-9ea0-472f-9b77-66652c06246e} - C:\Arquivos de programas\SpeedBitPlus\tbSpee.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Arquivos de programas\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Arquivos de programas\GbPlugin\gbiehcef.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\ARQUIV~1\DAP\DAPIEL~1.DLL (file missing)

O3 - Toolbar: SpeedBitPlus Toolbar - {60270dc7-9ea0-472f-9b77-66652c06246e} - C:\Arquivos de programas\SpeedBitPlus\tbSpee.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Arquivos de programas\D-Link\AirPlus G\AirGCFG.exe

O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Arquivos de programas\ANI\ANIWZCS2 Service\WZCSLDR2.exe

O4 - HKLM\..\Run: [AudioDeck] C:\Arquivos de programas\VIAudioi\SBADeck\ADeck.exe 1

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Arquivos de programas\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Arquivos de programas\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [unlockerAssistant] "C:\Arquivos de programas\Unlocker\UnlockerAssistant.exe"

O4 - HKLM\..\Run: [avast!] C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Arquivos de programas\Java\jre6\bin\jusched.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [ares] "C:\Arquivos de programas\Ares\Ares.exe" -h

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [MsnMsgr] "C:\Arquivos de programas\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Arquivos de programas\DAP\DAP.EXE" /STARTUP

O4 - Startup: Ferramenta de Verificação de Mídia do Picture Motion Browser.lnk = C:\Arquivos de programas\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

O4 - Startup: Recorte de tela e Iniciador do OneNote 2007.lnk = C:\Arquivos de programas\Microsoft Office\Office12\ONENOTEM.EXE

O8 - Extra context menu item: &Clean Traces - C:\Arquivos de programas\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download with &DAP - C:\Arquivos de programas\DAP\dapextie.htm

O8 - Extra context menu item: Download &all with DAP - C:\Arquivos de programas\DAP\dapextie2.htm

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARQUIV~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARQUIV~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\Office12\REFIEBAR.DLL

O11 - Options group: [iNTERNATIONAL] International*

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab

O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

O16 - DPF: {DB6BF2CD-4F59-4F1C-AA9C-D08C0B61A931} (GbpDistObj Class) - https://imagem.caixa.gov.br/cab/gbpdist.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{4C46AAA5-817B-4C81-9278-5901EA48DFED}: NameServer = 192.168.6.254 200.180.39.132

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Arquivos de programas\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Help\hxds.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL

O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Arquivos de programas\Windows Live\Mail\mailcomm.dll

O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\ARQUIV~1\ARQUIV~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Arquivos de programas\ANI\ANIWZCS2 Service\ANIWZCSdS.exe

O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Arquivos de programas\Ares\chatServer.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: Gbp Service (GbpSv) - - C:\ARQUIV~1\GbPlugin\GbpSv.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: InterBase Guardian (InterBaseGuardian) - Inprise Corporation - C:\ARQUIV~1\borland\INTERB~1\Bin\ibguard.exe

O23 - Service: InterBase Server (InterBaseServer) - Inprise Corporation - C:\ARQUIV~1\borland\INTERB~1\Bin\ibserver.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Arquivos de programas\Java\jre6\bin\jqs.exe" -service -config "C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)

O23 - Service: Nero BackItUp Scheduler 3 - Unknown owner - C:\Arquivos de programas\Nero\Nero8\Nero BackItUp\NBService.exe (file missing)

O23 - Service: NMIndexingService - Unknown owner - C:\Arquivos de programas\Arquivos comuns\Nero\Lib\NMIndexingService.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

O23 - Service: PsExec (PSEXESVC) - Unknown owner - C:\WINDOWS\PSEXESVC.EXE (file missing)

----------------------------------------------------------------------------------------------------------------------------------------

--------------------------------------------------------------------------------

KASPERSKY ONLINE SCANNER 7.0 REPORT

Tuesday, June 16, 2009

Operating System: Microsoft Windows XP Professional Service Pack 2 (build 2600)

Kaspersky Online Scanner version: 7.0.26.13

Program database last update: Tuesday, June 16, 2009 23:08:40

Records in database: 2353011

--------------------------------------------------------------------------------

Scan settings:

Scan using the following database: extended

Scan archives: yes

Scan mail databases: yes

Scan area - My Computer:

A:\

C:\

D:\

Scan statistics:

