[Resolvido!] Cpu 100%

[Sanz 0]

gente boa de uma ajudinha aew

a menos de um mes pagei pra um técnico formatar meu computador pois estava muito lento e foi a soluçao que ele deu...

mas agora ficou pior do que era antes agora sem estar usando nenhum progama sem nada msm o uso da cpu fika em 100%

trava geral aqui.QUE FAÇO?

desde jah agradeçoo ajuda...

 

S.O windows Xp

pentium4 2.66GHZ 1GB de ram

[hargon 64]

Pode ser problema com hardware, vírus, etc. A principio vou mover para a área de segurança.

 

Poste o log'>http://forum.imasters.com.br/index.php?/topic/165906-regra-n-02-utilizando-o-hijackthis/"]log do Hijackthis para que os analistas possam analisar.

 

 

Tópico movido

 

Origem: Dúvidas gerais :seta: Destino: Segurança & Malwares

[Sanz 0]

log do HijackThis

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:18:29, on 20/1/2010

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\AVG\AVG8\avgrsx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

C:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Arquivos de programas\Spyware Terminator\sp_rsser.exe

C:\Arquivos de programas\Intel\NCS\PROSet\PRONoMgr.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

C:\Arquivos de programas\Windows Media Player\wmplayer.exe

C:\Arquivos de programas\Sony Ericsson\Sony Ericsson Wireless Manager 5\WirelessManager.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Administrador\Desktop\Hijackthis\HijackThis.exe

 

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\system.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Arquivos de programas\AVG\AVG8\avgssie.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Arquivos de programas\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARQUIV~1\AVG\AVG8\AVGTOO~1.DLL

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARQUIV~1\AVG\AVG8\AVGTOO~1.DLL

O3 - Toolbar: Barra de Ferramentas MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Arquivos de programas\MSN Toolbar\01.01.2607.0\pt-br\msntb.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Arquivos de programas\Intel\NCS\PROSet\PRONoMgr.exe

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Arquivos de programas\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Arquivos de programas\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1260834718598

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Arquivos de programas\AVG\AVG8\avgpp.dll

O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\ARQUIV~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: Google Update Service (gupdate1ca7d86c1e5ada8) (gupdate1ca7d86c1e5ada8) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe

O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - c:\Arquivos de programas\Intel\NCS\Sync\NetSvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Arquivos de programas\Spyware Terminator\sp_rsser.exe

 

--

End of file - 5846 bytes

Vlw aew por ter movido ainda sou novo aqui :joia:

[wings 22]

Bom dia....

 

 

*Baixe o MalwareBytes Anti-malware e salve-o no desktop:

*Instale o programa

*Se alguma atualização existir,o download será automático. Aguarde...

*O programa será aberto automaticamente.

*Na aba [Verificação], selecione a opção [Verificação completa]

*Clique em [Verificar] e selecione as unidades a serem examinadas

*Ao término do scan, poderá ser interrogado se deseja remover objetos da memória. Clique [sIM] > [OK] > [Mostrar Resultados]

*Selecione todas as entradas e clique em [Remover Selecionados]

*Um relatório (mbam-log-ano-mês-data.txt) será apresentado.

*Abra novamente o programa Malwarebytes e na aba [Logs] clique no arquivo mbam-log-ano-mês-data.txt

*Clique em [Abrir], copie, cole-o na sua próxima resposta

[Sanz 0]

Log Malwarebytes

Malwarebytes' Anti-Malware 1.44

Versão do banco de dados: 3601

Windows 5.1.2600 Service Pack 2 (Safe Mode)

Internet Explorer 6.0.2900.2180

 

20/1/2010 12:08:49

mbam-log-2010-01-20 (12-08-49).txt

 

Tipo de Verificação: Completa (C:\|D:\|)

Objetos verificados: 147332

Tempo decorrido: 59 minute(s), 46 second(s)

 

Processos da Memória infectados: 0

Módulos de Memória Infectados: 0

Chaves do Registro infectadas: 0

Valores do Registro infectados: 0

Ítens do Registro infectados: 0

Pastas infectadas: 0

Arquivos infectados: 0

 

Processos da Memória infectados:

(Nenhum ítem malicioso foi detectado)

 

Módulos de Memória Infectados:

(Nenhum ítem malicioso foi detectado)

 

Chaves do Registro infectadas:

(Nenhum ítem malicioso foi detectado)

 

Valores do Registro infectados:

(Nenhum ítem malicioso foi detectado)

 

Ítens do Registro infectados:

(Nenhum ítem malicioso foi detectado)

 

Pastas infectadas:

(Nenhum ítem malicioso foi detectado)

 

Arquivos infectados:

(Nenhum ítem malicioso foi detectado)

 

Bom dia....

