[Arquivado] Problemas com AntiVirus

[BoardShop 0]

Oii ! Pessoall =X

 

Como Que Fassoo ! para colokar aanti virus no meu pc =/

 

tipo eu baixooo ! e quando eu vou instalar ! ele fecha Sozinn !!

 

Hellpp Vlw pela Atenção =D

[DaniieL™ 0]

Olá! BoardShop

 

Para que os Analistas possam lhe auxiliar com seu problema

primeiramente poste um Log do HiJackThis conforme este tópico:

 

Regra'>http://forum.imasters.com.br/index.php?/topic/165906-regra-n-02-utilizando-o-hijackthis/"]Regra Nº 02 - Utilizando O Hijackthis.

 

OBS.: Seu pc está infectado por um tipo de virus que bloqueia a instalação de antivirus podendo assim

se manifestar e infectar seu sistema avontade ...

[BoardShop 0]

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:53:56, on 16/10/2009

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe

C:\Arquivos de programas\Nero\Nero 7\InCD\NBHGui.exe

C:\Arquivos de programas\Nero\Nero 7\InCD\InCD.exe

C:\WINDOWS\system32\VTTimer.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\SEC\Natural Color\NaturalColorLoad.exe

C:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Arquivos de programas\LogMeIn Hamachi\hamachi-2.exe

C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe

C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe

C:\WINDOWS\System32\svchost.exe

C:\DOCUME~1\Francis\CONFIG~1\Temp\gmed.exe

C:\DOCUME~1\Francis\CONFIG~1\Temp\bwms.exe

C:\DOCUME~1\Francis\CONFIG~1\Temp\wnmd.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Francis\Desktop\HiJackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &http://home.microsoft.com/intl/br/access/allinone.asp

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2233703

R3 - URLSearchHook: 4shared.com Toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Arquivos de programas\4shared.com\tb4sha.dll

O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Arquivos de programas\Orbitdownloader\orbitcth.dll

O2 - BHO: 4shared.com Toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Arquivos de programas\4shared.com\tb4sha.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)

O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

O3 - Toolbar: 4shared.com Toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - C:\Arquivos de programas\4shared.com\tb4sha.dll

O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Arquivos de programas\Arquivos comuns\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin

O4 - HKLM\..\Run: [RemoteControl] "C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [LanguageShortcut] "C:\Arquivos de programas\CyberLink\PowerDVD\Language\Language.exe"

O4 - HKLM\..\Run: [LGODDFU] "C:\Arquivos de programas\lg_fwupdate\fwupdate.exe" blrun

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [securDisc] C:\Arquivos de programas\Nero\Nero 7\InCD\NBHGui.exe

O4 - HKLM\..\Run: [inCD] C:\Arquivos de programas\Nero\Nero 7\InCD\InCD.exe

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [startCCC] "C:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [4shared Update] "C:\Arquivos de programas\4shared Desktop\checkUpdate.exe"

O4 - HKLM\..\Run: [Part browse safe hold] C:\Documents and Settings\All Users.WINDOWS\Dados de aplicativos\Audio 4 part browse\Gpl Idol.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Arquivos de programas\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [dog that] C:\DOCUME~1\Francis\DADOSD~1\FILEAM~1\bend vga pile.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Arquivos de programas\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [4shared Desktop] "C:\Arquivos de programas\4shared Desktop\desktop.exe" "startup"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: Reboot.exe

O4 - Global Startup: NaturalColorLoad.lnk = ?

O4 - Global Startup: Orbit.lnk = C:\Arquivos de programas\Orbitdownloader\orbitdm.exe

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O8 - Extra context menu item: &Download all 4shared files - C:\Arquivos de programas\4shared Desktop\down_all.htm

O8 - Extra context menu item: &Download by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Download using 4shared Desktop - C:\Arquivos de programas\4shared Desktop\down_link.htm

O8 - Extra context menu item: &Grab video by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/202

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O17 - HKLM\System\CCS\Services\Tcpip\..\{C0B595BC-DAD2-44F5-9622-47E0C7542947}: NameServer = 200.204.0.10 200.204.0.138

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Arquivos de programas\Arquivos comuns\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Arquivos de programas\LogMeIn Hamachi\hamachi-2.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe

O23 - Service: NBService - Nero AG - C:\Arquivos de programas\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe

 

--

End of file - 7004 bytes

[wings 22]

Boa noite BoardShop

 

Há duas contaminações no seu PC. Uma pode ser Sality a outra é simples de resolver. O Sality muitas vezes vem através do uso de cracks, keygens, etc...e acaba contaminando todos os arquivos .exe do seu PC.

 

O arquivo que possa ter contaminado seu PC pode estar no Pendrive ou num CD. Portanto, recomendo que antes de tentar algo, você faça um backup dos seus arquivos pessoais (.doc, .jpeg, etc...) exceto arquivos .exe e salve-os no Pendrive. Recomendo que faça antes uma formatação do seu Pendrive.

 

Informe quando terminar o backup.

[BoardShop 0]

Opss ! OK

 

Vou fazer backup !?

 

mais de musicas TAMBEMM !?

[wings 22]

A contaminação costuma ser de arquivos .exe e .scr.

[BoardShop 0]

Temm Como Resolver !?

 

a Vou relatar erros !

 

Eu nao consigo utilizar o modo de Segurança .

e Quando reinicioo o pc . Depois de 15 Minutos

consigo ligar DENOVO !

 

Tem como me ajudarr PLS !?