Files scanned: 77816

Threat name: 1

Infected objects: 3

Suspicious objects: 0

Duration of the scan: 01:47:15

File name / Threat name / Threats count

C:\Documents and Settings\user\Configurações locais\Temporary Internet Files\Content.IE5\KQH0VJU7\MUTotal10Patch_v3.5[1].exe Infected: not-a-virus:----Tool.Win32.Agent.nl 1

C:\MU Total 1.0\mutotal.exe Infected: not-a-virus:----Tool.Win32.Agent.nl 1

C:\RECYCLER\S-1-5-21-1801674531-839522115-2147047481-1003\Dc4.exe Infected: not-a-virus:----Tool.Win32.Agent.nl 1

The selected area was scanned.

DigRam · Junho 17, 2009

Bom Dia! Ionara

<@> Baixe: < a-squared Free 4.5 >

<!> Link Opcional: < >

<@> Salve-o em Arquivos de programas.

<@> Abra o programa e clique em: Atualizar agora --> Aguarde!

<@> Terminando,clique em: "Scan PC"

<@> Escolha a opção: "A fundo" --> Clique,à seguir,em "Analisar".

<@> Terminando,marque as caixinhas dos ítens encontrados e clique em "Enviar marcados à Quarentena".

<@> Salve e poste o relatório desta verificação. ( a2scan_xxyy09-xxxxxx.txt )

Abraços!

Ionara · Junho 18, 2009

Olá Dig Ram,

segue log do a-squared.

a-squared Free - Versão 4.5

Última atualização 17/6/2009 18:53:05

Configurações da análise:

Scan type: deep

Objetos: Memória, Rastros, Cookies, C:\

Análise de arquivos: Ligado

Heurística: Desligado

Análise de ADS: Ligado

Início da análise: 17/6/2009 19:18:38

c:\arquivos de programas\ares detectado: Trace.Directory.Ares!A2

c:\arquivos de programas\ares\data detectado: Trace.Directory.Ares!A2

c:\arquivos de programas\ares\data\gui detectado: Trace.Directory.Ares!A2

c:\arquivos de programas\ares\data\gui\general detectado: Trace.Directory.Ares!A2

c:\arquivos de programas\ares\data\gui\osthemes detectado: Trace.Directory.Ares!A2

c:\arquivos de programas\ares\lang detectado: Trace.Directory.Ares!A2

c:\documents and settings\user\menu iniciar\programas\ares detectado: Trace.Directory.Ares!A2

c:\documents and settings\user\desktop\ares.lnk detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\ares.exe detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\asyncex.ax detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\blocked.txt.sample detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\blocked_keywords.txt.sample detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\chanlistfilter.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\chatlang.txt.sample detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\buttonsbitmap.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\chat.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\emotic.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\libbig.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\logo.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\mimesmall.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\mshareset.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\prefs.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\searchpnl.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\searchstars.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\tabssmall.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\transfer.bmp detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\homepage.url detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\data\p2pfilter.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\arabic.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\czech.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\dutch.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\french.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\german.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\italian.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\japanese.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\polish.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\slovak.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\spanish.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\swedish.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\turkish.txt detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\libfaad2.dll detectado: Trace.File.Ares!A2

c:\arquivos de programas\ares\mp3source.ax detectado: Trace.File.Ares!A2

c:\documents and settings\user\menu iniciar\programas\ares\ares.lnk detectado: Trace.File.Ares!A2

c:\documents and settings\user\menu iniciar\programas\ares\homepage.lnk detectado: Trace.File.Ares!A2

c:\documents and settings\user\desktop\emule.lnk detectado: Trace.File.Emule 5.0!A2

Value: HKEY_CLASSES_ROOT\arlnk --> URL Protocol detectado: Trace.Registry.Ares Galaxy P2P Plus!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\arlnk --> URL Protocol detectado: Trace.Registry.Ares Galaxy P2P Plus!A2