 

 

*Baixe o MalwareBytes'>http://www.filehippo.com/download_malwarebytes_anti_malware/"]MalwareBytes Anti-malware e salve-o no desktop:

*Instale o programa

*Se alguma atualização existir,o download será automático. Aguarde...

*O programa será aberto automaticamente.

*Na aba [Verificação], selecione a opção [Verificação completa]

*Clique em [Verificar] e selecione as unidades a serem examinadas

*Ao término do scan, poderá ser interrogado se deseja remover objetos da memória. Clique [sIM] > [OK] > [Mostrar Resultados]

*Selecione todas as entradas e clique em [Remover Selecionados]

*Um relatório (mbam-log-ano-mês-data.txt) será apresentado.

*Abra novamente o programa Malwarebytes e na aba [Logs] clique no arquivo mbam-log-ano-mês-data.txt

*Clique em [Abrir], copie, cole-o na sua próxima resposta

[wings 22]

*Desative temporariamente seu antivírus

 

Iniciar > Programas > AVG

Abra a Interface do usuário do AVG

Clique duas vezes na Proteção Residente

Desmarque a opção "Proteção Residente ativa"

Salve as alterações

*Baixe o ComboFix e salve-o no desktop

*Duplo-clique no arquivo Combofix.exe

*Aceite o contrato

 

*Se o console de recuperação do Windows já estiver instalado, o ComboFix irá continuar o processo automaticamente. Caso não esteja uma janela, conforme abaixo, será aberta. Clique em [sIM] para aceitar a instalação do mesmo.

 

 

*Após a instalação, clique em [sIM] para continuar.

 

 

*Importante: enquanto o ComboFix estiver em execução, não use o mouse nem o teclado!!..... Para interromper o procedimento tecle N ou 2 e depois ENTER.

 

*O programa será fechado automaticamente

 

*Cole o relatório criado em C:\combofix.txt

[Sanz 0]

Eu nao uso o AVG uso o Avira, antes de fazer o scan com malwarebytes eu fiz um scan com o avira e ele encontrou 462 infestaçoes na pasta System32.

ainda sim tenhu que usar o combofix??

 

Agradeço pela atençao!

[wings 22]

Eu nao uso o AVG uso o Avira, antes de fazer o scan com malwarebytes eu fiz um scan com o avira e ele encontrou 462 infestaçoes na pasta System32.

ainda sim tenhu que usar o combofix??

 

Agradeço pela atençao!

 

Isso quem pode dizer é você.....

 

Como está a máquina?

 

Cole um log do hijack.

[Sanz 0]

log-

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:56:00, on 21/1/2010

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\AVG\AVG8\avgrsx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

C:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

C:\Arquivos de programas\Intel\NCS\PROSet\PRONoMgr.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Arquivos de programas\Nokia\Nokia PC Suite\LaunchApplication.exe

C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Arquivos de programas\Nokia\Nokia PC Suite\GetConnected.exe

C:\Arquivos de programas\Spyware Terminator\sp_rsser.exe

C:\Arquivos de programas\Sony Ericsson\Sony Ericsson Wireless Manager 5\WirelessManager.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Administrador\Desktop\Hijackthis\HijackThis.exe

 

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\system.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Arquivos de programas\AVG\AVG8\avgssie.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Arquivos de programas\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARQUIV~1\AVG\AVG8\AVGTOO~1.DLL

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\ARQUIV~1\AVG\AVG8\AVGTOO~1.DLL

O3 - Toolbar: Barra de Ferramentas MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Arquivos de programas\MSN Toolbar\01.01.2607.0\pt-br\msntb.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Arquivos de programas\Intel\NCS\PROSet\PRONoMgr.exe

O4 - HKCU\..\Run: [NokiaPCSuiteTray] "C:\Arquivos de programas\Nokia\Nokia PC Suite\LaunchApplication.exe" -startup

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Arquivos de programas\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Arquivos de programas\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1260834718598

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Arquivos de programas\AVG\AVG8\avgpp.dll

O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\ARQUIV~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\ARQUIV~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: Google Update Service (gupdate1ca7d86c1e5ada8) (gupdate1ca7d86c1e5ada8) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe

O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - c:\Arquivos de programas\Intel\NCS\Sync\NetSvc.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Arquivos de programas\Spyware Terminator\sp_rsser.exe

 

--

End of file - 5815 bytes

[wings 22]

O log está limpo....