 

aaa.. E Meu Gerenciador de tarefas.. eoo Meo REGEDIT . taoo desabilitadoo !

 

Mais eu reabiliteii por um programa ! mais aiii ele blokeiiaa sozinn dinovo =D

 

Por isso Quero Anti Virus ! VLW

[wings 22]

Temm Como Resolver !?

 

Eu nao consigo utilizar o modo de Segurança .

e Quando reinicioo o pc . Depois de 15 Minutos

consigo ligar DENOVO !

 

Tem como me ajudarr PLS !?

 

aaa.. E Meu Gerenciador de tarefas.. eoo Meo REGEDIT . taoo desabilitadoo !

 

Mais eu reabiliteii por um programa ! mais aiii ele blokeiiaa sozinn dinovo =D

 

Por isso Quero Anti Virus ! VLW

 

Vamos tentar resolver...dependendo da versão do Sality a solução pode ser simples, porém há versões que eu "jogo a toalha". Aí, a solução mais rápida seria a formatação...

 

Fez o backup?

 

Caso positivo, vamos lá!..como ele não deve deixar você acessar sites de segurança, eu acabei hospedando o arquivo num site.

 

1.

*Baixe o SalityKiller e salve-o no desktop

*Extraia o seu conteúdo para C:\

*Desative a Restauração do Sistema

 

Clique com o botão direito do mouse em Meu Computador > Propriedades > Restauração do Sistema > Desativar Restauração do Sistema > OK > Sim

*Este programa irá rodar em 2 janelas distintas ao mesmo tempo!!

 

*A primeira janela:

*Clique em [iniciar] > [Executar] > copie e cole: C:\salitykiller.exe -m

*Clique [OK]

*Mantenha a janela rodando. Não feche-a!! Se desejar, minimize-a.

 

*A segunda janela:

*Clique em [iniciar] > [Executar] > copie e cole: C:\salitykiller.exe -y -x -j -l sality.txt -v

*Clique [OK]

*Ao término, a janela 2 será fechada automaticamente. Feche, então, a janela 1.

*Cole o resumo localizado no final do arquivo C:\sality.txt conforme o texto em destaque:

 

Infected files: 6382

19:59:42 Infected processes: 0

19:59:42 Infected threads: 0

19:59:42 Cured files: 5808

19:59:42 Executed registry scripts: 1

[BoardShop 0]

Eu nao entendii !?

 

tipoo !

 

eu abro aparece scanigg e fexa =X

[wings 22]

Eu nao entendii !?

 

tipoo !

 

eu abro aparece scanigg e fexa =X

 

Você está seguindo as orientações corretamente?

 

*A primeira janela:

*Clique em [iniciar] > [Executar] > digite: C:\salitykiller.exe -m

*Clique [OK]

*Mantenha a janela rodando. Não feche-a!! Se desejar, minimize-a.

Observe que há um espaço entre salitykiller.exe e -m

 

*A segunda janela:

*Clique em [iniciar] > [Executar] > digite: C:\salitykiller.exe -y -x -j -l sality.txt -v

*Clique [OK]

*Ao término, a janela 2 será fechada automaticamente. Feche, então, a janela 1.

Observe que há espaços C:\salitykiller.exe <espaço> -y <espaço> -x <espaço> -j <espaço> -l <espaço> sality.txt <espaço> -v

[BoardShop 0]

kara nao aparece nada disso naoo huehue !

 

Seh pode Me ADD No msn !?

 

Dimenor_1576@hotmail.com

[wings 22]

OK...vamos lá!!

 

 

1.

*Acesse o link abaixo:

http://securityresponse.symantec.com/avcenter/UnHookExec.inf

*Clique com o botão direito do mouse na página e selecione "Salvar como"...

*Salve no desktop

*Dê um clique com o botão direito do mouse no arquivo UnHookExec.inf e selecione "Instalar".

 

2.

*Baixe o Norman Malware Cleaner e salve-o no desktop

 

*Renomei o arquivo para Norman_Malware_Cleaner.cmd

*Duplo clique em Norman_Malware_Cleaner.cmd

*Instale o programa

*Para adicionar unidades fixas (C:\, D:\) de seu computador clique em [Add]

*Clique em [start Scan] e aguarde o término

*Cole o relatório criado no desktop

[BoardShop 0]

mano burrisse minha =/

 

Vou fazer isso

Você está seguindo as orientações corretamente?

 

*A primeira janela:

*Clique em [iniciar] > [Executar] > digite: C:\salitykiller.exe -m

*Clique [OK]

*Mantenha a janela rodando. Não feche-a!! Se desejar, minimize-a.

Observe que há um espaço entre salitykiller.exe e -m

 

*A segunda janela:

*Clique em [iniciar] > [Executar] > digite: C:\salitykiller.exe -y -x -j -l sality.txt -v

*Clique [OK]

*Ao término, a janela 2 será fechada automaticamente. Feche, então, a janela 1.

