[Arquivado] Virus z-connect

[medin 0]

Aqui venho aqui pra pedir ajuda pois virus z-connect esta kicando eu da net , eu logo ele me desloga simples .

preciso de ajuda ;( .

[wings 22]

Boa noite medin

 

Leia a regra 2.

[medin 0]

Wings perdão por ter esquecido de ter utilizado o HijackThis

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 19:54:33, on 1/12/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe

C:\WINDOWS\Explorer.EXE

C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\PnkBstrB.exe

C:\Arquivos de programas\Analog Devices\SoundMAX\SMax4PNP.exe

C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe

C:\Arquivos de programas\DAEMON Tools\daemon.exe

C:\Arquivos de programas\SlySoft\AnyDVD\AnyDVDtray.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Arquivos comuns\ParetoLogic\PLAS\plasservice.exe

C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe

C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Arquivos de programas\Windows Media Player\wmplayer.exe

C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\Arquivos de programas\Garena\Garena.exe

C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\Hijack\HiJackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.amd.com/blizzard

R3 - URLSearchHook: Barra de Ferramentas do Yahoo! - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Arquivos de programas\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Arquivos de programas\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Programa Auxiliar de Início de Sessão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: Kwyshell MidpX BHO - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - C:\Arquivos de programas\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll

O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Arquivos de programas\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll

O3 - Toolbar: Barra de Ferramentas do Yahoo! - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Arquivos de programas\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Kwyshell MidpX - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - C:\Arquivos de programas\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll

O4 - HKLM\..\Run: [soundMAXPnP] C:\Arquivos de programas\Analog Devices\SoundMAX\SMax4PNP.exe

O4 - HKLM\..\Run: [avast!] C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [DAEMON Tools] "C:\Arquivos de programas\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKCU\..\Run: [AnyDVD] C:\Arquivos de programas\SlySoft\AnyDVD\AnyDVDtray.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Global Startup: Orbit.lnk = C:\Arquivos de programas\Orbitdownloader\orbitdm.exe

O8 - Extra context menu item: &Download by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Grab video by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/202

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Link to &MidpX - C:\Arquivos de programas\Kwyshell\MidpX\JadInvoker\Extent\jad_wrap.htm

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{7BAA2A66-EFC8-46E0-A0F9-3F043BD52128}: NameServer = 200.202.193.75 200.222.0.34

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARQUIV~1\ARQUIV~1\Skype\SKYPE4~1.DLL

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Arquivos de programas\WinPcap\rpcapd.exe

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Arquivos de programas\Spyware Doctor\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Arquivos de programas\Spyware Doctor\pctsSvc.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: plasservice (ZeppelinService) - ParetoLogic Inc. - C:\Arquivos de programas\Arquivos comuns\ParetoLogic\PLAS\plasservice.exe

 

--

End of file - 8809 bytes

[wings 22]

Wings perdão por ter esquecido de ter utilizado o HijackThis

 

Não se preocupe com isso.

 

1.

*Baixe o MalwareBytes Anti-malware e salve-o no desktop:

*Instale o programa

*Ao finalizar, se alguma atualização existir,o download será automático. Aguarde...

*Terminada a atualização, o programa será aberto automaticamente. Feche-o.

*Reinicie o PC em Modo de Segurança (aperte F8 de forma intermitente durante a inicialização do PC e selecione "Modo Seguro)

*Execute o programa através do ícone criado no desktop e na aba [Verificação], selecione a opção [Verificação completa]

*Clique em [Verificar] e selecione as unidades a serem examinadas

*Remova o que for encontrado

*Ao término do scan poderá ser interrogado se deseja remover objetos da memória. Clique [sIM] e finalmente clique em [OK]. Um relatório (mbam-log-ano-mês-data.txt) será apresentado.

*Alguns malwares são rebeldes e necessitam de uma reinicialização para a remoção. Caso isto seja solicitado, clique para reiniciar o PC. Caso não seja solicitado, reinicie o PC manualmente.

