.Zyphz 0 Denunciar post Postado Fevereiro 28, 2010 No começo dessa semana, eu decidi procurar por um anti-virus, fui atrás dos mais conhecidos, mas para minha supresa muitos dos sites não abriam, por exemplo: http://www.kaspersky.com http://www.eset.com http://www.mcafee.com http://www.toptenreviews.com E alguns outros que não me recordo no momento. Eu não acho que seja o "Conficker", pois eu acesso o site da microsoft normalmente, e consigo acessar alguns dub-dominios dos sites listados a cima, como por exemplo http://forum.kaspersky.com/. No outro computador da rede, todos os site funcionam normalmente, o problema está só aqui... Segue abaixo o log do HijackThis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:50:19, on 27/2/2010 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\system32\spoolsv.exe D:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\MOM.exe D:\Programas\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe D:\WINDOWS\RTHDCPL.EXE D:\Arquivos de programas\Synaptics\SynTP\SynTPEnh.exe D:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe D:\WINDOWS\system32\ctfmon.exe C:\Programas\Java\jre6\bin\jqs.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\Arquivos de programas\Microsoft SQL Server\90\Shared\sqlwriter.exe D:\WINDOWS\system32\svchost.exe D:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\ccc.exe D:\WINDOWS\system32\wbem\wmiapsrv.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\wuauclt.exe D:\WINDOWS\explorer.exe C:\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Arquivos de programas\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Programas\Free Download Manager\iefdm2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programas\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [startCCC] "D:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [VirtualCloneDrive] "D:\Programas\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [synTPEnh] D:\Arquivos de programas\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [GrooveMonitor] "D:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKCU\..\Run: [RMClock] C:\Programas\RMClock\RMClockLauncher.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://D:\ARQUIV~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\ARQUIV~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\ARQUIV~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\ARQUIV~1\MICROS~4\Office12\REFIEBAR.DLL O9 - Extra button: Seleção HP Smart - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Arquivos de programas\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Arquivos de programas\Messenger\msmsgs.exe O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1267204276468 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1267205341156 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Arquivos de programas\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\ARQUIV~1\ARQUIV~1\Skype\SKYPE4~1.DLL O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programas\Java\jre6\bin\jqs.exe -- End of file - 5677 bytes Muito obrigado pela atenção! Compartilhar este post Link para o post Compartilhar em outros sites
wings 22 Denunciar post Postado Fevereiro 28, 2010 Boa noite... *Baixe o RSIT e salve-o no desktop *Duplo clique em RSIT *Clique em [Continue] *Ao término do processo, cole os relatórios criados em C:\rsit\log.txt e C:\rsit\info.txt Compartilhar este post Link para o post Compartilhar em outros sites
.Zyphz 0 Denunciar post Postado Fevereiro 28, 2010 Segue o C:\rsit\log.txt: Logfile of random's system information tool 1.06 (written by random/random) Run by Genesis at 2010-02-28 20:49:05 Microsoft Windows XP Professional Service Pack 2 System drive D: has 40 GB (74%) free of 54 GB Total RAM: 2047 MB (62% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:49:12, on 28/2/2010 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\rundll32.exe D:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\MOM.exe D:\Programas\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe D:\WINDOWS\RTHDCPL.EXE D:\Arquivos de programas\Synaptics\SynTP\SynTPEnh.exe D:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe C:\Programas\RMClock\RMClock.exe C:\Programas\Java\jre6\bin\jqs.exe D:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\ccc.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\Arquivos de programas\Microsoft SQL Server\90\Shared\sqlwriter.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\wbem\wmiapsrv.exe D:\WINDOWS\system32\ctfmon.exe D:\WINDOWS\System32\svchost.exe D:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe D:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe C:\Programas\Mozilla Firefox\firefox.exe C:\Steam\Steam.exe D:\Documents and Settings\Genesis\Desktop\MailResender\MainComm.exe D:\Documents and Settings\Genesis\Desktop\MailResender\MailComm.exe D:\Documents and Settings\Genesis\Desktop\RSIT.exe C:\Genesis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Arquivos de programas\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Programas\Free Download Manager\iefdm2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programas\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [startCCC] "D:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [VirtualCloneDrive] "D:\Programas\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [synTPEnh] D:\Arquivos de programas\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [GrooveMonitor] "D:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKCU\..\Run: [RMClock] C:\Programas\RMClock\RMClockLauncher.exe O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://D:\ARQUIV~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\ARQUIV~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\ARQUIV~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\ARQUIV~1\MICROS~4\Office12\REFIEBAR.DLL O9 - Extra button: Seleção HP Smart - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Arquivos de programas\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Arquivos de programas\Messenger\msmsgs.exe O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1267204276468 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1267205341156 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Arquivos de programas\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\ARQUIV~1\ARQUIV~1\Skype\SKYPE4~1.DLL O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programas\Java\jre6\bin\jqs.exe -- End of file - 6144 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}] HP Print Enhancer - D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - D:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - D:\Arquivos de programas\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}] FDMIECookiesBHO Class - C:\Programas\Free Download Manager\iefdm2.dll [2008-12-30 98304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Programas\Java\jre6\bin\jp2ssv.dll [2010-02-13 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-02-13 79648] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}] HP Smart BHO Class - D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent [] "StartCCC"=D:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-25 61440] "VirtualCloneDrive"=D:\Programas\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-26 85160] "RTHDCPL"=D:\WINDOWS\RTHDCPL.EXE [2007-08-10 16384000] "SynTPEnh"=D:\Arquivos de programas\Synaptics\SynTP\SynTPEnh.exe [2007-05-10 827392] "GrooveMonitor"=D:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "RMClock"=C:\Programas\RMClock\RMClockLauncher.exe [2008-02-29 61440] "ctfmon.exe"=D:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] D:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Programas\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] D:\Documents and Settings\Genesis\Configurações locais\Dados de aplicativos\Google\Update\GoogleUpdate.exe [2010-02-15 135664] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] D:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] D:\Arquivos de programas\HP\HP Software Update\HPWuSchd2.exe [2007-10-14 49152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon] D:\Arquivos de programas\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck] D:\WINDOWS\system32\dumprep 0 -u [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\D:^Documents and Settings^All Users^Menu Iniciar^Programas^Inicializar^HP Digital Imaging Monitor.lnk] D:\ARQUIV~1\HP\DIGITA~1\bin\hpqtra08.exe [2007-10-14 214360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "hpqddsvc"=2 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] D:\WINDOWS\system32\Ati2evxx.dll [2009-02-25 155648] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] D:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Arquivos de programas\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDriveAutoRun"=67108863 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveAutoRun"= "NoDriveTypeAutoRun"= "NoDrives"= "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Programas\uTorrent\uTorrent.exe"="C:\Programas\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "D:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe"="D:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "D:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe"="D:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "D:\Arquivos de programas\Skype\Plugin Manager\skypePM.exe"="D:\Arquivos de programas\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager" "D:\Arquivos de programas\Microsoft Office\Office12\OUTLOOK.EXE"="D:\Arquivos de programas\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "D:\Arquivos de programas\Microsoft Office\Office12\GROOVE.EXE"="D:\Arquivos de programas\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "D:\Arquivos de programas\Microsoft Office\Office12\ONENOTE.EXE"="D:\Arquivos de programas\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" "D:\Arquivos de programas\HP\Digital Imaging\bin\hpqtra08.exe"="D:\Arquivos de programas\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "D:\Arquivos de programas\HP\Digital Imaging\bin\hpqste08.exe"="D:\Arquivos de programas\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "D:\Arquivos de programas\HP\Digital Imaging\bin\hposid01.exe"="D:\Arquivos de programas\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "D:\Arquivos de programas\HP\Digital Imaging\bin\hpiscnapp.exe"="D:\Arquivos de programas\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe" "D:\Arquivos de programas\HP\Digital Imaging\bin\hpqkygrp.exe"="D:\Arquivos de programas\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Steam\steamapps\zyphz\counter-strike\hl.exe"="C:\Steam\steamapps\zyphz\counter-strike\hl.exe:*:Enabled:Half-Life Launcher" "D:\Arquivos de programas\Skype\Phone\Skype.exe"="D:\Arquivos de programas\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe"="D:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "D:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe"="D:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" ======List of files/folders created in the last 1 months====== 2010-02-28 20:49:05 ----D---- D:\rsit 2010-02-28 03:11:54 ----HDC---- D:\WINDOWS\$NtUninstallKB970430$ 2010-02-28 03:10:34 ----HDC---- D:\WINDOWS\$NtUninstallKB961118$ 2010-02-28 03:06:31 ----D---- D:\WINDOWS\SQLTools9_KB970892_ENU 2010-02-28 03:04:44 ----D---- D:\WINDOWS\SQL9_KB970892_ENU 2010-02-28 03:04:11 ----HDC---- D:\WINDOWS\$NtUninstallKB971737$ 2010-02-27 23:47:16 ----SHD---- D:\RECYCLER 2010-02-27 23:10:19 ----A---- D:\ComboFix.txt 2010-02-27 23:04:11 ----D---- D:\123 2010-02-27 23:03:40 ----D---- D:\Qoobox 2010-02-27 22:33:43 ----A---- D:\WINDOWS\system32\mucltui.dll.mui 2010-02-27 22:33:43 ----A---- D:\WINDOWS\system32\mucltui.dll 2010-02-26 22:53:51 ----HDC---- D:\WINDOWS\$NtUninstallKB977165$ 2010-02-26 18:11:49 ----HDC---- D:\WINDOWS\$NtUninstallKB978262$ 2010-02-26 18:11:26 ----HDC---- D:\WINDOWS\$NtUninstallKB971468$ 2010-02-26 18:11:19 ----HDC---- D:\WINDOWS\$NtUninstallKB958869$ 2010-02-26 18:10:46 ----HDC---- D:\WINDOWS\$NtUninstallKB954155_WM9$ 2010-02-26 18:10:35 ----HDC---- D:\WINDOWS\$NtUninstallKB955759$ 2010-02-26 18:10:30 ----HDC---- D:\WINDOWS\$NtUninstallKB974318$ 2010-02-26 18:10:24 ----HDC---- D:\WINDOWS\$NtUninstallKB969059$ 2010-02-26 18:10:20 ----HDC---- D:\WINDOWS\$NtUninstallKB978037$ 2010-02-26 18:10:05 ----HDC---- D:\WINDOWS\$NtUninstallKB975713$ 2010-02-26 18:09:20 ----HDC---- D:\WINDOWS\$NtUninstallKB972270$ 2010-02-26 18:09:16 ----HDC---- D:\WINDOWS\$NtUninstallKB974112$ 2010-02-26 18:09:12 ----HDC---- D:\WINDOWS\$NtUninstallKB978251$ 2010-02-26 18:09:08 ----HDC---- D:\WINDOWS\$NtUninstallKB975025$ 2010-02-26 18:09:05 ----HDC---- D:\WINDOWS\$NtUninstallKB974571$ 2010-02-26 18:09:00 ----HDC---- D:\WINDOWS\$NtUninstallKB975560$ 2010-02-26 18:08:28 ----HDC---- D:\WINDOWS\$NtUninstallKB973687$ 2010-02-26 18:01:27 ----HDC---- D:\WINDOWS\$NtUninstallKB973904$ 2010-02-26 18:01:23 ----HDC---- D:\WINDOWS\$NtUninstallKB974392$ 2010-02-26 18:01:18 ----HDC---- D:\WINDOWS\$NtUninstallKB977914$ 2010-02-26 18:00:33 ----HDC---- D:\WINDOWS\$NtUninstallKB971486$ 2010-02-26 18:00:29 ----HDC---- D:\WINDOWS\$NtUninstallKB978706$ 2010-02-26 18:00:26 ----D---- D:\Arquivos de programas\MSXML 4.0 2010-02-26 18:00:16 ----HDC---- D:\WINDOWS\$NtUninstallKB975467$ 2010-02-26 18:00:09 ----HDC---- D:\WINDOWS\$NtUninstallKB968389$ 2010-02-26 18:00:02 ----HDC---- D:\WINDOWS\$NtUninstallKB969947$ 2010-02-26 17:23:57 ----D---- D:\WINDOWS\SxsCaPendDel 2010-02-26 16:53:13 ----HDC---- D:\WINDOWS\$NtUninstallKB952069_WM9$ 2010-02-26 16:53:06 ----HDC---- D:\WINDOWS\$NtUninstallKB979306$ 2010-02-26 16:38:48 ----D---- D:\WINDOWS\Minidump 2010-02-26 16:36:46 ----HDC---- D:\WINDOWS\$NtUninstallKB968816_WM9$ 2010-02-26 16:36:42 ----D---- D:\WINDOWS\ie8updates 2010-02-26 16:36:38 ----HDC---- D:\WINDOWS\$NtUninstallKB956844$ 2010-02-26 16:36:33 ----HDC---- D:\WINDOWS\$NtUninstallKB971657$ 2010-02-26 16:36:29 ----HDC---- D:\WINDOWS\$NtUninstallKB973815$ 2010-02-26 16:36:24 ----HDC---- D:\WINDOWS\$NtUninstallKB960859$ 2010-02-26 16:36:20 ----HDC---- D:\WINDOWS\$NtUninstallKB973507$ 2010-02-26 16:36:14 ----HDC---- D:\WINDOWS\$NtUninstallKB973354$ 2010-02-26 16:36:08 ----D---- D:\WINDOWS\ServicePackFiles 2010-02-26 16:36:06 ----HDC---- D:\WINDOWS\$NtUninstallKB958470$ 2010-02-26 16:36:02 ----HDC---- D:\WINDOWS\$NtUninstallKB973869$ 2010-02-26 16:35:54 ----HDC---- D:\WINDOWS\$NtUninstallKB973540_WM9L$ 2010-02-26 16:35:43 ----HDC---- D:\WINDOWS\$NtUninstallKB971032$ 2010-02-26 16:27:21 ----HDC---- D:\WINDOWS\$NtUninstallKB970238$ 2010-02-26 16:27:15 ----HDC---- D:\WINDOWS\$NtUninstallKB961501$ 2010-02-26 16:26:41 ----HDC---- D:\WINDOWS\$NtUninstallKB961503$ 2010-02-26 16:26:36 ----HDC---- D:\WINDOWS\$NtUninstallKB959426$ 2010-02-26 16:26:31 ----HDC---- D:\WINDOWS\$NtUninstallKB960803$ 2010-02-26 16:26:24 ----HDC---- D:\WINDOWS\$NtUninstallKB952004$ 2010-02-26 16:26:10 ----HDC---- D:\WINDOWS\$NtUninstallKB956572$ 2010-02-26 16:26:02 ----HDC---- D:\WINDOWS\$NtUninstallKB923561$ 2010-02-26 16:16:57 ----HDC---- D:\WINDOWS\$NtUninstallKB967715$ 2010-02-26 16:16:52 ----HDC---- D:\WINDOWS\$NtUninstallKB960225$ 2010-02-26 16:16:24 ----HDC---- D:\WINDOWS\$NtUninstallKB956803$ 2010-02-26 16:16:19 ----HDC---- D:\WINDOWS\$NtUninstallKB956802$ 2010-02-26 16:15:33 ----HDC---- D:\WINDOWS\$NtUninstallKB955069$ 2010-02-26 16:14:02 ----HDC---- D:\WINDOWS\$NtUninstallKB952287$ 2010-02-26 16:13:57 ----HDC---- D:\WINDOWS\$NtUninstallKB950974$ 2010-02-26 16:13:52 ----HDC---- D:\WINDOWS\$NtUninstallKB952954$ 2010-02-26 16:13:48 ----HDC---- D:\WINDOWS\$NtUninstallKB946648$ 2010-02-26 16:13:42 ----HDC---- D:\WINDOWS\$NtUninstallKB951066$ 2010-02-26 16:13:34 ----HDC---- D:\WINDOWS\$NtUninstallKB951748$ 2010-02-26 16:13:04 ----HDC---- D:\WINDOWS\$NtUninstallKB951376-v2$ 2010-02-26 16:13:00 ----HDC---- D:\WINDOWS\$NtUninstallKB950762$ 2010-02-26 16:12:56 ----HDC---- D:\WINDOWS\$NtUninstallKB950760$ 2010-02-26 16:12:48 ----HDC---- D:\WINDOWS\$NtUninstallKB941569$ 2010-02-26 16:06:58 ----HDC---- D:\WINDOWS\$NtUninstallKB950749$ 2010-02-26 16:06:34 ----HDC---- D:\WINDOWS\$NtUninstallKB945553$ 2010-02-26 16:05:48 ----HDC---- D:\WINDOWS\$NtUninstallKB943055$ 2010-02-26 16:05:44 ----HDC---- D:\WINDOWS\$NtUninstallKB946026$ 2010-02-26 16:05:41 ----HDC---- D:\WINDOWS\$NtUninstallKB944653$ 2010-02-26 16:05:37 ----HDC---- D:\WINDOWS\$NtUninstallKB936357$ 2010-02-26 16:05:24 ----HDC---- D:\WINDOWS\$NtUninstallKB943460$ 2010-02-26 16:05:19 ----HDC---- D:\WINDOWS\$NtUninstallKB938828$ 2010-02-26 16:05:00 ----HDC---- D:\WINDOWS\$NtUninstallKB925398_WMP64$ 2010-02-26 16:04:30 ----HDC---- D:\WINDOWS\$NtUninstallKB929123$ 2010-02-26 16:04:03 ----HDC---- D:\WINDOWS\$NtUninstallKB930916$ 2010-02-26 16:03:59 ----HDC---- D:\WINDOWS\$NtUninstallKB920213$ 2010-02-26 16:03:54 ----HDC---- D:\WINDOWS\$NtUninstallKB890046$ 2010-02-26 16:03:49 ----HDC---- D:\WINDOWS\$NtUninstallKB935448$ 2010-02-26 16:03:45 ----HDC---- D:\WINDOWS\$NtUninstallKB932168$ 2010-02-26 16:03:41 ----HDC---- D:\WINDOWS\$NtUninstallKB931261$ 2010-02-26 16:03:36 ----HDC---- D:\WINDOWS\$NtUninstallKB930178$ 2010-02-26 16:03:30 ----HDC---- D:\WINDOWS\$NtUninstallKB925902$ 2010-02-26 16:03:25 ----HDC---- D:\WINDOWS\$NtUninstallKB925720$ 2010-02-26 16:03:20 ----HDC---- D:\WINDOWS\$NtUninstallKB926436$ 2010-02-26 16:03:15 ----HDC---- D:\WINDOWS\$NtUninstallKB918118$ 2010-02-26 16:03:09 ----HDC---- D:\WINDOWS\$NtUninstallKB927779$ 2010-02-26 16:03:04 ----HDC---- D:\WINDOWS\$NtUninstallKB924667$ 2010-02-26 16:02:59 ----HDC---- D:\WINDOWS\$NtUninstallKB927802$ 2010-02-26 16:02:53 ----HDC---- D:\WINDOWS\$NtUninstallKB928843$ 2010-02-26 16:02:42 ----HDC---- D:\WINDOWS\$NtUninstallKB928255$ 2010-02-26 16:02:37 ----HDC---- D:\WINDOWS\$NtUninstallKB926255$ 2010-02-26 16:02:32 ----HDC---- D:\WINDOWS\$NtUninstallKB923980$ 2010-02-26 16:02:26 ----HDC---- D:\WINDOWS\$NtUninstallKB924270$ 2010-02-26 16:02:22 ----HDC---- D:\WINDOWS\$NtUninstallKB923191$ 2010-02-26 16:02:17 ----HDC---- D:\WINDOWS\$NtUninstallKB920872$ 2010-02-26 16:02:10 ----HDC---- D:\WINDOWS\$NtUninstallKB916595$ 2010-02-26 16:02:05 ----HDC---- D:\WINDOWS\$NtUninstallKB922582$ 2010-02-26 16:01:59 ----HDC---- D:\WINDOWS\$NtUninstallKB920683$ 2010-02-26 16:01:55 ----HDC---- D:\WINDOWS\$NtUninstallKB920670$ 2010-02-26 16:01:51 ----HDC---- D:\WINDOWS\$NtUninstallKB914388$ 2010-02-26 16:01:47 ----HDC---- D:\WINDOWS\$NtUninstallKB911280$ 2010-02-26 16:01:41 ----HDC---- D:\WINDOWS\$NtUninstallKB913580$ 2010-02-26 16:01:38 ----HDC---- D:\WINDOWS\$NtUninstallKB918439$ 2010-02-26 16:01:34 ----HDC---- D:\WINDOWS\$NtUninstallKB914389$ 2010-02-26 16:01:26 ----HDC---- D:\WINDOWS\$NtUninstallKB908531$ 2010-02-26 16:01:22 ----HDC---- D:\WINDOWS\$NtUninstallKB900485$ 2010-02-26 16:01:16 ----HDC---- D:\WINDOWS\$NtUninstallKB911562$ 2010-02-26 16:01:11 ----HDC---- D:\WINDOWS\$NtUninstallKB911564$ 2010-02-26 16:00:56 ----HDC---- D:\WINDOWS\$NtUninstallKB911927$ 2010-02-26 16:00:52 ----HDC---- D:\WINDOWS\$NtUninstallKB910437$ 2010-02-26 16:00:45 ----HDC---- D:\WINDOWS\$NtUninstallKB900725$ 2010-02-26 16:00:40 ----HDC---- D:\WINDOWS\$NtUninstallKB905749$ 2010-02-26 16:00:37 ----HDC---- D:\WINDOWS\$NtUninstallKB905414$ 2010-02-26 16:00:32 ----HDC---- D:\WINDOWS\$NtUninstallKB901017$ 2010-02-26 16:00:22 ----HDC---- D:\WINDOWS\$NtUninstallKB902400$ 2010-02-26 16:00:16 ----HDC---- D:\WINDOWS\$NtUninstallKB894391$ 2010-02-26 16:00:11 ----HDC---- D:\WINDOWS\$NtUninstallKB896423$ 2010-02-26 16:00:08 ----HDC---- D:\WINDOWS\$NtUninstallKB899587$ 2010-02-26 16:00:04 ----HDC---- D:\WINDOWS\$NtUninstallKB899591$ 2010-02-26 16:00:00 ----HDC---- D:\WINDOWS\$NtUninstallKB893756$ 2010-02-26 15:59:55 ----HDC---- D:\WINDOWS\$NtUninstallKB896358$ 2010-02-26 15:59:46 ----HDC---- D:\WINDOWS\$NtUninstallKB890859$ 2010-02-26 15:59:41 ----HDC---- D:\WINDOWS\$NtUninstallKB901214$ 2010-02-26 15:59:36 ----HDC---- D:\WINDOWS\$NtUninstallKB885835$ 2010-02-26 15:59:32 ----HDC---- D:\WINDOWS\$NtUninstallKB887472$ 2010-02-26 15:59:29 ----HDC---- D:\WINDOWS\$NtUninstallKB888302$ 2010-02-26 15:59:26 ----HDC---- D:\WINDOWS\$NtUninstallKB885836$ 2010-02-26 15:59:22 ----HDC---- D:\WINDOWS\$NtUninstallKB886185$ 2010-02-26 15:59:17 ----HDC---- D:\WINDOWS\$NtUninstallKB873339$ 2010-02-26 15:58:46 ----N---- D:\WINDOWS\system32\tzchange.exe 2010-02-26 14:14:46 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\Windows Genuine Advantage 2010-02-26 14:14:39 ----D---- D:\WINDOWS\system32\PreInstall 2010-02-26 14:14:38 ----HDC---- D:\WINDOWS\$NtUninstallKB898461$ 2010-02-26 14:12:22 ----D---- D:\WINDOWS\system32\SoftwareDistribution 2010-02-26 14:12:22 ----A---- D:\WINDOWS\system32\wups2.dll 2010-02-26 14:12:22 ----A---- D:\WINDOWS\system32\wucltui.dll.mui 2010-02-26 14:12:22 ----A---- D:\WINDOWS\system32\wuaueng.dll.mui 2010-02-26 14:12:21 ----A---- D:\WINDOWS\system32\wuapi.dll.mui 2010-02-26 14:04:52 ----D---- D:\WINDOWS\WBEM 2010-02-26 14:03:37 ----HDC---- D:\WINDOWS\ie8 2010-02-26 14:03:37 ----D---- D:\WINDOWS\system32\pt-BR 2010-02-26 13:58:07 ----HDC---- D:\WINDOWS\$NtUninstallKB932823-v3$ 2010-02-26 13:05:53 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Malwarebytes 2010-02-26 13:05:48 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\Malwarebytes 2010-02-25 22:21:02 ----A---- D:\WINDOWS\eraser.exe 2010-02-25 00:32:07 ----D---- D:\Arquivos de programas\Panda Security 2010-02-24 17:58:04 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\QuickScan 2010-02-23 23:59:31 ----A---- D:\WINDOWS\ntbtlog.txt 2010-02-23 17:02:15 ----D---- D:\WINDOWS\system32\appmgmt 2010-02-19 20:18:53 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\HPAppData 2010-02-19 13:32:35 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\Adobe 2010-02-19 13:32:26 ----D---- D:\Arquivos de programas\Arquivos comuns\Adobe 2010-02-14 17:33:16 ----D---- D:\WINDOWS\Sun 2010-02-13 17:40:28 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\Sun 2010-02-13 17:40:18 ----D---- D:\Arquivos de programas\Sun 2010-02-13 17:40:08 ----A---- D:\WINDOWS\system32\javaws.exe 2010-02-13 17:40:08 ----A---- D:\WINDOWS\system32\javaw.exe 2010-02-13 17:40:08 ----A---- D:\WINDOWS\system32\java.exe 2010-02-12 16:52:06 ----A---- D:\WINDOWS\IsUninst.exe 2010-02-12 16:42:55 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\WinRAR 2010-02-10 11:22:50 ----A---- D:\WINDOWS\ODBC.INI 2010-02-10 11:22:17 ----D---- D:\WINDOWS\system32\js 2010-02-10 11:22:17 ----D---- D:\WINDOWS\system32\html 2010-02-10 11:22:17 ----D---- D:\WINDOWS\system32\css 2010-02-10 11:22:17 ----D---- D:\Arquivos de programas\Business Objects 2010-02-10 11:17:59 ----D---- D:\Arquivos de programas\Microsoft SQL Server 2010-02-10 11:17:33 ----D---- D:\Arquivos de programas\Microsoft Device Emulator 2010-02-10 11:16:10 ----D---- D:\Arquivos de programas\Microsoft Synchronization Services 2010-02-10 11:16:10 ----D---- D:\Arquivos de programas\Microsoft SQL Server Compact Edition 2010-02-10 11:09:13 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\PreEmptive Solutions 2010-02-10 11:06:08 ----D---- D:\WINDOWS\symbols 2010-02-10 11:04:02 ----D---- D:\Arquivos de programas\Microsoft SDKs 2010-02-10 11:04:02 ----D---- D:\Arquivos de programas\HTML Help Workshop 2010-02-10 11:04:02 ----D---- D:\Arquivos de programas\CE Remote Tools 2010-02-10 11:04:02 ----D---- D:\Arquivos de programas\Arquivos comuns\Merge Modules 2010-02-10 11:02:53 ----D---- D:\Arquivos de programas\Microsoft Web Designer Tools 2010-02-10 11:00:35 ----D---- D:\WINDOWS\system32\XPSViewer 2010-02-10 11:00:27 ----D---- D:\WINDOWS\system32\en-us 2010-02-10 11:00:26 ----D---- D:\Arquivos de programas\Reference Assemblies 2010-02-10 10:59:54 ----N---- D:\WINDOWS\system32\spmsg2.dll 2010-02-10 10:57:10 ----HDC---- D:\WINDOWS\$NtUninstallWIC$ 2010-02-10 10:57:05 ----D---- D:\Arquivos de programas\MSXML 6.0 2010-02-09 11:56:11 ----HDC---- D:\WINDOWS\$NtUninstallWdf01000$ 2010-02-09 11:55:51 ----D---- D:\Arquivos de programas\Synaptics 2010-02-09 11:55:48 ----D---- D:\WINDOWS\system32\ReinstallBackups 2010-02-09 11:55:19 ----A---- D:\WINDOWS\system32\WdfCoInstaller01000.dll 2010-02-09 11:55:19 ----A---- D:\WINDOWS\system32\SynTPCo4.dll 2010-02-09 11:55:19 ----A---- D:\WINDOWS\system32\SynTPAPI.dll 2010-02-09 11:55:19 ----A---- D:\WINDOWS\system32\SynCtrl.dll 2010-02-09 11:55:19 ----A---- D:\WINDOWS\system32\SynCOM.dll 2010-02-08 00:03:29 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\WEBREG 2010-02-08 00:03:10 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\HP 2010-02-08 00:02:09 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\Hewlett-Packard 2010-02-08 00:02:00 ----RA---- D:\WINDOWS\system32\hpzids01.dll 2010-02-08 00:01:58 ----A---- D:\WINDOWS\system32\hpz3l5mu.dll 2010-02-08 00:01:37 ----RA---- D:\WINDOWS\system32\hppldcoi.dll 2010-02-08 00:01:37 ----RA---- D:\WINDOWS\system32\hpowiax8.dll 2010-02-08 00:01:37 ----RA---- D:\WINDOWS\system32\hpovst14.dll 2010-02-08 00:01:37 ----RA---- D:\WINDOWS\system32\hpotiop6.dll 2010-02-08 00:01:37 ----RA---- D:\WINDOWS\system32\difxapi.dll 2010-02-07 23:29:24 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\HP Product Assistant 2010-02-07 23:29:24 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\HP 2010-02-07 23:28:38 ----D---- D:\Arquivos de programas\Arquivos comuns\HP 2010-02-07 23:28:34 ----D---- D:\Arquivos de programas\Hewlett-Packard 2010-02-07 23:28:28 ----D---- D:\Arquivos de programas\Arquivos comuns\Hewlett-Packard 2010-02-07 23:27:17 ----DC---- D:\WINDOWS\system32\DRVSTORE 2010-02-07 23:26:31 ----D---- D:\Arquivos de programas\HP 2010-02-07 23:26:17 ----D---- D:\Config.Msi 2010-02-07 15:45:51 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Tibia 2010-02-07 14:09:59 ----HD---- D:\WINDOWS\system32\GroupPolicy 2010-02-07 13:46:36 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\GbPlugin 2010-02-07 02:30:59 ----RD---- D:\autorun.inf 2010-02-07 02:22:05 ----A---- D:\WINDOWS\zip.exe 2010-02-07 02:22:05 ----A---- D:\WINDOWS\SWXCACLS.exe 2010-02-07 02:22:05 ----A---- D:\WINDOWS\SWSC.exe 2010-02-07 02:22:05 ----A---- D:\WINDOWS\SWREG.exe 2010-02-07 02:22:05 ----A---- D:\WINDOWS\sed.exe 2010-02-07 02:22:05 ----A---- D:\WINDOWS\PEV.exe 2010-02-07 02:22:05 ----A---- D:\WINDOWS\NIRCMD.exe 2010-02-07 02:22:05 ----A---- D:\WINDOWS\MBR.exe 2010-02-07 02:22:05 ----A---- D:\WINDOWS\grep.exe 2010-02-07 02:22:00 ----D---- D:\WINDOWS\ERDNT 2010-02-07 02:19:22 ----A---- D:\WINDOWS\system32\MRT.exe 2010-02-07 02:10:55 ----N---- D:\WINDOWS\system32\spmsg.dll 2010-02-07 02:10:52 ----HDC---- D:\WINDOWS\$NtUninstallKB958644$ 2010-02-07 02:10:41 ----HD---- D:\WINDOWS\$hf_mig$ 2010-02-06 19:30:17 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Free Download Manager 2010-02-06 19:30:14 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\FreeDownloadManager.ORG 2010-02-06 17:30:20 ----AD---- D:\Xampplite 2010-02-06 17:25:06 ----A---- D:\WINDOWS\system32\wmpns.dll 2010-02-06 15:16:29 ----A---- D:\WINDOWS\system32\deploytk.dll 2010-02-06 15:14:18 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Sun 2010-02-06 15:09:08 ----A---- D:\WINDOWS\system32\ChCfg.exe 2010-02-06 15:09:03 ----D---- D:\WINDOWS\system32\RTCOM 2010-02-06 15:08:54 ----A---- D:\WINDOWS\SoundMan.exe 2010-02-06 15:08:54 ----A---- D:\WINDOWS\SkyTel.exe 2010-02-06 15:08:54 ----A---- D:\WINDOWS\RtlUpd.exe 2010-02-06 15:08:52 ----A---- D:\WINDOWS\RTLCPL.exe 2010-02-06 15:08:49 ----A---- D:\WINDOWS\RTHDCPL.exe 2010-02-06 15:08:48 ----A---- D:\WINDOWS\MicCal.exe 2010-02-06 15:08:47 ----D---- D:\Arquivos de programas\Realtek 2010-02-06 15:08:47 ----A---- D:\WINDOWS\alcwzrd.exe 2010-02-06 15:08:47 ----A---- D:\WINDOWS\Alcmtr.exe 2010-02-06 15:08:42 ----A---- D:\WINDOWS\RtlExUpd.dll 2010-02-06 15:08:42 ----A---- D:\WINDOWS\HideWin.exe 2010-02-05 23:42:05 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\mIRC 2010-02-05 21:16:38 ----A---- D:\WINDOWS\system32\ovvrhmb.exe 2010-02-05 17:05:10 ----A---- D:\WINDOWS\system32\msonpmon.dll 2010-02-05 17:04:29 ----D---- D:\Arquivos de programas\Microsoft Works 2010-02-05 17:04:22 ----D---- D:\Arquivos de programas\MSBuild 2010-02-05 17:04:05 ----D---- D:\Arquivos de programas\Microsoft Visual Studio 2010-02-05 17:04:05 ----D---- D:\Arquivos de programas\Arquivos comuns\DESIGNER 2010-02-05 17:03:34 ----D---- D:\Arquivos de programas\Microsoft.NET 2010-02-05 17:02:14 ----D---- D:\Arquivos de programas\Microsoft Visual Studio 8 2010-02-05 17:01:33 ----D---- D:\WINDOWS\SHELLNEW 2010-02-05 17:01:11 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\Microsoft Help 2010-02-05 17:01:11 ----D---- D:\Arquivos de programas\Microsoft Office 2010-02-05 17:00:50 ----RD---- D:\MSOCache 2010-02-05 17:00:04 ----D---- D:\Arquivos de programas\Common Files 2010-02-05 16:59:37 ----D---- D:\Programas 2010-02-05 16:01:35 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\skypePM 2010-02-05 15:59:14 ----D---- D:\Arquivos de programas\Arquivos comuns\Skype 2010-02-05 15:59:13 ----RD---- D:\Arquivos de programas\Skype 2010-02-05 15:59:08 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\Skype 2010-02-05 15:49:12 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Skype 2010-02-05 14:16:26 ----D---- D:\Arquivos de programas\Microsoft Silverlight 2010-02-05 14:15:57 ----D---- D:\Arquivos de programas\Microsoft 2010-02-05 14:15:16 ----D---- D:\Arquivos de programas\Windows Live 2010-02-05 13:57:44 ----D---- D:\WINDOWS\system32\Lang 2010-02-05 13:56:48 ----A---- D:\WINDOWS\system32\spupdsvc.exe 2010-02-05 13:56:46 ----HDC---- D:\WINDOWS\$NtUninstallKB888111WXPSP2$ 2010-02-05 13:56:42 ----A---- D:\WINDOWS\system32\RtkCoInstXP.dll 2010-02-05 13:55:40 ----D---- D:\Arquivos de programas\Arquivos comuns\Windows Live 2010-02-05 13:54:04 ----HDC---- D:\WINDOWS\$NtUninstallKB942288-v3$ 2010-02-05 13:29:27 ----D---- D:\WINDOWS\system32\LogFiles 2010-02-05 13:24:01 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Macromedia 2010-02-05 13:24:01 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Adobe 2010-02-05 13:00:54 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\uTorrent 2010-02-05 12:56:36 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Mozilla 2010-02-05 12:52:56 ----D---- D:\WINDOWS\pss 2010-02-05 12:36:49 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\ATI 2010-02-05 12:36:49 ----D---- D:\Documents and Settings\All Users\Dados de aplicativos\ATI 2010-02-05 12:34:23 -------- D:\WINDOWS\system32\ati2sgag.exe 2010-02-05 12:32:18 ----RSD---- D:\WINDOWS\assembly 2010-02-05 12:31:46 ----D---- D:\WINDOWS\Microsoft.NET 2010-02-05 12:26:44 ----HD---- D:\Arquivos de programas\InstallShield Installation Information 2010-02-05 12:26:44 ----D---- D:\Arquivos de programas\ATI Technologies 2010-02-05 12:26:25 ----D---- D:\Arquivos de programas\Arquivos comuns\InstallShield 2010-02-05 12:20:40 ----D---- D:\Documents and Settings\Genesis\Dados de aplicativos\Identities 2010-02-05 12:20:38 ----HD---- D:\Arquivos de programas\Uninstall Information 2010-02-05 12:20:32 ----ASH---- D:\Documents and Settings\Genesis\Dados de aplicativos\desktop.ini 2010-02-05 12:20:31 ----SD---- D:\Documents and Settings\Genesis\Dados de aplicativos\Microsoft 2010-02-05 12:17:52 ----D---- D:\WINDOWS\SoftwareDistribution 2010-02-05 12:17:49 ----SD---- D:\WINDOWS\system32\Microsoft 2010-02-05 12:17:49 ----D---- D:\WINDOWS\Prefetch 2010-02-05 12:17:49 ----A---- D:\WINDOWS\SchedLgU.Txt 2010-02-05 12:14:08 ----D---- D:\WINDOWS\system32\xircom 2010-02-05 12:14:08 ----D---- D:\Arquivos de programas\xerox 2010-02-05 12:14:08 ----D---- D:\Arquivos de programas\microsoft frontpage 2010-02-05 12:13:50 ----A---- D:\WINDOWS\control.ini 2010-02-05 12:13:41 ----A---- D:\WINDOWS\OEWABLog.txt 2010-02-05 12:13:38 ----A---- D:\WINDOWS\system32\mapi32.dll 2010-02-05 12:12:54 ----SD---- D:\WINDOWS\Downloaded Program Files 2010-02-05 12:12:54 ----RD---- D:\WINDOWS\Offline Web Pages 2010-02-05 12:12:54 ----RAH---- D:\WINDOWS\system32\logonui.exe.manifest 2010-02-05 12:12:49 ----RAH---- D:\WINDOWS\system32\cdplayer.exe.manifest 