tuuc 0 Denunciar post Postado Maio 29, 2010 Olá, meu computador anda meio estranho desde que eu instalei o windows 7 ultimate. Um problema é a internet, ela funciona perfeitamente, mas quando eu abro o Garena a internet cai ou fica com um delay gigante! Agradeço desde já, obrigado pela atenção !! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:29:49, on 29/05/2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\rundll32.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Microsoft Security Essentials\msseces.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Vitor\Downloads\HiJackThis.exe C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [sRS Audio Sandbox] "C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: ThreatFire - PC Tools - C:\Program Files\Spyware Doctor\TFEngine\TFService.exe -- End of file - 5131 bytes Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Maio 31, 2010 Bom Dia! tuuc <!> Faça alterações na segurança do PC,para reduzir essas lentidões! <@> Desinstale: <1> C:\Program Files\Microsoft Security Essentials <2> C:\Program Files\Spyware Doctor <3> ThreatFire - PC Tools <4> C:\Program Files\Bonjour <@> Ps: Após as desinstalações,limpe o registro com o CCleaner. <@> Baixe: < ><@> Salve-o no Desktop! <@> Instale o programa! <@> Ps: À partir da versão 1.29 o CCleaner traz junto,em sua instalação,a Toolbar do Yahoo para o Internet Explorer. <@> Ps: Se você não quiser instalá-la,desmarque esse ítem. <@> Com a opção < Limpador >,já selecionada,clique em Analisar. --> Aguarde o progresso! <@> Terminando,clique em Executar Cleaner. <@> Na janela que surgir,dê o Ok. --> Aguarde o progresso! <@> Selecionando a opção Registro,clique em Procurar erros. <@> Terminando,clique em Corrigir erros selecionados... <@> Na pergunta,clique em Sim! <@> Nomeie os backups e clique em Salvar. <@> Por alguns dias,estando tudo Ok,poderá deletar esse arquivo backup. ( .reg ) <@> Na janela que aparecer,clique em: "Corrigir todos os erros selecionados" <@> Clique em Ok --> Fechar. <@> Para maiores detalhes,leia o Tutorial: < Link > <@> Ps: Baixe o primeiro antivírus,gratuito,com tecnologias de cloud-computing. <!> :seta: < Panda Cloud Antivirus > <@> Como seu PC tem problemas de lentidão,instale-o no lugar do Microsoft Security Essentials + ThreatFire <@> Maiores informações: < Link > <@> Após essas modificações,baixe e execute o OTL. 00000000000000000000000 ooooooooooooooooooooooo <@> Baixe: < OTL > ( ...by OldTimer Tools ) <@> Salve-o no desktop! <@> Clique duplo em: < > <@> Ps: Sigamos,agora,com sua configuração! <!> 1 - Em "Saída",deixe marcado o botão "Resumida". <!> 2 - Marque as caixas: Verificar All Users e Incluir Verificação 64bit <-- Ps: Caso o SO seja 64 bit! <!> 3 - Processos: Usar SafeList <-- Marque! <!> 4 - Módulos: Usar SafeList <-- Marque! <!> 5 - Serviços: Usar SafeList <-- Marque! <!> 6 - Drivers: Usar SafeList <-- Marque! <!> 7 - Exame Padrão do Registro: Usar SafeList <-- Marque! <!> 8 - Exame Extra do Registro: Usar SafeList <-- Marque! <!> 9 - Verificação de Arquivos: <!> Data de Criação >> Escolha: 14 dias <!> Marque: Usar WhiteList para Nomes de Companhias <!> Marque: Ignorar Arquivos Microsoft <!> 10 - Arquivos Criados Desde: <!> Marque: Data de Criação <!> 11 - Arquivos Modificados Desde: <!> Marque: Data de Criação <!> Marque as caixas: [] Verificar Lop [] Verificar Purity <@> Ps: Sugiro que imprima estas orientações,para posterior leitura. netsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%SYSTEMDRIVE%\*.exe%SYSTEMDRIVE%\eventlog.dll /s /md5%SYSTEMDRIVE%\scecli.dll /s /md5%SYSTEMDRIVE%\sfcfiles.dll /s /md5%SYSTEMDRIVE%\netlogon.dll /s /md5%SYSTEMDRIVE%\atapi.sys /s /md5 <@> Ps: Copie e cole estas informações,que estão no Code,para o campo abaixo de: Exames Personalizados/Correções <@> Clique em: Verificar --> Aguarde! <@> Concluindo,poste: <!> <1> OTL.txt <-- <!> <2> Extra.txt <-- Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
tuuc 0 Denunciar post Postado Maio 31, 2010 Desculpe a demora, e obrigado pela ajuda... eu não tirei o antivirus pois acho ele um dos melhores atualmente.. Aqui segue os Logs pedidos: --- OTL logfile created on: 31/05/2010 15:32:44 - Run 1 OTL by OldTimer - Version 3.2.5.2 Folder = C:\Users\Vitor\Desktop Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy 1.023,00 Mb Total Physical Memory | 311,00 Mb Available Physical Memory | 30,00% Memory free 2,00 Gb Paging File | 1,00 Gb Available in Paging File | 41,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 74,56 Gb Total Space | 45,09 Gb Free Space | 60,48% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: VITOR-PC Current User Name: Vitor Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 14 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\Vitor\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Arquivos de Programas\Orbitdownloader\orbitdm.exe (Orbitdownloader.com) PRC - C:\Arquivos de Programas\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Arquivos de Programas\Spyware Doctor\pctsAuxs.exe (PC Tools) PRC - C:\Arquivos de Programas\Microsoft Security Essentials\msseces.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\Spyware Doctor\BDT\BDTUpdateService.exe (Threat Expert Ltd.) PRC - c:\Arquivos de Programas\Microsoft Security Essentials\MsMpEng.exe (Microsoft Corporation) PRC - c:\Arquivos de Programas\Microsoft Security Essentials\MpCmdRun.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\Orbitdownloader\orbitnet.exe (Orbitdownloader.com) PRC - C:\Arquivos de Programas\Skype\Toolbars\Shared\SkypeNames2.exe (Skype Technologies S.A.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\Windows Media Player\wmplayer.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\Internet Explorer\iexplore.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\Windows Sidebar\sidebar.exe (Microsoft Corporation) PRC - C:\Windows\System32\sppsvc.exe (Microsoft Corporation) PRC - C:\Windows\System32\audiodg.exe (Microsoft Corporation) PRC - C:\Arquivos de Programas\LSI SoftModem\agrsmsvc.exe (LSI Corporation) PRC - C:\Arquivos de Programas\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG) PRC - C:\Arquivos de Programas\SRS Labs\Audio Sandbox\SRSSSC.exe (SRS Labs, Inc.) ========== Modules (SafeList) ========== MOD - C:\Users\Vitor\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation) MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation) MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation) MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation) MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation) MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation) MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation) MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation) MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation) MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation) MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.) SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation) SRV - (sdCoreService) -- C:\Arquivos de Programas\Spyware Doctor\pctsSvc.exe (PC Tools) SRV - (sdAuxService) -- C:\Arquivos de Programas\Spyware Doctor\pctsAuxs.exe (PC Tools) SRV - (ThreatFire) -- C:\Program Files\Spyware Doctor\TFEngine\TFService.exe (PC Tools) SRV - (Browser Defender Update Service) -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe (Threat Expert Ltd.) SRV - (MsMpSvc) -- c:\Program Files\Microsoft Security Essentials\MsMpEng.exe (Microsoft Corporation) SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation) SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation) SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation) SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation) SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation) SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation) SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation) SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation) SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Arquivos de Programas\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation) SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation) SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation) SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation) SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation) SRV - (AxInstSV) Instalador do ActiveX (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation) SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation) SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation) SRV - (AgereModemAudio) -- C:\Arquivos de Programas\LSI SoftModem\agrsmsvc.exe (LSI Corporation) SRV - (Nero BackItUp Scheduler 4.0) -- C:\Arquivos de Programas\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG) ========== Driver Services (SafeList) ========== DRV - (GarenaPEngine) -- C:\Users\Vitor\AppData\Local\Temp\DXXB1B2.tmp () DRV - (pctplsg) -- C:\Windows\System32\drivers\pctplsg.sys (PC Tools) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (PCTCore) -- C:\Windows\system32\drivers\PCTCore.sys (PC Tools) DRV - (pctgntdi) -- C:\Windows\System32\drivers\pctgntdi.sys (PC Tools) DRV - (TfSysMon) -- C:\Windows\system32\drivers\TfSysMon.sys (PC Tools) DRV - (TfFsMon) -- C:\Windows\system32\drivers\TfFsMon.sys (PC Tools) DRV - (TfNetMon) -- C:\Windows\System32\drivers\TfNetMon.sys (PC Tools) DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation) DRV - (MpFilter) -- C:\Windows\System32\drivers\MpFilter.sys (Microsoft Corporation) DRV - (MpNWMon) -- C:\Windows\System32\drivers\MpNWMon.sys (Microsoft Corporation) DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (LSI Corporation) DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.) DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.) DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.) DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.) DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.) DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.) DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices) DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.) DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices) DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.) DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation) DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation) DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation) DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation) DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation) DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.) DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation) DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation) DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation) DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation) DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation) DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex) DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.) DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company) DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation) DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (vmbus) -- C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation) DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation) DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation) DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation) DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.) DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation) DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation) DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation) DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems) DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation) DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.) DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology) DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation) DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.) DRV - (rdpbus) -- C:\Windows\System32\drivers\rdpbus.sys (Microsoft Corporation) DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation) DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation) DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation) DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation) DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation) DRV - (1394ohci) -- C:\Windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation) DRV - (UmPass) -- C:\Windows\system32\DRIVERS\umpass.sys (Microsoft Corporation) DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation) DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation) DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation) DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation) DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation) DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation) DRV - (HidBatt) -- C:\Windows\system32\DRIVERS\HidBatt.sys (Microsoft Corporation) DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation) DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation) DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (BrUsbMdm) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.) DRV - (BrUsbSer) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.) DRV - (BrSerWdm) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.) DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.) DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.) DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation) DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation) DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation) DRV - (L1E) NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20) -- C:\Windows\System32\drivers\L1E62x86.sys (Atheros Communications, Inc.) DRV - (ISODrive) -- C:\Arquivos de Programas\UltraISO\drivers\ISODrive.sys (EZB Systems, Inc.) DRV - (SRS_SSCFilter) SRS Labs Audio Sandbox (WDM) -- C:\Windows\System32\drivers\SRS_SSCFilter_i386.sys () DRV - (SNPSTD3) USB PC Camera (SNPSTD3) -- C:\Windows\System32\drivers\snpstd3.sys () DRV - (MTsensor) -- C:\Windows\System32\drivers\ASACPI.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.br/ IE - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://br.msn.com/?ocid=iehp IE - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-br IE - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 56 76 06 DC 20 F9 CA 01 [binary data] IE - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "http://www.google.com.br/" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2 FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:4.1.12s FF - prefs.js..extensions.enabledItems: {35379F86-8CCB-4724-AE33-4278DE266C70}:1.0.5 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/05/26 16:28:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/05/26 16:28:00 | 000,000,000 | ---D | M] [2010/05/23 17:58:33 | 000,000,000 | ---D | M] -- C:\Users\Vitor\AppData\Roaming\mozilla\Extensions [2010/05/31 13:29:50 | 000,000,000 | ---D | M] -- C:\Users\Vitor\AppData\Roaming\mozilla\Firefox\Profiles\a2uucdrf.default\extensions [2010/05/23 18:02:54 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Vitor\AppData\Roaming\mozilla\Firefox\Profiles\a2uucdrf.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010/05/26 15:18:46 | 000,000,000 | ---D | M] -- C:\Users\Vitor\AppData\Roaming\mozilla\Firefox\Profiles\a2uucdrf.default\extensions\SkipScreen@SkipScreen [2010/05/23 17:58:15 | 000,000,000 | ---D | M] -- C:\Arquivos de Programas\Mozilla Firefox\extensions [2010/04/01 14:34:02 | 000,001,027 | ---- | M] () -- C:\Arquivos de Programas\Mozilla Firefox\searchplugins\buscape.xml [2010/04/01 14:34:02 | 000,001,212 | ---- | M] () -- C:\Arquivos de Programas\Mozilla Firefox\searchplugins\mercadolivre.xml [2010/04/01 14:34:02 | 000,001,168 | ---- | M] () -- C:\Arquivos de Programas\Mozilla Firefox\searchplugins\wikipedia-br.xml [2010/04/01 14:34:02 | 000,000,952 | ---- | M] () -- C:\Arquivos de Programas\Mozilla Firefox\searchplugins\yahoo-br.xml O1 HOSTS File: ([2010/05/29 13:16:28 | 000,000,790 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Arquivos de Programas\Orbitdownloader\orbitcth.dll (Orbitdownloader.com) O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Arquivos de Programas\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de Programas\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Auxiliar de Conexão do Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de Programas\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Arquivos de Programas\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Arquivos de Programas\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O3 - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Arquivos de Programas\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O4 - HKLM..