[Resolvido!] paginas que abrem sozinhas

vagasil · Setembro 5, 2009

Já a algum tempo estão aparecendo paginas indesejadas quando acesso a internet, e por possuir o antivírus Panda Internet Security 2009, consultei o suporte técnico deles e apesar de várias tentativas em que meu PC foi verificado com ferramentas como Spybot, Ad-Aware, RegSeeker e outras tantas, o problema continua. Não sei mais o que fazer, mas desisti de consultar o suporte da Panda e resolvi tentar solucionar o problema com ajuda deste fórum, pois sou leigo e já vi que em alguns casos a situação foi resolvida? Segue o arquivo gerado pelo HijackThis. Espero ajuda. Obrigado.

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:59:01, on 4/9/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16876)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\SYSTEM32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\TPSrv.exe

C:\WINDOWS\system32\spoolsv.exe

c:\arquivos de programas\idt\xpv_5902_012208\wdm\STacSV.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PsCtrls.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PavFnSvr.exe

C:\Arquivos de programas\IDT\WDM\sttray.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Arquivos de programas\D-Tools\daemon.exe

C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\APVXDWIN.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE

C:\Arquivos de programas\Arquivos comuns\Panda Security\PavShld\pavprsrv.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PsImSvc.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PskSvc.exe

C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\pavsrv51.exe

c:\arquivos de programas\panda security\panda internet security 2009\firewall\PSHOST.EXE

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\SRVLOAD.EXE

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\WebProxy.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PavBckPT.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\AVENGINE.EXE

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Adobe\Reader 8.0\Reader\AcroRd32.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\psimreal.exe

C:\Arquivos de programas\Internet Explorer\iexplore.exe

C:\Arquivos de programas\Microsoft Office\OFFICE11\WINWORD.EXE

C:\Documents and Settings\Walter\Meus documentos\Meus arquivos recebidos\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &http://home.microsoft.com/intl/br/access/allinone.asp

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.uol.com.br/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [sysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Arquivos de programas\D-Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [RemoteControl] "C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [LanguageShortcut] "C:\Arquivos de programas\CyberLink\PowerDVD\Language\Language.exe"

O4 - HKLM\..\Run: [APVXDWIN] "C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [sCANINICIO] "C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\Inicio.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Arquivos de programas\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Deaf anti locks long] C:\Documents and Settings\All Users\Dados de aplicativos\Program Eq Deaf Anti\Mfcd Stop.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [platformthe] C:\DOCUME~1\Walter\DADOSD~1\LONGLI~1\BowsCool.exe

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Arquivos de programas\Adobe\Reader 8.0\Reader\reader_sl.exe

O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Arquivos de programas\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1251299429375

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O23 - Service: NMIndexingService - Nero AG - C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PsCtrls.exe

O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PavFnSvr.exe

O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Arquivos de programas\Arquivos comuns\Panda Security\PavShld\pavprsrv.exe

O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\pavsrv51.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\arquivos de programas\panda security\panda internet security 2009\firewall\PSHOST.EXE

O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PsImSvc.exe

O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\PskSvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\arquivos de programas\idt\xpv_5902_012208\wdm\STacSV.exe

O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda Internet Security 2009\TPSrv.exe

--

End of file - 8777 bytes

DigRam · Setembro 5, 2009

Bom Dia! vagasil

<@> Baixe: < LopS&D >

<@> Salve-o no Disco Local-C!

<@> Instale o programa e clique em: LopSD.cmd

<@> Na janela que abrir,aperte o "p" --> Aperte Enter.

<@> Em outra janela,aperte a opção: 2 - Fix + Hosts --> Aperte Enter --> Aguarde!

<@> Ps: Fique atento às notificações de seu antivírus,enviando os ficheiros detectados,para a quarentena.

<@> Terminando,salve e poste o relatório. ( C:\Lop SD\LopR_1.txt )

<@> Poste,também,HijackThis atualizado.

Abraços!

vagasil · Setembro 5, 2009

Antes de mais nada obrigado pela atenção.