2010-02-05 12:12:45 ----HD---- D:\Arquivos de programas\WindowsUpdate 2010-02-05 12:12:41 ----D---- D:\Arquivos de programas\Serviços on-line 2010-02-05 12:12:25 ----D---- D:\WINDOWS\system32\DirectX 2010-02-05 12:12:04 ----A---- D:\WINDOWS\system32\atrace.dll 2010-02-05 12:12:01 ----A---- D:\WINDOWS\system32\desktop.ini 2010-02-05 12:12:01 ----A---- D:\WINDOWS\desktop.ini 2010-02-05 12:11:53 ----A---- D:\WINDOWS\system32\nmevtmsg.dll 2010-02-05 12:11:52 ----A---- D:\WINDOWS\system32\acctres.dll 2010-02-05 12:11:51 ----D---- D:\Arquivos de programas\Arquivos comuns\Serviços 2010-02-05 12:11:48 ----SD---- D:\WINDOWS\Tasks 2010-02-05 12:11:48 ----A---- D:\WINDOWS\system32\icfgnt5.dll 2010-02-05 12:11:47 ----D---- D:\Arquivos de programas\Arquivos comuns\MSSoap 2010-02-05 12:11:43 ----D---- D:\WINDOWS\srchasst 2010-02-05 12:11:42 ----D---- D:\WINDOWS\system32\Macromed 2010-02-05 12:11:39 ----A---- D:\WINDOWS\system32\wuweb.dll 2010-02-05 12:11:39 ----A---- D:\WINDOWS\system32\wups.dll 2010-02-05 12:11:39 ----A---- D:\WINDOWS\system32\wucltui.dll 2010-02-05 12:11:39 ----A---- D:\WINDOWS\system32\wuauserv.dll 2010-02-05 12:11:39 ----A---- D:\WINDOWS\system32\wuaueng1.dll 2010-02-05 12:11:39 ----A---- D:\WINDOWS\system32\wuaueng.dll 2010-02-05 12:11:38 ----A---- D:\WINDOWS\system32\wuauclt1.exe 2010-02-05 12:11:38 ----A---- D:\WINDOWS\system32\wuapi.dll 2010-02-05 12:11:38 ----A---- D:\WINDOWS\system32\qmgrprxy.dll 2010-02-05 12:11:38 ----A---- D:\WINDOWS\system32\bitsprx3.dll 2010-02-05 12:11:38 ----A---- D:\WINDOWS\system32\bitsprx2.dll 2010-02-05 12:11:38 -------- D:\WINDOWS\system32\wuauclt.exe 2010-02-05 12:11:38 -------- D:\WINDOWS\system32\qmgr.dll 2010-02-05 12:11:34 ----D---- D:\Arquivos de programas\Movie Maker 2010-02-05 12:11:29 ----A---- D:\WINDOWS\system32\safrslv.dll 2010-02-05 12:11:29 ----A---- D:\WINDOWS\system32\safrdm.dll 2010-02-05 12:11:29 ----A---- D:\WINDOWS\system32\safrcdlg.dll 2010-02-05 12:11:29 ----A---- D:\WINDOWS\system32\racpldlg.dll 2010-02-05 12:11:26 ----A---- D:\WINDOWS\system32\fltmc.exe 2010-02-05 12:11:26 ----A---- D:\WINDOWS\system32\fltlib.dll 2010-02-05 12:11:25 ----D---- D:\WINDOWS\system32\Restore 2010-02-05 12:11:25 ----A---- D:\WINDOWS\system32\srrstr.dll 2010-02-05 12:11:25 ----A---- D:\WINDOWS\system32\srclient.dll 2010-02-05 12:11:25 -------- D:\WINDOWS\system32\srsvc.dll 2010-02-05 12:11:24 ----A---- D:\WINDOWS\system32\nmmkcert.dll 2010-02-05 12:11:24 ----A---- D:\WINDOWS\system32\msconf.dll 2010-02-05 12:11:24 ----A---- D:\WINDOWS\system32\mnmsrvc.exe 2010-02-05 12:11:24 ----A---- D:\WINDOWS\system32\mnmdd.dll 2010-02-05 12:11:24 ----A---- D:\WINDOWS\system32\isrdbg32.dll 2010-02-05 12:11:24 ----A---- D:\WINDOWS\system32\ils.dll 2010-02-05 12:11:21 ----D---- D:\Arquivos de programas\NetMeeting 2010-02-05 12:11:21 ----A---- D:\WINDOWS\system32\msoert2.dll 2010-02-05 12:11:20 ----A---- D:\WINDOWS\system32\msoeacct.dll 2010-02-05 12:11:19 ----A---- D:\WINDOWS\system32\inetres.dll 2010-02-05 12:11:19 ----A---- D:\WINDOWS\system32\inetcomm.dll 2010-02-05 12:11:17 ----D---- D:\Arquivos de programas\Outlook Express 2010-02-05 12:11:17 ----A---- D:\WINDOWS\system32\mstinit.exe 2010-02-05 12:11:17 ----A---- D:\WINDOWS\system32\mstask.dll 2010-02-05 12:11:17 -------- D:\WINDOWS\system32\schedsvc.dll 2010-02-05 12:11:16 ----A---- D:\WINDOWS\system32\isign32.dll 2010-02-05 12:11:16 ----A---- D:\WINDOWS\system32\inetcfg.dll 2010-02-05 12:11:16 ----A---- D:\WINDOWS\system32\icwphbk.dll 2010-02-05 12:11:16 ----A---- D:\WINDOWS\system32\icwdial.dll 2010-02-05 12:11:10 ----D---- D:\Arquivos de programas\Arquivos comuns\System 2010-02-05 12:11:05 ----D---- D:\Arquivos de programas\Internet Explorer 2010-02-05 12:10:36 ----D---- D:\Arquivos de programas\ComPlus Applications 2010-02-05 12:10:35 ----A---- D:\WINDOWS\vbaddin.ini 2010-02-05 12:10:35 ----A---- D:\WINDOWS\vb.ini 2010-02-05 12:10:30 ----D---- D:\WINDOWS\Registration 2010-02-05 12:10:23 ----D---- D:\Arquivos de programas\Windows Media Player 2010-02-05 12:10:17 ----D---- D:\Arquivos de programas\Messenger 2010-02-05 12:10:13 ----D---- D:\Arquivos de programas\MSN Gaming Zone 2010-02-05 12:10:13 ----A---- D:\WINDOWS\system32\write.exe 2010-02-05 12:10:03 ----A---- D:\WINDOWS\system32\sndvol32.exe 2010-02-05 12:10:03 ----A---- D:\WINDOWS\system32\hticons.dll 2010-02-05 12:10:02 ----A---- D:\WINDOWS\system32\winchat.exe 2010-02-05 12:10:02 ----A---- D:\WINDOWS\system32\avwav.dll 2010-02-05 12:10:02 ----A---- D:\WINDOWS\system32\avtapi.dll 2010-02-05 12:10:02 ----A---- D:\WINDOWS\system32\avmeter.dll 2010-02-05 12:09:54 ----A---- D:\WINDOWS\system32\getuname.dll 2010-02-05 12:09:54 ----A---- D:\WINDOWS\system32\charmap.exe 2010-02-05 12:09:54 ----A---- D:\WINDOWS\system32\calc.exe 2010-02-05 12:09:53 ----A---- D:\WINDOWS\system32\winmine.exe 2010-02-05 12:09:53 ----A---- D:\WINDOWS\system32\sol.exe 2010-02-05 12:09:53 ----A---- D:\WINDOWS\system32\mshearts.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\usrlogon.cmd 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\tsshutdn.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\tslabels.ini 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\tskill.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\tsdiscon.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\tscon.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\shadow.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\rwinsta.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\reset.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\regini.exe 2010-02-05 12:09:52 ----A---- D:\WINDOWS\system32\freecell.exe 2010-02-05 12:09:51 ----A---- D:\WINDOWS\system32\rdpcfgex.dll 2010-02-05 12:09:51 ----A---- D:\WINDOWS\system32\qwinsta.exe 2010-02-05 12:09:51 ----A---- D:\WINDOWS\system32\qappsrv.exe 2010-02-05 12:09:51 ----A---- D:\WINDOWS\system32\msg.exe 2010-02-05 12:09:51 ----A---- D:\WINDOWS\system32\msdtcprf.ini 2010-02-05 12:09:51 ----A---- D:\WINDOWS\system32\logoff.exe 2010-02-05 12:09:51 ----A---- D:\WINDOWS\system32\cdmodem.dll 2010-02-05 12:09:50 ----A---- D:\WINDOWS\system32\mtxlegih.dll 2010-02-05 12:09:50 ----A---- D:\WINDOWS\system32\mtxex.dll 2010-02-05 12:09:50 ----A---- D:\WINDOWS\system32\mtxdm.dll 2010-02-05 12:09:50 ----A---- D:\WINDOWS\system32\dcomcnfg.exe 2010-02-05 12:09:49 ----A---- D:\WINDOWS\system32\stclient.dll 2010-02-05 12:09:49 ----A---- D:\WINDOWS\system32\comsnap.dll 2010-02-05 12:09:49 ----A---- D:\WINDOWS\system32\comrepl.dll 2010-02-05 12:09:49 ----A---- D:\WINDOWS\system32\comaddin.dll 2010-02-05 12:09:43 ----A---- D:\WINDOWS\system32\wmimgmt.msc 2010-02-05 12:09:42 ----A---- D:\WINDOWS\system32\sndrec32.exe 2010-02-05 12:09:42 ----A---- D:\WINDOWS\system32\mplay32.exe 2010-02-05 12:09:42 ----A---- D:\WINDOWS\system32\hypertrm.dll 2010-02-05 12:09:42 ----A---- D:\WINDOWS\system32\accwiz.exe 2010-02-05 12:09:41 ----D---- D:\Arquivos de programas\Windows NT 2010-02-05 12:09:41 ----A---- D:\WINDOWS\system32\mspaint.exe 2010-02-05 12:09:41 ----A---- D:\WINDOWS\system32\clipbrd.exe 2010-02-05 12:09:40 ----A---- D:\WINDOWS\system32\tscfgwmi.dll 2010-02-05 12:09:40 ----A---- D:\WINDOWS\system32\spider.exe 2010-02-05 12:09:40 ----A---- D:\WINDOWS\system32\mstscax.dll 2010-02-05 12:09:39 ----A---- D:\WINDOWS\system32\tscupgrd.exe 2010-02-05 12:09:39 ----A---- D:\WINDOWS\system32\sessmgr.exe 2010-02-05 12:09:39 ----A---- D:\WINDOWS\system32\remotepg.dll 2010-02-05 12:09:39 ----A---- D:\WINDOWS\system32\rdshost.exe 2010-02-05 12:09:39 ----A---- D:\WINDOWS\system32\rdsaddin.exe 2010-02-05 12:09:39 ----A---- D:\WINDOWS\system32\rdpwsx.dll 2010-02-05 12:09:39 ----A---- D:\WINDOWS\system32\rdchost.dll 2010-02-05 12:09:39 ----A---- D:\WINDOWS\system32\mstsc.exe 2010-02-05 12:09:39 -------- D:\WINDOWS\system32\termsrv.dll 2010-02-05 12:09:38 ----D---- D:\WINDOWS\system32\MsDtc 2010-02-05 12:09:38 ----A---- D:\WINDOWS\system32\rdpsnd.dll 2010-02-05 12:09:38 ----A---- D:\WINDOWS\system32\rdpclip.exe 2010-02-05 12:09:38 ----A---- D:\WINDOWS\system32\qprocess.exe 2010-02-05 12:09:38 ----A---- D:\WINDOWS\system32\mtxoci.dll 2010-02-05 12:09:38 ----A---- D:\WINDOWS\system32\msdtcuiu.dll 2010-02-05 12:09:38 ----A---- D:\WINDOWS\system32\icaapi.dll 2010-02-05 12:09:38 ----A---- D:\WINDOWS\system32\cfgbkend.dll 2010-02-05 12:09:37 ----A---- D:\WINDOWS\system32\xolehlp.dll 2010-02-05 12:09:37 ----A---- D:\WINDOWS\system32\msdtctm.dll 2010-02-05 12:09:37 ----A---- D:\WINDOWS\system32\msdtcprx.dll 2010-02-05 12:09:37 ----A---- D:\WINDOWS\system32\msdtclog.dll 2010-02-05 12:09:37 ----A---- D:\WINDOWS\system32\msdtc.exe 2010-02-05 12:09:36 ----D---- D:\WINDOWS\system32\Com 2010-02-05 12:09:36 ----A---- D:\WINDOWS\system32\colbact.dll 2010-02-05 12:09:36 ----A---- D:\WINDOWS\system32\clbcatex.dll 2010-02-05 12:09:36 ----A---- D:\WINDOWS\system32\catsrvps.dll 2010-02-05 12:09:35 ----A---- D:\WINDOWS\system32\comsvcs.dll 2010-02-05 12:09:35 ----A---- D:\WINDOWS\system32\catsrvut.dll 2010-02-05 12:09:35 ----A---- D:\WINDOWS\system32\catsrv.dll 2010-02-05 12:09:34 ----A---- D:\WINDOWS\system32\comuid.dll 2010-02-05 12:09:34 ----A---- D:\WINDOWS\system32\clbcatq.dll 2010-02-05 12:09:28 ----A---- D:\WINDOWS\system32\servdeps.dll 2010-02-05 12:09:27 ----A---- D:\WINDOWS\system32\mmfutil.dll 2010-02-05 12:09:27 ----A---- D:\WINDOWS\system32\licwmi.dll 2010-02-05 12:09:27 ----A---- D:\WINDOWS\system32\cmprops.dll 2010-02-05 10:05:59 ----A---- D:\WINDOWS\system32\h323log.txt 2010-02-05 10:03:49 ----A---- D:\WINDOWS\system32\wshirda.dll 2010-02-05 10:03:49 ----A---- D:\WINDOWS\system32\irmon.dll 2010-02-05 10:03:49 ----A---- D:\WINDOWS\system32\irftp.exe 2010-02-05 10:03:30 ----A---- D:\WINDOWS\system32\vfwwdm32.dll 2010-02-05 10:03:30 ----A---- D:\WINDOWS\system32\ksuser.dll 2010-02-05 10:02:32 ----A---- D:\WINDOWS\system32\usbui.dll 2010-02-05 10:01:16 ----A---- D:\WINDOWS\imsins.BAK 2010-02-05 10:01:14 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI 2010-02-05 10:01:13 ----SHD---- D:\WINDOWS\Installer 2010-02-05 10:01:13 ----D---- D:\Arquivos de programas\Arquivos comuns\ODBC 2010-02-05 10:01:13 ----A---- D:\WINDOWS\ODBCINST.INI 2010-02-05 10:01:09 ----RD---- D:\Arquivos de programas 2010-02-05 10:01:09 ----D---- D:\Arquivos de programas\Arquivos comuns\SpeechEngines 2010-02-05 10:01:09 ----D---- D:\Arquivos de programas\Arquivos comuns\Microsoft Shared 2010-02-05 10:01:09 ----D---- D:\Arquivos de programas\Arquivos comuns 2010-02-05 10:01:05 ----RA---- D:\WINDOWS\system32\kbdtuq.dll 2010-02-05 10:01:05 ----RA---- D:\WINDOWS\system32\kbdtuf.dll 2010-02-05 10:01:05 ----RA---- D:\WINDOWS\system32\kbdazel.dll 2010-02-05 10:01:03 ----RA---- D:\WINDOWS\system32\kbduzb.dll 2010-02-05 10:01:03 ----RA---- D:\WINDOWS\system32\kbdtat.dll 2010-02-05 10:01:03 ----RA---- D:\WINDOWS\system32\kbdmon.dll 2010-02-05 10:01:03 ----RA---- D:\WINDOWS\system32\kbdkyr.dll 2010-02-05 10:01:03 ----RA---- D:\WINDOWS\system32\kbdaze.dll 2010-02-05 10:01:02 ----RA---- D:\WINDOWS\system32\kbdycc.dll 2010-02-05 10:01:02 ----RA---- D:\WINDOWS\system32\kbdur.dll 2010-02-05 10:01:02 ----RA---- D:\WINDOWS\system32\kbdru1.dll 2010-02-05 10:01:02 ----RA---- D:\WINDOWS\system32\kbdru.dll 2010-02-05 10:01:02 ----RA---- D:\WINDOWS\system32\kbdkaz.dll 2010-02-05 10:01:02 ----RA---- D:\WINDOWS\system32\kbdbu.dll 2010-02-05 10:01:02 ----RA---- D:\WINDOWS\system32\kbdblr.dll 2010-02-05 10:01:00 ----RA---- D:\WINDOWS\system32\kbdhept.dll 2010-02-05 10:01:00 ----RA---- D:\WINDOWS\system32\kbdhela3.dll 2010-02-05 10:01:00 ----RA---- D:\WINDOWS\system32\kbdhela2.dll 2010-02-05 10:01:00 ----RA---- D:\WINDOWS\system32\kbdhe319.dll 2010-02-05 10:01:00 ----RA---- D:\WINDOWS\system32\kbdhe220.dll 2010-02-05 10:01:00 ----RA---- D:\WINDOWS\system32\kbdhe.dll 2010-02-05 10:01:00 ----RA---- D:\WINDOWS\system32\kbdgkl.dll 2010-02-05 10:00:58 ----RA---- D:\WINDOWS\system32\kbdlv1.dll 2010-02-05 10:00:58 ----RA---- D:\WINDOWS\system32\kbdlv.dll 2010-02-05 10:00:58 ----RA---- D:\WINDOWS\system32\kbdlt1.dll 2010-02-05 10:00:58 ----RA---- D:\WINDOWS\system32\kbdlt.dll 2010-02-05 10:00:58 ----RA---- D:\WINDOWS\system32\kbdest.dll 2010-02-05 10:00:56 ----RA---- D:\WINDOWS\system32\kbdsl1.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdycl.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdsl.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdro.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdpl1.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdpl.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdhu1.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdhu.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdcz2.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdcz1.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdcz.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\kbdcr.dll 2010-02-05 10:00:55 ----RA---- D:\WINDOWS\system32\KBDAL.DLL 2010-02-05 10:00:52 ----A---- D:\WINDOWS\system32\spxcoins.dll 2010-02-05 10:00:52 ----A---- D:\WINDOWS\system32\irclass.dll 2010-02-05 10:00:52 ----A---- D:\WINDOWS\system32\EqnClass.Dll 2010-02-05 10:00:52 ----A---- D:\WINDOWS\system32\dgsetup.dll 2010-02-05 10:00:52 ----A---- D:\WINDOWS\system32\dgrpsetu.dll 2010-02-05 10:00:49 ----A---- D:\WINDOWS\TASKMAN.EXE 2010-02-05 10:00:49 ----A---- D:\WINDOWS\system32\batt.dll 2010-02-05 10:00:49 -------- D:\WINDOWS\system32\CONFIG.TMP 2010-02-05 10:00:48 ----A---- D:\WINDOWS\NOTEPAD.EXE 2010-02-05 10:00:47 ----A---- D:\WINDOWS\system32\storprop.dll 2010-02-05 10:00:38 ----ASH---- D:\Documents and Settings\All Users\Dados de aplicativos\desktop.ini 2010-02-05 10:00:35 ----RA---- D:\WINDOWS\SET8.tmp 2010-02-05 10:00:32 ----RA---- D:\WINDOWS\SET4.tmp 2010-02-05 10:00:31 ----RA---- D:\WINDOWS\SET3.tmp 2010-02-05 10:00:26 ----D---- D:\WINDOWS\system32\CatRoot2 2010-02-05 10:00:26 ----D---- D:\WINDOWS\system32\CatRoot 2010-02-05 10:00:20 ----SD---- D:\Documents and Settings\All Users\Dados de aplicativos\Microsoft 2010-02-05 09:59:58 ----A---- D:\WINDOWS\setuplog.txt 2010-02-05 09:59:55 ----SHD---- D:\System Volume Information 2010-02-05 09:59:55 ----D---- D:\Documents and Settings 2010-02-05 09:54:27 ----RSHDC---- D:\WINDOWS\system32\dllcache 2010-02-05 09:54:27 ----RSD---- D:\WINDOWS\Fonts 2010-02-05 09:54:27 ----RD---- D:\WINDOWS\Web 2010-02-05 09:54:27 ----HD---- D:\WINDOWS\inf 2010-02-05 09:54:27 ----D---- D:\WINDOWS\WinSxS 2010-02-05 09:54:27 ----D---- D:\WINDOWS\twain_32 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Temp 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\wins 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\wbem 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\usmt 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\spool 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\ShellExt 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\Setup 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\ras 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\oobe 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\npp 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\mui 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\inetsrv 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\IME 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\icsxml 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\ias 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\export 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\drivers 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\dhcp 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\config 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\3com_dmi 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\3076 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\2052 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1054 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1046 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1042 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1041 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1037 