Value: HKEY_CLASSES_ROOT\CLSID\{3E0FA044-926C-42D9-BA12-EF16E980913B}\InprocServer32 --> ThreadingModel detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\bounds --> Main.Maximized detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Columns\Transfers --> Download detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Columns\Transfers --> Queue detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Columns\Transfers --> Upload detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Data --> AresNet1 detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Data --> JI.AresNet1 detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Positions\Transfers --> Download detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Positions\Transfers --> Queue detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Positions\Transfers --> Upload detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> General.AutoStartUp detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> General.Language detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> General.LastLibraryMode detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> GUI.LastChatRoomBrowse detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> GUI.LastLibrary detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> GUI.LastPMBrowse detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> GUI.LastSearch detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Hashing.Priority detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Network.DHTID detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Personal.GUID detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Playlist.PreviousASXApp detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Playlist.PreviousM3UApp detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Playlist.PreviousWAXApp detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> PrivateMessage.AwayMessage detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CAvgTime detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CDnSpeed detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CFRTime detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CTtUptime detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CUpSpeed detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.HasLQCa detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.LstCaQuery detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.LstCaQueryInt detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Transfer.ServerPort detectado: Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\software\microsoft\windows\currentversion\run --> ares detectado: Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E0FA044-926C-42D9-BA12-EF16E980913B}\InprocServer32 --> ThreadingModel detectado: Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> DisplayName detectado: Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> DisplayVersion detectado: Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> Publisher detectado: Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> UninstallString detectado: Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> URLInfoAbout detectado: Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> URLUpdateInfo detectado: Trace.Registry.Ares!A2

Key: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\software\kazaa detectado: Trace.Registry.KaZaA!A2

C:\Documents and Settings\user\Cookies\user@adserver.dialhost.com[2].txt detectado: Trace.TrackingCookie.adserv!A2

C:\Documents and Settings\user\Cookies\user@atdmt[1].txt detectado: Trace.TrackingCookie.atdmt!A2

C:\Documents and Settings\user\Cookies\user@bs.serving-sys[2].txt detectado: Trace.TrackingCookie.bs.serving-sys!A2

C:\Documents and Settings\user\Cookies\user@casalemedia[1].txt detectado: Trace.TrackingCookie.casalemedia!A2

C:\Documents and Settings\user\Cookies\user@doubleclick[1].txt detectado: Trace.TrackingCookie.doubleclick!A2

C:\Documents and Settings\user\Cookies\user@google.com[2].txt detectado: Trace.TrackingCookie.google.com!A2

C:\Documents and Settings\user\Cookies\user@google.com[3].txt detectado: Trace.TrackingCookie.google.com!A2

C:\Documents and Settings\user\Cookies\user@ig.com[2].txt detectado: Trace.TrackingCookie.ig.com!A2

C:\Documents and Settings\user\Cookies\user@insite.com[1].txt detectado: Trace.TrackingCookie.insite.com!A2

C:\Documents and Settings\user\Cookies\user@mediacenter.clicrbs.com[2].txt detectado: Trace.TrackingCookie.media!A2

C:\Documents and Settings\user\Cookies\user@pop.com[2].txt detectado: Trace.TrackingCookie.pop!A2

C:\Documents and Settings\user\Cookies\user@revenue[2].txt detectado: Trace.TrackingCookie.revenue!A2

C:\Documents and Settings\user\Cookies\user@serving-sys[2].txt detectado: Trace.TrackingCookie.serving-sys!A2

C:\Documents and Settings\user\Cookies\user@specificclick[2].txt detectado: Trace.TrackingCookie.specificclick!A2

C:\Documents and Settings\user\Cookies\user@statcounter[2].txt detectado: Trace.TrackingCookie.statcounter!A2

C:\Documents and Settings\user\Cookies\user@uj.com[2].txt detectado: Trace.TrackingCookie.uj.com!A2

C:\Documents and Settings\user\Cookies\user@zedo[1].txt detectado: Trace.TrackingCookie.zedo!A2

C:\Documents and Settings\user\Configurações locais\Temporary Internet Files\Content.IE5\DDT1IT7A\home[1].htm detectado: Trojan-Downloader.HTML.IFrame!IK

C:\Documents and Settings\user\Configurações locais\Temporary Internet Files\Content.IE5\GZDQBWVQ\localizacao[1].htm detectado: Virus.HTML.Iframe!IK

C:\MU Total 1.0\atualiza.exe detectado: Virus.Win32.Trojan!IK

C:\System Volume Information\_restore{53EBDC10-2AB9-4F28-813F-C09A8DA926E8}\RP31\A0003488.exe detectado: Riskware.----Tool.Win32.Agent!IK