Observe que há espaços C:\salitykiller.exe <espaço> -y <espaço> -x <espaço> -j <espaço> -l <espaço> sality.txt <espaço> -v

[BoardShop 0]

vou mandar o o logg .. do Salty

 

 

Nome do host: JO-0540A0E7CA8E

Nome do sistema operacional: Microsoft Windows XP Professional

VersÆo do sistema operacional: 5.1.2600 Service Pack 2 compila‡Æo 2600

Fabricante do sistema operacional: Microsoft Corporation

Configura‡Æo do SO: Esta‡Æo de trabalho aut“noma

Tipo de compila‡Æo do sistema operacional: Uniprocessor Free

Propriet rio registrado: JoÆo Victor

Organiza‡Æo registrada:

Identifica‡Æo do produto: 55274-640-0187892-23042

Data da instala‡Æo original: 15/9/2009, 15:54:03

Tempo de ativa‡Æo do sistema: 0 dia(s), 7 hora(s0, 54 minuto(s), 3 segundo(s)

Fabricante do sistema: PCCHIPS

Modelo do sistema: P25G

Tipo de sistema: X86-based PC

Processador(es): 1 processador(es) instalado(s).

[01]: x86 Family 15 Model 4 Stepping 1 GenuineIntel ~2660 Mhz

VersÆo do BIOS: P4M800 - 42302e31

Pasta do Windows: C:\WINDOWS

Pasta do sistema: C:\WINDOWS\system32

Inicializar dispositivo: \Device\HarddiskVolume1

Localidade do sistema: pt-br;Portuguˆs (Brasil)

Localidade de entrada: pt-br;Portuguˆs (Brasil)

Fuso hor rio: N/A

Mem¢ria f¡sica total: 1.022 MB

Mem¢ria f¡sica dispon¡vel: 442 MB

Mem¢ria virtual: tamanho m ximo: 2.048 MB

Mem¢ria virtual: dispon¡vel: 2.008 MB

Mem¢ria virtual: em uso: 40 MB

Local(is) de arquivo de pagina‡Æo: C:\pagefile.sys

Dom¡nio: GRUPO

Servidor de logon: \\JO-0540A0E7CA8E

Hotfix(es): 108 hotfix(es) instalado(s).

[01]: File 1

[02]: File 1

[03]: File 1

[04]: File 1

[05]: File 1

[06]: File 1

[07]: File 1

[08]: File 1

[09]: File 1

[10]: File 1

[11]: File 1

[12]: File 1

[13]: File 1

[14]: File 1

[15]: File 1

[16]: File 1

[17]: File 1

[18]: File 1

[19]: File 1

[20]: File 1

[21]: File 1

[22]: File 1

[23]: File 1

[24]: File 1

[25]: File 1

[26]: File 1

[27]: File 1

[28]: File 1

[29]: File 1

[30]: File 1

[31]: File 1

[32]: File 1

[33]: File 1

[34]: File 1

[35]: File 1

[36]: File 1

[37]: File 1

[38]: File 1

[39]: File 1

[40]: File 1

[41]: File 1

[42]: File 1

[43]: File 1

[44]: File 1

[45]: File 1

[46]: File 1

[47]: File 1

[48]: File 1

[49]: File 1

[50]: File 1

[51]: Q147222

[52]: Q954430

[53]: KB952069_WM9

[54]: KB954155_WM9

[55]: KB968816_WM9

[56]: KB973540_WM9L

[57]: KB941569

[58]: KB893803v2 - Update

[59]: KB898461 - Update

[60]: KB944338-v2 - Update

[61]: KB958470 - Update

[62]: KB971032 - Update

[63]: KB971961 - Update

[64]: KB923561 - Update

[65]: KB946648 - Update

[66]: KB950762 - Update

[67]: KB950974 - Update

[68]: KB951066 - Update

[69]: KB951376-v2 - Update

[70]: KB951748 - Update

[71]: KB952004 - Update

[72]: KB952287 - Update

[73]: KB952954 - Update

[74]: KB955069 - Update

[75]: KB956572 - Update

[76]: KB956802 - Update

[77]: KB956803 - Update

[78]: KB956844 - Update

[79]: KB957097 - Update

[80]: KB958644 - Update

[81]: KB958687 - Update

[82]: KB958869 - Update

[83]: KB959426 - Update

[84]: KB960803 - Update

[85]: KB960859 - Update

[86]: KB961371-v2 - Update

[87]: KB961501 - Update

[88]: KB967715 - Update

[89]: KB968389 - Update

[90]: KB968537 - Update

[91]: KB969059 - Update

[92]: KB970238 - Update

[93]: KB970653-v3 - Update

[94]: KB971486 - Update

[95]: KB971557 - Update

[96]: KB971633 - Update

[97]: KB971657 - Update

[98]: KB973354 - Update

[99]: KB973507 - Update

[100]: KB973525 - Update

[101]: KB973815 - Update

[102]: KB973869 - Update

[103]: KB974112 - Update

[104]: KB974455 - Update

[105]: KB974571 - Update

[106]: KB975025 - Update

[107]: KB975467 - Update

[108]: XpsEPSC

placa(s) de rede: 2 NIC(s) instalado(s).

[01]: VIA PCI 10/100Mb Fast Ethernet Adapter

Nome da conexÆo: ConexÆo local

DHCP ativado: Sim

Servidor DHCP: 10.0.0.138

Endere‡o(es) IP

[01]: 10.0.0.1

[02]: Hamachi Network Interface

Nome da conexÆo: Hamachi

DHCP ativado: Sim

Servidor DHCP: 5.0.0.1

Endere‡o(es) IP

[01]: 5.146.176.126

19:26:58:656 4540 scanning threads ...