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1033 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1031 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1028 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32\1025 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system32 2010-02-05 09:54:27 ----D---- D:\WINDOWS\system 2010-02-05 09:54:27 ----D---- D:\WINDOWS\security 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Resources 2010-02-05 09:54:27 ----D---- D:\WINDOWS\repair 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Provisioning 2010-02-05 09:54:27 ----D---- D:\WINDOWS\PeerNet 2010-02-05 09:54:27 ----D---- D:\WINDOWS\pchealth 2010-02-05 09:54:27 ----D---- D:\WINDOWS\mui 2010-02-05 09:54:27 ----D---- D:\WINDOWS\msapps 2010-02-05 09:54:27 ----D---- D:\WINDOWS\msagent 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Media 2010-02-05 09:54:27 ----D---- D:\WINDOWS\java 2010-02-05 09:54:27 ----D---- D:\WINDOWS\ime 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Help 2010-02-05 09:54:27 ----D---- D:\WINDOWS\ehome 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Driver Cache 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Debug 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Cursors 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Connection Wizard 2010-02-05 09:54:27 ----D---- D:\WINDOWS\Config 2010-02-05 09:54:27 ----D---- D:\WINDOWS\AppPatch 2010-02-05 09:54:27 ----D---- D:\WINDOWS\addins 2010-02-05 09:54:27 ----D---- D:\WINDOWS ======List of files/folders modified in the last 1 months====== 2010-02-27 23:08:54 ----N---- D:\WINDOWS\system.ini 2010-02-26 22:55:20 ----N---- D:\WINDOWS\win.ini ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 ElbyCDIO;ElbyCDIO Driver; D:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232] R1 intelppm;Driver de Processador Intel; D:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 40192] R3 ati2mtag;ati2mtag; D:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-02-25 3565568] R3 BthEnum;Driver de Bloqueio de Solicitação Bluetooth; D:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-03 17024] R3 BthPan;Bluetooth Device (Personal Area Network); D:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992] R3 BTHUSB;Driver USB de Rádio Bluetooth; D:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-03 18944] R3 CmBatt;Microsoft AC Adapter Driver; D:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-03 14080] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752] R3 hidusb;Driver de classe HID da Microsoft; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-28 9600] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); D:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-10 4603904] R3 mouhid;Mouse HID Driver; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-28 12288] R3 RFCOMM;Dispositivo Bluetooth (TDI do Protocolo RFCOMM); D:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-03 59648] R3 RTCore32;RTCore32; \??\C:\Programas\RMClock\RTCore32.sys [] R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; D:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-03-03 98944] R3 sdbus;sdbus; D:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-03 67584] R3 SynTP;Synaptics TouchPad Driver; D:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-05-10 181432] R3 usbccgp;Microsoft USB Generic Parent Driver; D:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616] R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; D:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624] R3 usbhub;USB2 Enabled Hub; D:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600] R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; D:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-03 17024] R3 usbvideo;Dispositivo de vídeo USB (WDM); D:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464] R3 VClone;VClone; D:\WINDOWS\system32\DRIVERS\VClone.sys [2009-05-22 29696] R3 Wdf01000;Wdf01000; D:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2005-11-30 474184] S3 Ambfilt;Ambfilt; D:\WINDOWS\system32\drivers\Ambfilt.sys [] S3 AR5416;Atheros AR5008 Wireless Network Adapter Service; D:\WINDOWS\system32\DRIVERS\athw.sys [2009-08-11 1582624] S3 Arp1394;Protocolo cliente 1394 ARP; D:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-04 60800] S3 BTHPORT;Driver de Porta Bluetooth; D:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272384] S3 catchme;catchme; D:\WINDOWS\system32\drivers\catchme.sys [] S3 CCDECODE;Closed Caption Decoder; D:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024] S3 GarenaPEngine;GarenaPEngine; \??\D:\DOCUME~1\Genesis\CONFIG~1\Temp\BMD43.tmp [] S3 HPZid412;IEEE-1284.4 Driver HPZid412; D:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-30 49920] S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; D:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-30 16496] S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; D:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-30 21568] S3 Monfilt;Monfilt; D:\WINDOWS\system32\drivers\Monfilt.sys [] S3 MSTEE;Conversor em T entre locais de fluxo contínuo Microsoft; D:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504] S3 NABTSFEC;NABTS/FEC VBI Codec; D:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376] S3 NdisIP;Conexão de TV e vídeo da Microsoft; D:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880] S3 NIC1394;Driver de rede 1394; D:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-04 61824] S3 SLIP;BDA Slip De-Framer; D:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136] S3 streamip;BDA IPSink; D:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360] S3 usbprint;Microsoft USB PRINTER Class; D:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856] S3 usbscan;USB Scanner Driver; D:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104] S3 usbstor;USB Mass Storage Driver; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496] S3 WSTCODEC;World Standard Teletext Codec; D:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328] S4 IntelIde;IntelIde; D:\WINDOWS\system32\drivers\IntelIde.sys [] S4 sr;Driver de filtro de restauração do sistema; D:\WINDOWS\system32\DRIVERS\sr.sys [2004-08-04 73472] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Ati HotKey Poller;Ati HotKey Poller; D:\WINDOWS\system32\Ati2evxx.exe [2009-02-25 602112] R2 BthServ;Bluetooth Support Service; D:\WINDOWS\system32\svchost.exe [2004-08-04 14336] R2 JavaQuickStarterService;Java Quick Starter; C:\Programas\Java\jre6\bin\jqs.exe [2010-02-13 153376] R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); D:\Arquivos de programas\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2009-05-27 29262680] R2 Net Driver HPZ12;Net Driver HPZ12; D:\WINDOWS\System32\svchost.exe [2004-08-04 14336] R2 Pml Driver HPZ12;Pml Driver HPZ12; D:\WINDOWS\System32\svchost.exe [2004-08-04 14336] R2 SQLBrowser;SQL Server Browser; D:\Arquivos de programas\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-24 239968] R2 SQLWriter;SQL Server VSS Writer; D:\Arquivos de programas\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904] S2 ATI Smart;ATI Smart; D:\WINDOWS\system32\ati2sgag.exe [2009-02-25 593920] S3 aspnet_state;ASP.NET State Service; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; D:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 hpqcxs08;hpqcxs08; D:\WINDOWS\system32\svchost.exe [2004-08-04 14336] S3 idsvc;Windows CardSpace; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Arquivos de programas\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888] S3 odserv;Microsoft Office Diagnostics Service; D:\Arquivos de programas\Arquivos comuns\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; D:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S4 hpqddsvc;Serviço de Descoberta de dispositivos CUE HP; D:\WINDOWS\system32\svchost.exe [2004-08-04 14336] S4 MSSQLServerADHelper;SQL Server Active Directory Helper; D:\Arquivos de programas\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-24 45408] S4 msvsmon90;Visual Studio 2008 Remote Debugger; C:\Programas\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2007-11-07 3004416] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- e o C:\rsit\info.txt: info.txt logfile of random's system information tool 1.06 2010-02-28 20:49:17 ======Uninstall list====== -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 D:\WINDOWS\INF\PCHealth.inf µTorrent-->"C:\Programas\uTorrent\uTorrent.exe" /UNINSTALL 32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7} 7-Zip 4.65-->"C:\Programas\7-Zip\Uninstall.exe" Adobe Flash Player 10 ActiveX-->D:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->D:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Reader 9.2 - Português-->MsiExec.exe /I{AC76BA86-7AD7-1046-7B44-A92000000001} ATI - Software Uninstall Utility-->D:\Arquivos de programas\ATI Technologies\UninstallAll\AtiCimUn.exe ATI Catalyst Control Center-->RunDll32 D:\ARQUIV~1\ARQUIV~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "D:\Arquivos de programas\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0 ATI Display Driver-->rundll32 D:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean Atualização de Segurança para o Windows Media Player (KB911564)-->"D:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe" Atualização de Segurança para o Windows Media Player (KB952069)-->"D:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Atualização de Segurança para o Windows Media Player (KB954155)-->"D:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe" Atualização de Segurança para o Windows Media Player (KB968816)-->"D:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe" Atualização de Segurança para o Windows Media Player (KB973540)-->"D:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe" Atualização de Segurança para o Windows Media Player 6.4 (KB925398)-->"D:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe" Atualização de Segurança para Windows Internet Explorer 8 (KB971961)-->"D:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe" Atualização de Segurança para Windows Internet Explorer 8 (KB978207)-->"D:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB890046)-->"D:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB893756)-->"D:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB896358)-->"D:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB896423)-->"D:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB899587)-->"D:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB899591)-->"D:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB900725)-->"D:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB901017)-->"D:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB901214)-->"D:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB902400)-->"D:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB905414)-->"D:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB905749)-->"D:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB911562)-->"D:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB911927)-->"D:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB913580)-->"D:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB914388)-->"D:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB914389)-->"D:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB918118)-->"D:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB918439)-->"D:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB920213)-->"D:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB920670)-->"D:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB920683)-->"D:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB923191)-->"D:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB923561)-->"D:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB923980)-->"D:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB924270)-->"D:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB924667)-->"D:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB925902)-->"D:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB926255)-->"D:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB926436)-->"D:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB927779)-->"D:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB927802)-->"D:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB928255)-->"D:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB928843)-->"D:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB929123)-->"D:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB930178)-->"D:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB931261)-->"D:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB932168)-->"D:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB941569)-->"D:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB943055)-->"D:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB943460)-->"D:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB944653)-->"D:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB945553)-->"D:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB946026)-->"D:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB946648)-->"D:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB950749)-->"D:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB950760)-->"D:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB950762)-->"D:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB950974)-->"D:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB951066)-->"D:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB951376-v2)-->"D:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB951748)-->"D:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB952004)-->"D:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB952954)-->"D:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB955069)-->"D:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB956572)-->"D:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB956802)-->"D:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB956803)-->"D:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB956844)-->"D:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB958470)-->"D:\WINDOWS\$NtUninstallKB958470$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB958644)-->"D:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB958869)-->"D:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB959426)-->"D:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB960225)-->"D:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB960803)-->"D:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB960859)-->"D:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB961501)-->"D:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB969059)-->"D:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB969947)-->"D:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB970238)-->"D:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB970430)-->"D:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB971032)-->"D:\WINDOWS\$NtUninstallKB971032$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB971468)-->"D:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB971486)-->"D:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB971657)-->"D:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB972270)-->"D:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB973354)-->"D:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB973507)-->"D:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB973869)-->"D:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB973904)-->"D:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB974112)-->"D:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB974318)-->"D:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB974392)-->"D:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB974571)-->"D:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB975025)-->"D:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB975467)-->"D:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB975560)-->"D:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB975713)-->"D:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB977165)-->"D:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB977914)-->"D:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB978037)-->"D:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB978251)-->"D:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB978262)-->"D:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe" Atualização