\Run: [MSSE] c:\Program Files\Microsoft Security Essentials\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [snpstd3] C:\Windows\vsnpstd3.exe () O4 - HKU\S-1-5-21-882520997-3729033636-3795039030-1001..\Run: [sRS Audio Sandbox] C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe (SRS Labs, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-882520997-3729033636-3795039030-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: &Download by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: &Grab video by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: Down&load all by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Arquivos de Programas\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de Programas\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Arquivos de Programas\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Arquivos de Programas\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Arquivos de Programas\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Arquivos de Programas\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 187.2.200.16 187.2.200.15 O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Arquivos de Programas\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Arquivos de Programas\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Arquivos de Programas\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Arquivos de Programas\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Arquivos de Programas\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Arquivos de Programas\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 18:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias [2009/07/13 23:37:08 | 000,000,000 | ---D | M] NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation) NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found NetSvcs: Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation) NetSvcs: BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation) SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: MsMpSvc - c:\Program Files\Microsoft Security Essentials\MsMpEng.exe (Microsoft Corporation) SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Power - C:\Windows\System32\umpo.dll (Microsoft Corporation) SafeBootMin: Primary disk - Driver Group SafeBootMin: RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: WinDefend - C:\Arquivos de Programas\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: Dhcp - C:\Windows\System32\dhcpcore.dll (Microsoft Corporation) SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - File not found SafeBootNet: MsMpSvc - c:\Program Files\Microsoft Security Essentials\MsMpEng.exe (Microsoft Corporation) SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: ndiscap - C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation) SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Power - C:\Windows\System32\umpo.dll (Microsoft Corporation) SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WinDefend - C:\Arquivos de Programas\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {49C187D7-91E1-459E-9759-2925384BD397} - .NET Framework ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler) Drivers32: msacm.ac3filter - C:\Windows\System32\ac3filter.acm () Drivers32: msacm.divxa32 - C:\Windows\System32\DivXa32.acm (Packed With Joy !) Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.lameacm - C:\Windows\System32\lameACM.acm (http://www.mp3dev.org/) Drivers32: msacm.siren - C:\Windows\System32\sirenacm.dll (Microsoft Corporation) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.divx - C:\Windows\System32\DivX.dll (DivX, Inc.) Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll () Drivers32: VIDC.FMVC - C:\Windows\System32\fmcodec.DLL (Fox Magic Software) Drivers32: vidc.vp60 - C:\Windows\System32\vp6vfw.dll (On2.com) Drivers32: vidc.vp61 - C:\Windows\System32\vp6vfw.dll (On2.com) Drivers32: vidc.vp62 - C:\Windows\System32\vp6vfw.dll (On2.com) Drivers32: VIDC.XVID - C:\Windows\System32\xvidvfw.dll () Drivers32: VIDC.YV12 - C:\Windows\System32\DivX.dll (DivX, Inc.) ========== Files/Folders - Created Within 14 Days ========== [2010/05/31 15:28:40 | 000,571,392 | ---- | C] (OldTimer Tools) -- C:\Users\Vitor\Desktop\OTL.exe [2010/05/31 13:29:53 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\GrabPro [2010/05/31 13:29:53 | 000,000,000 | ---D | C] -- C:\downloads [2010/05/31 13:29:30 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Orbitdownloader [2010/05/31 13:29:30 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Orbit [2010/05/30 19:48:34 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Real [2010/05/29 13:33:52 | 000,000,000 | ---D | C] -- C:\Lop SD [2010/05/27 19:37:23 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2010/05/27 19:37:19 | 000,000,000 | ---D | C] -- C:\Windows\temp [2010/05/27 19:37:19 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\temp [2010/05/27 19:23:04 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2010/05/27 19:23:04 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2010/05/27 19:23:04 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2010/05/27 19:22:53 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2010/05/27 19:22:26 | 000,000,000 | ---D | C] -- C:\Qoobox [2010/05/27 19:22:09 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe [2010/05/27 19:21:34 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Malwarebytes [2010/05/27 19:21:26 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010/05/27 19:21:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010/05/27 19:21:24 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010/05/27 19:21:24 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Malwarebytes' Anti-Malware [2010/05/27 19:15:47 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\CCleaner [2010/05/27 12:57:43 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\NVIDIA Corporation [2010/05/27 12:56:29 | 000,056,424 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll [2010/05/27 12:56:17 | 000,000,000 | ---D | C] -- C:\NVIDIA [2010/05/26 16:27:55 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\Windows\System32\pncrt.dll [2010/05/26 16:27:51 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Real Alternative [2010/05/26 12:11:56 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\ElevatedDiagnostics [2010/05/24 16:03:34 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\Diagnostics [2010/05/24 14:04:09 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\Nero [2010/05/24 13:56:18 | 000,059,664 | --S- | C] (PC Tools) -- C:\Windows\System32\drivers\TfSysMon.sys [2010/05/24 13:56:18 | 000,051,984 | --S- | C] (PC Tools) -- C:\Windows\System32\drivers\TfFsMon.sys [2010/05/24 13:56:18 | 000,033,552 | --S- | C] (PC Tools) -- C:\Windows\System32\drivers\TfNetMon.sys [2010/05/24 13:42:08 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\Threat Expert [2010/05/24 13:40:59 | 000,149,456 | ---- | C] (PC Tools) -- C:\Windows\SGDetectionTool.dll [2010/05/24 13:40:57 | 001,652,688 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll [2010/05/24 13:40:57 | 000,165,840 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll [2010/05/24 13:31:29 | 000,233,136 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctgntdi.sys [2010/05/24 13:31:29 | 000,100,136 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctwfpfilter.sys [2010/05/24 13:31:22 | 000,218,592 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTCore.sys [2010/05/24 13:31:21 | 000,088,040 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTAppEvent.sys [2010/05/24 13:31:07 | 000,063,360 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctplsg.sys [2010/05/24 13:30:47 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Spyware Doctor [2010/05/24 13:30:47 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\PC Tools [2010/05/24 13:30:47 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools [2010/05/24 13:30:47 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\PC Tools [2010/05/24 13:30:17 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2010/05/24 13:26:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010/05/24 13:25:29 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Bonjour [2010/05/24 13:18:07 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Adobe [2010/05/24 13:17:23 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\Macrovision Shared [2010/05/24 13:16:18 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\Adobe [2010/05/24 12:25:16 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Microsoft Works [2010/05/24 12:24:46 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Microsoft Visual Studio [2010/05/24 12:24:45 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\DESIGNER [2010/05/24 12:24:01 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Microsoft.NET [2010/05/24 12:20:28 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\Microsoft Help [2010/05/24 12:20:20 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Microsoft Office [2010/05/24 12:20:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010/05/24 12:18:18 | 000,000,000 | R--D | C] -- C:\MSOCache [2010/05/23 22:41:52 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2010/05/23 19:00:28 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\DivX [2010/05/23 18:53:58 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Marcos Velasco Security [2010/05/23 18:44:06 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\VS Revo Group [2010/05/23 18:43:26 | 000,000,000 | ---D | C] -- C:\Windows\System32\custom matrices [2010/05/23 18:43:18 | 000,000,000 | ---D | C] -- C:\Windows\System32\QuickTime [2010/05/23 18:43:18 | 000,000,000 | ---D | C] -- C:\Windows\System32\C2MP [2010/05/23 18:24:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Driver Whiz [2010/05/23 17:58:22 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Mozilla [2010/05/23 17:58:22 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\Mozilla [2010/05/23 17:58:13 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Mozilla Firefox [2010/05/22 18:34:51 | 000,000,000 | -H-D | C] -- C:\Arquivos de Programas\InstallShield Installation Information [2010/05/22 18:34:51 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Realtek [2010/05/22 18:34:49 | 000,000,000 | -H-D | C] -- C:\Arquivos de Programas\Temp [2010/05/22 18:34:43 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\InstallShield [2010/05/22 16:48:29 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\skypePM [2010/05/22 16:47:45 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Skype [2010/05/22 16:47:14 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\Skype [2010/05/22 16:47:11 | 000,000,000 | R--D | C] -- C:\Arquivos de Programas\Skype [2010/05/22 16:47:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010/05/22 15:00:25 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Garena [2010/05/22 14:57:31 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\MSXML 4.0 [2010/05/22 13:12:09 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\Ahead [2010/05/22 13:07:58 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Nero [2010/05/22 13:03:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero [2010/05/22 13:03:46 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Nero [2010/05/22 12:49:52 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Media Player Classic [2010/05/22 12:49:22 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\Windows\System32\yv12vfw.dll [2010/05/22 12:49:22 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\System32\ac3acm.acm [2010/05/22 12:49:14 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\K-Lite Codec Pack [2010/05/22 12:35:06 | 000,000,000 | -H-D | C] -- C:\Users\Vitor\Documents\Os Meus Registos [2010/05/22 12:31:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010/05/22 11:55:24 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\uTorrent [2010/05/21 22:50:28 | 000,000,000 | ---D | C] -- C:\Users\Vitor\Tracing [2010/05/21 22:50:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Messenger Plus! [2010/05/21 20:52:17 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\Microsoft Games [2010/05/21 19:27:23 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Messenger Plus! Live [2010/05/21 19:24:23 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Microsoft [2010/05/21 19:24:07 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Windows Live SkyDrive [2010/05/21 19:23:48 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Windows Live [2010/05/21 19:23:31 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010/05/21 19:20:25 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\Windows Live [2010/05/21 19:19:39 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat [2010/05/21 19:19:20 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Microsoft Silverlight [2010/05/21 19:12:44 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2010/05/21 19:09:50 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Macromedia [2010/05/21 19:09:49 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Adobe [2010/05/21 19:09:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed [2010/05/21 19:07:12 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\DsNET Corp [2010/05/21 18:54:57 | 000,139,264 | ---- | C] (Blizzard Entertainment) -- C:\Windows\War3Unin.exe [2010/05/21 18:52:35 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Warcraft III [2010/05/21 18:48:32 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\EZB Systems [2010/05/21 18:48:31 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\UltraISO [2010/05/21 18:42:43 | 000,000,000 | ---D | C] -- C:\Users\Vitor\Documents\Vitor [2010/05/21 18:41:04 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Microsoft Security Essentials [2010/05/21 18:38:28 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Java [2010/05/21 18:37:46 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\Java [2010/05/21 17:29:05 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2010/05/21 17:28:00 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\LSI SoftModem [2010/05/21 17:11:56 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\SRS Labs [2010/05/21 17:11:33 | 000,000,000 | ---D | C] -- C:\ProgramData\SRS Labs [2010/05/21 17:11:26 | 000,032,000 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\drivers\wowhd_kern_i386.sys [2010/05/21 17:11:23 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\SRS Labs [2010/05/21 17:11:01 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010/05/21 17:10:49 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\WinRAR [2010/05/21 17:10:28 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\WinRAR [2010/05/21 17:01:56 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Searches [2010/05/21 17:01:43 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Identities [2010/05/21 17:01:40 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Contacts [2010/05/21 17:01:31 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\VirtualStore [2010/05/21 17:01:29 | 000,000,000 | --SD | C] -- C:\Users\Vitor\AppData\Roaming\Microsoft [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Videos [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Saved Games [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Pictures [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Music [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Links [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Favorites [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Downloads [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Documents [2010/05/21 17:01:29 | 000,000,000 | R--D | C] -- C:\Users\Vitor\Desktop [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\AppData\Local\Temporary Internet Files [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\SendTo [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Recent [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Modelos [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Documents\Minhas músicas [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Documents\Minhas imagens [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Documents\Meus vídeos [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Meus documentos [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Menu Iniciar [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\AppData\Local\Histórico [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Dados de aplicativos [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\AppData\Local\Dados de aplicativos [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Cookies [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Configurações locais [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Ambiente de rede [2010/05/21 17:01:29 | 000,000,000 | -HSD | C] -- C:\Users\Vitor\Ambiente de impressão [2010/05/21 17:01:29 | 000,000,000 | -H-D | C] -- C:\Users\Vitor\AppData [2010/05/21 17:01:29 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Local\Microsoft [2010/05/21 17:01:29 | 000,000,000 | ---D | C] -- C:\Users\Vitor\AppData\Roaming\Media Center Programs [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\Arquivos de Programas\Common Files\Sistema [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modelos [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Minhas músicas [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Minhas imagens [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Meus vídeos [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Iniciar [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoritos [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documentos [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dados de aplicativos [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\Arquivos de Programas [2010/05/21 17:01:10 | 000,000,000 | -HSD | C] -- C:\Arquivos de Programas\Arquivos Comuns [2010/05/21 17:01:10 | 000,000,000 | ---D | C] -- C:\Recovery [2010/05/21 16:55:03 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010/05/21 16:52:20 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010/05/21 16:51:48 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010/05/21 16:51:02 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010/05/21 16:50:49 | 000,000,000 | ---D | C] -- C:\Boot [2005/09/13 00:45:06 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\vsnpstd3.dll [2004/02/16 20:59:52 | 000,061,440 | ---- | C] ( ) -- C:\Windows\System32\csnpstd3.dll ========== Files - Modified Within 14 Days ========== [2010/05/31 15:36:27 | 002,097,152 | -HS- | M] () -- C:\Users\Vitor\NTUSER.DAT [2010/05/31 14:36:35 | 000,017,792 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010/05/31 14:36:35 | 000,017,792 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010/05/31 13:29:33 | 000,001,009 | ---- | M] () -- C:\Users\Vitor\Desktop\Orbit.lnk [2010/05/31 10:34:18 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010/05/31 10:34:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010/05/31 10:34:06 | 804,659,200 | -HS- | M] () -- C:\hiberfil.sys [2010/05/30 22:26:40 | 001,859,852 | -H-- | M] () -- C:\Users\Vitor\AppData\Local\IconCache.db [2010/05/30 20:31:40 | 000,571,392 | ---- | M] (OldTimer Tools) -- C:\Users\Vitor\Desktop\OTL.exe [2010/05/30 20:17:01 | 001,491,932 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010/05/30 20:17:01 | 000,654,272 | ---- | M] () -- C:\Windows\System32\prfh0416.dat [2010/05/30 20:17:01 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010/05/30 20:17:01 | 000,124,724 | ---- | M] () -- C:\Windows\System32\prfc0416.dat [2010/05/30 20:17:01 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010/05/29 15:29:07 | 000,004,608 | ---- | M] () -- C:\Users\Vitor\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/05/29 13:16:28 | 000,000,790 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2010/05/28 11:37:39 | 000,000,937 | ---- | M] () -- C:\Users\Vitor\Desktop\Garena.lnk [2010/05/27 19:34:25 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini [2010/05/27 19:20:20 | 003,700,283 | R--- | M] () -- C:\Users\Vitor\Desktop\ComboFix.exe [2010/05/27 17:06:18 | 000,077,743 | ---- | M] () -- C:\Windows\War3Unin.dat [2010/05/25 12:11:15 | 001,752,712 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010/05/24 17:03:15 | 000,108,432 | ---- | M] () -- C:\Users\Vitor\AppData\Local\GDIPFONTCACHEV1.DAT [2010/05/24 14:26:26 | 000,004,767 | ---- | M] () -- C:\Windows\Irremote.ini [2010/05/22 16:48:30 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2010/05/22 12:18:31 | 000,002,070 | ---- | M] () -- C:\Users\Vitor\Desktop\Messenger.lnk [2010/05/21 19:07:26 | 000,001,144 | ---- | M] () -- C:\Users\Public\Desktop\aTube Catcher.lnk [2010/05/21 19:03:50 | 000,002,829 | ---- | M] () -- C:\Windows\War3Unin.pif [2010/05/21 19:03:48 | 000,139,264 | ---- | M] (Blizzard Entertainment) -- C:\Windows\War3Unin.exe [2010/05/21 18:36:44 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010/05/21 17:15:02 | 000,524,288 | -HS- | M] () -- C:\Users\Vitor\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2010/05/21 17:15:02 | 000,524,288 | -HS- | M] () -- C:\Users\Vitor\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2010/05/21 17:15:02 | 000,065,536 | -HS- | M] () -- C:\Users\Vitor\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2010/05/21 17:01:29 | 000,000,020 | -HS- | M] () -- C:\Users\Vitor\ntuser.ini [2010/05/21 16:55:42 | 000,051,953 | ---- | M] () -- C:\Windows\System32\license.rtf [2010/05/21 16:50:50 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK ========== Files Created - No Company Name ========== [2010/05/31 13:29:33 | 000,001,009 | ---- | C] () -- C:\Users\Vitor\Desktop\Orbit.lnk [2010/05/29 15:29:07 | 000,004,608 | ---- | C] () -- C:\Users\Vitor\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/05/27 19:23:04 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe [2010/05/27 19:23:04 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2010/05/27 19:23:04 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2010/05/27 19:23:04 | 000,077,312 | ---- | C] () -- C:\Windows\MBR.exe [2010/05/27 19:23:04 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2010/05/27 19:20:11 | 003,700,283 | R--- | C] () -- C:\Users\Vitor\Desktop\ComboFix.exe [2010/05/27 12:56:29 | 000,007,772 | ---- | C] () -- C:\Windows\System32\nvinfo.pb [2010/05/24 14:26:26 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini [2010/05/24 13:40:59 | 000,767,952 | ---- | C] () -- C:\Windows\BDTSupport.dll [2010/05/24 13:40:59 | 000,000,882 | ---- | C] () -- C:\Windows\RegSDImport.xml [2010/05/24 13:40:59 | 000,000,879 | ---- | C] () -- C:\Windows\RegISSImport.xml [2010/05/24 13:40:59 | 000,000,131 | ---- | C] () -- C:\Windows\IDB.zip [2010/05/24 13:40:58 | 001,152,444 | ---- | C] () -- C:\Windows\UDB.zip [2010/05/24 13:31:29 | 000,007,387 | ---- | C] () -- C:\Windows\System32\drivers\pctgntdi.cat [2010/05/24 13:31:22 | 000,007,412 | ---- | C] () -- C:\Windows\System32\drivers\PCTAppEvent.cat [2010/05/24 13:31:22 | 000,007,383 | ---- | C] () -- C:\Windows\System32\drivers\pctcore.cat [2010/05/24 13:31:07 | 000,007,383 | ---- | C] () -- C:\Windows\System32\drivers\pctplsg.cat [2010/05/22 16:48:30 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010/05/22 15:00:33 | 000,000,937 | ---- | C] () -- C:\Users\Vitor\Desktop\Garena.lnk [2010/05/22 12:49:26 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll [2010/05/22 12:49:26 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2010/05/22 12:49:19 | 000,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest [2010/05/22 12:18:31 | 000,002,070 | ---- | C] () -- C:\Users\Vitor\Desktop\Messenger.lnk [2010/05/21 19:07:26 | 000,001,144 | ---- | C] () -- C:\Users\Public\Desktop\aTube Catcher.lnk [2010/05/21 18:54:59 | 000,077,743 | ---- | C] () -- C:\Windows\War3Unin.dat [2010/05/21 18:54:58 | 000,002,829 | ---- | C] () -- C:\Windows\War3Unin.pif [2010/05/21 18:36:44 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010/05/21 17:11:26 | 000,047,360 | ---- | C] () -- C:\Windows\System32\drivers\Surroundhp_kern_i386.sys [2010/05/21 17:11:26 | 000,047,104 | ---- | C] () -- C:\Windows\System32\drivers\tshd4_kern_i386.sys [2010/05/21 17:11:26 | 000,042,112 | ---- | C] () -- C:\Windows\System32\drivers\csiidecoder_kern_i386.sys [2010/05/21 17:01:29 | 002,097,152 | -HS- | C] () -- C:\Users\Vitor\NTUSER.DAT [2010/05/21 17:01:29 | 000,524,288 | -HS- | C] () -- C:\Users\Vitor\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2010/05/21 17:01:29 | 000,524,288 | -HS- | C] () -- C:\Users\Vitor\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2010/05/21 17:01:29 | 000,262,144 | -HS- | C] () -- C:\Users\Vitor\ntuser.dat.LOG1 [2010/05/21 17:01:29 | 000,065,536 | -HS- | C] () -- C:\Users\Vitor\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2010/05/21 17:01:29 | 000,000,020 | -HS- | C] () -- C:\Users\Vitor\ntuser.ini [2010/05/21 17:01:29 | 000,000,000 | -HS- | C] () -- C:\Users\Vitor\ntuser.dat.LOG2 [2010/05/21 16:51:48 | 804,659,200 | -HS- | C] () -- C:\hiberfil.sys [2010/05/21 16:50:50 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK [2010/05/21 16:50:49 | 000,383,562 | RHS- | C] () -- C:\bootmgr [2010/03/02 21:00:00 | 004,555,278 | ---- | C] () -- C:\Windows\System32\libavcodec.dll [2010/03/02 21:00:00 | 001,449,935 | ---- | C] () -- C:\Windows\System32\ffmpegmt.dll [2010/03/02 21:00:00 | 000,882,688 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2010/03/02 21:00:00 | 000,877,385 | ---- | C] () -- C:\Windows\System32\ff_x264.dll [2010/03/02 21:00:00 | 000,556,491 | ---- | C] () -- C:\Windows\System32\libmplayer.dll [2010/03/02 21:00:00 | 000,336,384 | ---- | C] () -- C:\Windows\System32\ff_libfaad2.dll [2010/03/02 21:00:00 | 000,324,096 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll [2010/03/02 21:00:00 | 000,248,320 | ---- | C] () -- C:\Windows\System32\ff_kernelDeint.dll [2010/03/02 21:00:00 | 000,216,576 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll [2010/03/02 21:00:00 | 000,169,984 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll [2010/03/02 21:00:00 | 000,151,552 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll [2010/03/02 21:00:00 | 000,145,408 | ---- | C] () -- C:\Windows\System32\libmpeg2_ff.dll [2010/03/02 21:00:00 | 000,121,856 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll [2010/03/02 21:00:00 | 000,116,736 | ---- | C] () -- C:\Windows\System32\ff_tremor.dll [2010/03/02 21:00:00 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010/03/02 21:00:00 | 000,100,864 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll [2010/03/02 21:00:00 | 000,097,792 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll [2009/11/14 15:37:08 | 000,154,112 | ---- | C] () -- C:\Windows\System32\ts.dll [2009/11/14 15:33:38 | 000,249,856 | ---- | C] () -- C:\Windows\System32\dxr.dll [2009/11/14 15:11:50 | 000,093,184 | ---- | C] () -- C:\Windows\System32\avss.dll [2009/11/14 15:11:42 | 000,150,016 | ---- | C] () -- C:\Windows\System32\mkx.dll [2009/11/14 15:11:42 | 000,141,824 | ---- | C] () -- C:\Windows\System32\mp4.dll [2009/11/14 15:11:40 | 000,123,392 | ---- | C] () -- C:\Windows\System32\ogm.dll [2009/11/14 15:11:40 | 000,109,568 | ---- | C] () -- C:\Windows\System32\avi.dll [2009/11/14 15:11:38 | 000,097,792 | ---- | C] () -- C:\Windows\System32\avs.dll [2009/11/14 15:11:32 | 000,080,384 | ---- | C] () -- C:\Windows\System32\mkzlib.dll [2009/11/14 15:11:32 | 000,024,576 | ---- | C] () -- C:\Windows\System32\mkunicode.dll [2009/07/13 21:55:09 | 000,587,776 | ---- | C] () -- C:\Windows\System32\hpotscl1.dll [2009/07/13 20:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009/07/13 20:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009/06/07 13:24:04 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2009/01/10 19:15:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\mmfinfo.dll [2008/11/06 13:37:32 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll [2007/10/13 06:30:20 | 000,000,137 | ---- | C] () -- C:\Windows\System32\Registration.ini [2007/07/26 09:25:12 | 000,039,808 | ---- | C] () -- C:\Windows\System32\drivers\SRS_SSCFilter_i386.sys [2005/10/13 17:19:12 | 008,701,824 | ---- | C] () -- C:\Windows\System32\drivers\snpstd3.sys [2004/08/13 09:56:20 | 000,005,810 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys [2004/02/28 00:36:18 | 000,015,498 | ---- | C] () -- C:\Windows\snpstd3.ini ========== LOP Check ========== [2010/05/31 13:29:53 | 000,000,000 | ---D | M] -- C:\Users\Vitor\AppData\Roaming\GrabPro [2010/05/31 15:29:50 | 000,000,000 | ---D | M] -- C:\Users\Vitor\AppData\Roaming\Orbit [2010/05/29 15:40:21 | 000,000,000 | ---D | M] -- C:\Users\Vitor\AppData\Roaming\uTorrent [2009/07/14 01:53:46 | 000,006,682 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.exe > < %SYSTEMDRIVE%\eventlog.dll /s /md5 > < %SYSTEMDRIVE%\scecli.dll /s /md5 > [2009/07/13 22:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\ERDNT\cache\scecli.dll [2009/07/13 22:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll [2009/07/13 22:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll < %SYSTEMDRIVE%\sfcfiles.dll /s /md5 > < %SYSTEMDRIVE%\netlogon.dll /s /md5 > [2009/07/13 22:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\ERDNT\cache\netlogon.dll [2009/07/13 22:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll [2009/07/13 22:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll < %SYSTEMDRIVE%\atapi.sys /s /md5 > [2009/07/13 22:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\ERDNT\cache\atapi.sys [2009/07/13 22:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009/07/13 22:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys [2009/07/13 22:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys ========== Alternate Data Streams ========== @Alternate Data Stream - 219 bytes -> C:\ProgramData\TEMP:DFC5A2B2 @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8 < End of report > OTL Extras logfile created on: 31/05/2010 15:32:44 - Run 1 OTL by OldTimer - Version 3.2.5.2 Folder = C:\Users\Vitor\Desktop Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy 1.023,00 Mb Total Physical Memory | 311,00 Mb Available Physical Memory | 30,00% Memory free 2,00 Gb Paging File | 1,00 Gb Available in Paging File | 41,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 74,56 Gb Total Space | 45,09 Gb Free Space | 60,48% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: VITOR-PC Current User Name: Vitor Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: On Skip Microsoft Files: On File Age = 14 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Orbitdownloader\orbitdm.exe" = C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com) "C:\Program Files\Orbitdownloader\orbitnet.exe" = C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3 "{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3 "{0711500B-9912-4D60-9A49-C577B4503D42}" = Nero Recode Help "{07FF7593-9DEA-40B5-9F87-F557E65BBF60}" = Nero Recode "{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting "{0FFEA8EE-7BC7-4C9D-8CC6-5B8C891BA3F2}" = Windows Live Essentials "{1122AAC4-AAAA-43BF-B2D4-3C8C12378952}" = Nero InfoTool "{11A84FCA-C3C7-4AFD-A797-111DB8569DBC}" = Nero BurningROM "{12345674-DE9A-677A-CCEE-666356D89777}" = Nero BurnRights "{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin "{1B040683-C390-4711-ABC7-DA8D85E470E7}" = NeroBurningROM "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Ferramenta de Carregamento do Windows Live "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3 "{2D3455A8-3B15-41A8-99F8-0D4215746463}" = Nero StartSmart "{3097B151-1F61-4211-A4CC-D70127B226AE}" = SoundTrax "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java 6 Update 7 "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll "{3F30CC51-0788-487B-AA83-7214A239C0C0}" = Nero Disc Copy Gadget Help "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4D42353B-533F-4306-AD0B-7FEF292ADE04}" = Nero CoverDesigner Help "{4E8C27C2-D727-4C00-A90E-C3F6376EEE70}" = Nero ControlCenter "{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings "{51A9E3DD-37B8-47BB-8E67-5B76B3EFBC48}" = Assistente de Conexão do Windows Live "{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3 "{548F99E0-14CC-4D53-A7D6-4A62A5F2C748}" = Nero PhotoSnap "{56BE5CC9-95E6-4128-ABEA-968414CA9C80}" = DolbyFiles "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{590035D9-BFA0-406A-A7F0-479C72C0DDB2}" = Windows Live Call "{59a7fca2-abb3-4377-b971-3f8554a176e5}" = Nero 9 "{5A62A775-A29A-4CE1-BBC2-4A9CD0B211EF}" = Nero Live Help "{5AE12194-3EAA-40DF-B2BF-FE1D6B78BBF4}" = Nero Vision "{5C2E8A0F-80E2-4C68-8CC0-D8D16E7196BF}" = Nero RescueAgent Help "{5C42EAB8-54F9-423A-948C-1CBEF25F8DB4}" = Nero PhotoSnap Help "{5C9BB0B3-E830-4814-BBA4-D93535E1C7B9}" = Nero Live "{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All "{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{75321954-2589-11DC-DDCC-E98356D81493}" = Nero DriveSpeed "{753973C4-B961-43BF-B2D4-3C8C92F7216E}" = Nero DriveSpeed "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{78523651-D8B1-11DC-CCEE-741589645873}" = Nero DiscSpeed "{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C654BD0-1949-43DE-84F2-EC2A1ABB0CB4}" = Nero ShowTime "{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3 "{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support "{8EF54987-EE4A-4096-90CB-8B21214B50E8}" = Microsoft Antimalware Service PT-BR Language Pack "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007 "{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 "{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 "{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007 "{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007 "{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 "{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007 "{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007 "{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007 "{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007 "{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007 "{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3 "{943CC0C0-2253-4FE0-9493-DD386F7857FD}" = Nero Express "{948FFAAE-C57F-447B-9B07-3721E950BFDC}" = Nero ShowTime "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings "{961D53EA-40DC-4156-AD74-25684CE05F81}" = Nero Installer "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A875B56-A35C-46BA-A3AA-DF8D03EE9F2F}" = Nero ControlCenter "{9ADC3E4F-34DA-48CD-8727-BB26D90257BD}" = Windows Live Messenger "{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3 "{9F3523F8-DAD7-AE52-6DA7-45CDDDF33726}" = Advertising Center "{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps "{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific "{A73BEC3C-40A0-480E-87EF-EFCD33629088}" = NeroExpress "{A8399F58-234A-48C6-BA55-30C15738BF3C}" = Nero CoverDesigner "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{AAA12554-2589-11DC-92EF-E98356D81493}" = Nero InfoTool "{AABBCC54-D8B1-11DC-92EF-E98356D81493}" = Nero DiscSpeed "{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings "{B2C12C8D-65DC-40BD-B309-5ADB0C6C8D8F}" = Nero WaveEditor "{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0 "{B96C2601-52F5-4D5D-816A-63469EA311EF}" = "Nero SoundTrax Help "{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3 "{BCD82AB5-670D-4242-90FA-1F97103C16CD}" = Movie Templates - Starter Kit "{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2 "{C3CBE4AD-CC84-484F-8E44-CFB303BFDA4D}" = SRS Audio Sandbox "{C99C89A3-119A-45E6-B26E-DD5643CAA0C5}" = Menu Templates - Starter Kit "{CD1826A5-CFCC-4C6E-9F9D-E181876162EA}" = Nero Rescue Agent "{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup "{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files "{D7C206B6-1A63-4389-A8B1-8F607D0BFF1F}" = Nero StartSmart Help "{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings "{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings "{E4A8DD87-A746-4443-BF25-CAF99CED6767}" = Nero Disc Copy Gadget "{E590FD1C-E8C6-4D2E-8CA9-77B403F7EE01}" = Microsoft Antimalware "{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3 "{E86156E5-9859-440D-8876-26CED1349802}" = Nero WaveEditor Help "{EA9FFE54-D8B1-11DC-92EF-E98356D81493}" = Nero BurnRights "{EF98A02A-1748-4762-9B7D-5ED1600520D5}" = Microsoft Security Essentials "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F53F6769-AC46-49E3-ABE3-2C8AFD39D0DD}" = Nero Vision "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3 "aTube Catcher" = aTube Catcher "Browser Defender_is1" = Browser Defender 2.0.6.15 "CCleaner" = CCleaner "ENTERPRISE" = Microsoft Office Enterprise 2007 "FMCODEC" = FM Screen Capture Codec (Remove Only) "Garena 2010" = Garena 2010 "HijackThis" = HijackThis 2.0.2 "KLiteCodecPack_is1" = K-Lite Codec Pack 5.9.6 (Full) "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Media Player - Codec Pack" = Media Player Codec Pack 3.9.5 "Messenger Plus! Live" = Messenger Plus! Live "Microsoft Security Essentials" = Microsoft Security Essentials "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "MV RegClean 5.9_is1" = MV RegClean 5.9 "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers "Orbit_is1" = Orbit Downloader "RealAlt_is1" = Real Alternative 2.0.2 "Revo Uninstaller" = Revo Uninstaller 1.88 "Spyware Doctor" = Spyware Doctor 7.0 "UltraISO_is1" = UltraISO Premium V9.33 "Warcraft III" = Warcraft III "WinLiveSuite_Wave3" = Windows Live Essentials "WinRAR archiver" = Arquivo do WinRAR ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-882520997-3729033636-3795039030-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Warcraft III" = Warcraft III: All Products ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 24/05/2010 14:37:39 | Computer Name = Vitor-PC | Source = Windows Search Service | ID = 3007 Description = Error - 24/05/2010 16:03:13 | Computer Name = Vitor-PC | Source = SideBySide | ID = 16842785 Description = Falha na geração de contexto de ativação para "C:\Windows\System32\systemcpl.dll". Assembly dependente Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0" não pôde ser localizado. Use o arquivo sxstrace.exe para obter um diagnóstico detalhado. Error - 24/05/2010 16:26:08 | Computer Name = Vitor-PC | Source = EventSystem | ID = 4621 Description = Error - 25/05/2010 16:29:47 | Computer Name = Vitor-PC | Source = SideBySide | ID = 16842785 Description = Falha na geração de contexto de ativação para "C:\Windows\System32\systemcpl.dll". Assembly dependente Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0" não pôde ser localizado. Use o arquivo sxstrace.exe para obter um diagnóstico detalhado. Error - 26/05/2010 11:09:55 | Computer Name = Vitor-PC | Source = RasClient | ID = 20227 Description = Error - 26/05/2010 16:24:44 | Computer Name = Vitor-PC | Source = Software Protection Platform Service | ID = 8200 Description = Detalhes da falha na aquisição de licença. hr=0xC004C003 Error - 26/05/2010 16:24:44 | Computer Name = Vitor-PC | Source = Software Protection Platform Service | ID = 1012 Description = Falha ao adquirir Certificado de Produto. hr=0xC004C003 ID do Sku=a0cde89c-3304-4157-b61c-c8ad785d1fad Error - 26/05/2010 16:25:00 | Computer Name = Vitor-PC | Source = SideBySide | ID = 16842785 Description = Falha na geração de contexto de ativação para "C:\Windows\System32\systemcpl.dll". Assembly dependente Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0" não pôde ser localizado. Use o arquivo sxstrace.exe para obter um diagnóstico detalhado. Error - 29/05/2010 14:21:14 | Computer Name = Vitor-PC | Source = SideBySide | ID = 16842785 Description = Falha na geração de contexto de ativação para "C:\Windows\System32\systemcpl.dll". Assembly dependente Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0" não pôde ser localizado. Use o arquivo sxstrace.exe para obter um diagnóstico detalhado. Error - 29/05/2010 16:40:03 | Computer Name = Vitor-PC | Source = SideBySide | ID = 16842785 Description = Falha na geração de contexto de ativação para "C:\Windows\System32\systemcpl.dll". Assembly dependente Microsoft.Windows.Common-Controls,language="*",processorArchitecture="*",publicKeyToken="436865772d574741",type="win32",version="6.0.0.0" não pôde ser localizado. Use o arquivo sxstrace.exe para obter um diagnóstico detalhado. [ System Events ] Error - 24/05/2010 14:12:16 | Computer Name = Vitor-PC | Source = Service Control Manager | ID = 7043 Description = O serviço Windows Update não foi desligado corretamente após receber um controle de pré-desligamento. Error - 24/05/2010 14:12:50 | Computer Name = Vitor-PC | Source = Service Control Manager | ID = 7016 Description = O serviço NVIDIA Display Driver Service relatou um estado atual 32 inválido. Error - 24/05/2010 23:17:39 | Computer Name = Vitor-PC | Source = Service Control Manager | ID = 7016 Description = O serviço NVIDIA Display Driver Service relatou um estado atual 32 inválido. Error - 25/05/2010 19:53:10 | Computer Name = Vitor-PC | Source = cdrom | ID = 262155 Description = O driver detectou um erro de controlador em \Device\CdRom0. Error - 25/05/2010 21:30:15 | Computer Name = Vitor-PC | Source = Service Control Manager | ID = 7016 Description = O serviço NVIDIA Display Driver Service relatou um estado atual 32 inválido. Error - 26/05/2010 09:54:22 | Computer Name = Vitor-PC | Source = cdrom | ID = 262155 Description = O driver detectou um erro de controlador em \Device\CdRom0. Error - 26/05/2010 23:18:35 | Computer Name = Vitor-PC | Source = Service Control Manager | ID = 7016 Description = O serviço NVIDIA Display Driver Service relatou um estado atual 32 inválido. Error - 27/05/2010 18:24:03 | Computer Name = Vitor-PC | Source = Service Control Manager | ID = 7030 Description = O serviço PEVSystemStart está marcado como um serviço interativo. No entanto, o sistema está configurado para não permitir serviços interativos. Esse serviço pode não funcionar corretamente. Error - 27/05/2010 18:34:19 | Computer Name = Vitor-PC | Source = Service Control Manager | ID = 7030 Description = O serviço PEVSystemStart está marcado como um serviço interativo. No entanto, o sistema está configurado para não permitir serviços interativos. Esse serviço pode não funcionar corretamente. Error - 30/05/2010 09:40:26 | Computer Name = Vitor-PC | Source = EventLog | ID = 6008 Description = O desligamento anterior do sistema em 20:41:37 às ?29/?05/?2010 não era esperado. < End of report > Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Maio 31, 2010 Boa Noite! tuuc <@> Baixe: < SystemLook > ( ...by jpshortstuff ) <@> Salve-o no desktop. <@> Execute SystemLook.exe e,no campo,cole estas informações: :filefindsfcfiles.dlleventlog.dll <@> Clique,à seguir,em Look --> Aguarde! <@> Terminando,clique em Exit. <@> Poste o relatório: SystemLook.txt <-- 000000000000000000000000 oooooooooooooooooooooooo <@> Execute o OTL.exe. <@> Copie estas informações que estão na Quote,para o campo abaixo de: Exames Personalizados/Correções :filesC:\Program Files\Bonjour\mDNSResponder.exe C:\Arquivos de Programas\Bonjour :otl O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de Programas\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found @Alternate Data Stream - 219 bytes -> C:\ProgramData\TEMP:DFC5A2B2 @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8 :services Bonjour Service :commands [purity] [emptyflash] [emptytemp] [Reboot] <@> Clique no botão Consertar --> Aguarde a conclusão! --> Executar! <@> Poste o relatório,que também estará na pasta: C:\_OTL\MovedFiles\*.log <-- <@> Poste,também,HijackThis atualizado. Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
tuuc 0 Denunciar post Postado Junho 1, 2010 SystemLook v1.0 by jpshortstuff (11.01.10) Log created at 16:53 on 01/06/2010 by Vitor (Administrator - Elevation successful) ========== filefind ========== Searching for "sfcfiles.dll" No files found. Searching for "eventlog.dll " No files found. -=End Of File=- _____ All processes killed ========== FILES ========== C:\Program Files\Bonjour\mDNSResponder.exe moved successfully. File\Folder C:\Arquivos de Programas\Bonjour not found. ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully. C:\Arquivos de Programas\Java\jre1.6.0_07\bin\ssv.dll moved successfully. Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully. ADS C:\ProgramData\TEMP:DFC5A2B2 deleted successfully. ADS C:\ProgramData\TEMP:A8ADE5D8 deleted successfully. ========== SERVICES/DRIVERS ========== Service Bonjour Service stopped successfully! Service Bonjour Service deleted successfully! ========== COMMANDS ========== [EMPTYFLASH] User: All Users User: Default User: Default User User: Public User: Todos os Usuários User: Usuário Padrão User: Vitor ->Flash cache emptied: 102633 bytes Total Flash Files Cleaned = 0,00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes User: Todos os Usuários User: Usuário Padrão ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Vitor ->Temp folder emptied: 27596756 bytes ->Temporary Internet Files folder emptied: 55104004 bytes ->Java cache emptied: 46571 bytes ->FireFox cache emptied: 39679218 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 60142 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 117,00 mb OTL by OldTimer - Version 3.2.5.2 log created on 06012010_165636 Files\Folders moved on Reboot... Registry entries deleted on Reboot... _____ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:02:49, on 01/06/2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\rundll32.exe C:\Windows\notepad.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Microsoft Security Essentials\msseces.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\system32\SearchProtocolHost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Vitor\Downloads\HiJackThis.exe C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [sRS Audio Sandbox] "C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll (file missing) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll (file missing) O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: ThreatFire - PC Tools - C:\Program Files\Spyware Doctor\TFEngine\TFService.exe -- End of file - 5435 bytes Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Junho 2, 2010 Bom Dia! tuuc <@> Acesse: < Kaspersky Online Scanner > <@> Ps: Utilize o navegador Internet Explorer. <@> Clique em Accept. <@> Na janela "Segurança do Java",clique em Aceitar. <@> Aguarde a atualização do banco de dados. ( Update em 100% ) <@> Ps: Desabilite seu antivírus ou firewall. <@> Dê início ao scan,clicando em "My Computer",dentre outras opções. <@> Ps: Para um escaneamento mais rápido,escolha: "Critical areas" <@> Terminando,obtenha o relatório clicando em "View report". <@> Poste-o na sua resposta. Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
tuuc 0 Denunciar post Postado Junho 2, 2010 Boa tarde! DigRam Wednesday, June 2, 2010 Operating system: Microsoft Professional (build 7600) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Wednesday, June 02, 2010 08:59:40 Records in database: 4195772 Scan settings scan using the following database extended Scan archives yes Scan e-mail databases yes Scan area Critical areas C:\Program Files C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup C:\Users\Vitor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup C:\Windows Scan statistics Objects scanned 84842 Threats found 0 Infected objects found 0 Suspicious objects found 0 Scan duration 01:44:33 No threats found. Scanned area is clean. Selected area has been scanned. Compartilhar este post Link para o post Compartilhar em outros sites
DigRam 144 Denunciar post Postado Junho 2, 2010 Boa Tarde! tuuc <@> Abra o OTL.exe --> Clique em ou Limpeza --> Aguarde! <@> Na solicitação,clique OK --> Reinicie o computador! 0000000000000000000000 oooooooooooooooooooooo <!> Ps: Caso,ainda,tenha problemas,utilize o TuneUp Utilities para otimizar o PC. 0000000000000000000000 <@> Baixe: < TuneUp Utilities 2010 > <@> Para baixar,digite o seu E-Mail e clique em Start download. <@> Salve o executável,TU2010TrialEN.exe,em Arquivos de Programas. <@> O programa é Trial! Mas...haverá tempo,para a otimização do computador. <@> Procure desfragmentar o Disco e Registro. <@> Otimize a navegação! 0000000000000000000000 oooooooooooooooooooooo <!> Seus logs estão limpos! :) <!> Tudo Ok? Abraços! Compartilhar este post Link para o post Compartilhar em outros sites
Mário Monteiro 179 Denunciar post Postado Julho 3, 2010 Tópico Arquivado Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado. Caso você seja o autor do tópico e quer reabrir, envie uma mensagem privada para um moderador da área juntamente com o link para este tópico e explique o motivo da reabertura. Compartilhar este post Link para o post Compartilhar em outros sites