19:26:58:671 4540 KillThreads: Scan process PID: 656 Name "smss.exe" ThreadCount 3

19:26:58:671 4540 ScanThread: Thread 660 base addr: 4858A4C8

19:26:58:671 4540 ScanThread: Thread 664 base addr: 485893B2

19:26:58:671 4540 ScanThread: Thread 668 base addr: 2E2

19:26:58:671 4540 KillThreads: Scan process PID: 724 Name "csrss.exe" ThreadCount 14

19:26:58:671 4540 ScanThread: Thread 732 base addr: F708DF49

19:26:58:671 4540 ScanThread: VirtualQueryEx error 87

19:26:58:671 4540 ScanThread: Thread 760 base addr: 75B3B329

19:26:58:671 4540 ScanThread: Thread 764 base addr: 75B354A4

19:26:58:671 4540 ScanThread: Thread 768 base addr: 75B14616

19:26:58:671 4540 ScanThread: Thread 772 base addr: 75B13B3A

19:26:58:671 4540 ScanThread: Thread 784 base addr: 75B14616

19:26:58:671 4540 ScanThread: Thread 788 base addr: 75B3B0F7

19:26:58:671 4540 ScanThread: Thread 792 base addr: 75B3B0F7

19:26:58:671 4540 ScanThread: Thread 840 base addr: 75B3B0F7

19:26:58:671 4540 ScanThread: Thread 1916 base addr: 75B3B59C

19:26:58:671 4540 ScanThread: Thread 1984 base addr: 75B14616

19:26:58:671 4540 ScanThread: Thread 1236 base addr: 75B32272

19:26:58:687 4540 ScanThread: Thread 220 base addr: 75B14616

19:26:58:687 4540 ScanThread: Thread 192 base addr: 75B14616

19:26:58:687 4540 KillThreads: Scan process PID: 776 Name "winlogon.exe" ThreadCount 24

19:26:58:687 4540 ScanThread: Thread 780 base addr: 103D353

19:26:58:687 4540 ScanThread: Thread 804 base addr: 77DB6BF9

19:26:58:687 4540 ScanThread: Thread 808 base addr: 7C927125

19:26:58:687 4540 ScanThread: Thread 812 base addr: 7C910250

19:26:58:687 4540 ScanThread: Thread 816 base addr: 77DB6BF9

19:26:58:703 4540 ScanThread: Thread 828 base addr: 7C928C87

19:26:58:703 4540 ScanThread: Thread 1624 base addr: 10002B30

19:26:58:703 4540 ScanThread: Thread 1628 base addr: 100016A0

19:26:58:718 4540 ScanThread: Thread 1644 base addr: 1039156

19:26:58:718 4540 ScanThread: Thread 1648 base addr: 765D2DC9

19:26:58:718 4540 ScanThread: Thread 1380 base addr: 72CD30E8

19:26:58:718 4540 ScanThread: Thread 1488 base addr: 76B24DD6

19:26:58:718 4540 ScanThread: Thread 1264 base addr: 769A8831

19:26:58:718 4540 ScanThread: Thread 2584 base addr: 769B3CF1

19:26:58:734 4540 ScanThread: Thread 2588 base addr: 769B3CF1

19:26:58:734 4540 ScanThread: Thread 2624 base addr: 76C4C86B

19:26:58:734 4540 ScanThread: Thread 2628 base addr: 76C4C5AE

19:26:58:734 4540 ScanThread: Thread 2632 base addr: 76C4C5AE

19:26:58:734 4540 ScanThread: Thread 3220 base addr: 7C810669

19:26:58:750 4540 ScanThread: Thread 3940 base addr: 7C810669

19:26:58:750 4540 ScanThread: Thread 2524 base addr: 77DB6BF9

19:26:58:750 4540 ScanThread: Thread 5324 base addr: 77DB6BF9

19:26:58:750 4540 ScanThread: Thread 4312 base addr: 77DB6BF9

19:26:58:765 4540 ScanThread: Thread 1840 base addr: 77DB6BF9

19:26:58:765 4540 KillThreads: Scan process PID: 820 Name "services.exe" ThreadCount 16

19:26:58:765 4540 ScanThread: Thread 884 base addr: 7C927125

19:26:58:765 4540 ScanThread: Thread 892 base addr: 7C9105BA

19:26:58:765 4540 ScanThread: Thread 896 base addr: 7C928C87

19:26:58:781 4540 ScanThread: Thread 964 base addr: 7C910250

19:26:58:781 4540 ScanThread: Thread 972 base addr: 7C810669

19:26:58:781 4540 ScanThread: Thread 980 base addr: 776A39C0

19:26:58:781 4540 ScanThread: Thread 1036 base addr: 100A4D2

19:26:58:796 4540 ScanThread: Thread 1080 base addr: 64DAC

19:26:58:796 4540 ScanThread: Thread 1508 base addr: 7589349F

19:26:58:796 4540 ScanThread: Thread 1512 base addr: 75895DF7

19:26:58:796 4540 ScanThread: Thread 1288 base addr: 7C810669

19:26:58:796 4540 ScanThread: Thread 3284 base addr: 7C810669

19:26:58:812 4540 ScanThread: Thread 2596 base addr: 5FBF3E24

19:26:58:812 4540 ScanThread: Thread 2600 base addr: 5FBF1D97

19:26:58:812 4540 ScanThread: Thread 2096 base addr: 77DB6BF9

19:26:58:812 4540 ScanThread: Thread 5624 base addr: 77DB6BF9

19:26:58:812 4540 KillThreads: Scan process PID: 832 Name "lsass.exe" ThreadCount 21