de Segurança para Windows XP (KB978706)-->"D:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe" Atualização para Windows Internet Explorer 8 (KB976662)-->"D:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe" Atualização para Windows XP (KB894391)-->"D:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe" Atualização para Windows XP (KB898461)-->"D:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe" Atualização para Windows XP (KB900485)-->"D:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe" Atualização para Windows XP (KB908531)-->"D:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe" Atualização para Windows XP (KB910437)-->"D:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe" Atualização para Windows XP (KB911280)-->"D:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe" Atualização para Windows XP (KB916595)-->"D:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe" Atualização para Windows XP (KB920872)-->"D:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe" Atualização para Windows XP (KB922582)-->"D:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe" Atualização para Windows XP (KB925720)-->"D:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe" Atualização para Windows XP (KB930916)-->"D:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe" Atualização para Windows XP (KB932823-v3)-->"D:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe" Atualização para Windows XP (KB936357)-->"D:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe" Atualização para Windows XP (KB938828)-->"D:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe" Atualização para Windows XP (KB955759)-->"D:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe" Atualização para Windows XP (KB961503)-->"D:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe" Atualização para Windows XP (KB967715)-->"D:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Atualização para Windows XP (KB968389)-->"D:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe" Atualização para Windows XP (KB971737)-->"D:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe" Atualização para Windows XP (KB973687)-->"D:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe" Atualização para Windows XP (KB973815)-->"D:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe" Catalyst Control Center - Branding-->MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C} Crystal Reports Basic for Visual Studio 2008-->MsiExec.exe /X{AA467959-A1D6-4F45-90CD-11DC57733F32} Final Fantasy VII - Ultima Edition-->"C:\Jogos\Final Fantasy VII\unins000.exe" Free Download Manager 3.0-->"C:\Programas\Free Download Manager\unins000.exe" GDR 4053 for SQL Server Database Services 2005 ENU (KB970892)-->D:\WINDOWS\SQL9_KB970892_ENU\Hotfix.exe /Uninstall GDR 4053 for SQL Server Tools and Workstation Components 2005 ENU (KB970892)-->D:\WINDOWS\SQLTools9_KB970892_ENU\Hotfix.exe /Uninstall High Definition Audio Driver Package - KB888111-->"D:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" HijackThis 2.0.2-->"C:\HijackThis.exe" /uninstall Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->D:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->D:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB971091)-->D:\WINDOWS\system32\msiexec.exe /package {D7DAD1E4-45F4-3B2B-899A-EA728167EC4F} /uninstall {06694B0F-B778-4E13-B841-4FF9CC81D0C5} /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB973674)-->D:\WINDOWS\system32\msiexec.exe /package {D7DAD1E4-45F4-3B2B-899A-EA728167EC4F} /uninstall {E1404B9C-5F36-406A-B720-70FA3F242B7B} /qb+ REBOOTPROMPT="" Hotfix para Windows XP (KB935448)-->"D:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe" Hotfix para Windows XP (KB942288-v3)-->"D:\WINDOWS\$NtUninstallKB942288-v3$\spuninst\spuninst.exe" Hotfix para Windows XP (KB952287)-->"D:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Hotfix para Windows XP (KB961118)-->"D:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe" Hotfix para Windows XP (KB979306)-->"D:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe" HP Customer Participation Program 10.0-->D:\Arquivos de programas\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat HP Imaging Device Functions 10.0-->D:\Arquivos de programas\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat HP Photosmart C4400 All-In-One Driver Software 10.0 Rel .3-->D:\Arquivos de programas\HP\Digital Imaging\{FF1F4E8E-A833-4c4b-A14A-45D5B841B5D8}\setup\hpzscr01.exe -datfile hposcr29.dat -onestop HP Photosmart Essential 2.5-->D:\Arquivos de programas\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat HP Smart Web Printing-->D:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\hpzscr01.exe -datfile hpqbud15.dat HP Solution Center 10.0-->D:\Arquivos de programas\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat HP Update-->MsiExec.exe /X{11B83AD3-7A46-4C2E-A568-9505981D4C6F} Java DB 10.5.3.0-->MsiExec.exe /X{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C} Java 6 Update 18-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216018FF} Java SE Development Kit 6 Update 18-->MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0160180} JDownloader-->C:\Programas\JDownloader\uninstall.exe LeechFTP -->D:\WINDOWS\eraser.exe KILL "C:\Programas\LeechFTP\uninstall.uif" Malwarebytes' Anti-Malware-->"C:\Programas\Malwarebytes' Anti-Malware\unins000.exe" Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} Microsoft .NET Framework 3.5 SP1-->D:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570} Microsoft Device Emulator version 3.0 - ENU-->MsiExec.exe /X{B32E7732-B2FB-3FD0-81AC-6025B1104C66} Microsoft Document Explorer 2008-->D:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Help 9\Microsoft Document Explorer 2008\install.exe Microsoft Document Explorer 2008-->MsiExec.exe /X{6753B40C-0FBD-3BED-8A9D-0ACAC2DCD85D} Microsoft Kernel-Mode Driver Framework 1.0-->"D:\WINDOWS\$NtUninstallWdf01000$\spuninst\spuninst.exe" Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0416-0000-0000000FF1CE} /uninstall {9A141B2B-7C5E-47D2-8E9E-9AC6018F3C42} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00BA-0416-0000-0000000FF1CE} /uninstall {02A880E2-B8B9-4BF5-8822-EA1374734E2E} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} Microsoft Office Access MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-0015-0416-0000-0000000FF1CE} Microsoft Office Enterprise 2007-->"D:\Arquivos de programas\Arquivos comuns\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE} Microsoft Office Excel MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-0016-0416-0000-0000000FF1CE} Microsoft Office Groove MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-00BA-0416-0000-0000000FF1CE} Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-0044-0416-0000-0000000FF1CE} Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-00A1-0416-0000-0000000FF1CE} Microsoft Office Outlook MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-001A-0416-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-0018-0416-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-001F-0416-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-002C-0416-0000-0000000FF1CE} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0416-0000-0000000FF1CE} /uninstall {75EBE365-7FC5-4720-A7D3-804BF550D1BC} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9} Microsoft Office Publisher MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-0019-0416-0000-0000000FF1CE} Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE} Microsoft Office Shared MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-006E-0416-0000-0000000FF1CE} Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE} Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0021-0409-0000-0000000FF1CE} /uninstall {E1044ED2-E4AD-4B39-B500-31109750F6B4} Microsoft Office Visual Web Developer 2007-->MsiExec.exe /X{90120000-0021-0000-0000-0000000FF1CE} Microsoft Office Visual Web Developer MUI (English) 2007-->MsiExec.exe /X{90120000-0021-0409-0000-0000000FF1CE} Microsoft Office Word MUI (Portuguese (Brazil)) 2007-->MsiExec.exe /X{90120000-001B-0416-0000-0000000FF1CE} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)-->MsiExec.exe /I{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F} Microsoft SQL Server 2005 Tools Express Edition-->MsiExec.exe /I{2750B389-A2D2-4953-99CA-27C1F2A8E6FD} Microsoft SQL Server 2005-->"D:\Arquivos de programas\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove Microsoft SQL Server Compact 3.5 Design Tools ENU-->MsiExec.exe /X{2E5C075E-11AB-4BDD-918C-7B9A68953FF8} Microsoft SQL Server Compact 3.5 ENU-->MsiExec.exe /I{BCC899FE-2DAA-460C-A5FB-60291E73D9C3} Microsoft SQL Server Compact 3.5 for Devices ENU-->MsiExec.exe /I{241F2BF7-69EB-42A4-9156-96B2426C7504} Microsoft SQL Server Database Publishing Wizard 1.2-->MsiExec.exe /X{9A33B83D-FFC4-44CF-BEEF-632DECEF2FCD} Microsoft SQL Server Native Client-->MsiExec.exe /I{BD68F46D-8A82-4664-8E68-F87C55BDEFD4} Microsoft SQL Server Setup Support Files (English)-->MsiExec.exe /X{53F5C3EE-05ED-4830-994B-50B2F0D50FCE} Microsoft SQL Server VSS Writer-->MsiExec.exe /I{56B4002F-671C-49F4-984C-C760FE3806B5} Microsoft Visual Studio 2008 Professional Edition - ENU-->C:\Programas\Microsoft Visual Studio 9.0\Microsoft Visual Studio 2008 Professional Edition - ENU\setup.exe Microsoft Visual Studio Web Authoring Component-->"D:\Arquivos de programas\Arquivos comuns\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall VISUALWEBDEVELOPER /dll OSETUP.DLL Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools-->MsiExec.exe /X{05EC21B8-4593-3037-A781-A6B5AFFCB19D} Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries-->MsiExec.exe /X{842FAF7C-50EF-4463-9B8F-6222E1384D7D} Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense-->MsiExec.exe /X{64c5b887-b5ee-42b8-8596-78905a6b5f1f} Microsoft Windows SDK for Visual Studio 2008 Tools-->MsiExec.exe /X{CAA376AF-0DE8-4FCA-942E-C6AC579B94B3} Microsoft Windows SDK for Visual Studio 2008 Win32 Tools-->MsiExec.exe /X{B268E9A1-04A9-40D0-9866-846BE2B74BA7} Mozilla Firefox (3.6)-->C:\Programas\Mozilla Firefox\uninstall\helper.exe MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} MSXML 6 Service Pack 2 (KB973686)-->MsiExec.exe /I{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA} MV RegClean 5.9-->"C:\Programas\Marcos Velasco Security\MV RegClean 5.9\unins000.exe" NetBeans IDE 6.8-->"C:\Programas\NetBeans 6.8\uninstall.exe" Notepad++-->C:\Programas\Notepad++\uninstall.exe OCR Software by I.R.I.S. 10.0-->D:\Arquivos de programas\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat Panda ActiveScan 2.0-->D:\Arquivos de programas\Panda Security\ActiveScan 2.0\as2uninst.exe Realtek High Definition Audio Driver-->RunDll32 D:\ARQUIV~1\ARQUIV~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "D:\Arquivos de programas\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x416 -removeonly Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85} Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7} Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08} Security Update for 2007 Microsoft Office System (KB973704)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F} Security Update for Microsoft Office Excel 2007 (KB973593)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE} Security Update for Microsoft Office Outlook 2007 (KB972363)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0} Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D} Security Update for Microsoft Office Publisher 2007 (KB969693)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E} Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF} Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF} Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C} Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC} Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC} Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D} Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050} Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} Shop for HP Supplies-->D:\Arquivos de programas\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36} Sun GlassFish Enterprise Server v3-->"C:\Programas\sges-v3\uninstall.exe" Synaptics Pointing Device Driver-->rundll32.exe "D:\Arquivos de programas\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall UFBCOM-->MsiExec.exe /I{7CFB3C02-718E-4532-8796-D2BFD152417C} Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->D:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" Update for Microsoft Office InfoPath 2007 (KB976416)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7} Update for Outlook 2007 Junk Email Filter (kb977719)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C0C92202-5215-4EFA-B0B9-B3A0DEABCDF1} VirtualCloneDrive-->"D:\Programas\Elaborate Bytes\VirtualCloneDrive\vcd-uninst.exe" /D="D:\Programas\Elaborate Bytes\VirtualCloneDrive" Windows Imaging Component-->"D:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe" Windows Internet Explorer 8-->"D:\WINDOWS\ie8\spuninst\spuninst.exe" Windows Live Call-->MsiExec.exe /I{32BC546A-8AA3-4239-AE92-9CF3291C35A6} Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956} Windows Live Essentials-->D:\Arquivos de programas\Windows Live\Installer\wlarp.exe Windows Live Essentials-->MsiExec.exe /I{F2CD4651-F948-467C-B014-71FD981B7F59} Windows Live Messenger-->MsiExec.exe /X{B5ED7AB0-3838-4389-8549-7C8E22DD48F4} Windows XP Hotfix - KB873339-->D:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe Windows XP Hotfix - KB885835-->D:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe Windows XP Hotfix - KB885836-->D:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe Windows XP Hotfix - KB886185-->D:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe Windows XP Hotfix - KB887472-->D:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe Windows XP Hotfix - KB888302-->D:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe Windows XP Hotfix - KB890859-->"D:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe" XP Codec Pack-->C:\Programas\XP Codec Pack\Uninstall.exe ======System event log====== Computer Name: NOTEBOOK Event Code: 26 Message: Popup de aplicativo: : \SystemRoot\System32\ativvaxx.dll failed to load Record Number: 1420 Source Name: Application Popup Time Written: 20100213203653.000000-180 Event Type: Informações User: Computer Name: NOTEBOOK Event Code: 26 Message: Popup de aplicativo: : \SystemRoot\System32\ativvaxx.dll failed to load Record Number: 1419 Source Name: Application Popup Time Written: 20100213203427.000000-180 Event Type: Informações User: Computer Name: NOTEBOOK Event Code: 4226 Message: TCP/IP alcançou o limite de segurança imposto sobre o número de tentativas de conexão TCP simultâneas. Record Number: 1418 Source Name: Tcpip Time Written: 20100213185551.000000-180 Event Type: aviso User: Computer Name: NOTEBOOK Event Code: 3 Message: \Device\ACPIEC: O hardware do controlador incorporado (EC) apresentou dados sem que houvesse solicitação alguma. Isso pode indicar que o BIOS está tentando acessar o EC incorretamente, sem sincronizar o sistema operacional. Os dados estão sendo ignorados. Record Number: 1417 Source Name: ACPIEC Time Written: 20100213180701.000000-180 Event Type: aviso User: Computer Name: NOTEBOOK Event Code: 7036 Message: O serviço Windows Installer entrou no estado interrompido. Record Number: 1416 Source Name: Service Control Manager Time Written: 20100213175040.000000-180 Event Type: Informações User: =====Application event log===== Computer Name: NOTEBOOK Event Code: 26048 Message: Server local connection provider is ready to accept connection on [ \\.\pipe\SQLLocal\SQLEXPRESS ]. Record Number: 1817 Source Name: MSSQL$SQLEXPRESS Time Written: 20100219200530.000000-180 Event Type: Informações User: Computer Name: NOTEBOOK Event Code: 26018 Message: A self-generated certificate was successfully loaded for encryption. Record Number: 1816 Source Name: MSSQL$SQLEXPRESS Time Written: 20100219200530.000000-180 Event Type: Informações User: Computer Name: NOTEBOOK Event Code: 17137 Message: Starting up database 'msdb'. Record Number: 1815 Source Name: MSSQL$SQLEXPRESS Time Written: 20100219200529.000000-180 Event Type: Informações User: Computer Name: NOTEBOOK Event Code: 17663 Message: Server name is 'NOTEBOOK\SQLEXPRESS'. This is an informational message only. No user action is required. Record Number: 1814 Source Name: MSSQL$SQLEXPRESS Time Written: 20100219200529.000000-180 Event Type: Informações User: Computer Name: NOTEBOOK Event Code: 17137 Message: Starting up database 'model'. Record Number: 1813 Source Name: MSSQL$SQLEXPRESS Time Written: 20100219200529.000000-180 Event Type: Informações User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;D:\Arquivos de programas\ATI Technologies\ATI.ACE\Core-Static;D:\Arquivos de programas\Microsoft SQL Server\90\Tools\binn;D:\Arquivos de programas\Microsoft SQL Server\90\Tools\binn\ "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel "PROCESSOR_REVISION"=0f0d "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "VS90COMNTOOLS"=c:\Programas\Microsoft Visual Studio 9.0\Common7\Tools\ -----------------EOF----------------- Obrigado pela atenção! Compartilhar este post Link para o post Compartilhar em outros sites