 

 

Como está a máquina?

[Sanz 0]

ainda continua lenta e travando....

eu achei uma pasta do AVG que nao consiguo excluir

mensagem de erro-

Nao é possivel excluir avgse.dll.Acesso negado

Certifique-se que o disco nao esta cheioou protegido contra gravaçao e que

o arquivo nao esta sendo usando.

ja tentei varias maneira de excluir essa pasta mas nao consegui

i nao consegui usar o combofix pq ele diz que o avg guard esta ativado e pode danificar o sistema

i agora que eu faço??

 

 

Agradeço pela ajuda!

[wings 22]

Baixe e execute o desinstalador do AVG.

 

 

Após isto, desative temporariamente o Avira e rode o combofix conforme as orientações.

[Sanz 0]

ja executei o combofix.

mas ainda sim quaze a todo momento a CPU chega a 100% :(

[wings 22]

Por favor...

 

Cole o relatório criado em C:\combofix.txt

[Sanz 0]

Por favor...

 

Cole o relatório criado em C:\combofix.txt

 

ComboFix 10-01-19.02 - Administrador 22/01/2010 9:26.1.1 - x86

Microsoft Windows XP Professional 5.1.2600.2.1252.55.1046.18.1023.731 [GMT -3:00]

Executando de: c:\documents and settings\Administrador\Desktop\ComboFix.exe

AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

AV: AVG *On-access scanning disabled* (Outdated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

.

 

((((((((((((((((((((((((((((((((((((( Outras Exclusões )))))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\documents and settings\Administrador\Dados de aplicativos\Desktopicon

c:\documents and settings\Administrador\Dados de aplicativos\Desktopicon\eBay.ico

c:\documents and settings\Administrador\Dados de aplicativos\Desktopicon\uninst.exe

D:\Autorun.inf

 

.

(((((((((((((((( Arquivos/Ficheiros criados de 2009-12-22 to 2010-01-22 ))))))))))))))))))))))))))))

.

 

2089-12-15 08:37 . 2089-12-15 08:37 -------- d-----w- C:\c27f04a97b69c34f73d79a

2010-01-22 12:14 . 2010-01-22 12:14 -------- d-----w- c:\arquivos de programas\Unlocker

2010-01-21 22:40 . 2010-01-21 22:40 -------- d-----w- c:\windows\system32\XPSViewer

2010-01-21 22:40 . 2010-01-21 22:40 -------- d-----w- c:\arquivos de programas\MSBuild

2010-01-21 22:39 . 2010-01-21 22:39 -------- d-----w- c:\arquivos de programas\Reference Assemblies

2010-01-21 22:39 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll

2010-01-21 22:38 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll

2010-01-21 22:38 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll

2010-01-21 22:38 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe

2010-01-21 22:38 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe

2010-01-21 22:38 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll

2010-01-21 22:38 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll

2010-01-21 22:38 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll

2010-01-21 22:38 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll

2010-01-21 22:38 . 2010-01-21 22:39 -------- d-----w- C:\800eee2a27c8579f92

2010-01-21 22:32 . 2010-01-21 22:32 -------- d-----w- c:\arquivos de programas\MSXML 6.0

2010-01-20 20:29 . 2010-01-20 20:29 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\Nokia(CDMA)

2010-01-20 20:28 . 2010-01-20 20:28 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\Nokia

2010-01-20 20:28 . 2008-07-04 19:47 20096 ----a-w- c:\windows\system32\drivers\ViaUsbModem.sys

2010-01-20 20:27 . 2008-07-04 19:47 16128 ----a-w- c:\windows\system32\drivers\ViaUsbEts.sys

2010-01-20 20:27 . 2010-01-20 20:27 -------- d-----w- c:\arquivos de programas\Nokia

2010-01-20 20:10 . 2008-10-27 13:04 514384 ----a-w- c:\windows\system32\XAudio2_3.dll

2010-01-20 20:09 . 2007-03-15 19:57 443752 ----a-w- c:\windows\system32\d3dx10_33.dll

2010-01-20 20:09 . 2007-03-12 19:42 1123696 ----a-w- c:\windows\system32\D3DCompiler_33.dll

2010-01-20 20:09 . 2007-03-12 19:42 3495784 ----a-w- c:\windows\system32\d3dx9_33.dll

2010-01-20 20:09 . 2007-01-24 18:27 255848 ----a-w- c:\windows\system32\xactengine2_6.dll