19:26:58:812 4540 ScanThread: Thread 844 base addr: 75427F94

19:26:58:828 4540 ScanThread: Thread 848 base addr: 7C927125

19:26:58:828 4540 ScanThread: Thread 852 base addr: 7C910250

19:26:58:828 4540 ScanThread: Thread 856 base addr: 7C928C87

19:26:58:828 4540 ScanThread: Thread 860 base addr: 6D0D8

19:26:58:828 4540 ScanThread: Thread 876 base addr: 7C9105BA

19:26:58:843 4540 ScanThread: Thread 908 base addr: 77DB6BF9

19:26:58:843 4540 ScanThread: Thread 916 base addr: 72E5D

19:26:58:843 4540 ScanThread: Thread 928 base addr: 75418C7B

19:26:58:843 4540 ScanThread: Thread 956 base addr: 75418C7B

19:26:58:859 4540 ScanThread: Thread 2760 base addr: 77F6DE99

19:26:58:859 4540 ScanThread: Thread 3012 base addr: 77C1A341

19:26:58:859 4540 ScanThread: Thread 3016 base addr: 77C1A341

19:26:58:859 4540 ScanThread: Thread 3020 base addr: 77C1A341

19:26:58:875 4540 ScanThread: Thread 872 base addr: 769A8831

19:26:58:875 4540 ScanThread: Thread 2568 base addr: 7C810669

19:26:58:875 4540 ScanThread: Thread 5188 base addr: 7C810669

19:26:58:890 4540 ScanThread: Thread 5660 base addr: 67B52

19:26:58:890 4540 ScanThread: Thread 976 base addr: 75418C7B

19:26:58:890 4540 ScanThread: Thread 4912 base addr: 75418C7B

19:26:58:890 4540 ScanThread: Thread 3788 base addr: 77DB6BF9

19:26:58:890 4540 KillThreads: Scan process PID: 1004 Name "ati2evxx.exe" ThreadCount 4

19:26:58:890 4540 ScanThread: Thread 1008 base addr: 45FD6E

19:26:58:906 4540 ScanThread: Thread 1012 base addr: 77F6DE99

19:26:58:906 4540 ScanThread: Thread 1028 base addr: 42B4B0

19:26:58:921 4540 ScanThread: Thread 1120 base addr: 40B7C0

19:26:58:921 4540 KillThreads: Scan process PID: 1020 Name "svchost.exe" ThreadCount 17

19:26:58:921 4540 ScanThread: Thread 1024 base addr: 1002509

19:26:58:921 4540 ScanThread: Thread 1060 base addr: 7C927125

19:26:58:921 4540 ScanThread: Thread 1072 base addr: 7C928C87

19:26:58:937 4540 ScanThread: Thread 1868 base addr: 766FFE60

19:26:58:937 4540 ScanThread: Thread 1876 base addr: 320

19:26:58:937 4540 ScanThread: Thread 1880 base addr: 314

19:26:58:937 4540 ScanThread: Thread 1884 base addr: 766EE99C

19:26:58:937 4540 ScanThread: Thread 1888 base addr: 766EE894

19:26:58:937 4540 ScanThread: Thread 1892 base addr: 766EA72E

19:26:58:937 4540 ScanThread: Thread 1900 base addr: 769A8831

19:26:58:953 4540 ScanThread: Thread 1904 base addr: 7C810669

19:26:58:953 4540 ScanThread: Thread 2120 base addr: 7C910250

19:26:58:953 4540 ScanThread: Thread 2900 base addr: 7C810669

19:26:58:968 4540 ScanThread: Thread 5212 base addr: 7C810669

19:26:58:968 4540 ScanThread: Thread 4596 base addr: 7C810669

19:26:58:968 4540 ScanThread: Thread 5820 base addr: 7C810669

19:26:58:984 4540 ScanThread: Thread 4916 base addr: 77DB6BF9

19:26:58:984 4540 KillThreads: Scan process PID: 1088 Name "svchost.exe" ThreadCount 10

19:26:58:984 4540 ScanThread: Thread 1092 base addr: 1002509

19:26:58:984 4540 ScanThread: Thread 1100 base addr: 77F6DE99

19:26:58:984 4540 ScanThread: Thread 1104 base addr: 7C927125

19:26:59:0 4540 ScanThread: Thread 1108 base addr: 7C910250

19:26:59:0 4540 ScanThread: Thread 1112 base addr: 7C928C87

19:26:59:0 4540 ScanThread: Thread 1128 base addr: 7C810669

19:26:59:15 4540 ScanThread: Thread 3412 base addr: 72E7A

19:26:59:15 4540 ScanThread: Thread 4708 base addr: 7C810669

19:26:59:15 4540 ScanThread: Thread 4404 base addr: 77DB6BF9

19:26:59:15 4540 ScanThread: Thread 836 base addr: 76A7E2B0

19:26:59:31 4540 KillThreads: Scan process PID: 1448 Name "svchost.exe" ThreadCount 190