Embora tenha dado um aviso do Panda(script bloqueado), após o procedimento resultou em um arquivo do Lop que segue:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )

Option : [2] ( s b 05/09/2009| 0:23 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ REMOVIDOS

Deletado! - C:\DOCUME~1\Walter\Cookies\walter@www.adserver5[1].txt

Deletado! - C:\DOCUME~1\Walter\Cookies\walter@advertising.marketnetwork[1].txt

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Lista de pastas em DADOSD~1

[07/05/2009|21:18] C:\DOCUME~1\ADMINI~1\DADOSD~1\Microsoft

[03/09/2009|11:02] C:\DOCUME~1\ALLUSE~1\DADOSD~1\{83C91755-2546-441D-AC40-9A6B4B860800}

[06/07/2009|23:33] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Adobe

[16/07/2009|17:17] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Backup

[26/08/2009|17:14] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Lavasoft

[04/08/2009|09:30] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Microsoft

[07/05/2009|22:10] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Nero

[16/07/2009|17:17] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Panda Security

[04/08/2009|10:02] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Program Eq Deaf Anti

[03/09/2009|11:02] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Spybot - Search & Destroy

[15/08/2009|10:33] C:\DOCUME~1\ALLUSE~1\DADOSD~1\TEMP

[13/07/2009|18:48] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Ubisoft

[07/05/2009|22:17] C:\DOCUME~1\ALLUSE~1\DADOSD~1\Windows Genuine Advantage

[07/05/2009|21:18] C:\DOCUME~1\DEFAUL~1\DADOSD~1\Microsoft

[07/05/2009|21:18] C:\DOCUME~1\LOCALS~1\DADOSD~1\Microsoft

[07/05/2009|21:18] C:\DOCUME~1\NETWOR~1\DADOSD~1\Microsoft

[18/07/2009|14:10] C:\DOCUME~1\Walter\DADOSD~1\Adobe

[07/07/2009|21:01] C:\DOCUME~1\Walter\DADOSD~1\Ahead

[20/07/2009|18:04] C:\DOCUME~1\Walter\DADOSD~1\Help

[07/05/2009|21:22] C:\DOCUME~1\Walter\DADOSD~1\Identities

[13/08/2009|20:25] C:\DOCUME~1\Walter\DADOSD~1\longlinkcash

[07/05/2009|22:19] C:\DOCUME~1\Walter\DADOSD~1\Macromedia

[28/07/2009|20:32] C:\DOCUME~1\Walter\DADOSD~1\Media Player Classic

[26/08/2009|16:36] C:\DOCUME~1\Walter\DADOSD~1\Microsoft

[07/07/2009|20:02] C:\DOCUME~1\Walter\DADOSD~1\Mozilla

[16/07/2009|17:17] C:\DOCUME~1\Walter\DADOSD~1\Panda Security

[14/07/2009|21:13] C:\DOCUME~1\Walter\DADOSD~1\SecuROM

[25/08/2009|15:59] C:\DOCUME~1\Walter\DADOSD~1\TeamViewer

--------------------\\ Tarefas Agendadas na pasta C:\WINDOWS\Tasks

[02/09/2009 17:16][--a------] C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

[05/09/2009 00:15][--a------] C:\WINDOWS\tasks\OGALogon.job

[05/09/2009 00:15][--ah-----] C:\WINDOWS\tasks\SA.DAT

[28/10/2001 14:07][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Lista de pastas em C:\Arquivos de programas

[14/07/2009|19:55] C:\Arquivos de programas\Activision

[06/07/2009|23:32] C:\Arquivos de programas\Adobe

[13/07/2009|18:31] C:\Arquivos de programas\AGEIA Technologies

[01/08/2009|11:57] C:\Arquivos de programas\Ares

[26/07/2009|10:09] C:\Arquivos de programas\Arquivos comuns

[07/05/2009|22:18] C:\Arquivos de programas\call_5

[14/07/2009|21:29] C:\Arquivos de programas\Codemasters

[14/07/2009|22:00] C:\Arquivos de programas\CyberLink

[07/07/2009|20:14] C:\Arquivos de programas\damnation

[07/07/2009|10:29] C:\Arquivos de programas\D-Tools

[14/07/2009|20:58] C:\Arquivos de programas\Electronic Arts

[07/05/2009|21:30] C:\Arquivos de programas\IDT

[27/08/2009|12:26] C:\Arquivos de programas\InstallShield Installation Information