2010-01-20 20:09 . 2006-12-08 15:02 251672 ----a-w- c:\windows\system32\xactengine2_5.dll

2010-01-20 20:09 . 2006-09-28 19:05 237848 ----a-w- c:\windows\system32\xactengine2_4.dll

2010-01-20 20:09 . 2007-03-05 15:42 15128 ----a-w- c:\windows\system32\x3daudio1_1.dll

2010-01-20 20:09 . 2006-09-28 19:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll

2010-01-20 20:09 . 2006-07-28 12:30 236824 ----a-w- c:\windows\system32\xactengine2_3.dll

2010-01-20 20:09 . 2006-07-28 12:30 62744 ----a-w- c:\windows\system32\xinput1_2.dll

2010-01-20 20:08 . 2005-05-26 18:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll

2010-01-20 20:07 . 2010-01-20 20:07 -------- d-----w- c:\windows\Logs

2010-01-20 15:38 . 2010-01-20 15:38 -------- d-----w- c:\windows\system32\wbem\Repository

2010-01-18 14:14 . 2010-01-18 14:14 6144 ----a-w- c:\documents and settings\All Users\Dados de aplicativos\Spyware Terminator\sp_rsdel.exe

2010-01-18 14:13 . 2010-01-18 14:14 5632 ----a-w- c:\documents and settings\All Users\Dados de aplicativos\Spyware Terminator\fileobjinfo.sys

2010-01-18 14:13 . 2010-01-18 14:13 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys

2010-01-18 14:13 . 2010-01-20 03:44 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\Spyware Terminator

2010-01-18 14:13 . 2010-01-20 04:12 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\Spyware Terminator

2010-01-18 14:12 . 2010-01-21 02:51 -------- d-----w- c:\arquivos de programas\Spyware Terminator

2010-01-18 01:43 . 2010-01-18 01:43 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\Media Player Classic

2010-01-18 01:40 . 2009-12-12 14:15 178176 ----a-w- c:\windows\system32\unrar.dll

2010-01-18 01:40 . 2010-01-18 01:41 -------- d-----w- c:\arquivos de programas\K-Lite Codec Pack

2010-01-17 23:49 . 2010-01-17 23:49 -------- d--h--w- c:\windows\PIF

2010-01-15 19:24 . 2010-01-15 19:24 -------- d-----w- c:\windows\nview

2010-01-15 19:24 . 2010-01-15 19:25 -------- d-----w- c:\windows\nvidia icons

2010-01-15 19:24 . 2010-01-15 19:24 -------- d-----w- C:\NVIDIA

2010-01-15 19:17 . 2010-01-15 19:17 -------- d-----w- c:\arquivos de programas\Lavalys

2010-01-14 02:53 . 2010-01-14 02:53 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\Uniblue

2010-01-13 11:13 . 2010-01-15 19:18 -------- d-----w- c:\arquivos de programas\Puxa Rápido(2)

2010-01-12 15:20 . 2010-01-15 19:18 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\Spybot - Search & Destroy

2010-01-11 10:29 . 2010-01-11 10:29 -------- d-----w- c:\windows\nview(2)

2010-01-11 10:26 . 2010-01-15 19:18 -------- d-----w- C:\NVIDIA(2)

2010-01-11 09:42 . 2010-01-15 19:21 -------- d-----w- c:\windows\NV34843488.TMP

2010-01-11 06:32 . 2010-01-21 20:22 -------- d-----w- C:\DirectX

2010-01-11 06:30 . 2010-01-11 06:30 552 ----a-w- c:\windows\system32\d3d8caps.dat

2010-01-11 06:27 . 2010-01-11 06:27 -------- d-----w- C:\dell

2010-01-11 05:29 . 2010-01-11 05:29 -------- d-----w- c:\arquivos de programas\PC Drivers HeadQuarters

2010-01-08 17:31 . 2002-10-09 22:21 89088 ----a-w- c:\windows\system32\drivers\ianswxp.sys

2010-01-08 17:30 . 2010-01-08 17:30 -------- d-----w- c:\arquivos de programas\Intel

2010-01-08 17:27 . 2010-01-08 17:27 -------- d-----w- C:\IntelPRO

2010-01-08 16:56 . 2009-03-27 03:16 12672 ----a-w- c:\windows\system32\drivers\cpuz132_x32.sys

2010-01-08 16:56 . 2010-01-08 16:56 -------- d-----w- c:\arquivos de programas\CPUID