19:26:59:31 4540 ScanThread: Thread 1452 base addr: 1002509

19:26:59:31 4540 ScanThread: Thread 1456 base addr: 72E77

19:26:59:31 4540 ScanThread: Thread 1460 base addr: 7C927125

19:26:59:31 4540 ScanThread: Thread 1484 base addr: 77F6DE99

19:26:59:31 4540 ScanThread: Thread 1516 base addr: 62C01

19:26:59:31 4540 ScanThread: Thread 1560 base addr: 76D6AE19

19:26:59:31 4540 ScanThread: Thread 1752 base addr: 7C910250

19:26:59:46 4540 ScanThread: Thread 1872 base addr: 77F6DE99

19:26:59:46 4540 ScanThread: Thread 2028 base addr: 66421AAC

19:26:59:46 4540 ScanThread: Thread 356 base addr: 77DB6BF9

19:26:59:62 4540 ScanThread: Thread 360 base addr: 77646BB2

19:26:59:62 4540 ScanThread: Thread 364 base addr: 77F6DE99

19:26:59:62 4540 ScanThread: Thread 376 base addr: 77F6DE99

19:26:59:62 4540 ScanThread: Thread 456 base addr: 7C810669

19:26:59:78 4540 ScanThread: Thread 464 base addr: 7C810669

19:26:59:78 4540 ScanThread: Thread 472 base addr: 76B5B153

19:26:59:78 4540 ScanThread: Thread 476 base addr: 76B5A89A

19:26:59:78 4540 ScanThread: Thread 492 base addr: 76B5A597

19:26:59:93 4540 ScanThread: Thread 496 base addr: 71A38

19:26:59:93 4540 ScanThread: Thread 1548 base addr: 7C9105BA

19:26:59:93 4540 ScanThread: Thread 2448 base addr: 5696

19:26:59:93 4540 ScanThread: Thread 2592 base addr: D97779

19:26:59:93 4540 ScanThread: Thread 2640 base addr: 77F6DE99

19:26:59:93 4540 ScanThread: Thread 2728 base addr: 1AF8

19:26:59:93 4540 ScanThread: Thread 3112 base addr: 77DB6BF9

19:26:59:109 4540 ScanThread: Thread 3664 base addr: 769A8831

19:26:59:109 4540 ScanThread: Thread 3668 base addr: 77F6DE99

19:26:59:109 4540 ScanThread: Thread 3676 base addr: 767A28DE

19:26:59:109 4540 ScanThread: Thread 3800 base addr: 77F6DE99

19:26:59:125 4540 ScanThread: Thread 3860 base addr: 776A39C0

19:26:59:125 4540 ScanThread: Thread 3864 base addr: 774D319A

19:26:59:125 4540 ScanThread: Thread 3912 base addr: 77F6DE99

19:26:59:140 4540 ScanThread: Thread 3984 base addr: 3B2E7

19:26:59:140 4540 ScanThread: Thread 3988 base addr: 776D6207

19:26:59:140 4540 ScanThread: Thread 4020 base addr: 7C810669

19:26:59:140 4540 ScanThread: Thread 1232 base addr: 5E2B73AE

19:26:59:156 4540 ScanThread: Thread 1864 base addr: 5E2B73AE

19:26:59:156 4540 ScanThread: Thread 1980 base addr: 5E2B73AE

19:26:59:171 4540 ScanThread: Thread 416 base addr: 5E2B73AE

19:26:59:171 4540 ScanThread: Thread 1524 base addr: 7C810669

19:26:59:187 4540 ScanThread: Thread 316 base addr: 733B5033

19:26:59:187 4540 ScanThread: Thread 1808 base addr: 77F6DE99

19:26:59:187 4540 ScanThread: Thread 2540 base addr: 75F17B5E

19:26:59:187 4540 ScanThread: Thread 3796 base addr: 7C810669

19:26:59:203 4540 ScanThread: Thread 3828 base addr: 7C810669

19:26:59:203 4540 ScanThread: Thread 1924 base addr: 580DE2A8

19:26:59:203 4540 ScanThread: Thread 1220 base addr: 71FD1A18

19:26:59:203 4540 ScanThread: Thread 544 base addr: 58146DD4

19:26:59:203 4540 ScanThread: Thread 268 base addr: 58129BC0

19:26:59:203 4540 ScanThread: Thread 2488 base addr: 58191F91

19:26:59:203 4540 ScanThread: Thread 2508 base addr: 58163F47

19:26:59:203 4540 ScanThread: Thread 2512 base addr: 76E9E104

19:26:59:203 4540 ScanThread: Thread 2544 base addr: 5FBC3C44

19:26:59:203 4540 ScanThread: Thread 2552 base addr: 5FBF1C49

19:26:59:218 4540 ScanThread: Thread 1612 base addr: 5FBF1C49

19:26:59:218 4540 ScanThread: Thread 2644 base addr: 7222BB4D

19:26:59:218 4540 ScanThread: Thread 3032 base addr: 77C1A341

19:26:59:218 4540 ScanThread: Thread 3096 base addr: 74EC2555

19:26:59:218 4540 ScanThread: Thread 256 base addr: 71A1D2C6

19:26:59:218 4540 ScanThread: Thread 2920 base addr: D9EAE7

19:26:59:218 4540 ScanThread: Thread 2984 base addr: D989AC

19:26:59:218 4540 ScanThread: Thread 2992 base addr: D9CA40

19:26:59:218 4540 ScanThread: Thread 2124 base addr: D9CAAE

19:26:59:218 4540 ScanThread: Thread 2996 base addr: D9B093

19:26:59:218 4540 ScanThread: Thread 3808 base addr: D9C779

19:26:59:218 4540 ScanThread: Thread 3420 base addr: D9C779

19:26:59:218 4540 ScanThread: Thread 3520 base addr: D9C6EE

19:26:59:218 4540 ScanThread: Thread 2804 base addr: 7C910250

19:26:59:234 4540 ScanThread: Thread 3704 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3708 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3712 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 1712 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3604 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3724 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3632 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 1720 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 460 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3736 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3740 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3744 base addr: D9C5AB