wings 22 Denunciar post Postado Março 1, 2010 Envie o arquivo abaixo para análise em http://virscan.org D:\WINDOWS\system32\ovvrhmb.exe Cole o link contendo o resultado. Compartilhar este post Link para o post Compartilhar em outros sites
.Zyphz 0 Denunciar post Postado Março 1, 2010 Segue abaixo o link com os resultados do Scan: http://virscan.org/report/a784fba963f89ef5694cf5b32cbf83ee.html Colocar entre as Tag's "Code" atrapalha? Eu percebi que tiraram as tags, peço desculpa... E mais uma vez, obrigado pela ajuda. Compartilhar este post Link para o post Compartilhar em outros sites
wings 22 Denunciar post Postado Março 1, 2010 *Baixe o Dr.WebCureit e salve-o no desktop *Duplo clique em launch.exe *Clique em [Opções] e altere o idioma para "Português" *Selecione a opção [Verificação completa] e clique na seta para iniciar o scan *Ao término, clique em [Ficheiro] e selecione a opção [Guardar lista de relatórios] e salve-a no desktop *Cole o relatório criado Compartilhar este post Link para o post Compartilhar em outros sites
.Zyphz 0 Denunciar post Postado Março 1, 2010 GameMon.des;C:\Jogos\Gravity\RO\GameGuard;Provavelmente BACKDOOR.Trojan;; mgehss.exe;D:\Documents and Settings\All Users\Documentos;Win32.Gael.3666;Desinfectado.; nqhnrh.exe;D:\Documents and Settings\All Users\Documentos;Win32.HLLW.Autoruner.8123;Incurável.Movido.; oojxvj.exe;D:\Documents and Settings\All Users\Documentos;Win32.Gael.3666;Desinfectado.; rswfzk.exe;D:\Documents and Settings\All Users\Documentos;Win32.HLLW.Siggen.73;Incurável.Movido.; saqscg.exe;D:\Documents and Settings\All Users\Documentos;Win32.Gael.3666;Desinfectado.; ovvrhmb.exe;D:\WINDOWS\system32;Trojan.Packed.19720;Eliminado.; Ficou assim o relatório. Era pra ser pequeno assim mesmo? Obrigado pela atenção! Compartilhar este post Link para o post Compartilhar em outros sites
wings 22 Denunciar post Postado Março 1, 2010 Bom dia... Pelo menos foi encontrado outros arquivos que não apareciam nos logs. 1. *Delete o programa DrWeb (launch.exe) e seu relatório. 2. *Delete o RSIT e a pasta C:\rsit 3. *Como está a máquina? Acessa os sites agora? Compartilhar este post Link para o post Compartilhar em outros sites
.Zyphz 0 Denunciar post Postado Março 1, 2010 Boa tarde, os sites continuam não abrindo... Mas o computador parece estar mais rápido, não sei se é impressão. Mais uma vez, muito obrigado pela ajuda. Se houver mais alguma coisa para fazer, estou no aguardo. Compartilhar este post Link para o post Compartilhar em outros sites
wings 22 Denunciar post Postado Março 1, 2010 *Desative temporariamente seu antivírus *Baixe o ComboFix e salve-o no desktop *Duplo-clique no arquivo Combofix.exe *Aceite o contrato *Se o console de recuperação do Windows já estiver instalado, o ComboFix continuará o processo automaticamente. Caso não esteja, uma janela conforme abaixo será aberta. Clique em [sIM] para aceitar a instalação do mesmo. *Após a instalação, clique em [sIM] para continuar. *Importante: enquanto o ComboFix estiver em execução, não use o mouse nem o teclado!!..... Para interromper o procedimento tecle N ou 2 e depois ENTER. *O programa será fechado automaticamente *Cole o relatório criado em C:\combofix.txt Compartilhar este post Link para o post Compartilhar em outros sites
.Zyphz 0 Denunciar post Postado Março 1, 2010 Segue abaixo o log do Combofix: ComboFix 10-03-01.01 - Genesis 01/03/2010 17:59:18.3.2 - x86 Microsoft Windows XP Professional 5.1.2600.2.1252.55.1046.18.2047.1599 [GMT -3:00] Executando de: d:\documents and settings\Genesis\Desktop\ComboFix.exe . (((((((((((((((( Arquivos/Ficheiros criados de 2010-02-01 to 2010-03-01 )))))))))))))))))))))))))))) . 2010-03-01 00:51 . 2010-03-01 03:29 -------- d-----w- d:\documents and settings\Genesis\DoctorWeb 2010-02-28 06:06 . 2010-02-28 06:06 -------- d-----w- d:\windows\SQLTools9_KB970892_ENU 2010-02-28 06:04 . 2010-02-28 06:04 -------- d-----w- d:\windows\SQL9_KB970892_ENU 2010-02-28 01:33 . 2009-08-06 22:23 274288 ----a-w- d:\windows\system32\mucltui.dll 2010-02-26 21:00 . 2010-02-26 21:00 -------- d-----w- d:\arquivos de programas\MSXML 4.0 2010-02-26 20:23 . 2010-02-26 20:46 -------- d-----w- d:\windows\SxsCaPendDel 2010-02-26 19:36 . 2010-02-26 19:36 -------- d-----w- d:\windows\ie8updates 2010-02-26 19:36 . 2010-02-26 19:36 -------- d-----w- d:\windows\ServicePackFiles 2010-02-26 18:54 . 2009-12-21 19:07 594432 -c----w- d:\windows\system32\dllcache\msfeeds.dll 2010-02-26 18:54 . 2009-12-21 19:07 1985536 -c----w- d:\windows\system32\dllcache\iertutil.dll 2010-02-26 18:54 . 2009-12-21 19:07 246272 -c----w- d:\windows\system32\dllcache\ieproxy.dll 2010-02-26 18:54 . 2009-12-21 19:07 55296 -c----w- d:\windows\system32\dllcache\msfeedsbs.dll 2010-02-26 18:54 . 2009-12-21 19:08 12800 -c----w- d:\windows\system32\dllcache\xpshims.dll 2010-02-26 18:54 . 2009-12-21 19:07 11070464 -c----w- d:\windows\system32\dllcache\ieframe.dll 2010-02-26 18:25 . 2009-12-09 10:27 2061952 -c----w- d:\windows\system32\dllcache\ntkrnlpa.exe 2010-02-26 18:25 . 2009-12-09 10:26 2019840 -c----w- d:\windows\system32\dllcache\ntkrpamp.exe 2010-02-26 18:25 . 2009-12-09 10:27 2184576 -c----w- d:\windows\system32\dllcache\ntoskrnl.exe 2010-02-26 18:25 . 2009-12-09 10:27 2140160 -c----w- d:\windows\system32\dllcache\ntkrnlmp.exe 2010-02-26 18:12 . 2008-06-14 17:59 272384 -c----w- d:\windows\system32\dllcache\bthport.sys 2010-02-26 17:20 . 2010-02-26 17:20 -------- d-sh--w- d:\documents and settings\NetworkService\IETldCache 2010-02-26 17:12 . 2009-08-06 22:24 44768 ----a-w- d:\windows\system32\wups2.dll 2010-02-26 17:10 . 2010-02-26 17:10 -------- d-sh--w- d:\documents and settings\Genesis\PrivacIE 2010-02-26 17:08 . 2010-02-26 17:08 -------- d-sh--w- d:\documents and settings\Genesis\IETldCache 2010-02-26 17:03 . 2010-02-26 17:04 -------- d-----w- d:\windows\system32\pt-BR 2010-02-26 17:03 . 2010-02-26 17:04 -------- dc-h--w- d:\windows\ie8 2010-02-26 16:05 . 2010-02-26 16:05 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\Malwarebytes 2010-02-26 16:05 . 2010-01-07 19:07 38224 ----a-w- d:\windows\system32\drivers\mbamswissarmy.sys 2010-02-26 16:05 . 2010-02-26 16:05 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\Malwarebytes 2010-02-26 16:05 . 2010-01-07 19:07 19160 ----a-w- d:\windows\system32\drivers\mbam.sys 2010-02-26 01:21 . 1998-07-08 20:30 18944 ----a-w- d:\windows\eraser.exe 2010-02-25 03:32 . 2009-06-30 12:37 28552 ----a-w- d:\windows\system32\drivers\pavboot.sys 2010-02-25 03:32 . 2010-02-25 03:32 -------- d-----w- d:\arquivos de programas\Panda Security 2010-02-24 20:58 . 2010-02-24 21:00 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\QuickScan 2010-02-19 23:18 . 2010-02-26 17:14 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\HPAppData 2010-02-19 16:32 . 2010-02-19 16:32 -------- d-----w- d:\arquivos de programas\Arquivos comuns\Adobe 2010-02-19 15:56 . 2010-02-19 15:56 1406 ----a-r- d:\documents and settings\Genesis\Dados de aplicativos\Microsoft\Installer\{7CFB3C02-718E-4532-8796-D2BFD152417C}\ufbcom.exe 2010-02-14 20:33 . 2010-02-14 20:33 -------- d-----w- d:\windows\Sun 2010-02-14 18:23 . 2010-02-14 18:23 -------- d-----w- d:\documents and settings\Genesis\.netbeans-derby 2010-02-13 21:12 . 2010-02-14 18:22 -------- d-----w- d:\documents and settings\Genesis\.netbeans 2010-02-13 21:12 . 2010-02-13 21:12 -------- d-----w- d:\documents and settings\Genesis\.netbeans-registration 2010-02-13 21:04 . 2010-02-13 21:04 -------- d-----w- d:\documents and settings\Genesis\.nbi 2010-02-13 20:40 . 2010-02-13 20:40 -------- d-----w- d:\arquivos de programas\Sun 2010-02-12 19:52 . 1997-12-17 20:33 304128 ----a-w- d:\windows\IsUninst.exe 2010-02-12 19:52 . 2010-02-12 19:52 -------- d-----w- d:\documents and settings\Genesis\WINDOWS 2010-02-10 14:22 . 2010-02-10 14:22 -------- d-----w- d:\windows\system32\js 2010-02-10 14:22 . 2010-02-10 14:22 -------- d-----w- d:\windows\system32\html 2010-02-10 14:22 . 2010-02-10 14:22 -------- d-----w- d:\windows\system32\css 2010-02-10 14:22 . 2010-02-10 14:22 -------- d-----w- d:\arquivos de programas\Business Objects 2010-02-10 14:17 . 2010-02-28 06:06 -------- d-----w- d:\arquivos de programas\Microsoft SQL Server 2010-02-10 14:17 . 2010-02-10 14:17 -------- d-----w- d:\arquivos de programas\Microsoft Device Emulator 2010-02-10 14:16 . 2010-02-10 14:16 -------- d-----w- d:\arquivos de programas\Microsoft Synchronization Services 2010-02-10 14:16 . 2010-02-10 14:16 -------- d-----w- d:\arquivos de programas\Microsoft SQL Server Compact Edition 2010-02-10 14:13 . 2010-02-26 19:30 18368 ----a-w- d:\documents and settings\All Users\Dados de aplicativos\Microsoft\VSA\9.0\1033\ResourceCache.dll 2010-02-10 14:13 . 2010-02-26 19:35 1680064 ----a-w- d:\documents and settings\All Users\Dados de aplicativos\Microsoft\VisualStudio\9.0\1033\ResourceCache.dll 2010-02-10 14:09 . 2010-02-10 14:09 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\PreEmptive Solutions 2010-02-10 14:06 . 2010-02-10 14:06 -------- d-----w- d:\windows\symbols 2010-02-10 14:04 . 2010-02-26 19:28 -------- d-----w- d:\arquivos de programas\Arquivos comuns\Merge Modules 2010-02-10 14:04 . 2010-02-10 14:06 -------- d-----w- d:\arquivos de programas\HTML Help Workshop 2010-02-10 14:04 . 2010-02-10 14:04 -------- d-----w- d:\arquivos de programas\Microsoft SDKs 2010-02-10 14:04 . 2010-02-10 14:04 -------- d-----w- d:\arquivos de programas\CE Remote Tools 2010-02-10 14:02 . 2010-02-10 14:03 -------- d-----w- d:\arquivos de programas\Microsoft Web Designer Tools 2010-02-10 14:02 . 2010-02-10 14:02 416 ----a-w- d:\documents and settings\All Users\Dados de aplicativos\Microsoft\MSDN\9.0\1033\ResourceCache.dll 2010-02-10 14:00 . 2010-02-26 20:25 -------- d-----w- d:\windows\system32\XPSViewer 2010-02-10 14:00 . 2010-02-10 14:00 -------- d-----w- d:\arquivos de programas\Reference Assemblies 2010-02-10 14:00 . 2008-07-06 12:06 89088 ----a-w- d:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll 2010-02-10 13:59 . 2006-06-29 15:07 14048 ------w- d:\windows\system32\spmsg2.dll 2010-02-10 13:57 . 2010-02-10 13:57 -------- d-----w- d:\arquivos de programas\MSXML 6.0 2010-02-09 14:55 . 2010-02-09 14:55 -------- d-----w- d:\arquivos de programas\Synaptics 2010-02-09 14:55 . 2007-05-10 20:44 181432 ----a-w- d:\windows\system32\drivers\SynTP.sys 2010-02-09 14:55 . 2007-05-10 20:44 196608 ----a-w- d:\windows\system32\SynCtrl.dll 2010-02-09 14:55 . 2007-05-10 20:44 163840 ----a-w- d:\windows\system32\SynCOM.dll 2010-02-09 14:55 . 2007-05-10 20:44 143360 ----a-w- d:\windows\system32\SynTPAPI.dll 2010-02-09 14:55 . 2007-05-10 20:44 110592 ----a-w- d:\windows\system32\SynTPCo4.dll 2010-02-09 14:55 . 2007-05-10 20:43 1060424 ----a-w- d:\windows\system32\WdfCoInstaller01000.dll 2010-02-08 20:26 . 2009-08-11 13:04 1582624 ----a-w- d:\windows\system32\drivers\athw.sys 2010-02-08 03:03 . 2010-02-08 03:03 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\WEBREG 2010-02-08 03:03 . 2010-02-08 03:03 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\HP 2010-02-08 03:02 . 2007-10-30 09:25 16496 ----a-r- d:\windows\system32\drivers\HPZipr12.sys 2010-02-08 03:02 . 2007-10-30 09:25 49920 ----a-r- d:\windows\system32\drivers\HPZid412.sys 2010-02-08 03:02 . 2010-02-08 03:02 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\Hewlett-Packard 2010-02-08 03:02 . 2008-02-12 03:49 271704 ----a-r- d:\windows\system32\hpzids01.dll 2010-02-08 03:01 . 2007-12-17 20:05 278016 ----a-w- d:\windows\system32\Spool\prtprocs\w32x86\hpzpp5mu.dll 2010-02-08 03:01 . 2008-02-07 12:26 118272 ----a-w- d:\windows\system32\hpz3l5mu.dll 2010-02-08 03:01 . 2007-10-30 09:25 21568 ----a-r- d:\windows\system32\drivers\HPZius12.sys 2010-02-08 03:01 . 2007-10-30 09:25 372736 ----a-r- d:\windows\system32\hppldcoi.dll 2010-02-08 03:01 . 2007-10-30 09:25 309760 ----a-r- d:\windows\system32\difxapi.dll 2010-02-08 03:01 . 2007-10-30 09:22 729088 ----a-r- d:\windows\system32\hpowiax8.dll 2010-02-08 03:01 . 2007-10-30 09:22 303104 ----a-r- d:\windows\system32\hpovst14.dll 2010-02-08 03:01 . 2007-10-30 09:22 970752 ----a-r- d:\windows\system32\hpotiop6.dll 2010-02-08 03:01 . 2004-08-04 00:58 15104 -c--a-w- d:\windows\system32\dllcache\usbscan.sys 2010-02-08 03:01 . 2004-08-04 00:58 15104 ----a-w- d:\windows\system32\drivers\usbscan.sys 2010-02-08 02:29 . 2010-02-08 02:30 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\HP 2010-02-08 02:29 . 2010-02-08 02:29 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\HP Product Assistant 2010-02-08 02:28 . 2010-02-08 02:28 -------- d-----w- d:\arquivos de programas\Arquivos comuns\HP 2010-02-08 02:28 . 2010-02-08 02:28 -------- d-----w- d:\arquivos de programas\Hewlett-Packard 2010-02-08 02:28 . 2010-02-08 02:28 -------- d-----w- d:\arquivos de programas\Arquivos comuns\Hewlett-Packard 2010-02-08 02:27 . 2010-02-09 14:55 -------- dc----w- d:\windows\system32\DRVSTORE 2010-02-08 02:26 . 2010-02-08 02:29 -------- d-----w- d:\arquivos de programas\HP 2010-02-08 02:26 . 2004-08-04 01:01 25856 -c--a-w- d:\windows\system32\dllcache\usbprint.sys 2010-02-08 02:26 . 2004-08-04 01:01 25856 ----a-w- d:\windows\system32\drivers\usbprint.sys 2010-02-08 02:25 . 2010-02-08 03:03 167980 ----a-w- d:\windows\hpoins29.dat 2010-02-08 02:25 . 2008-02-20 04:36 986 ------w- d:\windows\hpomdl29.dat 2010-02-07 18:45 . 2010-02-07 18:46 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\Tibia 2010-02-07 17:09 . 2010-02-07 17:09 -------- d--h--w- d:\windows\system32\GroupPolicy 2010-02-07 16:46 . 2010-02-07 16:46 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\GbPlugin 2010-02-07 16:46 . 2009-01-13 19:42 113968 ----a-w- d:\documents and settings\Genesis\Dados de aplicativos\Mozilla\Firefox\Profiles\32gmbgbp.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E886C}\components\GbMzhBb.dll 2010-02-07 05:32 . 2010-02-07 05:32 152576 ----a-w- d:\documents and settings\Genesis\Dados de aplicativos\Sun\Java\jre1.6.0_17\lzma.dll 2010-02-07 05:32 . 2010-02-07 05:32 79488 ----a-w- d:\documents and settings\Genesis\Dados de aplicativos\Sun\Java\jre1.6.0_17\gtapi.dll 2010-02-07 05:10 . 