2010-01-08 01:16 . 2009-08-06 21:23 274288 ----a-w- c:\windows\system32\mucltui.dll

2010-01-08 01:16 . 2009-08-06 21:23 215920 ----a-w- c:\windows\system32\muweb.dll

2010-01-07 17:40 . 2004-08-04 02:45 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll

2010-01-07 17:40 . 2004-08-04 02:45 21504 ----a-w- c:\windows\system32\hidserv.dll

2010-01-07 17:40 . 2004-08-04 02:39 14848 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys

2010-01-07 17:40 . 2004-08-04 02:39 14848 ----a-w- c:\windows\system32\drivers\kbdhid.sys

2010-01-06 23:08 . 2006-12-07 12:45 110592 ----a-w- c:\documents and settings\Administrador\Dados de aplicativos\U3\temp\cleanup.exe

2010-01-06 23:08 . 2006-12-07 12:45 3096576 ---ha-w- c:\documents and settings\Administrador\Dados de aplicativos\U3\temp\Launchpad Removal.exe

2010-01-06 23:07 . 2010-01-17 20:42 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\U3

2010-01-05 03:26 . 2010-01-05 03:26 -------- d-----w- c:\windows\system32\IOSUBSYS

2010-01-04 16:28 . 2010-01-06 02:25 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\gtk-2.0

2010-01-04 16:28 . 2010-01-04 16:28 -------- d-----w- c:\documents and settings\Administrador\.thumbnails

2010-01-04 16:26 . 2010-01-17 14:57 -------- d-----w- c:\documents and settings\Administrador\.gimp-2.6

2010-01-04 16:20 . 2010-01-04 16:21 -------- d-----w- c:\arquivos de programas\GIMP-2.0

2010-01-04 15:27 . 2010-01-04 15:27 -------- d-----w- c:\arquivos de programas\Circle Develpement

2010-01-04 15:27 . 2010-01-04 15:27 -------- d-----w- c:\arquivos de programas\Messenger Plus! Live

2010-01-04 15:20 . 2010-01-22 01:57 -------- d-----w- c:\documents and settings\Administrador\Tracing

2010-01-04 15:06 . 2010-01-21 19:39 -------- d-----w- c:\arquivos de programas\Microsoft Silverlight

2010-01-04 15:04 . 2009-08-06 00:48 54752 ----a-w- c:\windows\system32\drivers\fssfltr_tdi.sys

2010-01-04 15:03 . 2010-01-04 15:03 -------- d-----w- c:\arquivos de programas\Microsoft Sync Framework

2010-01-04 15:00 . 2006-11-29 16:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll

2010-01-04 15:00 . 2010-01-04 15:00 -------- d-----w- c:\arquivos de programas\Microsoft SQL Server Compact Edition

2010-01-04 14:48 . 2010-01-04 15:05 -------- d-----w- c:\arquivos de programas\Microsoft

2010-01-04 14:47 . 2010-01-04 14:47 -------- d-----w- c:\arquivos de programas\Windows Live SkyDrive

2010-01-04 13:39 . 2010-01-04 13:39 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Windows Live

2009-12-24 12:28 . 2009-12-24 12:28 2887680 ----a-w- c:\windows\system32\VagalumePluginWMP.dll

 

.

((((((((((((((((((((((((((((((((((((( Relatório Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2089-12-15 08:33 . 2009-12-14 21:01 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat

2010-01-21 22:48 . 2001-10-28 15:07 79588 ----a-w- c:\windows\system32\perfc016.dat

2010-01-21 22:48 . 2001-10-28 15:07 468794 ----a-w- c:\windows\system32\perfh016.dat

2010-01-20 15:37 . 2009-12-15 13:49 -------- d-----w- c:\arquivos de programas\Malwarebytes' Anti-Malware

2010-01-18 01:04 . 2009-12-15 13:07 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Real

2010-01-05 03:26 . 2009-12-15 13:00 -------- d-----w- c:\arquivos de programas\Google

2010-01-05 02:59 . 2009-12-17 01:15 -------- d---a-w- c:\documents and settings\All Users\Dados de aplicativos\TEMP

2010-01-05 02:59 . 2009-12-16 18:34 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\Messenger Plus!