19:26:59:234 4540 ScanThread: Thread 3748 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3752 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 2832 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 1276 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3456 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3576 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3756 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3768 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3772 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3560 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3584 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 1856 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3776 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3732 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3848 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3816 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3820 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 3824 base addr: D9C5AB

19:26:59:250 4540 ScanThread: Thread 588 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3844 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 384 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 548 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 2024 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3792 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 1240 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3000 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 252 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3416 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3720 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3680 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3852 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 2732 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3688 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3656 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3872 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3876 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3900 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3880 base addr: D9C5AB

19:26:59:265 4540 ScanThread: Thread 3868 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 2008 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3920 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 2848 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3924 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3928 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3932 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3944 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3948 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3952 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3956 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3960 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3968 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 728 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 824 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3904 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3888 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3908 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3832 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 3856 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 2468 base addr: D9C5AB

19:26:59:281 4540 ScanThread: Thread 2792 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 1952 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4028 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 184 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4036 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4040 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4044 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4048 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4056 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4072 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4076 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 2412 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 2408 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 2604 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 208 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 1144 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 3024 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 3608 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 4000 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 272 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 248 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 236 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 300 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 944 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 1588 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 1596 base addr: D9C5AB

19:26:59:296 4540 ScanThread: Thread 528 base addr: D9C5AB

19:26:59:312 4540 ScanThread: Thread 564 base addr: D9C5AB

19:26:59:312 4540 ScanThread: Thread 592 base addr: D9C5AB

19:26:59:312 4540 ScanThread: Thread 3388 base addr: 7C910250

19:26:59:312 4540 ScanThread: Thread 3444 base addr: 7C910250

19:26:59:312 4540 ScanThread: Thread 1632 base addr: DE68

19:26:59:312 4540 ScanThread: Thread 3700 base addr: 74EC742E

19:26:59:312 4540 ScanThread: Thread 260 base addr: D9C779

19:26:59:312 4540 ScanThread: Thread 5604 base addr: 7C810669

19:26:59:328 4540 ScanThread: Thread 4852 base addr: 71A44

19:26:59:328 4540 ScanThread: Thread 5544 base addr: 7C810669

19:26:59:328 4540 ScanThread: Thread 6016 base addr: 76B6709D

19:26:59:343 4540 ScanThread: Thread 4092 base addr: 7C810669

19:26:59:343 4540 ScanThread: Thread 1472 base addr: 751D9A1E

19:26:59:343 4540 ScanThread: Thread 5264 base addr: 72E70

19:26:59:343 4540 ScanThread: Thread 4368 base addr: 774D319A

19:26:59:359 4540 ScanThread: Thread 6132 base addr: 7C928C87

19:26:59:359 4540 ScanThread: Thread 5344 base addr: 7665F010

19:26:59:437 4540 ScanThread: Thread 4472 base addr: 7665F0A3

19:26:59:437 4540 ScanThread: Thread 5308 base addr: 7665F0A3

19:26:59:437 4540 ScanThread: Thread 2852 base addr: 7665F0A3

19:26:59:453 4540 ScanThread: Thread 3120 base addr: 71A3E

19:26:59:453 4540 ScanThread: Thread 5772 base addr: 7C810669

19:26:59:453 4540 ScanThread: Thread 4296 base addr: 72E79

19:26:59:453 4540 ScanThread: Thread 4636 base addr: 72E6E

19:26:59:453 4540 KillThreads: Scan process PID: 1520 Name "svchost.exe" ThreadCount 6

19:26:59:453 4540 ScanThread: Thread 1536 base addr: 1002509

19:26:59:453 4540 ScanThread: Thread 1728 base addr: 767556A3

19:26:59:453 4540 ScanThread: Thread 1732 base addr: 7675464B

19:26:59:453 4540 ScanThread: Thread 4168 base addr: 71080

19:26:59:453 4540 ScanThread: Thread 5764 base addr: 7108F

19:26:59:453 4540 ScanThread: Thread 4440 base addr: 7C810669

19:26:59:468 4540 KillThreads: Scan process PID: 1636 Name "ati2evxx.exe" ThreadCount 6

19:26:59:468 4540 ScanThread: Thread 1640 base addr: 45FD6E

19:26:59:468 4540 ScanThread: Thread 240 base addr: 42C450

19:26:59:468 4540 ScanThread: Thread 264 base addr: 42C070

19:26:59:468 4540 ScanThread: Thread 1416 base addr: CA2B30

19:26:59:468 4540 ScanThread: Thread 1420 base addr: CA16A0

19:26:59:468 4540 ScanThread: Thread 3784 base addr: 40BC90

19:26:59:484 4540 KillThreads: Scan process PID: 1692 Name "svchost.exe" ThreadCount 13

19:26:59:484 4540 ScanThread: Thread 1696 base addr: 1002509

19:26:59:484 4540 ScanThread: Thread 1820 base addr: 77F6DE99

19:26:59:484 4540 ScanThread: Thread 1860 base addr: 74C01B04

19:26:59:484 4540 ScanThread: Thread 2876 base addr: 77DB6BF9

19:26:59:484 4540 ScanThread: Thread 2100 base addr: 77F6DE99

19:26:59:484 4540 ScanThread: Thread 2064 base addr: 7C927125

19:26:59:500 4540 ScanThread: Thread 2472 base addr: 7C928C87

19:26:59:500 4540 ScanThread: Thread 3176 base addr: 604C

19:26:59:500 4540 ScanThread: Thread 3180 base addr: 7694721F

19:26:59:500 4540 ScanThread: Thread 1304 base addr: 7C810669

19:26:59:500 4540 ScanThread: Thread 2972 base addr: 7C910250

19:26:59:515 4540 ScanThread: Thread 940 base addr: 77DB6BF9

19:26:59:515 4540 ScanThread: Thread 2516 base addr: 7C910250

19:26:59:515 4540 KillThreads: Scan process PID: 304 Name "explorer.exe" ThreadCount 28