*Abra novamente o programa Malwarebytes e na aba [Logs] clique no arquivo mbam-log-ano-mês-data.txt

*Clique em [Abrir], copie, cole-o na sua próxima resposta

[medin 0]

ta ae :)

 

Malwarebytes' Anti-Malware 1.41

Versão do banco de dados: 2775

Windows 5.1.2600 Service Pack 3 (Safe Mode)

 

2/12/2009 20:29:11

mbam-log-2009-12-02 (20-29-11).txt

 

Tipo de Verificação: Completa (C:\|D:\|)

Objetos verificados: 190800

Tempo decorrido: 58 minute(s), 14 second(s)

 

Processos da Memória infectados: 0

Módulos de Memória Infectados: 0

Chaves do Registro infectadas: 0

Valores do Registro infectados: 0

Ítens do Registro infectados: 0

Pastas infectadas: 0

Arquivos infectados: 0

 

Processos da Memória infectados:

(Nenhum ítem malicioso foi detectado)

 

Módulos de Memória Infectados:

(Nenhum ítem malicioso foi detectado)

 

Chaves do Registro infectadas:

(Nenhum ítem malicioso foi detectado)

 

Valores do Registro infectados:

(Nenhum ítem malicioso foi detectado)

 

Ítens do Registro infectados:

(Nenhum ítem malicioso foi detectado)

 

Pastas infectadas:

(Nenhum ítem malicioso foi detectado)

 

Arquivos infectados:

(Nenhum ítem malicioso foi detectado)

[wings 22]

Boa noite medin

 

 

*Baixe o Kaspersky Virus Removal Tool e salve-o no desktop

*Instale o programa

*A tela do programa será aberta

 

*Na aba [Autoscan], selecione todas as opções

*Clique em [start scan]

*Ao término, clique em [Report] > [save to file] e salve o relatório no desktop

*Cole o relatório do scan na sua próxima resposta

[wings 22]

Boa noite medin

 

 

*Baixe o Kaspersky Virus Removal Tool e salve-o no desktop

*Instale o programa

*A tela do programa será aberta

 

*Na aba [Autoscan], selecione todas as opções

*Clique em [start scan]

*Ao término, clique em [Report] > [save to file] e salve o relatório no desktop

*Cole o relatório do scan na sua próxima resposta

[medin 0]

Autoscan: running (events: 70, objects: 321800, time: Unknown)

4/12/2009 08:10:52 Task started

4/12/2009 08:23:12 Detected: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe

4/12/2009 08:23:12 Untreated: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe Postponed

4/12/2009 09:16:32 Detected: Trojan.Win32.Kreeper.bbv C:\Documents and Settings\Usuario\update.exe

4/12/2009 09:16:32 Untreated: Trojan.Win32.Kreeper.bbv C:\Documents and Settings\Usuario\update.exe Postponed

4/12/2009 09:18:40 Detected: Trojan.Win32.Inject.alvp C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5\89CSJVRQ\NeZnaM-KaKoOceS[1].jpg

4/12/2009 09:18:40 Untreated: Trojan.Win32.Inject.alvp C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5\89CSJVRQ\NeZnaM-KaKoOceS[1].jpg Postponed

4/12/2009 09:18:44 Detected: Trojan.Win32.Kreeper.bbv C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5\CDLJJCZ3\NoVaC[1].jpg

4/12/2009 09:18:44 Untreated: Trojan.Win32.Kreeper.bbv C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5\CDLJJCZ3\NoVaC[1].jpg Postponed

4/12/2009 09:34:09 Detected: Trojan.Win32.Inject.alvp C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063512.exe

4/12/2009 09:34:09 Untreated: Trojan.Win32.Inject.alvp C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063512.exe Postponed

4/12/2009 09:34:10 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063535.exe

4/12/2009 09:34:10 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063535.exe Postponed

4/12/2009 09:34:10 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063548.exe

4/12/2009 09:34:10 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063548.exe Postponed

4/12/2009 09:34:11 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063569.exe

4/12/2009 09:34:11 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063569.exe Postponed

4/12/2009 09:34:12 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063598.exe

4/12/2009 09:34:12 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063598.exe Postponed

4/12/2009 09:34:13 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063626.exe

4/12/2009 09:34:13 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063626.exe Postponed

4/12/2009 09:34:13 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063634.exe

4/12/2009 09:34:13 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063634.exe Postponed

4/12/2009 09:34:21 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP108\A0063677.exe

4/12/2009 09:34:22 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP108\A0063677.exe Postponed

4/12/2009 09:34:27 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP108\A0063785.exe

4/12/2009 09:34:27 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP108\A0063785.exe Postponed

4/12/2009 09:59:30 Detected: Trojan.Win32.AutoRun.jm D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP12\A0036924.inf

4/12/2009 09:59:30 Untreated: Trojan.Win32.AutoRun.jm D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP12\A0036924.inf Postponed

4/12/2009 10:00:04 Detected: Trojan-GameThief.Win32.Magania.cans D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP16\A0043617.inf

4/12/2009 10:00:04 Untreated: Trojan-GameThief.Win32.Magania.cans D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP16\A0043617.inf Postponed

4/12/2009 10:00:16 Detected: Trojan-GameThief.Win32.Magania.cans D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP16\A0044616.inf

4/12/2009 10:00:16 Untreated: Trojan-GameThief.Win32.Magania.cans D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP16\A0044616.inf Postponed