2010-01-04 15:04 . 2009-12-16 15:59 -------- d-----w- c:\arquivos de programas\Windows Live

2009-12-17 12:23 . 2009-12-17 12:23 -------- d-----w- c:\arquivos de programas\Arquivos comuns\InstallShield

2009-12-17 09:36 . 2009-12-17 09:36 23600 ----a-w- c:\windows\system32\drivers\TVICHW32.SYS

2009-12-17 02:36 . 2009-12-17 02:35 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Adobe

2009-12-16 18:21 . 2009-12-16 18:21 -------- d-----w- c:\arquivos de programas\Marcos Velasco Security

2009-12-16 18:18 . 2009-12-16 18:18 -------- d-----w- c:\arquivos de programas\Adverts

2009-12-16 18:18 . 2009-12-16 18:18 -------- d-----w- c:\arquivos de programas\MessengerPlus! 3

2009-12-16 18:18 . 2009-12-17 23:19 58952 ----a-w- c:\windows\system32\MsgPlusLoader.dll

2009-12-16 17:20 . 2009-12-16 17:20 15240 ----a-w- c:\documents and settings\Administrador\Dados de aplicativos\Microsoft\IdentityCRL\ppcrlconfig.dll

2009-12-16 15:52 . 2009-12-16 15:52 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\TIM

2009-12-16 15:52 . 2009-12-16 15:52 -------- d-----w- c:\arquivos de programas\TIM

2009-12-16 11:30 . 2009-12-15 10:23 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2009-12-16 03:05 . 2009-12-16 03:05 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\Avira

2009-12-16 03:05 . 2009-12-16 03:05 -------- d-----w- c:\arquivos de programas\Avira

2009-12-16 02:56 . 2009-12-15 01:50 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\avg8

2009-12-15 14:22 . 2009-12-15 14:22 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\McAfee

2009-12-15 14:18 . 2009-12-15 09:54 -------- d-----w- c:\arquivos de programas\Windows Media Connect 2

2009-12-15 13:59 . 2009-12-15 13:59 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\McAfee Security Scan

2009-12-15 13:49 . 2009-12-15 13:49 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\Malwarebytes

2009-12-15 13:49 . 2009-12-15 13:49 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\Malwarebytes

2009-12-15 13:08 . 2009-12-15 13:08 -------- d-----w- c:\arquivos de programas\Real

2009-12-15 10:34 . 2009-12-15 01:51 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\AVGTOOLBAR

2009-12-15 10:20 . 2009-12-15 10:20 -------- d-----w- c:\arquivos de programas\MSN Toolbar

2009-12-15 09:57 . 2009-12-15 09:57 -------- d-----w- c:\arquivos de programas\CCleaner

2009-12-15 01:51 . 2009-12-15 01:51 10520 ----a-w- c:\windows\system32\avgrsstx.dll

2009-12-15 01:50 . 2009-12-15 01:55 583960 ----a-w- c:\documents and settings\All Users\Dados de aplicativos\avg8\update\backup\avginet.dll

2009-12-15 01:50 . 2009-12-15 01:55 443672 ----a-w- c:\documents and settings\All Users\Dados de aplicativos\avg8\update\backup\avgiproxy.exe

2009-12-15 01:50 . 2009-12-15 01:55 1082624 ----a-w- c:\documents and settings\All Users\Dados de aplicativos\avg8\update\backup\avgupd.dll

2009-12-15 01:50 . 2009-12-15 01:50 76040 ----a-w- c:\windows\system32\drivers\avgtdix.sys

2009-12-15 01:50 . 2009-12-15 01:50 97928 ----a-w- c:\windows\system32\drivers\avgldx86.sys

2009-12-15 01:50 . 2009-12-15 01:55 641304 ----a-w- c:\documents and settings\All Users\Dados de aplicativos\avg8\update\backup\avgupd.exe

2009-12-15 01:50 . 2009-12-15 01:50 26824 ----a-w- c:\windows\system32\drivers\avgmfx86.sys

2009-12-15 01:39 . 2009-12-15 01:39 0 ----a-w- c:\windows\nsreg.dat

2009-12-14 23:28 . 2009-12-14 23:28 -------- d-----w- c:\arquivos de programas\Microsoft.NET

2009-12-14 21:16 . 2009-12-14 21:16 -------- d-----w- c:\arquivos de programas\Sony Ericsson

2009-12-14 21:16 . 2009-12-14 21:16 -------- d-----w- c:\documents and settings\Administrador\Dados de aplicativos\Sony Ericsson

2009-12-14 21:02 . 2009-12-14 21:02 -------- d-----w- c:\arquivos de programas\microsoft frontpage

2009-12-14 21:00 . 2009-12-14 21:00 -------- d-----w- c:\arquivos de programas\Serviços on-line

2009-12-14 20:59 . 2009-12-14 20:59 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Serviços