19:26:59:515 4540 ScanThread: Thread 308 base addr: 101E24E

19:26:59:515 4540 ScanThread: Thread 352 base addr: 77EB4243

19:26:59:531 4540 ScanThread: Thread 380 base addr: 7C927125

19:26:59:531 4540 ScanThread: Thread 388 base addr: 7C928C87

19:26:59:531 4540 ScanThread: Thread 536 base addr: 77EB4243

19:26:59:531 4540 ScanThread: Thread 1056 base addr: 1890000

19:26:59:531 4540 ScanThread: Thread 1284 base addr: 765836F7

19:26:59:531 4540 ScanThread: Thread 1568 base addr: 72CD30E8

19:26:59:546 4540 ScanThread: Thread 2532 base addr: 76B24DD6

19:26:59:546 4540 ScanThread: Thread 2868 base addr: 27394F6

19:26:59:546 4540 ScanThread: Thread 2924 base addr: 27394F6

19:26:59:546 4540 ScanThread: Thread 3616 base addr: 27394F6

19:26:59:546 4540 ScanThread: Thread 2320 base addr: 27394F6

19:26:59:546 4540 ScanThread: Thread 3148 base addr: 27394F6

19:26:59:546 4540 ScanThread: Thread 3156 base addr: 27394F6

19:26:59:546 4540 ScanThread: Thread 5184 base addr: 27394F6

19:26:59:546 4540 ScanThread: Thread 512 base addr: 27394F6

19:26:59:546 4540 ScanThread: Thread 5836 base addr: 27394F6

19:26:59:562 4540 ScanThread: Thread 5348 base addr: 27394F6

19:26:59:562 4540 ScanThread: Thread 5752 base addr: 7C810669

19:26:59:562 4540 ScanThread: Thread 1564 base addr: 710FE

19:26:59:562 4540 ScanThread: Thread 4712 base addr: 75F75325

19:26:59:562 4540 ScanThread: Thread 5944 base addr: 77C1A341

19:26:59:609 4540 ScanThread: Thread 4156 base addr: 774D319A

19:26:59:640 4540 ScanThread: Thread 1852 base addr: 70927

19:26:59:640 4540 ScanThread: Thread 4668 base addr: 77EB4243

19:26:59:656 4540 ScanThread: Thread 288 base addr: 7C910250

19:26:59:656 4540 ScanThread: Thread 196 base addr: 7C910250

19:26:59:656 4540 KillThreads: Scan process PID: 480 Name "spoolsv.exe" ThreadCount 11

19:26:59:656 4540 ScanThread: Thread 484 base addr: 100637A

19:26:59:656 4540 ScanThread: Thread 504 base addr: 77F6DE99

19:26:59:671 4540 ScanThread: Thread 524 base addr: 10051DC

19:26:59:671 4540 ScanThread: Thread 1248 base addr: 10051DC

19:26:59:671 4540 ScanThread: Thread 1316 base addr: 100569C

19:26:59:671 4540 ScanThread: Thread 1780 base addr: 723C17D7

19:26:59:671 4540 ScanThread: Thread 1792 base addr: 762029DB

19:26:59:671 4540 ScanThread: Thread 1824 base addr: 76205C46

19:26:59:671 4540 ScanThread: Thread 1976 base addr: 77DB6BF9

19:26:59:671 4540 ScanThread: Thread 4672 base addr: 77DB6BF9

19:26:59:687 4540 ScanThread: Thread 6128 base addr: 6646F

19:26:59:687 4540 KillThreads: Scan process PID: 556 Name "sched.exe" ThreadCount 7

19:26:59:687 4540 ScanThread: Thread 560 base addr: 407B8E

19:26:59:687 4540 ScanThread: Thread 604 base addr: 77F6DE99

19:26:59:687 4540 ScanThread: Thread 692 base addr: 7854345E

19:26:59:687 4540 ScanThread: Thread 712 base addr: 7C927125

19:26:59:703 4540 ScanThread: Thread 112 base addr: 7C928C87

19:26:59:703 4540 ScanThread: Thread 1312 base addr: 769A8831

19:26:59:703 4540 ScanThread: Thread 2696 base addr: 7854345E

19:26:59:718 4540 KillThreads: Scan process PID: 632 Name "PDVDServ.exe" ThreadCount 14

19:26:59:718 4540 ScanThread: Thread 636 base addr: 403E75

19:26:59:718 4540 ScanThread: Thread 648 base addr: 4137D4

19:26:59:718 4540 ScanThread: Thread 796 base addr: A21F7A

19:26:59:781 4540 ScanThread: Thread 1064 base addr: A13FA7

[wings 22]

Boa tarde...

 

Faça um scan online seguindo este tutorial.

 

Cole o relatório.

[Mário Monteiro 179]

Tópico Arquivado

 

Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado.

 

Caso você seja o autor do tópico e quer reabrir, envie uma mensagem privada para um moderador da área juntamente com o link para este tópico e explique o motivo da reabertura.