[26/08/2009|17:14] C:\Arquivos de programas\Internet Explorer

[06/07/2009|23:21] C:\Arquivos de programas\K-Lite Codec Pack

[03/09/2009|11:02] C:\Arquivos de programas\Lavasoft

[13/08/2009|20:25] C:\Arquivos de programas\longlinkcash

[27/08/2009|14:43] C:\Arquivos de programas\Marcos Velasco Security

[14/07/2009|19:45] C:\Arquivos de programas\Medal of Honor Airborne

[26/08/2009|12:43] C:\Arquivos de programas\Messenger

[27/08/2009|15:10] C:\Arquivos de programas\Messenger Plus! Live

[26/07/2009|10:29] C:\Arquivos de programas\Microsoft

[07/05/2009|21:19] C:\Arquivos de programas\microsoft frontpage

[06/07/2009|22:52] C:\Arquivos de programas\Microsoft Office

[06/07/2009|22:52] C:\Arquivos de programas\Microsoft Visual Studio

[06/07/2009|22:54] C:\Arquivos de programas\Microsoft Works

[06/07/2009|22:52] C:\Arquivos de programas\Microsoft.NET

[26/08/2009|12:41] C:\Arquivos de programas\Movie Maker

[04/09/2009|20:17] C:\Arquivos de programas\Mozilla Firefox

[26/08/2009|16:41] C:\Arquivos de programas\MSBuild

[07/05/2009|21:16] C:\Arquivos de programas\MSN Gaming Zone

[13/07/2009|15:51] C:\Arquivos de programas\MSXML 4.0

[07/05/2009|22:10] C:\Arquivos de programas\Nero

[26/08/2009|12:39] C:\Arquivos de programas\NetMeeting

[26/08/2009|16:45] C:\Arquivos de programas\Outlook Express

[27/08/2009|12:14] C:\Arquivos de programas\Panda Security

[25/07/2009|16:19] C:\Arquivos de programas\QuickTime

[26/08/2009|16:41] C:\Arquivos de programas\Reference Assemblies

[07/05/2009|21:17] C:\Arquivos de programas\Servi‡os on-line

[03/09/2009|11:02] C:\Arquivos de programas\Spybot - Search & Destroy

[27/08/2009|12:45] C:\Arquivos de programas\Ubisoft

[07/05/2009|21:22] C:\Arquivos de programas\Uninstall Information

[03/09/2009|11:02] C:\Arquivos de programas\Unlocker

[14/07/2009|21:49] C:\Arquivos de programas\Valve

[26/07/2009|10:40] C:\Arquivos de programas\Windows Live

[26/07/2009|10:29] C:\Arquivos de programas\Windows Live SkyDrive

[13/07/2009|18:31] C:\Arquivos de programas\Windows Media Connect 2

[26/08/2009|12:39] C:\Arquivos de programas\Windows Media Player

[26/08/2009|12:39] C:\Arquivos de programas\Windows NT

[07/05/2009|21:17] C:\Arquivos de programas\WindowsUpdate

[27/08/2009|14:40] C:\Arquivos de programas\WinRAR

[07/05/2009|21:19] C:\Arquivos de programas\xerox

--------------------\\ Lista de pastas em C:\Arquivos de programas\Arquivos comuns