2009-12-14 20:58 . 2009-12-14 20:58 21844 ----a-w- c:\windows\system32\emptyregdb.dat

2009-12-03 18:14 . 2009-12-15 13:49 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2009-12-03 18:13 . 2009-12-15 13:49 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

2009-11-21 16:42 . 2004-08-04 03:45 470528 ----a-w- c:\windows\AppPatch\aclayers.dll

2004-07-22 12:51 . 2004-07-22 12:51 3432656 ----a-w- c:\arquivos de programas\ManagedDX.CAB

2004-07-20 00:58 . 2004-07-20 00:58 1156363 ----a-w- c:\arquivos de programas\BDANT.cab

2004-07-20 00:53 . 2004-07-20 00:53 976020 ----a-w- c:\arquivos de programas\BDAXP.cab

2004-07-09 16:17 . 2004-07-09 16:17 13265040 ----a-w- c:\arquivos de programas\dxnt.cab

2004-07-09 11:13 . 2004-07-09 11:13 15493481 ----a-w- c:\arquivos de programas\DirectX.cab

2004-07-09 11:13 . 2004-07-09 11:13 703080 ----a-w- c:\arquivos de programas\BDA.cab

2004-07-09 06:08 . 2004-07-09 06:08 472576 ----a-w- c:\arquivos de programas\dxsetup.exe

2004-07-09 06:08 . 2004-07-09 06:08 2242560 ----a-w- c:\arquivos de programas\dsetup32.dll

2004-07-09 05:03 . 2004-07-09 05:03 62976 ----a-w- c:\arquivos de programas\DSETUP.dll

.

 

(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))

.

.

*Nota* entradas vazias e legítimas por defeito não são mostradas.

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NokiaPCSuiteTray"="c:\arquivos de programas\Nokia\Nokia PC Suite\LaunchApplication.exe" [2008-07-10 2093056]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-03 13529088]

"PRONoMgr.exe"="c:\arquivos de programas\Intel\NCS\PROSet\PRONoMgr.exe" [2002-10-23 86016]

"UnlockerAssistant"="c:\arquivos de programas\Unlocker\UnlockerAssistant.exe" [2009-10-26 15872]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]

2009-12-15 01:51 10520 ----a-w- c:\windows\system32\avgrsstx.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"avg8wd"=2 (0x2)

"avg8emc"=2 (0x2)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Arquivos de programas\\Messenger\\msmsgs.exe"=

"c:\\Arquivos de programas\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Arquivos de programas\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=

"c:\\Arquivos de programas\\Nokia\\Nokia PC Suite\\GetConnected.exe"=

 

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [14/12/2009 22:50 97928]

R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [18/1/2010 11:13 142592]

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\arquivos de programas\Avira\AntiVir Desktop\sched.exe [15/12/2009 07:23 108289]

R2 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [14/12/2009 22:50 76040]

R2 cpuz132;cpuz132;c:\windows\system32\drivers\cpuz132_x32.sys [8/1/2010 13:56 12672]

R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [4/1/2010 12:04 54752]

R3 sembbus;SEMC WMC Composite Device driver (WDM);c:\windows\system32\drivers\sembbus.sys [14/12/2009 18:16 260992]

R3 sembcard;Sony Ericsson PC300 Mobile Broadband Command Interface Drivers (WDM);c:\windows\system32\drivers\sembcard.sys [14/12/2009 18:24 337408]

R3 sembmdfl2;Sony Ericsson PC300 Wireless Modem Filter;c:\windows\system32\drivers\sembmdfl2.sys [14/12/2009 18:24 14976]

R3 sembmdm2;Sony Ericsson PC300 Wireless Modem Driver;c:\windows\system32\drivers\sembmdm2.sys [14/12/2009 18:24 380672]

R3 sembmgmt;Sony Ericsson PC300 Mobile Broadband Device Management Drivers (WDM);c:\windows\system32\drivers\sembmgmt.sys [14/12/2009 18:24 343680]

R3 sembnd5;Sony Ericsson PC300 Mobile Broadband Network Adapter SENECA (NDIS);c:\windows\system32\drivers\sembnd5.sys [14/12/2009 18:24 24960]

R3 sembunic;Sony Ericsson PC300 Mobile Broadband Network Adapter SENECA (WDM);c:\windows\system32\drivers\sembunic.sys [14/12/2009 18:24 344064]

R3 sembwwan;Sony Ericsson PC300 Mobile Broadband Ethernet Control Drivers (WDM);c:\windows\system32\drivers\sembwwan.sys [14/12/2009 18:24 337408]

R3 SEMCReserved;SEMC Reserved Interface;c:\windows\system32\drivers\semcreserved.sys [14/12/2009 18:24 17408]

R3 Sony_EricssonWWSC;Sony Ericsson SIM Card Reader;c:\windows\system32\drivers\sesc.sys [14/12/2009 18:24 12672]

S2 avg8emc;AVG Free8 E-mail Scanner;c:\arquiv~1\AVG\AVG8\avgemc.exe --> c:\arquiv~1\AVG\AVG8\avgemc.exe [?]