2010-02-28 06:10 -------- d--h--w- d:\windows\$hf_mig$ 2010-02-06 22:30 . 2010-02-22 05:18 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\Free Download Manager 2010-02-06 22:30 . 2010-02-06 22:30 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\FreeDownloadManager.ORG 2010-02-06 20:30 . 2010-02-06 20:38 -------- d---a-w- D:\Xampplite 2010-02-06 20:25 . 2004-08-04 03:45 221184 ----a-w- d:\windows\system32\wmpns.dll 2010-02-06 18:16 . 2010-02-13 20:39 411368 ----a-w- d:\windows\system32\deploytk.dll 2010-02-06 18:15 . 2010-02-06 18:15 152576 ----a-w- d:\documents and settings\Genesis\Dados de aplicativos\Sun\Java\jre1.6.0_16\lzma.dll 2010-02-06 18:09 . 2006-08-01 17:02 49152 ----a-w- d:\windows\system32\ChCfg.exe 2010-02-06 18:09 . 2010-02-06 18:09 -------- d-----w- d:\windows\system32\RTCOM 2010-02-06 18:08 . 2007-08-03 15:22 1826816 ----a-w- d:\windows\SkyTel.exe 2010-02-06 18:08 . 2007-07-26 20:06 1191936 ----a-w- d:\windows\RtlUpd.exe 2010-02-06 18:08 . 2006-07-21 18:14 86016 ----a-w- d:\windows\SoundMan.exe 2010-02-06 18:08 . 2007-03-23 21:19 9715200 ----a-w- d:\windows\RTLCPL.exe 2010-02-06 18:08 . 2007-08-10 15:52 4603904 ----a-w- d:\windows\system32\drivers\RtkHDAud.sys 2010-02-06 18:08 . 2007-08-10 17:21 16384000 ----a-w- d:\windows\RTHDCPL.exe 2010-02-06 18:08 . 2007-06-28 18:44 2165760 ----a-w- d:\windows\MicCal.exe 2010-02-06 18:08 . 2010-02-06 18:08 -------- d-----w- d:\arquivos de programas\Realtek . ((((((((((((((((((((((((((((((((((((( Relatório Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-02-28 06:14 . 2001-10-28 17:07 97820 ----a-w- d:\windows\system32\perfc016.dat 2010-02-28 06:14 . 2001-10-28 17:07 517968 ----a-w- d:\windows\system32\perfh016.dat 2010-02-09 14:56 . 2010-02-09 14:56 0 ---ha-w- d:\windows\system32\drivers\Msft_Kernel_SynTP_01000.Wdf 2010-02-09 14:56 . 2010-02-09 14:56 0 ---ha-w- d:\windows\system32\drivers\MsftWdf_Kernel_01000_Coinstaller_Critical.Wdf 2010-02-07 17:21 . 2010-02-05 15:13 86327 ----a-w- d:\windows\pchealth\helpctr\OfflineCache\index.dat 2010-02-06 18:08 . 2010-02-05 15:26 -------- d--h--w- d:\arquivos de programas\InstallShield Installation Information 2010-02-05 15:56 . 2010-02-05 15:56 0 ----a-w- d:\windows\nsreg.dat 2010-02-05 15:36 . 2010-02-05 15:36 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\ATI 2010-02-05 15:36 . 2010-02-05 15:36 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\ATI 2010-02-05 15:36 . 2010-02-05 15:36 0 ----a-w- d:\windows\ativpsrm.bin 2010-02-05 15:35 . 2010-02-05 15:26 -------- d-----w- d:\arquivos de programas\ATI Technologies 2010-02-05 15:34 . 2010-02-05 15:26 -------- d-----w- d:\arquivos de programas\Arquivos comuns\InstallShield 2010-02-05 15:14 . 2010-02-05 15:14 -------- d-----w- d:\arquivos de programas\microsoft frontpage 2010-02-05 15:12 . 2010-02-05 15:12 -------- d-----w- d:\arquivos de programas\Serviços on-line 2010-02-05 15:11 . 2010-02-05 15:11 -------- d-----w- d:\arquivos de programas\Arquivos comuns\Serviços 2010-02-05 15:10 . 2010-02-05 15:10 21844 ----a-w- d:\windows\system32\emptyregdb.dat 2009-12-31 16:14 . 2004-08-04 02:14 352640 ----a-w- d:\windows\system32\drivers\srv.sys 2009-12-21 19:08 . 2004-08-04 03:45 916480 ------w- d:\windows\system32\wininet.dll 2009-12-17 07:59 . 2010-02-05 15:09 345600 ----a-w- d:\windows\system32\mspaint.exe 2009-12-14 07:36 . 2004-08-04 03:45 33280 ----a-w- d:\windows\system32\csrsrv.dll 2009-12-09 10:27 . 2004-08-04 03:40 2140160 ------w- d:\windows\system32\ntoskrnl.exe 2009-12-09 10:26 . 2004-08-04 00:40 2019840 ------w- d:\windows\system32\ntkrnlpa.exe 2009-12-04 14:41 . 2004-08-04 02:15 453760 ----a-w- d:\windows\system32\drivers\mrxsmb.sys . (((((((((((((((((((((((((( Pontos de Carregamento do Registro ))))))))))))))))))))))))))))))))))))))) . . *Nota* entradas vazias e legítimas por defeito não são mostradas. REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RMClock"="c:\programas\RMClock\RMClockLauncher.exe" [2008-02-29 61440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 110592] "StartCCC"="d:\arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-25 61440] "VirtualCloneDrive"="d:\programas\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-05-26 85160] "RTHDCPL"="RTHDCPL.EXE" [2007-08-10 16384000] "SynTPEnh"="d:\arquivos de programas\Synaptics\SynTP\SynTPEnh.exe" [2007-05-10 827392] "GrooveMonitor"="d:\arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2004-08-04 15360] [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Iniciar^Programas^Inicializar^HP Digital Imaging Monitor.lnk] backup=d:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck] d:\windows\system32\dumprep 0 -u [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2009-09-04 15:08 935288 ----a-r- d:\arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2009-10-03 07:08 35696 ----a-w- c:\programas\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] 2004-08-04 03:45 15360 ------w- d:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] 2010-02-15 19:17 135664 ----atw- d:\documents and settings\Genesis\Configurações locais\Dados de aplicativos\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] 2008-10-25 14:44 31072 ----a-w- d:\arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] 2007-10-14 23:17 49152 ----a-w- d:\arquivos de programas\HP\HP Software Update\hpwuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon] 2007-08-22 18:31 80896 ----a-w- d:\arquivos de programas\HP\Digital Imaging\bin\HpqSRmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "hpqddsvc"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Programas\\uTorrent\\uTorrent.exe"= "d:\\Arquivos de programas\\Windows Live\\Messenger\\wlcsdk.exe"= "d:\\Arquivos de programas\\Windows Live\\Messenger\\msnmsgr.exe"= "d:\\Arquivos de programas\\Skype\\Plugin Manager\\skypePM.exe"= "d:\\Arquivos de programas\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "d:\\Arquivos de programas\\Microsoft Office\\Office12\\GROOVE.EXE"= "d:\\Arquivos de programas\\Microsoft Office\\Office12\\ONENOTE.EXE"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hposid01.exe"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Steam\\steamapps\\zyphz\\counter-strike\\hl.exe"= "d:\\Arquivos de programas\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "6032:TCP"= 6032:TCP:dgoyev R0 O2MDRDR;O2MDRDR;d:\windows\system32\drivers\o2media.sys [30/10/2009 21:55 39680] R0 pavboot;pavboot;d:\windows\system32\drivers\pavboot.sys [25/2/2010 00:32 28552] S3 Ambfilt;Ambfilt;d:\windows\system32\drivers\Ambfilt.sys --> d:\windows\system32\drivers\Ambfilt.sys [?] S3 GarenaPEngine;GarenaPEngine;\??\d:\docume~1\Genesis\CONFIG~1\Temp\BMD43.tmp --> d:\docume~1\Genesis\CONFIG~1\Temp\BMD43.tmp [?] --- =Outros Serviços/Drivers Na Memória --- *Deregistered* - RTCore32 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . . ------- Scan Suplementar ------- . uStart Page = hxxp://www.google.com.br/ IE: E&xportar para o Microsoft Excel - d:\arquiv~1\MICROS~4\Office12\EXCEL.EXE/3000 FF - ProfilePath - d:\documents and settings\Genesis\Dados de aplicativos\Mozilla\Firefox\Profiles\32gmbgbp.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.br FF - component: d:\documents and settings\Genesis\Dados de aplicativos\Mozilla\Firefox\Profiles\32gmbgbp.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E886C}\components\GbMzhBb.dll FF - plugin: c:\programas\Adobe\Reader 9.0\Reader\browser\nppdf32.dll FF - plugin: c:\programas\Java\jre6\bin\new_plugin\npdeploytk.dll FF - plugin: c:\programas\Java\jre6\bin\new_plugin\npjp2.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - d:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- c:\programas\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true); c:\programas\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true); c:\programas\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); c:\programas\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); c:\programas\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); c:\programas\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); c:\programas\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false); c:\programas\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); c:\programas\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false); c:\programas\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); c:\programas\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); c:\programas\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff"); c:\programas\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".com.br"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); . - - - - ORFÃOS REMOVIDOS - - - - AddRemove-HijackThis - C:\HijackThis.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-03-01 18:02 Windows 5.1.2600 Service Pack 2 NTFS Procurando processos ocultos ... Procurando entradas auto inicializáveis ocultas ... Procurando ficheiros/arquivos ocultos ... Varredura completada com sucesso arquivos/ficheiros ocultos: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine] "ImagePath"="\??\d:\docume~1\Genesis\CONFIG~1\Temp\BMD43.tmp" . --------------------- DLLs Carregadas Sob os Processos em Execução --------------------- - - - - - - - > 'winlogon.exe'(816) d:\windows\system32\Ati2evxx.dll - - - - - - - > 'explorer.exe'(1020) d:\windows\system32\WININET.dll d:\windows\system32\msi.dll d:\windows\system32\webcheck.dll . Tempo para conclusão: 2010-03-01 18:04:41 ComboFix-quarantined-files.txt 2010-03-01 21:04 ComboFix2.txt 2010-02-28 02:10 Pré-execução: 6 pasta(s) 42.439.127.040 bytes disponíveis Pós execução: 8 pasta(s) 42.460.274.688 bytes disponíveis WindowsXP-KB310994-SP2-Pro-BootDisk-PTG.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect - - End Of File - - 8988C2C35E4FCB99E1E83A7A33E8686D Os sites ainda não podem ser acessados. Compartilhar este post Link para o post Compartilhar em outros sites
wings 22 Denunciar post Postado Março 1, 2010 *Abra o bloco de notas, selecione, copie e cole nele todo o conteúdo do código abaixo: File::d:\windows\ativpsrm.bin Registry:: [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "6032:TCP"=- *Salve o arquivo no desktop como CFScript.txt *Arraste o arquivo para o Combofix conforme ilustração abaixo: *Importante: enquanto o combofix estiver em execução, não use o mouse nem o teclado!!..para interromper o processo tecle N ou 2. *Cole o relatório criado em C:\combofix.txt Compartilhar este post Link para o post Compartilhar em outros sites
.Zyphz 0 Denunciar post Postado Março 1, 2010 ComboFix 10-03-01.01 - Genesis 01/03/2010 20:05:14.4.2 - x86 Microsoft Windows XP Professional 5.1.2600.2.1252.55.1046.18.2047.1537 [GMT -3:00] Executando de: d:\documents and settings\Genesis\Desktop\ComboFix.exe Comandos utilizados :: d:\documents and settings\Genesis\Desktop\CFScript.txt FILE :: "d:\windows\ativpsrm.bin" . ((((((((((((((((((((((((((((((((((((( Outras Exclusões ))))))))))))))))))))))))))))))))))))))))))))))))))) . d:\windows\ativpsrm.bin . (((((((((((((((( Arquivos/Ficheiros criados de 2010-02-01 to 2010-03-01 )))))))))))))))))))))))))))) . 2010-03-01 00:51 . 2010-03-01 03:29 -------- d-----w- d:\documents and settings\Genesis\DoctorWeb 2010-02-28 06:06 . 2010-02-28 06:06 -------- d-----w- d:\windows\SQLTools9_KB970892_ENU 2010-02-28 06:04 . 2010-02-28 06:04 -------- d-----w- d:\windows\SQL9_KB970892_ENU 2010-02-28 01:33 . 2009-08-06 22:23 274288 ----a-w- d:\windows\system32\mucltui.dll 2010-02-26 21:00 . 2010-02-26 21:00 -------- d-----w- d:\arquivos de programas\MSXML 4.0 2010-02-26 20:23 . 2010-02-26 20:46 -------- d-----w- d:\windows\SxsCaPendDel 2010-02-26 19:36 . 2010-02-26 19:36 -------- d-----w- d:\windows\ie8updates 2010-02-26 19:36 . 2010-02-26 19:36 -------- d-----w- d:\windows\ServicePackFiles 2010-02-26 18:54 . 2009-12-21 19:07 594432 -c----w- d:\windows\system32\dllcache\msfeeds.dll 2010-02-26 18:54 . 2009-12-21 19:07 1985536 -c----w- d:\windows\system32\dllcache\iertutil.dll 2010-02-26 18:54 . 2009-12-21 19:07 246272 -c----w- d:\windows\system32\dllcache\ieproxy.dll 2010-02-26 18:54 . 2009-12-21 19:07 55296 -c----w- d:\windows\system32\dllcache\msfeedsbs.dll 2010-02-26 18:54 . 2009-12-21 19:08 12800 -c----w- d:\windows\system32\dllcache\xpshims.dll 2010-02-26 18:54 . 2009-12-21 19:07 11070464 -c----w- d:\windows\system32\dllcache\ieframe.dll 2010-02-26 18:25 . 2009-12-09 10:27 2061952 -c----w- d:\windows\system32\dllcache\ntkrnlpa.exe 2010-02-26 18:25 . 2009-12-09 10:26 2019840 -c----w- d:\windows\system32\dllcache\ntkrpamp.exe 2010-02-26 18:25 . 2009-12-09 10:27 2184576 -c----w- d:\windows\system32\dllcache\ntoskrnl.exe 2010-02-26 18:25 . 2009-12-09 10:27 2140160 -c----w- d:\windows\system32\dllcache\ntkrnlmp.exe 2010-02-26 18:12 . 2008-06-14 17:59 272384 -c----w- d:\windows\system32\dllcache\bthport.sys 2010-02-26 17:20 . 2010-02-26 17:20 -------- d-sh--w- d:\documents and settings\NetworkService\IETldCache 2010-02-26 17:12 . 2009-08-06 22:24 44768 ----a-w- d:\windows\system32\wups2.dll 2010-02-26 17:10 . 2010-02-26 17:10 -------- d-sh--w- d:\documents and settings\Genesis\PrivacIE 2010-02-26 17:08 . 2010-02-26 17:08 -------- d-sh--w- d:\documents and settings\Genesis\IETldCache 2010-02-26 17:03 . 2010-02-26 17:04 -------- d-----w- d:\windows\system32\pt-BR 2010-02-26 17:03 . 2010-02-26 17:04 -------- dc-h--w- d:\windows\ie8 2010-02-26 16:05 . 2010-02-26 16:05 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\Malwarebytes 2010-02-26 16:05 . 2010-01-07 19:07 38224 ----a-w- d:\windows\system32\drivers\mbamswissarmy.sys 2010-02-26 16:05 . 2010-02-26 16:05 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\Malwarebytes 2010-02-26 16:05 . 2010-01-07 19:07 19160 ----a-w- d:\windows\system32\drivers\mbam.sys 2010-02-26 01:21 . 1998-07-08 20:30 18944 ----a-w- d:\windows\eraser.exe 2010-02-25 03:32 . 2009-06-30 12:37 28552 ----a-w- d:\windows\system32\drivers\pavboot.sys 2010-02-25 03:32 . 2010-02-25 03:32 -------- d-----w- d:\arquivos de programas\Panda Security 2010-02-24 20:58 . 2010-02-24 21:00 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\QuickScan 2010-02-19 23:18 . 2010-02-26 17:14 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\HPAppData 2010-02-19 16:32 . 2010-02-19 16:32 -------- d-----w- d:\arquivos de programas\Arquivos comuns\Adobe 2010-02-19 15:56 . 2010-02-19 15:56 1406 ----a-r- d:\documents and settings\Genesis\Dados de aplicativos\Microsoft\Installer\{7CFB3C02-718E-4532-8796-D2BFD152417C}\ufbcom.exe 2010-02-14 20:33 . 2010-02-14 20:33 -------- d-----w- d:\windows\Sun 2010-02-14 18:23 . 2010-02-14 18:23 -------- d-----w- d:\documents and settings\Genesis\.netbeans-derby 2010-02-13 21:12 . 2010-02-14 18:22 -------- d-----w- d:\documents and settings\Genesis\.netbeans 2010-02-13 21:12 . 2010-02-13 21:12 -------- d-----w- d:\documents and settings\Genesis\.netbeans-registration 2010-02-13 21:04 . 2010-02-13 21:04 -------- d-----w- d:\documents and settings\Genesis\.nbi 2010-02-13 20:40 . 2010-02-13 20:40 -------- d-----w- d:\arquivos de programas\Sun 2010-02-12 19:52 . 1997-12-17 20:33 304128 ----a-w- d:\windows\IsUninst.exe 2010-02-12 19:52 . 2010-02-12 19:52 -------- d-----w- d:\documents and settings\Genesis\WINDOWS 2010-02-10 14:22 . 2010-02-10 14:22 -------- d-----w- d:\windows\system32\js 2010-02-10 14:22 . 2010-02-10 14:22 -------- d-----w- d:\windows\system32\html 2010-02-10 14:22 . 2010-02-10 14:22 -------- d-----w- d:\windows\system32\css 2010-02-10 14:22 . 2010-02-10 14:22 -------- d-----w- d:\arquivos de programas\Business Objects 2010-02-10 14:17 . 2010-02-28 06:06 -------- d-----w- d:\arquivos de programas\Microsoft SQL Server 2010-02-10 14:17 . 2010-02-10 14:17 -------- d-----w- d:\arquivos de programas\Microsoft Device Emulator 2010-02-10 14:16 . 2010-02-10 14:16 -------- d-----w- d:\arquivos de programas\Microsoft Synchronization Services 2010-02-10 14:16 . 2010-02-10 14:16 -------- d-----w- d:\arquivos de programas\Microsoft SQL Server Compact Edition 2010-02-10 14:13 . 