4/12/2009 10:02:18 Detected: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe

4/12/2009 10:02:18 Untreated: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe Postponed

4/12/2009 10:06:29 Detected: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe

4/12/2009 10:06:29 Untreated: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe Postponed

4/12/2009 10:06:45 Detected: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe

4/12/2009 10:06:45 Untreated: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe Postponed

4/12/2009 10:13:23 Detected: Trojan.Win32.Kreeper.bbv C:\Documents and Settings\Usuario\update.exe

4/12/2009 10:13:23 Untreated: Trojan.Win32.Kreeper.bbv C:\Documents and Settings\Usuario\update.exe Postponed

4/12/2009 10:14:20 Detected: Trojan.Win32.Inject.alvp C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5\89CSJVRQ\NeZnaM-KaKoOceS[1].jpg

4/12/2009 10:14:20 Untreated: Trojan.Win32.Inject.alvp C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5\89CSJVRQ\NeZnaM-KaKoOceS[1].jpg Postponed

4/12/2009 10:14:23 Detected: Trojan.Win32.Kreeper.bbv C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5\CDLJJCZ3\NoVaC[1].jpg

4/12/2009 10:14:23 Untreated: Trojan.Win32.Kreeper.bbv C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5\CDLJJCZ3\NoVaC[1].jpg Postponed

4/12/2009 10:18:32 Detected: Trojan.Win32.Inject.alvp C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063512.exe

4/12/2009 10:18:32 Untreated: Trojan.Win32.Inject.alvp C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063512.exe Postponed

4/12/2009 10:18:32 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063535.exe

4/12/2009 10:18:32 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063535.exe Postponed

4/12/2009 10:18:32 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063548.exe

4/12/2009 10:18:32 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063548.exe Postponed

4/12/2009 10:18:33 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063569.exe

4/12/2009 10:18:33 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063569.exe Postponed

4/12/2009 10:18:33 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063598.exe

4/12/2009 10:18:33 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063598.exe Postponed

4/12/2009 10:18:33 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063626.exe

4/12/2009 10:18:33 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063626.exe Postponed

4/12/2009 10:18:33 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063634.exe

4/12/2009 10:18:33 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP107\A0063634.exe Postponed

4/12/2009 10:18:35 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP108\A0063677.exe

4/12/2009 10:18:35 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP108\A0063677.exe Postponed

4/12/2009 10:18:36 Detected: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP108\A0063785.exe

4/12/2009 10:18:36 Untreated: Trojan.Win32.Kreeper.bbv C:\System Volume Information\_restore{103BACB6-0798-42BD-9DDB-9E7832F64D69}\RP108\A0063785.exe Postponed

4/12/2009 10:28:25 Detected: Trojan.Win32.AutoRun.jm D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP12\A0036924.inf

4/12/2009 10:28:25 Untreated: Trojan.Win32.AutoRun.jm D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP12\A0036924.inf Postponed

4/12/2009 10:28:52 Detected: Trojan-GameThief.Win32.Magania.cans D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP16\A0043617.inf

4/12/2009 10:28:52 Untreated: Trojan-GameThief.Win32.Magania.cans D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP16\A0043617.inf Postponed

4/12/2009 10:28:53 Detected: Trojan-GameThief.Win32.Magania.cans D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP16\A0044616.inf

4/12/2009 10:28:53 Untreated: Trojan-GameThief.Win32.Magania.cans D:\System Volume Information\_restore{F537752D-1C9B-459C-AF1A-FE1EEB3006E3}\RP16\A0044616.inf Postponed

4/12/2009 10:29:13 Detected: Trojan.Win32.Inject.alvp C:\ACC1\F1C1\acc1.exe

[wings 22]

Boa tarde medin

 

1.

*Desative temporariamente seu antivírus

*Baixe o ComboFix e salve-o no desktop

*Duplo-clique no arquivo Combofix.exe

*Aceite o contrato

*Se o console de recuperação do Windows já estiver instalado, o ComboFix irá continuar o processo automaticamente. Caso não esteja uma janela será aberta. Aceite a instalação do mesmo.

 

*Após a instalação, clique em [sim] para continuar.

 

*Importante: enquanto o ComboFix estiver em execução, não use o mouse nem o teclado!!..... Para interromper o procedimento tecle N ou 2 e depois ENTER.

*O programa será fechado automaticamente

*Cole o relatório criado em C:\combofix.txt

[wings 22]

Tópico Arquivado

 

Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado.

 

Caso você seja o autor do tópico e quer reabrir, envie uma mensagem privada para um moderador da área juntamente com o link para este tópico e explique o motivo da reabertura.