S2 avg8wd;AVG Free8 WatchDog;c:\arquiv~1\AVG\AVG8\avgwdsvc.exe --> c:\arquiv~1\AVG\AVG8\avgwdsvc.exe [?]

S2 gupdate1ca7d86c1e5ada8;Google Update Service (gupdate1ca7d86c1e5ada8);c:\arquivos de programas\Google\Update\GoogleUpdate.exe [15/12/2009 10:01 133104]

S3 fsssvc;Serviço Windows Live Proteção para a Família;c:\arquivos de programas\Windows Live\Family Safety\fsssvc.exe [5/8/2009 21:48 704864]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [15/12/2009 10:49 38224]

S3 ViaUsbEtsDriver;Nokia 1508 USB Device Driver;c:\windows\system32\drivers\ViaUsbEts.sys [20/1/2010 17:27 16128]

S3 ViaUsbModemDriver;Nokia 1508 Modem Driver;c:\windows\system32\drivers\ViaUsbModem.sys [20/1/2010 17:28 20096]

.

Conteúdo da pasta 'Tarefas Agendadas'

 

2010-01-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\arquivos de programas\Google\Update\GoogleUpdate.exe [2009-12-15 13:01]

 

2010-01-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\arquivos de programas\Google\Update\GoogleUpdate.exe [2009-12-15 13:01]

.

.

------- Scan Suplementar -------

.

uDefault_Search_URL = hxxp://www.google.com/ie

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: E&xportar para o Microsoft Excel - c:\arquiv~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

FF - ProfilePath - c:\documents and settings\Administrador\Dados de aplicativos\Mozilla\Firefox\Profiles\8c6l1ji0.default\

FF - prefs.js: browser.search.selectedEngine - Puxaki.com.br

FF - prefs.js: browser.startup.homepage - google

FF - plugin: c:\arquivos de programas\Google\Update\1.2.183.13\npGoogleOneClick8.dll

FF - plugin: c:\arquivos de programas\Microsoft\Office Live\npOLW.dll

FF - plugin: c:\arquivos de programas\Mozilla Firefox\plugins\npOGAPlugin.dll

FF - plugin: c:\arquivos de programas\Windows Live\Photo Gallery\NPWLPG.dll

 

---- FIREFOX POLICIES ----

c:\arquivos de programas\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".com.br");

.

- - - - ORFÃOS REMOVIDOS - - - -

 

AddRemove-eBay Icon - c:\documents and settings\Administrador\Dados de aplicativos\Desktopicon\uninst.exe

 

 

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2010-01-22 09:31

Windows 5.1.2600 Service Pack 2 NTFS

 

Procurando processos ocultos ...

 

Procurando entradas auto inicializáveis ocultas ...

 

Procurando ficheiros/arquivos ocultos ...

 

Varredura completada com sucesso

arquivos/ficheiros ocultos: 0

 

**************************************************************************

.

--------------------- DLLs Carregadas Sob os Processos em Execução ---------------------

 

- - - - - - - > 'winlogon.exe'(680)

c:\windows\system32\avgrsstx.dll

.

Tempo para conclusão: 2010-01-22 09:34:06

ComboFix-quarantined-files.txt 2010-01-22 12:34

 

Pré-execução: 14 pasta(s) 24.349.634.560 bytes disponíveis

Pós execução: 17 pasta(s) 24.344.559.616 bytes disponíveis

 

WindowsXP-KB310994-SP2-Pro-BootDisk-PTG.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

 

- - End Of File - - 6B31DA399EE4E3F1F67EC7FAAB1C7EA9

[wings 22]

Seu log está limpo.

 

 

*Clique em [iniciar] > [Executar] > digite: Combofix /uninstall

*Clique [OK]

 

 

*Clique em [Executar]

*Surgirá a mensagem: "ComboFix está desinstalado"

 

*Clique [OK]

*Delete o arquivo C:\combofix.txt

[wings 22]

PROBLEMA RESOLVIDO!

 

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.