2010-02-26 19:30 18368 ----a-w- d:\documents and settings\All Users\Dados de aplicativos\Microsoft\VSA\9.0\1033\ResourceCache.dll 2010-02-10 14:13 . 2010-02-26 19:35 1680064 ----a-w- d:\documents and settings\All Users\Dados de aplicativos\Microsoft\VisualStudio\9.0\1033\ResourceCache.dll 2010-02-10 14:09 . 2010-02-10 14:09 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\PreEmptive Solutions 2010-02-10 14:06 . 2010-02-10 14:06 -------- d-----w- d:\windows\symbols 2010-02-10 14:04 . 2010-02-26 19:28 -------- d-----w- d:\arquivos de programas\Arquivos comuns\Merge Modules 2010-02-10 14:04 . 2010-02-10 14:06 -------- d-----w- d:\arquivos de programas\HTML Help Workshop 2010-02-10 14:04 . 2010-02-10 14:04 -------- d-----w- d:\arquivos de programas\Microsoft SDKs 2010-02-10 14:04 . 2010-02-10 14:04 -------- d-----w- d:\arquivos de programas\CE Remote Tools 2010-02-10 14:02 . 2010-02-10 14:03 -------- d-----w- d:\arquivos de programas\Microsoft Web Designer Tools 2010-02-10 14:02 . 2010-02-10 14:02 416 ----a-w- d:\documents and settings\All Users\Dados de aplicativos\Microsoft\MSDN\9.0\1033\ResourceCache.dll 2010-02-10 14:00 . 2010-02-26 20:25 -------- d-----w- d:\windows\system32\XPSViewer 2010-02-10 14:00 . 2010-02-10 14:00 -------- d-----w- d:\arquivos de programas\Reference Assemblies 2010-02-10 14:00 . 2008-07-06 12:06 89088 ----a-w- d:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll 2010-02-10 13:59 . 2006-06-29 15:07 14048 ------w- d:\windows\system32\spmsg2.dll 2010-02-10 13:57 . 2010-02-10 13:57 -------- d-----w- d:\arquivos de programas\MSXML 6.0 2010-02-09 14:55 . 2010-02-09 14:55 -------- d-----w- d:\arquivos de programas\Synaptics 2010-02-09 14:55 . 2007-05-10 20:44 181432 ----a-w- d:\windows\system32\drivers\SynTP.sys 2010-02-09 14:55 . 2007-05-10 20:44 196608 ----a-w- d:\windows\system32\SynCtrl.dll 2010-02-09 14:55 . 2007-05-10 20:44 163840 ----a-w- d:\windows\system32\SynCOM.dll 2010-02-09 14:55 . 2007-05-10 20:44 143360 ----a-w- d:\windows\system32\SynTPAPI.dll 2010-02-09 14:55 . 2007-05-10 20:44 110592 ----a-w- d:\windows\system32\SynTPCo4.dll 2010-02-09 14:55 . 2007-05-10 20:43 1060424 ----a-w- d:\windows\system32\WdfCoInstaller01000.dll 2010-02-08 20:26 . 2009-08-11 13:04 1582624 ----a-w- d:\windows\system32\drivers\athw.sys 2010-02-08 03:03 . 2010-02-08 03:03 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\WEBREG 2010-02-08 03:03 . 2010-02-08 03:03 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\HP 2010-02-08 03:02 . 2007-10-30 09:25 16496 ----a-r- d:\windows\system32\drivers\HPZipr12.sys 2010-02-08 03:02 . 2007-10-30 09:25 49920 ----a-r- d:\windows\system32\drivers\HPZid412.sys 2010-02-08 03:02 . 2010-02-08 03:02 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\Hewlett-Packard 2010-02-08 03:02 . 2008-02-12 03:49 271704 ----a-r- d:\windows\system32\hpzids01.dll 2010-02-08 03:01 . 2007-12-17 20:05 278016 ----a-w- d:\windows\system32\Spool\prtprocs\w32x86\hpzpp5mu.dll 2010-02-08 03:01 . 2008-02-07 12:26 118272 ----a-w- d:\windows\system32\hpz3l5mu.dll 2010-02-08 03:01 . 2007-10-30 09:25 21568 ----a-r- d:\windows\system32\drivers\HPZius12.sys 2010-02-08 03:01 . 2007-10-30 09:25 372736 ----a-r- d:\windows\system32\hppldcoi.dll 2010-02-08 03:01 . 2007-10-30 09:25 309760 ----a-r- d:\windows\system32\difxapi.dll 2010-02-08 03:01 . 2007-10-30 09:22 729088 ----a-r- d:\windows\system32\hpowiax8.dll 2010-02-08 03:01 . 2007-10-30 09:22 303104 ----a-r- d:\windows\system32\hpovst14.dll 2010-02-08 03:01 . 2007-10-30 09:22 970752 ----a-r- d:\windows\system32\hpotiop6.dll 2010-02-08 03:01 . 2004-08-04 00:58 15104 -c--a-w- d:\windows\system32\dllcache\usbscan.sys 2010-02-08 03:01 . 2004-08-04 00:58 15104 ----a-w- d:\windows\system32\drivers\usbscan.sys 2010-02-08 02:29 . 2010-02-08 02:30 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\HP 2010-02-08 02:29 . 2010-02-08 02:29 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\HP Product Assistant 2010-02-08 02:28 . 2010-02-08 02:28 -------- d-----w- d:\arquivos de programas\Arquivos comuns\HP 2010-02-08 02:28 . 2010-02-08 02:28 -------- d-----w- d:\arquivos de programas\Hewlett-Packard 2010-02-08 02:28 . 2010-02-08 02:28 -------- d-----w- d:\arquivos de programas\Arquivos comuns\Hewlett-Packard 2010-02-08 02:27 . 2010-02-09 14:55 -------- dc----w- d:\windows\system32\DRVSTORE 2010-02-08 02:26 . 2010-02-08 02:29 -------- d-----w- d:\arquivos de programas\HP 2010-02-08 02:26 . 2004-08-04 01:01 25856 -c--a-w- d:\windows\system32\dllcache\usbprint.sys 2010-02-08 02:26 . 2004-08-04 01:01 25856 ----a-w- d:\windows\system32\drivers\usbprint.sys 2010-02-08 02:25 . 2010-02-08 03:03 167980 ----a-w- d:\windows\hpoins29.dat 2010-02-08 02:25 . 2008-02-20 04:36 986 ------w- d:\windows\hpomdl29.dat 2010-02-07 18:45 . 2010-02-07 18:46 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\Tibia 2010-02-07 17:09 . 2010-02-07 17:09 -------- d--h--w- d:\windows\system32\GroupPolicy 2010-02-07 16:46 . 2010-02-07 16:46 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\GbPlugin 2010-02-07 16:46 . 2009-01-13 19:42 113968 ----a-w- d:\documents and settings\Genesis\Dados de aplicativos\Mozilla\Firefox\Profiles\32gmbgbp.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E886C}\components\GbMzhBb.dll 2010-02-07 05:32 . 2010-02-07 05:32 152576 ----a-w- d:\documents and settings\Genesis\Dados de aplicativos\Sun\Java\jre1.6.0_17\lzma.dll 2010-02-07 05:32 . 2010-02-07 05:32 79488 ----a-w- d:\documents and settings\Genesis\Dados de aplicativos\Sun\Java\jre1.6.0_17\gtapi.dll 2010-02-07 05:10 . 2010-02-28 06:10 -------- d--h--w- d:\windows\$hf_mig$ 2010-02-06 22:30 . 2010-02-22 05:18 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\Free Download Manager 2010-02-06 22:30 . 2010-02-06 22:30 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\FreeDownloadManager.ORG 2010-02-06 20:30 . 2010-02-06 20:38 -------- d---a-w- D:\Xampplite 2010-02-06 20:25 . 2004-08-04 03:45 221184 ----a-w- d:\windows\system32\wmpns.dll 2010-02-06 18:16 . 2010-02-13 20:39 411368 ----a-w- d:\windows\system32\deploytk.dll 2010-02-06 18:15 . 2010-02-06 18:15 152576 ----a-w- d:\documents and settings\Genesis\Dados de aplicativos\Sun\Java\jre1.6.0_16\lzma.dll 2010-02-06 18:09 . 2006-08-01 17:02 49152 ----a-w- d:\windows\system32\ChCfg.exe 2010-02-06 18:09 . 2010-02-06 18:09 -------- d-----w- d:\windows\system32\RTCOM 2010-02-06 18:08 . 2007-08-03 15:22 1826816 ----a-w- d:\windows\SkyTel.exe 2010-02-06 18:08 . 2007-07-26 20:06 1191936 ----a-w- d:\windows\RtlUpd.exe 2010-02-06 18:08 . 2006-07-21 18:14 86016 ----a-w- d:\windows\SoundMan.exe 2010-02-06 18:08 . 2007-03-23 21:19 9715200 ----a-w- d:\windows\RTLCPL.exe 2010-02-06 18:08 . 2007-08-10 15:52 4603904 ----a-w- d:\windows\system32\drivers\RtkHDAud.sys 2010-02-06 18:08 . 2007-08-10 17:21 16384000 ----a-w- d:\windows\RTHDCPL.exe 2010-02-06 18:08 . 2007-06-28 18:44 2165760 ----a-w- d:\windows\MicCal.exe 2010-02-06 18:08 . 2010-02-06 18:08 -------- d-----w- d:\arquivos de programas\Realtek . ((((((((((((((((((((((((((((((((((((( Relatório Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-02-28 06:14 . 2001-10-28 17:07 97820 ----a-w- d:\windows\system32\perfc016.dat 2010-02-28 06:14 . 2001-10-28 17:07 517968 ----a-w- d:\windows\system32\perfh016.dat 2010-02-09 14:56 . 2010-02-09 14:56 0 ---ha-w- d:\windows\system32\drivers\Msft_Kernel_SynTP_01000.Wdf 2010-02-09 14:56 . 2010-02-09 14:56 0 ---ha-w- d:\windows\system32\drivers\MsftWdf_Kernel_01000_Coinstaller_Critical.Wdf 2010-02-07 17:21 . 2010-02-05 15:13 86327 ----a-w- d:\windows\pchealth\helpctr\OfflineCache\index.dat 2010-02-06 18:08 . 2010-02-05 15:26 -------- d--h--w- d:\arquivos de programas\InstallShield Installation Information 2010-02-05 15:56 . 2010-02-05 15:56 0 ----a-w- d:\windows\nsreg.dat 2010-02-05 15:36 . 2010-02-05 15:36 -------- d-----w- d:\documents and settings\Genesis\Dados de aplicativos\ATI 2010-02-05 15:36 . 2010-02-05 15:36 -------- d-----w- d:\documents and settings\All Users\Dados de aplicativos\ATI 2010-02-05 15:35 . 2010-02-05 15:26 -------- d-----w- d:\arquivos de programas\ATI Technologies 2010-02-05 15:34 . 2010-02-05 15:26 -------- d-----w- d:\arquivos de programas\Arquivos comuns\InstallShield 2010-02-05 15:14 . 2010-02-05 15:14 -------- d-----w- d:\arquivos de programas\microsoft frontpage 2010-02-05 15:12 . 2010-02-05 15:12 -------- d-----w- d:\arquivos de programas\Serviços on-line 2010-02-05 15:11 . 2010-02-05 15:11 -------- d-----w- d:\arquivos de programas\Arquivos comuns\Serviços 2010-02-05 15:10 . 2010-02-05 15:10 21844 ----a-w- d:\windows\system32\emptyregdb.dat 2009-12-31 16:14 . 2004-08-04 02:14 352640 ----a-w- d:\windows\system32\drivers\srv.sys 2009-12-21 19:08 . 2004-08-04 03:45 916480 ------w- d:\windows\system32\wininet.dll 2009-12-17 07:59 . 2010-02-05 15:09 345600 ----a-w- d:\windows\system32\mspaint.exe 2009-12-14 07:36 . 2004-08-04 03:45 33280 ----a-w- d:\windows\system32\csrsrv.dll 2009-12-09 10:27 . 2004-08-04 03:40 2140160 ------w- d:\windows\system32\ntoskrnl.exe 2009-12-09 10:26 . 2004-08-04 00:40 2019840 ------w- d:\windows\system32\ntkrnlpa.exe 2009-12-04 14:41 . 2004-08-04 02:15 453760 ----a-w- d:\windows\system32\drivers\mrxsmb.sys . ((((((((((((((((((((((((((((( SnapShot@2010-03-01_21.02.53 ))))))))))))))))))))))))))))))))))))))))) . + 2010-03-01 22:09 . 2010-03-01 22:09 16384 d:\windows\Temp\Perflib_Perfdata_1c0.dat . (((((((((((((((((((((((((( Pontos de Carregamento do Registro ))))))))))))))))))))))))))))))))))))))) . . *Nota* entradas vazias e legítimas por defeito não são mostradas. REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RMClock"="c:\programas\RMClock\RMClockLauncher.exe" [2008-02-29 61440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 110592] "StartCCC"="d:\arquivos de programas\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-25 61440] "VirtualCloneDrive"="d:\programas\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-05-26 85160] "RTHDCPL"="RTHDCPL.EXE" [2007-08-10 16384000] "SynTPEnh"="d:\arquivos de programas\Synaptics\SynTP\SynTPEnh.exe" [2007-05-10 827392] "GrooveMonitor"="d:\arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2004-08-04 15360] [HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Iniciar^Programas^Inicializar^HP Digital Imaging Monitor.lnk] backup=d:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck] d:\windows\system32\dumprep 0 -u [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2009-09-04 15:08 935288 ----a-r- d:\arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2009-10-03 07:08 35696 ----a-w- c:\programas\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] 2004-08-04 03:45 15360 ------w- d:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] 2010-02-15 19:17 135664 ----atw- d:\documents and settings\Genesis\Configurações locais\Dados de aplicativos\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] 2008-10-25 14:44 31072 ----a-w- d:\arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] 2007-10-14 23:17 49152 ----a-w- d:\arquivos de programas\HP\HP Software Update\hpwuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon] 2007-08-22 18:31 80896 ----a-w- d:\arquivos de programas\HP\Digital Imaging\bin\HpqSRmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "hpqddsvc"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Programas\\uTorrent\\uTorrent.exe"= "d:\\Arquivos de programas\\Windows Live\\Messenger\\wlcsdk.exe"= "d:\\Arquivos de programas\\Windows Live\\Messenger\\msnmsgr.exe"= "d:\\Arquivos de programas\\Skype\\Plugin Manager\\skypePM.exe"= "d:\\Arquivos de programas\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "d:\\Arquivos de programas\\Microsoft Office\\Office12\\GROOVE.EXE"= "d:\\Arquivos de programas\\Microsoft Office\\Office12\\ONENOTE.EXE"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hposid01.exe"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "d:\\Arquivos de programas\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Steam\\steamapps\\zyphz\\counter-strike\\hl.exe"= "d:\\Arquivos de programas\\Skype\\Phone\\Skype.exe"= R0 O2MDRDR;O2MDRDR;d:\windows\system32\drivers\o2media.sys [30/10/2009 21:55 39680] R0 pavboot;pavboot;d:\windows\system32\drivers\pavboot.sys [25/2/2010 00:32 28552] S3 Ambfilt;Ambfilt;d:\windows\system32\drivers\Ambfilt.sys --> d:\windows\system32\drivers\Ambfilt.sys [?] S3 GarenaPEngine;GarenaPEngine;\??\d:\docume~1\Genesis\CONFIG~1\Temp\BMD43.tmp --> d:\docume~1\Genesis\CONFIG~1\Temp\BMD43.tmp [?] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . . ------- Scan Suplementar ------- . uStart Page = hxxp://www.google.com.br/ IE: E&xportar para o Microsoft Excel - d:\arquiv~1\MICROS~4\Office12\EXCEL.EXE/3000 FF - ProfilePath - d:\documents and settings\Genesis\Dados de aplicativos\Mozilla\Firefox\Profiles\32gmbgbp.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.br FF - component: d:\documents and settings\Genesis\Dados de aplicativos\Mozilla\Firefox\Profiles\32gmbgbp.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E886C}\components\GbMzhBb.dll FF - plugin: c:\programas\Adobe\Reader 9.0\Reader\browser\nppdf32.dll FF - plugin: c:\programas\Java\jre6\bin\new_plugin\npdeploytk.dll FF - plugin: c:\programas\Java\jre6\bin\new_plugin\npjp2.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - d:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- c:\programas\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true); c:\programas\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true); c:\programas\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); c:\programas\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); c:\programas\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); c:\programas\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); c:\programas\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false); c:\programas\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); c:\programas\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); c:\programas\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false); c:\programas\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); c:\programas\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); c:\programas\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff"); c:\programas\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".com.br"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); c:\programas\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-03-01 20:08 Windows 5.1.2600 Service Pack 2 NTFS Procurando processos ocultos ... Procurando entradas auto inicializáveis ocultas ... Procurando ficheiros/arquivos ocultos ... Varredura completada com sucesso arquivos/ficheiros ocultos: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine] "ImagePath"="\??\d:\docume~1\Genesis\CONFIG~1\Temp\BMD43.tmp" . --------------------- DLLs Carregadas Sob os Processos em Execução --------------------- - - - - - - - > 'winlogon.exe'(816) d:\windows\system32\Ati2evxx.dll . Tempo para conclusão: 2010-03-01 20:10:26 ComboFix-quarantined-files.txt 2010-03-01 23:10 ComboFix2.txt 2010-03-01 21:04 ComboFix3.txt 2010-02-28 02:10 Pré-execução: 7 pasta(s) 42.453.966.848 bytes disponíveis Pós execução: 8 pasta(s) 42.417.901.568 bytes disponíveis - - End Of File - - F5B59AB73E1530052110037655E53476 Compartilhar este post Link para o post Compartilhar em outros sites
wings 22 Denunciar post Postado Março 1, 2010 OK...log limpo. *Clique em [iniciar] > [Executar] > digite: Combofix /uninstall *Clique [OK] *Clique em [Executar] *Aguarde até surgir a mensagem: "ComboFix está desinstalado" *Clique [OK] Compartilhar este post Link para o post Compartilhar em outros sites
.Zyphz 0 Denunciar post Postado Março 2, 2010 Ae, muito obrigado cara, todos os sites estão abrindo! Pode fechar o tópico... Compartilhar este post Link para o post Compartilhar em outros sites
wings 22 Denunciar post Postado Março 2, 2010 PROBLEMA RESOLVIDO! Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico. Compartilhar este post Link para o post Compartilhar em outros sites