[06/07/2009|23:32] C:\Arquivos de programas\Arquivos comuns\Adobe

[07/05/2009|22:10] C:\Arquivos de programas\Arquivos comuns\Ahead

[06/07/2009|22:52] C:\Arquivos de programas\Arquivos comuns\DESIGNER

[07/05/2009|21:53] C:\Arquivos de programas\Arquivos comuns\InstallShield

[26/07/2009|10:29] C:\Arquivos de programas\Arquivos comuns\Microsoft Shared

[07/05/2009|21:17] C:\Arquivos de programas\Arquivos comuns\MSSoap

[07/05/2009|18:12] C:\Arquivos de programas\Arquivos comuns\ODBC

[16/07/2009|17:13] C:\Arquivos de programas\Arquivos comuns\Panda Security

[07/05/2009|21:17] C:\Arquivos de programas\Arquivos comuns\Servi‡os

[07/05/2009|18:12] C:\Arquivos de programas\Arquivos comuns\SpeechEngines

[26/08/2009|12:39] C:\Arquivos de programas\Arquivos comuns\System

[26/07/2009|10:09] C:\Arquivos de programas\Arquivos comuns\Windows Live

[14/07/2009|19:50] C:\Arquivos de programas\Arquivos comuns\Wise Installation Wizard

--------------------\\ Process

( 46 Processes )

... OK !

--------------------\\ Procura pelo S_Lop

Não foram encontradas pastas com o Lop!

--------------------\\ Procura por Arquivos/Ficheiros e pastas do Lop

Não foram encontradas pastas com o Lop!

--------------------\\ Procura no Registro

..... OK !

--------------------\\ Verificando o Arquivos/Ficheiros Hosts

Arquivos/Ficheiros Hosts LIMPO

--------------------\\ Procurando Arquivos/Ficheiros ocultos com o Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-09-05 00:24:49

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 0

--------------------\\ Procurando por outras infecções

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Walter\Desktop\Minijogos\ATARI\Roms - 503\Crackpot.bin

C:\DOCUME~1\Walter\Desktop\Minijogos\Informativos de minijogos\Informativos e seriais diversos\Seriais e cracks.doc

C:\DOCUME~1\Walter\Meus documentos\Jogos\jogos\Renegado\crack

C:\DOCUME~1\Walter\Meus documentos\Jogos\jogos\Renegado\crack2

C:\DOCUME~1\Walter\Meus documentos\Jogos\jogos\Renegado\crack\game.exe

C:\DOCUME~1\Walter\Meus documentos\Jogos\jogos\Renegado\crack2\game.exe

C:\DOCUME~1\Walter\Meus documentos\Meus arquivos recebidos\Call_Of_Juarez_Bound_In_Blood_(Crack_+_Serials).torrent

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\01 - Vibe Tribe - Wise Cracks.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\02 - Vibe Tribe - Dream Catcher.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\03 - Vibe Tribe - Carousel.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\04 - Vibe Tribe - Three Quarters.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\05 - Vibe Tribe - LFObia.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\06 - Vibe Tribe - The Brain.B.Q.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\07 - Vibe Tribe - Bad Habbits.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\08 - Vibe Tribe - Pulse.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\09 - Vibe Tribe - Memories.mp3

C:\DOCUME~1\Walter\Meus documentos\My Shared Folder\e-music\Vibe Tribe - Wise Cracks\10 - X-Noize - The Sperminator (Vibe Tribe Rmx).mp3

C:\DOCUME~1\Walter\Recent\Call_Of_Juarez_Bound_In_Blood_(Crack_+_Serials).lnk

C:\DOCUME~1\Walter\Recent\Crack e serial.lnk

C:\DOCUME~1\Walter\Recent\Crack.lnk

C:\DOCUME~1\Walter\Recent\DamnationCrack_TheKMaker.com.lnk

[F:96][D:8]-> C:\DOCUME~1\Walter\CONFIG~1\Temp

[F:92][D:0]-> C:\DOCUME~1\Walter\Cookies

[F:7627][D:23]-> C:\DOCUME~1\Walter\CONFIG~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - s b 05/09/2009| 0:25 - Option : [2]

--------------------\\ Verificação completa em 0:25:31

O arquivo do Hijacthis:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 00:30:02, on 5/9/2009