[Arquivado] Log de maquina dando erro

[tcn 1]

Pessoal, essa maquina aqui ta dando uns paus estranho pakas, svshost da erro e explore fica impossível de mexer, peço ajuda pra deixar ela Ok

 

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 17:15:04, on 11/02/2010Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0013)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Arquivos de programas\Automatos\Secure Remote Control\Server\asrcse.exeC:\Arquivos de programas\Automatos\Desktop Agent\aengine.exeC:\WINDOWS\system32\dklog.exeC:\WINDOWS\system32\dkvcm.exeC:\Arquivos de programas\Java\jre6\bin\jqs.exeC:\Arquivos de programas\McAfee\Common Framework\FrameworkService.exeC:\Arquivos de programas\lotus\notes\ntmulti.exeC:\WINDOWS\system32\dkcktkn.exeC:\WINDOWS\system32\wuauclt.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Arquivos de programas\Automatos\Secure Remote Control\Server\asrcse.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\wbem\wmiapsrv.exeC:\Arquivos de programas\TortoiseSVN\bin\TSVNCache.exeC:\Arquivos de programas\ATI Technologies\ATI.ACE\cli.exeC:\Arquivos de programas\Automatos\Secure Remote Control\Server\asrcsti.exeC:\Arquivos de programas\Automatos\Desktop Agent\adacontrol.exeC:\Arquivos de programas\Adobe\Reader 8.0\Reader\Reader_sl.exeC:\Arquivos de programas\SafeNet\BSecClient\axmonitor.exeC:\Arquivos de programas\SafeNet\BSecClient\DkAutoReg.exeC:\Arquivos de programas\McAfee\Common Framework\UdaterUI.exeC:\Arquivos de programas\McAfee\Common Framework\McTray.exeC:\WINDOWS\system32\ctfmon.exeC:\Arquivos de programas\TK8 StickyNotes\TK8StickyNotes.exeC:\Arquivos de programas\Mozilla Firefox\firefox.exeC:\WINDOWS\system32\taskmgr.exeC:\Arquivos de programas\ATI Technologies\ATI.ACE\cli.exeC:\Arquivos de programas\ATI Technologies\ATI.ACE\cli.exeC:\Arquivos de programas\WinRAR\WinRAR.exeC:\DOCUME~1\tcn\CONFIG~1\Temp\Rar$EX00.687\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sbnet/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157O2 - BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Arquivos de programas\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dllO2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dllO2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllO3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Arquivos de programas\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dllO3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)O4 - HKLM\..\Run: [ATICCC] "C:\Arquivos de programas\ATI Technologies\ATI.ACE\cli.exe" runtime -DelayO4 - HKLM\..\Run: [SetRefresh] C:\Arquivos de programas\Compaq\SetRefresh\SetRefresh.exeO4 - HKLM\..\Run: [asrcs] "C:\Arquivos de programas\Automatos\Secure Remote Control\Server\asrcsti.exe"O4 - HKLM\..\Run: [AutomatosControl] C:\Arquivos de programas\Automatos\Desktop Agent\adacontrol.exe -nac -hideO4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Arquivos de programas\Adobe\Reader 8.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [DkStartup] C:\Arquivos de programas\SafeNet\BSecClient\dkstartup.exeO4 - HKLM\..\Run: [AxMonitor] C:\Arquivos de programas\SafeNet\BSecClient\axmonitor.exeO4 - HKLM\..\Run: [DkAutoReg] C:\Arquivos de programas\SafeNet\BSecClient\DkAutoReg.exeO4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Arquivos de programas\Arquivos comuns\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbyloginO4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Arquivos de programas\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKeyO4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Arquivos de programas\DAEMON Tools Lite\DTLite.exe" -autorunO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [TK8 StickyNotes] "C:\Arquivos de programas\TK8 StickyNotes\TK8StickyNotes.exe"O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')O4 - Global Startup: WinZip Quick Pick.lnk = C:\Arquivos de programas\WinZip\WZQKPICK.EXEO8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\Office12\EXCEL.EXE/3000O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\Office12\REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe (file missing)O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe (file missing)O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.aspO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = santosbrasil.com.brO17 - HKLM\Software\..\Telephony: DomainName = santosbrasil.com.brO17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = santosbrasil.com.brO20 - AppInit_DLLs: HookDLL.DLLO20 - Winlogon Notify: aloginout - C:\WINDOWS\SYSTEM32\aloginout.dllO20 - Winlogon Notify: DkWLNP - C:\WINDOWS\SYSTEM32\DkWLNP.dllO23 - Service: Automatos SRC Server (asrcs) - Automatos - C:\Arquivos de programas\Automatos\Secure Remote Control\Server\asrcse.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Automatos Desktop Agent (AutomatosDesktopAgent) - Automatos Inc. - C:\Arquivos de programas\Automatos\Desktop Agent\aengine.exeO23 - Service: Crystal Query Server - Unknown owner - C:\Arquivos de programas\Seagate Software\Query Server\querysrv.exeO23 - Service: SafeNet Log Service (DkLogger) - SafeNet, Inc. - C:\WINDOWS\system32\dklog.exeO23 - Service: SafeNet Token Service (DkTknSrv) - SafeNet, Inc. - C:\WINDOWS\system32\dkcktkn.exeO23 - Service: SafeNet Virtual Channel Monitor (DkVcm) - SafeNet, Inc. - C:\WINDOWS\system32\dkvcm.exeO23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Arquivos de programas\Arquivos comuns\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exeO23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Arquivos de programas\McAfee\Common Framework\FrameworkService.exeO23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Arquivos de programas\lotus\notes\ntmulti.exeO23 - Service: OracleClientCache80 - Unknown owner - C:\orant\BIN\ONRSD80.EXE--End of file - 7717 bytes

[Power Max 54]

:) Olá Tcn!

 

:seta: Siga, por gentileza, as dicas deste tutorial para fazer uma limpeza de seu PC com o Malwarebytes:

 

'>http://dicasetutoriaisparapc.blogspot.com/2009/10/tutorial-do-malwarebytes-anti-malware.html"]Tutorial do Malwarebytes Anti-Malware

 

Na sua próxima resposta poste este log do Malwarebytes juntamente com um novo log do Hijackthis e nos diga como está o seu PC após este procedimento.

 

Ficamos no aguardo.

[Mário Monteiro 179]

Tópico Arquivado

 

Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado.

 

Caso você seja o autor do tópico e quer reabrir, envie uma mensagem privada para um moderador da área juntamente com o link para este tópico e explique o motivo da reabertura.