Analisado

Arquivos: 131269

Objetos: 622539

Cookies: 479

Processos: 43

Encontrado

Arquivos: 4

Objetos: 89

Cookies: 18

Processos: 0

Chaves do registro: 0

Fim da análise: 17/6/2009 20:45:31

Duração da análise: 1:26:53

C:\System Volume Information\_restore{53EBDC10-2AB9-4F28-813F-C09A8DA926E8}\RP31\A0003488.exe Em quarentena Riskware.----Tool.Win32.Agent!IK

C:\MU Total 1.0\atualiza.exe Em quarentena Virus.Win32.Trojan!IK

C:\Documents and Settings\user\Configurações locais\Temporary Internet Files\Content.IE5\GZDQBWVQ\localizacao[1].htm Em quarentena Virus.HTML.Iframe!IK

C:\Documents and Settings\user\Configurações locais\Temporary Internet Files\Content.IE5\DDT1IT7A\home[1].htm Em quarentena Trojan-Downloader.HTML.IFrame!IK

C:\Documents and Settings\user\Cookies\user@zedo[1].txt Em quarentena Trace.TrackingCookie.zedo!A2

C:\Documents and Settings\user\Cookies\user@uj.com[2].txt Em quarentena Trace.TrackingCookie.uj.com!A2

C:\Documents and Settings\user\Cookies\user@statcounter[2].txt Em quarentena Trace.TrackingCookie.statcounter!A2

C:\Documents and Settings\user\Cookies\user@specificclick[2].txt Em quarentena Trace.TrackingCookie.specificclick!A2

C:\Documents and Settings\user\Cookies\user@serving-sys[2].txt Em quarentena Trace.TrackingCookie.serving-sys!A2

C:\Documents and Settings\user\Cookies\user@revenue[2].txt Em quarentena Trace.TrackingCookie.revenue!A2

C:\Documents and Settings\user\Cookies\user@pop.com[2].txt Em quarentena Trace.TrackingCookie.pop!A2

C:\Documents and Settings\user\Cookies\user@mediacenter.clicrbs.com[2].txt Em quarentena Trace.TrackingCookie.media!A2

C:\Documents and Settings\user\Cookies\user@insite.com[1].txt Em quarentena Trace.TrackingCookie.insite.com!A2

C:\Documents and Settings\user\Cookies\user@ig.com[2].txt Em quarentena Trace.TrackingCookie.ig.com!A2

C:\Documents and Settings\user\Cookies\user@google.com[2].txt Em quarentena Trace.TrackingCookie.google.com!A2

C:\Documents and Settings\user\Cookies\user@google.com[3].txt Em quarentena Trace.TrackingCookie.google.com!A2

C:\Documents and Settings\user\Cookies\user@doubleclick[1].txt Em quarentena Trace.TrackingCookie.doubleclick!A2

C:\Documents and Settings\user\Cookies\user@casalemedia[1].txt Em quarentena Trace.TrackingCookie.casalemedia!A2

C:\Documents and Settings\user\Cookies\user@bs.serving-sys[2].txt Em quarentena Trace.TrackingCookie.bs.serving-sys!A2

C:\Documents and Settings\user\Cookies\user@atdmt[1].txt Em quarentena Trace.TrackingCookie.atdmt!A2

C:\Documents and Settings\user\Cookies\user@adserver.dialhost.com[2].txt Em quarentena Trace.TrackingCookie.adserv!A2

Key: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\software\kazaa Em quarentena Trace.Registry.KaZaA!A2

Value: HKEY_CLASSES_ROOT\CLSID\{3E0FA044-926C-42D9-BA12-EF16E980913B}\InprocServer32 --> ThreadingModel Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\bounds --> Main.Maximized Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Columns\Transfers --> Download Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Columns\Transfers --> Queue Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Columns\Transfers --> Upload Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Data --> AresNet1 Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Data --> JI.AresNet1 Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Positions\Transfers --> Download Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Positions\Transfers --> Queue Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares\Positions\Transfers --> Upload Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> General.AutoStartUp Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> General.Language Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> General.LastLibraryMode Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> GUI.LastChatRoomBrowse Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> GUI.LastLibrary Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> GUI.LastPMBrowse Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> GUI.LastSearch Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Hashing.Priority Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Network.DHTID Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Personal.GUID Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Playlist.PreviousASXApp Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Playlist.PreviousM3UApp Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Playlist.PreviousWAXApp Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> PrivateMessage.AwayMessage Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CAvgTime Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CDnSpeed Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CFRTime Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CTtUptime Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.CUpSpeed Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.HasLQCa Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.LstCaQuery Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Stats.LstCaQueryInt Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\Software\Ares --> Transfer.ServerPort Em quarentena Trace.Registry.Ares!A2

Value: HKEY_USERS\S-1-5-21-1801674531-839522115-2147047481-1003\software\microsoft\windows\currentversion\run --> ares Em quarentena Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E0FA044-926C-42D9-BA12-EF16E980913B}\InprocServer32 --> ThreadingModel Em quarentena Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> DisplayName Em quarentena Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> DisplayVersion Em quarentena Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> Publisher Em quarentena Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> UninstallString Em quarentena Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> URLInfoAbout Em quarentena Trace.Registry.Ares!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ares --> URLUpdateInfo Em quarentena Trace.Registry.Ares!A2

Value: HKEY_CLASSES_ROOT\arlnk --> URL Protocol Em quarentena Trace.Registry.Ares Galaxy P2P Plus!A2

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\arlnk --> URL Protocol Em quarentena Trace.Registry.Ares Galaxy P2P Plus!A2

c:\documents and settings\user\desktop\emule.lnk Em quarentena Trace.File.Emule 5.0!A2

c:\documents and settings\user\desktop\ares.lnk Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\ares.exe Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\asyncex.ax Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\blocked.txt.sample Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\blocked_keywords.txt.sample Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\chanlistfilter.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\chatlang.txt.sample Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\buttonsbitmap.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\chat.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\emotic.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\libbig.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\logo.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\mimesmall.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\mshareset.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\prefs.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\searchpnl.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\searchstars.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\tabssmall.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\gui\general\transfer.bmp Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\homepage.url Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\data\p2pfilter.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\arabic.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\czech.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\dutch.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\french.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\german.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\italian.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\japanese.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\polish.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\slovak.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\spanish.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\swedish.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\lang\turkish.txt Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\libfaad2.dll Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares\mp3source.ax Em quarentena Trace.File.Ares!A2

c:\documents and settings\user\menu iniciar\programas\ares\ares.lnk Em quarentena Trace.File.Ares!A2

c:\documents and settings\user\menu iniciar\programas\ares\homepage.lnk Em quarentena Trace.File.Ares!A2

c:\arquivos de programas\ares Em quarentena Trace.Directory.Ares!A2

c:\arquivos de programas\ares\data Em quarentena Trace.Directory.Ares!A2

c:\arquivos de programas\ares\data\gui Em quarentena Trace.Directory.Ares!A2

c:\arquivos de programas\ares\data\gui\general Em quarentena Trace.Directory.Ares!A2

c:\arquivos de programas\ares\data\gui\osthemes Em quarentena Trace.Directory.Ares!A2

c:\arquivos de programas\ares\lang Em quarentena Trace.Directory.Ares!A2

c:\documents and settings\user\menu iniciar\programas\ares Em quarentena Trace.Directory.Ares!A2

Em quarentena

Arquivos: 4

Objetos: 89

Cookies: 17

:rolleyes:

DigRam · Junho 18, 2009

Boa Noite! Ionara

<@> Baixe: < Malwarebytes >

<@> Atualize o programa!

<@> Escolha o escaneamento Completo!

<@> Desabilite programas de proteção,ao executar o malwarebytes.

<@> Procure enviar os ítens detectados para a quarentena,clicando em Remover itens.

<@> Para maiores detalhes: < Link >

<><><><><><><><><><><>

<@> Poste,os relatórios: mbam-log-2009-xx-xx (00-00-00).txt + HijackThis,atualizado.

Abraços!

Ionara · Junho 18, 2009

:worship: Boa noite Dig Ram,

Fiz o log do malwarebytes, segue logo abaixo.

Ontem depois que executei o a-squared e no final selecionei os itens e mandei para a quarentena, o meu ares desapareceu...

O que aconteceu?

Desde já obrigada,

Ionara

---------------------------------------------------------------------

Malwarebytes' Anti-Malware 1.38

Versão do banco de dados: 2305

Windows 5.1.2600 Service Pack 2

18/6/2009 20:10:35

mbam-log-2009-06-18 (20-10-35).txt

Tipo de Verificação: Completa (A:\|C:\|D:\|)

Objetos verificados: 166948

Tempo decorrido: 38 minute(s), 9 second(s)

Processos da Memória infectados: 0

Módulos de Memória Infectados: 0

Chaves do Registro infectadas: 0

Valores do Registro infectados: 0

Ítens do Registro infectados: 0

Pastas infectadas: 0

Arquivos infectados: 0

Processos da Memória infectados: