Ir para conteúdo

POWERED BY:

Arquivado

Este tópico foi arquivado e está fechado para novas respostas.

Felipe7l

[Resolvido!] Virus de cartao de memoria

Por , em Tópicos Resolvidos (Seguranca & Malwares)

Recommended Posts

Felipe7l    0

Felipe7l
Postado

Olá equipe do imasters.

Há uns dias atras peguei um virus de pen drive q simplesmente transformou todas as pastas do pen drive, cartao de memoria em atalhos, e foi passando para meus outros pen driver e cartoes de memoria dos celulares. ¬¬

formatei o computador e agora quero saber como excluir o virus do pen drive sem que eu contamine o computador.

fiz um log do hijackthis so para constar, uma vez que eu ainda nao pluguei nenhum dos cartoes pen drivesLogfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:06:56, on 12/8/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

C:\WINDOWS\Explorer.EXE

C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe

C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\slserv.exe

C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Analog Devices\SoundMAX\SMTray.exe

C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\uTorrent\uTorrent.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

C:\Documents and Settings\Felipe Rodrigues\Desktop\HiJackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [siSUSBRG] C:\WINDOWS\SiSUSBrg.exe

O4 - HKLM\..\Run: [smapp] C:\Arquivos de programas\Analog Devices\SoundMAX\SMTray.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [avgnt] "C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [uTorrent] "C:\Arquivos de programas\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O23 - Service: Avira AntiVir Programador (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Arquivos de programas\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe

O23 - Service: NBService - Nero AG - C:\Arquivos de programas\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

 

--

End of file - 5778 bytes

no pc ainda.

Agradeço desde já.

Felipe.

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

Bom...o que você pode fazer é desativar o autorun das unidades removíveis.

 

http://support.microsoft.com/kb/967715/pt-br

 

Se der para salvar algum programa ou arquivo conhecido no pen drive, faça. Porém, já vi casos em que só formatando o pen drive.

 

Depois de formatar, basta ativar novamente o autorun se desejar.

 

Outra possibilidade é usar um live cd do Linux para copiar e gravar os seus arquivos.

Compartilhar este post

Link para o post
Compartilhar em outros sites

Felipe7l    0

Felipe7l
Postado

mais tpw ele transformou todos as pastas em tpw atalhos....

nao reconhece e nao da pra abrir.

no celular nao da pra abrir as pastas do cartao mas o reprodutor de musica do celular aida atualiza a lista e reproduz as musicas.

queria ver se tinha como salvar os arquivos pq tem fotos e talz...

antes eu formatava o cartao e voltava tudo de novo.

criava umas pastas tpw minhas musicas (atalho) minhas imagens password meus videos.

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

Bom...vamos ver se isso ajuda.

 

*Conecte o pen drive no PC, aperte e mantenha pressionada a tecla Shift até seu pendrive ser reconhecido e constar na lista do Explorer.

 

*Abra o prompt de comando e digite:

 

attrib -h -r -s /s /d #:\*.*

 

Atenção: # é a unidade do seu pendrive

 

*Tecle [ENTER]

 

Veja se as pastas estão acessíveis para que você possa salvar seus arquivos.

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

*Baixe o RSIT e salve-o no desktop

*Execute o RSIT e clique em [Continue]

*Ao término do processo, cole o relatório criado em C:\rsit\log.txt

Compartilhar este post

Link para o post
Compartilhar em outros sites

Felipe7l    0

Felipe7l
Postado

Logfile of random's system information tool 1.08 (written by random/random)

Run by Felipe Rodrigues at 2010-08-17 18:43:21

Microsoft Windows XP Professional Service Pack 3

System drive C: has 2 GB (12%) free of 20 GB

Total RAM: 512 MB (38% free)

 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 18:43:53, on 17/8/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

C:\WINDOWS\Explorer.EXE

C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe

C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\slserv.exe

C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Analog Devices\SoundMAX\SMTray.exe

C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Arquivos de programas\uTorrent\uTorrent.exe

C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe

C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

C:\Arquivos de programas\Windows Media Player\wmplayer.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\Felipe Rodrigues\Desktop\RSIT.exe

C:\Arquivos de programas\trend micro\Felipe Rodrigues.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [siSUSBRG] C:\WINDOWS\SiSUSBrg.exe

O4 - HKLM\..\Run: [smapp] C:\Arquivos de programas\Analog Devices\SoundMAX\SMTray.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [avgnt] "C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [uTorrent] "C:\Arquivos de programas\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O22 - SharedTaskScheduler: Pré-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Daemon de cache de categorias de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Avira AntiVir Programador (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Arquivos de programas\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe

O23 - Service: NBService - Nero AG - C:\Arquivos de programas\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

 

--

End of file - 6200 bytes

 

======Scheduled tasks folder======

 

C:\WINDOWS\tasks\User_Feed_Synchronization-{DC7CC9CB-5A25-4964-90FD-95484DD9A87E}.job

 

======Registry dump======

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Auxiliar de Conexão do Windows Live - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]

"Smapp"=C:\Arquivos de programas\Analog Devices\SoundMAX\SMTray.exe [2003-05-05 143360]

"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-05-02 13529088]

"nwiz"=nwiz.exe /install []

"avgnt"=C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-05-02 86016]

"Adobe Reader Speed Launcher"=C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-19 35760]

"Adobe ARM"=C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"uTorrent"=C:\Arquivos de programas\uTorrent\uTorrent.exe [2010-08-12 382840]

"msnmsgr"=C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-19 35760]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]

C:\Arquivos de programas\HP\hpcoretech\hpcmpmgr.exe [2004-05-12 241664]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

C:\Arquivos de programas\HP\HP Software Update\HPWuSchd2.exe [2004-02-12 49152]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]

C:\Arquivos de programas\Nero\Nero 7\InCD\InCD.exe [2007-02-12 1050112]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc]

C:\Arquivos de programas\Nero\Nero 7\InCD\NBHGui.exe [2007-02-12 1620480]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Iniciar^Programas^Inicializar^HP Digital Imaging Monitor.lnk]

C:\ARQUIV~1\HP\DIGITA~1\bin\hpqtra08.exe [2004-05-28 241664]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Iniciar^Programas^Inicializar^Inicialização rápida do HP Image Zone.lnk]

C:\ARQUIV~1\HP\DIGITA~1\bin\hpqthb08.exe [2004-05-28 53248]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=1

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Arquivos de programas\uTorrent\uTorrent.exe"="C:\Arquivos de programas\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

"C:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe"="C:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe"="C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe"="C:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe"="C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

 

======List of files/folders created in the last 1 months======

 

2010-08-17 18:43:24 ----D---- C:\Arquivos de programas\trend micro

2010-08-17 18:43:21 ----D---- C:\rsit

2010-08-10 22:21:20 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$

2010-08-10 22:21:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$

2010-08-10 22:20:34 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$

2010-08-10 22:20:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$

2010-08-10 22:19:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$

2010-08-10 22:19:21 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$

2010-08-10 22:17:19 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$

2010-08-10 22:17:03 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$

2010-08-02 21:46:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$

2010-08-01 23:02:35 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$

2010-08-01 23:02:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$

2010-07-30 20:25:38 ----A---- C:\WINDOWS\system32\drivers\SONYPVU1.SYS

2010-07-30 20:04:26 ----A---- C:\WINDOWS\system32\MRT.exe

2010-07-30 20:04:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$

2010-07-30 20:02:40 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$

2010-07-30 20:02:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$

2010-07-30 20:02:24 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$

2010-07-30 20:02:17 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$

2010-07-30 20:02:04 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$

2010-07-30 20:01:57 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$

2010-07-30 20:01:49 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$

2010-07-30 20:01:43 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$

2010-07-30 20:01:34 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$

2010-07-30 20:01:18 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$

2010-07-30 20:01:05 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$

2010-07-30 20:00:57 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$

2010-07-30 20:00:42 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$

2010-07-30 20:00:35 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$

2010-07-30 20:00:26 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$

2010-07-30 20:00:10 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$

2010-07-30 20:00:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$

2010-07-30 19:59:54 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$

2010-07-30 19:59:42 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$

2010-07-30 19:59:24 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$

2010-07-30 19:59:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$

2010-07-30 19:59:04 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$

2010-07-30 19:58:54 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$

2010-07-30 19:58:44 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$

2010-07-30 19:58:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$

2010-07-30 19:58:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$

2010-07-30 19:58:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$

2010-07-30 19:58:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$

2010-07-30 19:58:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$

2010-07-30 19:57:54 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$

2010-07-30 19:57:50 ----D---- C:\Arquivos de programas\MSXML 4.0

2010-07-30 19:57:39 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$

2010-07-30 19:57:34 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$

2010-07-30 19:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$

2010-07-30 19:57:22 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$

2010-07-30 19:57:16 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$

2010-07-30 19:57:11 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$

2010-07-30 19:57:06 ----D---- C:\WINDOWS\ie8updates

2010-07-30 19:57:00 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$

2010-07-30 19:56:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$

2010-07-30 19:56:49 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$

2010-07-30 19:56:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$

2010-07-30 19:56:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$

2010-07-30 19:56:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$

2010-07-30 19:56:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$

2010-07-30 19:56:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$

2010-07-30 19:56:04 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$

2010-07-30 19:55:56 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$

2010-07-30 19:54:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$

2010-07-30 19:54:19 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$

2010-07-30 19:54:11 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$

2010-07-30 19:53:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$

2010-07-30 19:53:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$

2010-07-30 19:53:26 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$

2010-07-30 19:50:39 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$

2010-07-30 19:50:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$

2010-07-30 19:50:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$

2010-07-30 19:50:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$

2010-07-30 19:50:02 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$

2010-07-30 19:49:53 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$

2010-07-30 19:49:44 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$

2010-07-30 19:49:36 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$

2010-07-30 19:49:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$

2010-07-30 19:49:23 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$

2010-07-30 19:49:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$

2010-07-30 19:49:09 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$

2010-07-30 19:49:01 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$

2010-07-30 19:48:42 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$

2010-07-30 19:48:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$

2010-07-30 19:48:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$

2010-07-30 19:48:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$

2010-07-30 19:47:57 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$

2010-07-30 19:47:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$

2010-07-30 19:47:32 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$

2010-07-30 09:01:54 ----D---- C:\WINDOWS\Minidump

2010-07-29 11:15:16 ----D---- C:\The Book Of Eli.2010.BdRip.Xvid {1337x}-Noir

2010-07-28 19:20:44 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\Real

2010-07-28 14:10:05 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt

2010-07-28 14:08:04 ----D---- C:\Arquivos de programas\Claro

2010-07-28 10:56:21 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys

2010-07-28 10:56:05 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys

2010-07-27 14:00:15 ----N---- C:\WINDOWS\system32\drivers\bthport.sys

2010-07-27 13:18:54 ----D---- C:\WINDOWS\pss

2010-07-27 01:10:54 ----D---- C:\WINDOWS\system32\PreInstall

2010-07-27 01:10:52 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$

2010-07-27 01:10:52 ----HD---- C:\WINDOWS\$hf_mig$

2010-07-26 21:37:38 ----D---- C:\WINDOWS\system32\SoftwareDistribution

2010-07-26 21:08:27 ----A---- C:\WINDOWS\NeroDigital.ini

2010-07-26 21:08:20 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\Media Player Classic

2010-07-26 20:17:58 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS

2010-07-26 19:24:15 ----SHD---- C:\RECYCLER

2010-07-26 18:11:28 ----D---- C:\Arquivos de programas\PluginLetras

2010-07-26 18:02:48 ----D---- C:\Documents and Settings\All Users\Dados de aplicativos\Messenger Plus!

2010-07-26 18:02:28 ----D---- C:\Arquivos de programas\Messenger Plus! Live

2010-07-26 18:00:55 ----D---- C:\Arquivos de programas\Microsoft

2010-07-26 18:00:35 ----D---- C:\Arquivos de programas\Windows Live SkyDrive

2010-07-26 18:00:09 ----D---- C:\Arquivos de programas\Windows Live

2010-07-26 17:46:03 ----N---- C:\WINDOWS\system32\spmsg.dll

2010-07-26 17:45:58 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$

2010-07-26 17:45:45 ----D---- C:\Arquivos de programas\Windows Media Connect 2

2010-07-26 17:45:34 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$

2010-07-26 17:44:57 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$

2010-07-26 17:44:35 ----D---- C:\WINDOWS\system32\LogFiles

2010-07-26 17:44:35 ----D---- C:\WINDOWS\system32\drivers\UMDF

2010-07-26 17:44:26 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$

2010-07-26 17:43:51 ----D---- C:\Documents and Settings\All Users\Dados de aplicativos\Windows Genuine Advantage

2010-07-26 17:43:07 ----D---- C:\Arquivos de programas\uTorrent

2010-07-26 17:41:53 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\uTorrent

2010-07-26 17:37:51 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\Ahead

2010-07-26 17:36:32 ----D---- C:\Arquivos de programas\Arquivos comuns\Windows Live

2010-07-26 17:36:18 ----D---- C:\Documents and Settings\All Users\Dados de aplicativos\Nero

2010-07-26 17:36:17 ----D---- C:\Arquivos de programas\Nero

2010-07-26 17:36:17 ----D---- C:\Arquivos de programas\Arquivos comuns\Ahead

2010-07-26 17:35:32 ----D---- C:\WINDOWS\RegisteredPackages

2010-07-26 17:34:23 ----D---- C:\Documents and Settings\All Users\Dados de aplicativos\Adobe

2010-07-26 17:33:34 ----D---- C:\Arquivos de programas\Arquivos comuns\Adobe

2010-07-26 17:33:34 ----D---- C:\Arquivos de programas\Adobe

2010-07-26 17:17:45 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\WinRAR

2010-07-26 17:16:29 ----D---- C:\Arquivos de programas\WinRAR

2010-07-26 17:13:34 ----D---- C:\WINDOWS\WBEM

2010-07-26 17:12:56 ----D---- C:\WINDOWS\nvidia icons

2010-07-26 17:12:42 ----A---- C:\WINDOWS\system32\spupdsvc.exe

2010-07-26 17:11:06 ----D---- C:\Arquivos de programas\Google

2010-07-26 17:10:57 ----A---- C:\WINDOWS\system32\NVUNINST.EXE

2010-07-26 17:10:42 ----HDC---- C:\WINDOWS\ie8

2010-07-26 17:10:33 ----D---- C:\Arquivos de programas\Arquivos comuns\HP

2010-07-26 17:08:47 ----D---- C:\Documents and Settings\All Users\Dados de aplicativos\Hewlett-Packard

2010-07-26 17:08:47 ----D---- C:\Arquivos de programas\Hewlett-Packard

2010-07-26 17:08:41 ----RA---- C:\WINDOWS\system32\MSXML4r.dll

2010-07-26 17:08:41 ----RA---- C:\WINDOWS\system32\MSXML4a.dll

2010-07-26 17:08:41 ----RA---- C:\WINDOWS\system32\hpvcr70.dll

2010-07-26 17:08:41 ----RA---- C:\WINDOWS\system32\hpvcp70.dll

2010-07-26 17:08:41 ----RA---- C:\WINDOWS\system32\hpvaut32.dll

2010-07-26 17:07:46 ----D---- C:\Arquivos de programas\Arquivos comuns\Hewlett-Packard

2010-07-26 17:07:22 ----D---- C:\Program Files

2010-07-26 17:06:24 ----A---- C:\WINDOWS\system32\rmoc3260.dll

2010-07-26 17:06:24 ----A---- C:\WINDOWS\system32\pndx5032.dll

2010-07-26 17:06:24 ----A---- C:\WINDOWS\system32\pndx5016.dll

2010-07-26 17:06:24 ----A---- C:\WINDOWS\system32\pncrt.dll

2010-07-26 17:06:22 ----A---- C:\WINDOWS\system32\unrar.dll

2010-07-26 17:06:22 ----A---- C:\WINDOWS\avisplitter.ini

2010-07-26 17:06:19 ----A---- C:\WINDOWS\system32\yv12vfw.dll

2010-07-26 17:06:19 ----A---- C:\WINDOWS\system32\huffyuv.dll

2010-07-26 17:06:18 ----A---- C:\WINDOWS\system32\x264vfw.dll

2010-07-26 17:06:18 ----A---- C:\WINDOWS\system32\vp7vfw.dll

2010-07-26 17:06:18 ----A---- C:\WINDOWS\system32\vp6vfw.dll

2010-07-26 17:06:18 ----A---- C:\WINDOWS\system32\DivXc32f.dll

2010-07-26 17:06:18 ----A---- C:\WINDOWS\system32\DivXc32.dll

2010-07-26 17:06:17 ----A---- C:\WINDOWS\system32\xvidvfw.dll

2010-07-26 17:06:17 ----A---- C:\WINDOWS\system32\xvidcore.dll

2010-07-26 17:06:16 ----A---- C:\WINDOWS\system32\qt-dx331.dll

2010-07-26 17:06:16 ----A---- C:\WINDOWS\system32\dpl100.dll

2010-07-26 17:06:16 ----A---- C:\WINDOWS\system32\divx.dll

2010-07-26 17:06:12 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest

2010-07-26 17:06:11 ----A---- C:\WINDOWS\system32\ff_vfw.dll

2010-07-26 17:06:09 ----A---- C:\WINDOWS\system32\msvcr71.dll

2010-07-26 17:06:09 ----A---- C:\WINDOWS\system32\msvcp71.dll

2010-07-26 17:06:06 ----D---- C:\Arquivos de programas\K-Lite Codec Pack

2010-07-26 17:06:05 ----RSD---- C:\WINDOWS\assembly

2010-07-26 17:06:05 ----D---- C:\WINDOWS\Microsoft.NET

2010-07-26 17:06:03 ----D---- C:\WINDOWS\system32\URTTemp

2010-07-26 17:04:39 ----D---- C:\Documents and Settings\All Users\Dados de aplicativos\Google

2010-07-26 17:02:55 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys

2010-07-26 17:02:55 ----A---- C:\WINDOWS\system32\drivers\avgntmgr.sys

2010-07-26 17:02:55 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys

2010-07-26 17:02:55 ----A---- C:\WINDOWS\system32\drivers\avgntdd.sys

2010-07-26 17:02:54 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys

2010-07-26 17:02:53 ----D---- C:\Documents and Settings\All Users\Dados de aplicativos\Avira

2010-07-26 17:02:53 ----D---- C:\Arquivos de programas\Avira

2010-07-26 17:01:30 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys

2010-07-26 17:01:23 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys

2010-07-26 17:01:19 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys

2010-07-26 17:00:29 ----A---- C:\WINDOWS\system32\HPZisn12.dll

2010-07-26 17:00:29 ----A---- C:\WINDOWS\system32\HPZipt12.dll

2010-07-26 17:00:29 ----A---- C:\WINDOWS\system32\HPZipr12.dll

2010-07-26 17:00:29 ----A---- C:\WINDOWS\system32\HPZipm12.exe

2010-07-26 17:00:29 ----A---- C:\WINDOWS\system32\HPZinw12.exe

2010-07-26 17:00:29 ----A---- C:\WINDOWS\system32\HPZidr12.dll

2010-07-26 17:00:28 ----A---- C:\WINDOWS\IsUninst.exe

2010-07-26 16:59:41 ----D---- C:\Arquivos de programas\HP

2010-07-26 16:59:16 ----D---- C:\NVIDIA

2010-07-26 16:59:10 ----HD---- C:\Config.Msi

2010-07-26 16:58:49 ----A---- C:\WINDOWS\system32\drivers\HPZius12.sys

2010-07-26 16:58:49 ----A---- C:\WINDOWS\system32\drivers\HPZipr12.sys

2010-07-26 16:58:49 ----A---- C:\WINDOWS\system32\drivers\hpzid412.sys

2010-07-26 16:58:41 ----A---- C:\WINDOWS\system32\HPZc3212.dll

2010-07-26 16:58:41 ----A---- C:\WINDOWS\system32\hpovst08.dll

2010-07-26 16:58:41 ----A---- C:\WINDOWS\system32\hpotscl.dll

2010-07-26 16:58:41 ----A---- C:\WINDOWS\system32\hpgwiamd.dll

2010-07-26 16:58:27 ----A---- C:\WINDOWS\system32\hpzsnt10.dll

2010-07-26 16:58:26 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\Mozilla

2010-07-26 16:58:24 ----A---- C:\WINDOWS\system32\hpzcon10.dll

2010-07-26 16:58:24 ----A---- C:\WINDOWS\system32\hpzcoi10.dll

2010-07-26 16:58:08 ----D---- C:\Arquivos de programas\Mozilla Firefox

2010-07-26 16:53:19 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\Adobe

2010-07-26 16:52:01 ----A---- C:\WINDOWS\ODBC.INI

2010-07-26 16:51:56 ----A---- C:\WINDOWS\system32\mdimon.dll

2010-07-26 16:50:25 ----D---- C:\Arquivos de programas\Microsoft.NET

2010-07-26 16:50:08 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\Macromedia

2010-07-26 16:48:10 ----A---- C:\WINDOWS\system32\drivers\MODEMCSA.sys

2010-07-26 16:48:08 ----A---- C:\WINDOWS\system32\csamsp.dll

2010-07-26 16:47:56 ----D---- C:\Arquivos de programas\Arquivos comuns\DESIGNER

2010-07-26 16:47:39 ----D---- C:\Arquivos de programas\Microsoft Works

2010-07-26 16:46:31 ----D---- C:\Arquivos de programas\Microsoft Visual Studio

2010-07-26 16:45:24 ----D---- C:\WINDOWS\SHELLNEW

2010-07-26 16:44:50 ----D---- C:\Arquivos de programas\Microsoft Office

2010-07-26 16:41:07 ----RA---- C:\WINDOWS\system32\nvwrszht.dll

2010-07-26 16:41:07 ----RA---- C:\WINDOWS\system32\nvwrszhc.dll

2010-07-26 16:41:07 ----RA---- C:\WINDOWS\system32\nvrszht.dll

2010-07-26 16:41:07 ----RA---- C:\WINDOWS\system32\nvrszhc.dll

2010-07-26 16:41:06 ----RA---- C:\WINDOWS\system32\nvwrstr.dll

2010-07-26 16:41:06 ----RA---- C:\WINDOWS\system32\nvwrssv.dll

2010-07-26 16:41:06 ----RA---- C:\WINDOWS\system32\nvrstr.dll

2010-07-26 16:41:05 ----RA---- C:\WINDOWS\system32\nvwrssl.dll

2010-07-26 16:41:05 ----RA---- C:\WINDOWS\system32\nvwrssk.dll

2010-07-26 16:41:05 ----RA---- C:\WINDOWS\system32\nvrssv.dll

2010-07-26 16:41:05 ----RA---- C:\WINDOWS\system32\nvrssl.dll

2010-07-26 16:41:05 ----RA---- C:\WINDOWS\system32\nvrssk.dll

2010-07-26 16:41:04 ----RA---- C:\WINDOWS\system32\nvwrsru.dll

2010-07-26 16:41:04 ----RA---- C:\WINDOWS\system32\nvwrsptb.dll

2010-07-26 16:41:04 ----RA---- C:\WINDOWS\system32\nvrsru.dll

2010-07-26 16:41:04 ----RA---- C:\WINDOWS\system32\nvrsptb.dll

2010-07-26 16:41:03 ----RA---- C:\WINDOWS\system32\nvwrspt.dll

2010-07-26 16:41:03 ----RA---- C:\WINDOWS\system32\nvwrspl.dll

2010-07-26 16:41:03 ----RA---- C:\WINDOWS\system32\nvwrsno.dll

2010-07-26 16:41:03 ----RA---- C:\WINDOWS\system32\nvrspt.dll

2010-07-26 16:41:03 ----RA---- C:\WINDOWS\system32\nvrspl.dll

2010-07-26 16:41:02 ----RA---- C:\WINDOWS\system32\nvwrsnl.dll

2010-07-26 16:41:02 ----RA---- C:\WINDOWS\system32\nvwrsko.dll

2010-07-26 16:41:02 ----RA---- C:\WINDOWS\system32\nvrsno.dll

2010-07-26 16:41:02 ----RA---- C:\WINDOWS\system32\nvrsnl.dll

2010-07-26 16:41:02 ----RA---- C:\WINDOWS\system32\nvrsko.dll

2010-07-26 16:41:01 ----RA---- C:\WINDOWS\system32\nvwrsja.dll

2010-07-26 16:41:01 ----RA---- C:\WINDOWS\system32\nvwrsit.dll

2010-07-26 16:41:01 ----RA---- C:\WINDOWS\system32\nvrsja.dll

2010-07-26 16:41:01 ----RA---- C:\WINDOWS\system32\nvrsit.dll

2010-07-26 16:41:00 ----RA---- C:\WINDOWS\system32\nvwrshu.dll

2010-07-26 16:41:00 ----RA---- C:\WINDOWS\system32\nvwrshe.dll

2010-07-26 16:41:00 ----RA---- C:\WINDOWS\system32\nvrshu.dll

2010-07-26 16:41:00 ----RA---- C:\WINDOWS\system32\nvrshe.dll

2010-07-26 16:40:59 ----RA---- C:\WINDOWS\system32\nvwrsfr.dll

2010-07-26 16:40:59 ----RA---- C:\WINDOWS\system32\nvwrsfi.dll

2010-07-26 16:40:59 ----RA---- C:\WINDOWS\system32\nvrsfr.dll

2010-07-26 16:40:59 ----RA---- C:\WINDOWS\system32\nvrsfi.dll

2010-07-26 16:40:58 ----RA---- C:\WINDOWS\system32\nvwrsesm.dll

2010-07-26 16:40:58 ----RA---- C:\WINDOWS\system32\nvwrses.dll

2010-07-26 16:40:58 ----RA---- C:\WINDOWS\system32\nvwrseng.dll

2010-07-26 16:40:58 ----RA---- C:\WINDOWS\system32\nvrsesm.dll

2010-07-26 16:40:58 ----RA---- C:\WINDOWS\system32\nvrses.dll

2010-07-26 16:40:58 ----RA---- C:\WINDOWS\system32\nvrseng.dll

2010-07-26 16:40:57 ----RA---- C:\WINDOWS\system32\nvwrsel.dll

2010-07-26 16:40:57 ----RA---- C:\WINDOWS\system32\nvwrsde.dll

2010-07-26 16:40:57 ----RA---- C:\WINDOWS\system32\nvrsel.dll

2010-07-26 16:40:57 ----RA---- C:\WINDOWS\system32\nvrsde.dll

2010-07-26 16:40:56 ----RA---- C:\WINDOWS\system32\nvwrsda.dll

2010-07-26 16:40:56 ----RA---- C:\WINDOWS\system32\nvwrscs.dll

2010-07-26 16:40:56 ----RA---- C:\WINDOWS\system32\nvrsda.dll

2010-07-26 16:40:56 ----RA---- C:\WINDOWS\system32\nvrscs.dll

2010-07-26 16:40:55 ----RA---- C:\WINDOWS\system32\nvwrsar.dll

2010-07-26 16:40:55 ----RA---- C:\WINDOWS\system32\nvrsar.dll

2010-07-26 16:40:55 ----A---- C:\WINDOWS\system32\nwiz.exe

2010-07-26 16:40:55 ----A---- C:\WINDOWS\system32\nvwimg.dll

2010-07-26 16:40:54 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll

2010-07-26 16:40:54 ----A---- C:\WINDOWS\system32\nvshell.dll

2010-07-26 16:40:54 ----A---- C:\WINDOWS\system32\nview.dll

2010-07-26 16:40:53 ----D---- C:\WINDOWS\nview

2010-07-26 16:40:53 ----A---- C:\WINDOWS\system32\nvudisp.exe

2010-07-26 16:40:53 ----A---- C:\WINDOWS\system32\nvdspsch.exe

2010-07-26 16:40:53 ----A---- C:\WINDOWS\system32\nvappbar.exe

2010-07-26 16:40:53 ----A---- C:\WINDOWS\system32\keystone.exe

2010-07-26 16:40:52 ----A---- C:\WINDOWS\system32\nvwddi.dll

2010-07-26 16:40:52 ----A---- C:\WINDOWS\system32\nvnt4cpl.dll

2010-07-26 16:40:52 ----A---- C:\WINDOWS\system32\nvmctray.dll

2010-07-26 16:40:51 ----A---- C:\WINDOWS\system32\nvcpl.dll

2010-07-26 16:40:50 ----A---- C:\WINDOWS\system32\nvoglnt.dll

2010-07-26 16:40:48 ----A---- C:\WINDOWS\system32\nvcodins.dll

2010-07-26 16:40:48 ----A---- C:\WINDOWS\system32\nvcod.dll

2010-07-26 16:40:47 ----A---- C:\WINDOWS\system32\nvsvc32.exe

2010-07-26 16:38:42 ----D---- C:\Progra~1

2010-07-26 16:38:23 ----A---- C:\WINDOWS\system32\drivers\splitter.sys

2010-07-26 16:38:21 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys

2010-07-26 16:38:20 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys

2010-07-26 16:38:19 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys

2010-07-26 16:38:17 ----A---- C:\WINDOWS\system32\drivers\aec.sys

2010-07-26 16:38:16 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys

2010-07-26 16:38:15 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys

2010-07-26 16:38:14 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys

2010-07-26 16:38:12 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys

2010-07-26 16:38:11 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys

2010-07-26 16:38:09 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys

2010-07-26 16:38:04 ----A---- C:\WINDOWS\system32\ksuser.dll

2010-07-26 16:38:04 ----A---- C:\WINDOWS\system32\drivers\portcls.sys

2010-07-26 16:38:04 ----A---- C:\WINDOWS\system32\drivers\drmk.sys

2010-07-26 16:38:03 ----A---- C:\WINDOWS\system32\drivers\aeaudio.sys

2010-07-26 16:38:02 ----A---- C:\WINDOWS\system32\wdmioctl.dll

2010-07-26 16:38:02 ----A---- C:\WINDOWS\system32\drivers\smsens.sys

2010-07-26 16:38:01 ----A---- C:\WINDOWS\system32\SMMedia.dll

2010-07-26 16:38:00 ----A---- C:\WINDOWS\SynthCoreA.Dll

2010-07-26 16:38:00 ----A---- C:\WINDOWS\SynCor.exe

2010-07-26 16:37:59 ----A---- C:\WINDOWS\system32\Syncor11.dll

2010-07-26 16:37:59 ----A---- C:\WINDOWS\system32\S11thk32.dll

2010-07-26 16:37:58 ----A---- C:\WINDOWS\system32\SynthCore11Resources.dll

2010-07-26 16:37:55 ----D---- C:\WINDOWS\VirtualEar

2010-07-26 16:37:55 ----A---- C:\WINDOWS\system32\Audio3d.dll

2010-07-26 16:37:54 ----A---- C:\WINDOWS\system32\virtear.dll

2010-07-26 16:37:53 ----A---- C:\WINDOWS\system32\drivers\smwdm.sys

2010-07-26 16:37:53 ----A---- C:\WINDOWS\system32\a3d.dll

2010-07-26 16:37:51 ----D---- C:\Arquivos de programas\Analog Devices

2010-07-26 16:37:51 ----A---- C:\WINDOWS\system32\DSndUp.exe

2010-07-26 16:37:51 ----A---- C:\WINDOWS\system32\CleanUp.exe

2010-07-26 16:37:50 ----HD---- C:\Arquivos de programas\InstallShield Installation Information

2010-07-26 16:37:50 ----A---- C:\WINDOWS\system32\msssc.dll

2010-07-26 16:37:44 ----D---- C:\Arquivos de programas\Arquivos comuns\InstallShield

2010-07-26 16:37:18 ----A---- C:\WINDOWS\SiSport.sys

2010-07-26 16:37:18 ----A---- C:\WINDOWS\SIS_LIB.DLL

2010-07-26 16:37:17 ----A---- C:\WINDOWS\SiSUSBrg.exe

2010-07-26 16:37:16 ----RA---- C:\WINDOWS\system32\drivers\SISAGPX.SYS

2010-07-26 16:37:15 ----D---- C:\WINDOWS\system32\ReinstallBackups

2010-07-26 16:37:07 ----A---- C:\WINDOWS\IsUn0416.exe

2010-07-26 16:36:54 ----A---- C:\WINDOWS\Ascd_tmp.ini

2010-07-26 16:36:53 ----A---- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS

2010-07-26 16:34:35 ----D---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\Identities

2010-07-26 16:34:33 ----HD---- C:\Arquivos de programas\Uninstall Information

2010-07-26 16:34:27 ----SD---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\Microsoft

2010-07-26 16:34:27 ----ASH---- C:\Documents and Settings\Felipe Rodrigues\Dados de aplicativos\desktop.ini

2010-07-26 16:30:38 ----D---- C:\WINDOWS\SoftwareDistribution

2010-07-26 16:29:26 ----SD---- C:\WINDOWS\system32\Microsoft

2010-07-26 16:29:26 ----D---- C:\WINDOWS\Prefetch

2010-07-26 16:29:26 ----A---- C:\WINDOWS\SchedLgU.Txt

2010-07-26 16:25:55 ----D---- C:\WINDOWS\system32\xircom

2010-07-26 16:25:55 ----D---- C:\Arquivos de programas\xerox

2010-07-26 16:25:55 ----D---- C:\Arquivos de programas\microsoft frontpage

2010-07-26 16:25:35 ----RASH---- C:\MSDOS.SYS

2010-07-26 16:25:35 ----RASH---- C:\IO.SYS

2010-07-26 16:25:35 ----A---- C:\WINDOWS\control.ini

2010-07-26 16:25:35 ----A---- C:\CONFIG.SYS

2010-07-26 16:25:35 ----A---- C:\AUTOEXEC.BAT

2010-07-26 16:25:24 ----A---- C:\WINDOWS\OEWABLog.txt

2010-07-26 16:25:19 ----A---- C:\WINDOWS\system32\mapi32.dll

2010-07-26 16:24:17 ----SD---- C:\WINDOWS\Downloaded Program Files

2010-07-26 16:24:17 ----RD---- C:\WINDOWS\Offline Web Pages

2010-07-26 16:24:17 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest

2010-07-26 16:24:10 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest

2010-07-26 16:24:05 ----HD---- C:\Arquivos de programas\WindowsUpdate

2010-07-26 16:24:01 ----D---- C:\Arquivos de programas\Serviços on-line

2010-07-26 16:23:45 ----D---- C:\WINDOWS\system32\DirectX

2010-07-26 16:23:40 ----A---- C:\WINDOWS\system32\atrace.dll

2010-07-26 16:23:37 ----A---- C:\WINDOWS\system32\desktop.ini

2010-07-26 16:23:37 ----A---- C:\WINDOWS\desktop.ini

2010-07-26 16:23:30 ----A---- C:\WINDOWS\system32\nmevtmsg.dll

2010-07-26 16:23:29 ----A---- C:\WINDOWS\system32\acctres.dll

2010-07-26 16:23:28 ----D---- C:\Arquivos de programas\Arquivos comuns\Serviços

2010-07-26 16:23:26 ----SD---- C:\WINDOWS\Tasks

2010-07-26 16:23:26 ----A---- C:\WINDOWS\system32\icfgnt5.dll

2010-07-26 16:23:25 ----D---- C:\Arquivos de programas\Arquivos comuns\MSSoap

2010-07-26 16:23:21 ----D---- C:\WINDOWS\srchasst

2010-07-26 16:23:20 ----D---- C:\WINDOWS\system32\Macromed

2010-07-26 16:23:17 ----A---- C:\WINDOWS\system32\wuweb.dll

2010-07-26 16:23:17 ----A---- C:\WINDOWS\system32\wucltui.dll

2010-07-26 16:23:17 ----A---- C:\WINDOWS\system32\wuauserv.dll

2010-07-26 16:23:17 ----A---- C:\WINDOWS\system32\wuaueng1.dll

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\wups.dll

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\wuaueng.dll

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\wuauclt1.exe

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\wuauclt.exe

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\wuapi.dll

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\qmgrprxy.dll

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\qmgr.dll

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\bitsprx4.dll

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\bitsprx3.dll

2010-07-26 16:23:16 ----A---- C:\WINDOWS\system32\bitsprx2.dll

2010-07-26 16:23:12 ----D---- C:\Arquivos de programas\Movie Maker

2010-07-26 16:22:54 ----A---- C:\WINDOWS\system32\safrslv.dll

2010-07-26 16:22:54 ----A---- C:\WINDOWS\system32\safrdm.dll

2010-07-26 16:22:54 ----A---- C:\WINDOWS\system32\safrcdlg.dll

2010-07-26 16:22:54 ----A---- C:\WINDOWS\system32\racpldlg.dll

2010-07-26 16:22:50 ----D---- C:\WINDOWS\system32\Restore

2010-07-26 16:22:50 ----A---- C:\WINDOWS\system32\srrstr.dll

2010-07-26 16:22:50 ----A---- C:\WINDOWS\system32\fltMc.exe

2010-07-26 16:22:50 ----A---- C:\WINDOWS\system32\fltlib.dll

2010-07-26 16:22:50 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys

2010-07-26 16:22:49 ----A---- C:\WINDOWS\system32\srsvc.dll

2010-07-26 16:22:49 ----A---- C:\WINDOWS\system32\srclient.dll

2010-07-26 16:22:49 ----A---- C:\WINDOWS\system32\mnmdd.dll

2010-07-26 16:22:49 ----A---- C:\WINDOWS\system32\isrdbg32.dll

2010-07-26 16:22:49 ----A---- C:\WINDOWS\system32\ils.dll

2010-07-26 16:22:49 ----A---- C:\WINDOWS\system32\drivers\sr.sys

2010-07-26 16:22:48 ----A---- C:\WINDOWS\system32\nmmkcert.dll

2010-07-26 16:22:48 ----A---- C:\WINDOWS\system32\msconf.dll

2010-07-26 16:22:48 ----A---- C:\WINDOWS\system32\mnmsrvc.exe

2010-07-26 16:22:45 ----D---- C:\Arquivos de programas\NetMeeting

2010-07-26 16:22:45 ----A---- C:\WINDOWS\system32\msoert2.dll

2010-07-26 16:22:45 ----A---- C:\WINDOWS\system32\msoeacct.dll

2010-07-26 16:22:44 ----A---- C:\WINDOWS\system32\inetres.dll

2010-07-26 16:22:44 ----A---- C:\WINDOWS\system32\inetcomm.dll

2010-07-26 16:22:42 ----D---- C:\Arquivos de programas\Outlook Express

2010-07-26 16:22:42 ----A---- C:\WINDOWS\system32\schedsvc.dll

2010-07-26 16:22:42 ----A---- C:\WINDOWS\system32\mstinit.exe

2010-07-26 16:22:42 ----A---- C:\WINDOWS\system32\mstask.dll

2010-07-26 16:22:41 ----A---- C:\WINDOWS\system32\isign32.dll

2010-07-26 16:22:41 ----A---- C:\WINDOWS\system32\inetcfg.dll

2010-07-26 16:22:41 ----A---- C:\WINDOWS\system32\icwphbk.dll

2010-07-26 16:22:41 ----A---- C:\WINDOWS\system32\icwdial.dll

2010-07-26 16:22:36 ----D---- C:\Arquivos de programas\Arquivos comuns\System

2010-07-26 16:22:35 ----D---- C:\Arquivos de programas\Internet Explorer

2010-07-26 16:21:57 ----D---- C:\Arquivos de programas\ComPlus Applications

2010-07-26 16:21:54 ----A---- C:\WINDOWS\vbaddin.ini

2010-07-26 16:21:54 ----A---- C:\WINDOWS\vb.ini

2010-07-26 16:21:49 ----D---- C:\WINDOWS\Registration

2010-07-26 16:21:41 ----D---- C:\Arquivos de programas\Windows Media Player

2010-07-26 16:21:34 ----D---- C:\Arquivos de programas\Messenger

2010-07-26 16:21:30 ----D---- C:\Arquivos de programas\MSN Gaming Zone

2010-07-26 16:21:30 ----A---- C:\WINDOWS\system32\write.exe

2010-07-26 16:21:22 ----A---- C:\WINDOWS\system32\sndvol32.exe

2010-07-26 16:21:22 ----A---- C:\WINDOWS\system32\hticons.dll

2010-07-26 16:21:21 ----A---- C:\WINDOWS\system32\winchat.exe

2010-07-26 16:21:21 ----A---- C:\WINDOWS\system32\avwav.dll

2010-07-26 16:21:21 ----A---- C:\WINDOWS\system32\avtapi.dll

2010-07-26 16:21:21 ----A---- C:\WINDOWS\system32\avmeter.dll

2010-07-26 16:21:14 ----A---- C:\WINDOWS\system32\getuname.dll

2010-07-26 16:21:14 ----A---- C:\WINDOWS\system32\charmap.exe

2010-07-26 16:21:13 ----A---- C:\WINDOWS\system32\winmine.exe

2010-07-26 16:21:13 ----A---- C:\WINDOWS\system32\sol.exe

2010-07-26 16:21:13 ----A---- C:\WINDOWS\system32\mshearts.exe

2010-07-26 16:21:13 ----A---- C:\WINDOWS\system32\calc.exe

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\usrlogon.cmd

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\tsshutdn.exe

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\tslabels.ini

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\tskill.exe

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\tsdiscon.exe

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\tscon.exe

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\shadow.exe

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\rwinsta.exe

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\reset.exe

2010-07-26 16:21:12 ----A---- C:\WINDOWS\system32\freecell.exe

2010-07-26 16:21:11 ----A---- C:\WINDOWS\system32\regini.exe

2010-07-26 16:21:11 ----A---- C:\WINDOWS\system32\rdpcfgex.dll

2010-07-26 16:21:11 ----A---- C:\WINDOWS\system32\qwinsta.exe

2010-07-26 16:21:11 ----A---- C:\WINDOWS\system32\qappsrv.exe

2010-07-26 16:21:11 ----A---- C:\WINDOWS\system32\msg.exe

2010-07-26 16:21:11 ----A---- C:\WINDOWS\system32\msdtcprf.ini

2010-07-26 16:21:11 ----A---- C:\WINDOWS\system32\logoff.exe

2010-07-26 16:21:11 ----A---- C:\WINDOWS\system32\cdmodem.dll

2010-07-26 16:21:05 ----A---- C:\WINDOWS\system32\wmimgmt.msc

2010-07-26 16:21:04 ----A---- C:\WINDOWS\system32\sndrec32.exe

2010-07-26 16:21:04 ----A---- C:\WINDOWS\system32\mplay32.exe

2010-07-26 16:21:04 ----A---- C:\WINDOWS\system32\accwiz.exe

2010-07-26 16:21:03 ----D---- C:\Arquivos de programas\Windows NT

2010-07-26 16:21:03 ----A---- C:\WINDOWS\system32\mspaint.exe

2010-07-26 16:21:03 ----A---- C:\WINDOWS\system32\hypertrm.dll

2010-07-26 16:21:03 ----A---- C:\WINDOWS\system32\clipbrd.exe

2010-07-26 16:21:02 ----A---- C:\WINDOWS\system32\spider.exe

2010-07-26 16:21:02 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys

2010-07-26 16:21:01 ----A---- C:\WINDOWS\system32\tsgqec.dll

2010-07-26 16:21:01 ----A---- C:\WINDOWS\system32\tscfgwmi.dll

2010-07-26 16:21:01 ----A---- C:\WINDOWS\system32\rhttpaa.dll

2010-07-26 16:21:01 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys

2010-07-26 16:21:01 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys

2010-07-26 16:21:01 ----A---- C:\WINDOWS\system32\aaclient.dll

2010-07-26 16:21:00 ----A---- C:\WINDOWS\system32\remotepg.dll

2010-07-26 16:21:00 ----A---- C:\WINDOWS\system32\rdsaddin.exe

2010-07-26 16:21:00 ----A---- C:\WINDOWS\system32\mstscax.dll

2010-07-26 16:21:00 ----A---- C:\WINDOWS\system32\mstsc.exe

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\termsrv.dll

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\sessmgr.exe

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\rdshost.exe

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\rdpwsx.dll

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\rdpsnd.dll

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\rdpclip.exe

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\rdchost.dll

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\qprocess.exe

2010-07-26 16:20:59 ----A---- C:\WINDOWS\system32\icaapi.dll

2010-07-26 16:20:58 ----D---- C:\WINDOWS\system32\MsDtc

2010-07-26 16:20:58 ----A---- C:\WINDOWS\system32\mtxoci.dll

2010-07-26 16:20:58 ----A---- C:\WINDOWS\system32\msdtcuiu.dll

2010-07-26 16:20:58 ----A---- C:\WINDOWS\system32\msdtctm.dll

2010-07-26 16:20:58 ----A---- C:\WINDOWS\system32\msdtcprx.dll

2010-07-26 16:20:58 ----A---- C:\WINDOWS\system32\cfgbkend.dll

2010-07-26 16:20:57 ----A---- C:\WINDOWS\system32\xolehlp.dll

2010-07-26 16:20:57 ----A---- C:\WINDOWS\system32\msdtclog.dll

2010-07-26 16:20:57 ----A---- C:\WINDOWS\system32\msdtc.exe

2010-07-26 16:20:56 ----D---- C:\WINDOWS\system32\Com

2010-07-26 16:20:56 ----A---- C:\WINDOWS\system32\stclient.dll

2010-07-26 16:20:56 ----A---- C:\WINDOWS\system32\mtxlegih.dll

2010-07-26 16:20:56 ----A---- C:\WINDOWS\system32\mtxex.dll

2010-07-26 16:20:56 ----A---- C:\WINDOWS\system32\mtxdm.dll

2010-07-26 16:20:56 ----A---- C:\WINDOWS\system32\dcomcnfg.exe

2010-07-26 16:20:56 ----A---- C:\WINDOWS\system32\comrepl.dll

2010-07-26 16:20:56 ----A---- C:\WINDOWS\system32\comaddin.dll

2010-07-26 16:20:56 ----A---- C:\WINDOWS\system32\colbact.dll

2010-07-26 16:20:55 ----A---- C:\WINDOWS\system32\comsvcs.dll

2010-07-26 16:20:55 ----A---- C:\WINDOWS\system32\clbcatex.dll

2010-07-26 16:20:55 ----A---- C:\WINDOWS\system32\catsrvut.dll

2010-07-26 16:20:55 ----A---- C:\WINDOWS\system32\catsrvps.dll

2010-07-26 16:20:55 ----A---- C:\WINDOWS\system32\catsrv.dll

2010-07-26 16:20:54 ----A---- C:\WINDOWS\system32\comuid.dll

2010-07-26 16:20:54 ----A---- C:\WINDOWS\system32\comsnap.dll

2010-07-26 16:20:54 ----A---- C:\WINDOWS\system32\clbcatq.dll

2010-07-26 16:20:48 ----A---- C:\WINDOWS\system32\servdeps.dll

2010-07-26 16:20:48 ----A---- C:\WINDOWS\system32\mmfutil.dll

2010-07-26 16:20:48 ----A---- C:\WINDOWS\system32\licwmi.dll

2010-07-26 16:20:47 ----A---- C:\WINDOWS\system32\cmprops.dll

2010-07-26 16:20:44 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

2010-07-26 16:20:43 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

2010-07-26 13:15:19 ----A---- C:\WINDOWS\system32\h323log.txt

2010-07-26 13:09:46 ----A---- C:\WINDOWS\system32\drivers\audstub.sys

2010-07-26 13:09:18 ----A---- C:\WINDOWS\system32\drivers\redbook.sys

2010-07-26 13:09:13 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys

2010-07-26 13:09:12 ----A---- C:\WINDOWS\system32\nv4_disp.dll

2010-07-26 13:08:56 ----A---- C:\WINDOWS\system32\drivers\gameenum.sys

2010-07-26 13:08:44 ----A---- C:\WINDOWS\system32\drivers\UAGP35.SYS

2010-07-26 13:08:38 ----RA---- C:\WINDOWS\system32\drivers\sisnic.sys

2010-07-26 13:08:31 ----A---- C:\WINDOWS\system32\usbui.dll

2010-07-26 13:07:25 ----A---- C:\WINDOWS\imsins.BAK

2010-07-26 13:07:22 ----SHD---- C:\WINDOWS\Installer

2010-07-26 13:07:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2010-07-26 13:07:21 ----D---- C:\Arquivos de programas\Arquivos comuns\ODBC

2010-07-26 13:07:21 ----A---- C:\WINDOWS\ODBCINST.INI

2010-07-26 13:07:17 ----D---- C:\Arquivos de programas\Arquivos comuns\SpeechEngines

2010-07-26 13:07:17 ----D---- C:\Arquivos de programas\Arquivos comuns\Microsoft Shared

2010-07-26 13:07:16 ----D---- C:\Arquivos de programas\Arquivos comuns

2010-07-26 13:07:16 ----D---- C:\Arquivos de programas

2010-07-26 13:07:12 ----RA---- C:\WINDOWS\system32\kbdtuq.dll

2010-07-26 13:07:12 ----RA---- C:\WINDOWS\system32\kbdtuf.dll

2010-07-26 13:07:12 ----RA---- C:\WINDOWS\system32\kbdazel.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdycc.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbduzb.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdur.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdtat.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdru1.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdru.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdmon.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdkyr.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdkaz.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdbu.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdblr.dll

2010-07-26 13:07:10 ----RA---- C:\WINDOWS\system32\kbdaze.dll

2010-07-26 13:07:08 ----RA---- C:\WINDOWS\system32\kbdhept.dll

2010-07-26 13:07:08 ----RA---- C:\WINDOWS\system32\kbdhela3.dll

2010-07-26 13:07:08 ----RA---- C:\WINDOWS\system32\kbdhela2.dll

2010-07-26 13:07:08 ----RA---- C:\WINDOWS\system32\kbdhe319.dll

2010-07-26 13:07:08 ----RA---- C:\WINDOWS\system32\kbdhe220.dll

2010-07-26 13:07:08 ----RA---- C:\WINDOWS\system32\kbdhe.dll

2010-07-26 13:07:08 ----RA---- C:\WINDOWS\system32\kbdgkl.dll

2010-07-26 13:07:06 ----RA---- C:\WINDOWS\system32\kbdlv1.dll

2010-07-26 13:07:06 ----RA---- C:\WINDOWS\system32\kbdlv.dll

2010-07-26 13:07:06 ----RA---- C:\WINDOWS\system32\kbdlt1.dll

2010-07-26 13:07:06 ----RA---- C:\WINDOWS\system32\kbdlt.dll

2010-07-26 13:07:06 ----RA---- C:\WINDOWS\system32\kbdest.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdycl.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdsl1.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdsl.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdro.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdpl1.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdpl.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdhu1.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdhu.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdcz2.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdcz1.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdcz.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\kbdcr.dll

2010-07-26 13:07:04 ----RA---- C:\WINDOWS\system32\KBDAL.DLL

2010-07-26 13:07:02 ----A---- C:\WINDOWS\system32\irclass.dll

2010-07-26 13:07:01 ----A---- C:\WINDOWS\system32\spxcoins.dll

2010-07-26 13:07:01 ----A---- C:\WINDOWS\system32\EqnClass.Dll

2010-07-26 13:07:01 ----A---- C:\WINDOWS\system32\dgsetup.dll

2010-07-26 13:07:01 ----A---- C:\WINDOWS\system32\dgrpsetu.dll

2010-07-26 13:06:59 ----A---- C:\WINDOWS\TASKMAN.EXE

2010-07-26 13:06:58 ----N---- C:\WINDOWS\system32\CONFIG.TMP

2010-07-26 13:06:58 ----A---- C:\WINDOWS\system32\drivers\irenum.sys

2010-07-26 13:06:58 ----A---- C:\WINDOWS\system32\batt.dll

2010-07-26 13:06:58 ----A---- C:\WINDOWS\NOTEPAD.EXE

2010-07-26 13:06:57 ----A---- C:\WINDOWS\system32\storprop.dll

2010-07-26 13:06:48 ----ASH---- C:\Documents and Settings\All Users\Dados de aplicativos\desktop.ini

2010-07-26 13:06:44 ----RA---- C:\WINDOWS\SET8.tmp

2010-07-26 13:06:41 ----RA---- C:\WINDOWS\SET4.tmp

2010-07-26 13:06:39 ----RA---- C:\WINDOWS\SET3.tmp

2010-07-26 13:06:35 ----D---- C:\WINDOWS\system32\CatRoot2

2010-07-26 13:06:35 ----D---- C:\WINDOWS\system32\CatRoot

2010-07-26 13:06:29 ----SD---- C:\Documents and Settings\All Users\Dados de aplicativos\Microsoft

2010-07-26 13:06:08 ----A---- C:\WINDOWS\setuplog.txt

2010-07-26 13:06:04 ----D---- C:\Documents and Settings

2010-07-26 13:06:03 ----SHD---- C:\System Volume Information

2010-07-26 13:05:07 ----SH---- C:\boot.ini

2010-07-26 12:59:01 ----RSHDC---- C:\WINDOWS\system32\dllcache

2010-07-26 12:59:01 ----RSD---- C:\WINDOWS\Fonts

2010-07-26 12:59:01 ----RD---- C:\WINDOWS\Web

2010-07-26 12:59:01 ----HD---- C:\WINDOWS\inf

2010-07-26 12:59:01 ----D---- C:\WINDOWS\WinSxS

2010-07-26 12:59:01 ----D---- C:\WINDOWS\twain_32

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Temp

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\wins

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\wbem

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\usmt

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\spool

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\ShellExt

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\Setup

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\ras

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\pt-BR

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\oobe

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\npp

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\mui

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\inetsrv

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\IME

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\icsxml

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\ias

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\export

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\drivers\etc

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\drivers\disdn

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\drivers

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\dhcp

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\config

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\3com_dmi

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\3076

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\2052

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1054

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1046

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1042

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1041

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1037

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1033

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1031

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1028

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32\1025

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system32

2010-07-26 12:59:01 ----D---- C:\WINDOWS\system

2010-07-26 12:59:01 ----D---- C:\WINDOWS\security

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Resources

2010-07-26 12:59:01 ----D---- C:\WINDOWS\repair

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Provisioning

2010-07-26 12:59:01 ----D---- C:\WINDOWS\PeerNet

2010-07-26 12:59:01 ----D---- C:\WINDOWS\pchealth

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Network Diagnostic

2010-07-26 12:59:01 ----D---- C:\WINDOWS\mui

2010-07-26 12:59:01 ----D---- C:\WINDOWS\msapps

2010-07-26 12:59:01 ----D---- C:\WINDOWS\msagent

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Media

2010-07-26 12:59:01 ----D---- C:\WINDOWS\L2Schemas

2010-07-26 12:59:01 ----D---- C:\WINDOWS\java

2010-07-26 12:59:01 ----D---- C:\WINDOWS\ime

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Help

2010-07-26 12:59:01 ----D---- C:\WINDOWS\ehome

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Driver Cache

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Debug

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Cursors

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Connection Wizard

2010-07-26 12:59:01 ----D---- C:\WINDOWS\Config

2010-07-26 12:59:01 ----D---- C:\WINDOWS\AppPatch

2010-07-26 12:59:01 ----D---- C:\WINDOWS\addins

2010-07-26 12:59:01 ----D---- C:\WINDOWS

2010-07-26 12:59:01 ----ASH---- C:\pagefile.sys

 

======List of files/folders modified in the last 1 months======

 

2010-07-27 20:22:06 ----A---- C:\WINDOWS\win.ini

2010-07-27 20:22:06 ----A---- C:\WINDOWS\system.ini

2010-07-27 03:29:57 ----A---- C:\WINDOWS\system32\shell32.dll

2010-07-26 16:25:06 ----ASH---- C:\WINDOWS\fonts\desktop.ini

 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R0 RecAgent;RecAgent; C:\WINDOWS\system32\DRIVERS\RecAgent.sys [2008-04-13 13776]

R0 SISAGP;SiS AGP Filter; C:\WINDOWS\system32\DRIVERS\SISAGPX.sys [2003-07-17 36992]

R0 uagp35;Filtro Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-13 44672]

R1 avgio;avgio; \??\C:\Arquivos de programas\Avira\AntiVir Desktop\avgio.sys []

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]

R1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys [2007-02-12 31360]

R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys [2007-02-12 33792]

R1 intelppm;Driver de Processador Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]

R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]

R1 Tcpip6;Microsoft IPv6 Protocol Driver; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]

R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]

R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]

R3 MODEMCSA;Dispositivo de filtro de fluxo unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]

R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys [2008-04-13 126686]

R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-05-02 6554496]

R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2003-08-28 32256]

R3 Slntamr;NetoDragon AMR_PCI Driver; C:\WINDOWS\system32\DRIVERS\slntamr.sys [2008-04-13 404990]

R3 SlWdmSup;SlWdmSup; C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys [2008-04-13 13240]

R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-08-29 578304]

R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-14 12288]

R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys [2007-02-12 112384]

S3 HidUsb;Driver de classe HID da Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-22 51088]

S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-22 16496]

S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-22 21744]

S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []

S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-05 12288]

S3 Mtlstrm;Mtlstrm; C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys [2008-04-13 1309184]

S3 SlNtHal;SlNtHal; C:\WINDOWS\system32\DRIVERS\Slnthal.sys [2008-04-13 95424]

S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]

S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]

S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R2 6to4;Serviço auxiliar IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

R2 AntiVirSchedulerService;Avira AntiVir Programador; C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]

R2 AntiVirService;Avira AntiVir Guard; C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]

R2 InCDsrv;InCD Helper; C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe [2007-02-12 924160]

R2 MDM;Machine Debug Manager; C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]

R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-05-02 159812]

R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2004-08-24 57344]

R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]

S3 aspnet_state;Serviço de estado do ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]

S3 gusvc;Google Updater Service; C:\Arquivos de programas\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-22 136120]

S3 NBService;NBService; C:\Arquivos de programas\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-05 774144]

S3 NMIndexingService;NMIndexingService; C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe [2006-12-23 262144]

S3 ose;Office Source Engine; C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]

S3 WMPNetworkSvc;Serviço de Compartilhamento de Rede do Windows Media Player; C:\Arquivos de programas\Windows Media Player\WMPNetwk.exe [2006-11-02 914944]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

 

-----------------EOF-----------------

 

Tinha que estar com o cartao plugado?

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

1.

*Delete o RSIT e a pasta C:\rsit

 

2.

*Abra o Windows explorer

*Conecte o pen drive no PC e mantenha a tecla [shift] apertada até que o pen drive seja reconhecido.

 

3.

*Desative temporariamente seu antivírus

 

Clique com o botão direito do mouse no ícone do Avira ao lado do relógio

Clique na opção "Antivir Guard enable".

*Baixe o USBFix e salve-o no desktop

*Execute o UsbFix

*Clique em [Pesquisa] e aguarde o término

*Remova o Pendrive

*Cole o relatório criado em C:\UsbFix.txt

Compartilhar este post

Link para o post
Compartilhar em outros sites

Felipe7l    0

Felipe7l
Postado

############################## | UsbFix 7.020 | [Pesquisa]

 

Usuário: Felipe Rodrigues (Administrador) # FELIPE [ ]

Atualizado em 12/08/10 por El Desaparecido / C_XX

Começou em 21:46:37 | 17/08/2010

Site: http://pagesperso-orange.fr/NosTools/index.html

Contato: FindyKill.Contact@gmail.com

 

CPU: Intel® Pentium® 4 CPU 3.20GHz

CPU 2: Intel® Pentium® 4 CPU 3.20GHz

Microsoft Windows XP Professional (5.1.2600 32-Bit) # Service Pack 3

Internet Explorer 8.0.6001.18702

 

Windows Firewall: Habilitado

Antivirus: AntiVir Desktop 9.0.1.32 [(!) Disabled | Updated]

RAM -> 512 Mb

C:\ (%systemdrive%) -> Disco fixo # 20 Gb (2 Mb livre - 12%) [] # NTFS

D:\ -> Disco fixo # 92 Gb (565 Mb livre - 1%) [DADOS] # NTFS

E:\ -> CD-ROM

F:\ -> Disco removível # 4 Gb (115 Mb livre - 3%) [Felipe] # FAT32

 

################## | Ficheiros # pastas infeciosos |

 

Presente ! F:\levic.exe

Presente ! F:\levic.scr

Presente ! F:\autorun.inf

Presente ! F:\Documents.lnk

Presente ! F:\Music.lnk

Presente ! F:\New Folder.lnk

Presente ! F:\Passwords.lnk

Presente ! F:\Pictures.lnk

Presente ! F:\Videos.lnk

Presente ! F:\Video.lnk

Presente ! F:\RECYCLER32

 

################## | Registro |

 

 

################## | Mountpoints2 |

 

HKCU\.\.\.\.\Explorer\MountPoints2\{a3f2676c-9a6a-11df-bb82-001fd0f11875}

Shell\AutoRun\Command = F:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{a3f2676f-9a6a-11df-bb82-001fd0f11875}

Shell\AutoRun\Command = F:\AutoRun.exe

 

HKCU\.\.\.\.\Explorer\MountPoints2\{a7e9ded6-a6f9-11df-bb9f-001fd0f11875}

Shell\AutoRun\Command = F:\pbudsara.exe

Shell\open\Command = F:\pbudsara.exe

 

 

################## | Vaccin |

 

F:\Autorun.inf -> Folder criado por Panda USB Vaccine

 

################## | E.O.F |

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

Acredito que possas perder estas pastas do pen drive....

 

Desejas continuar?

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

Disse tudo...

 

*Conecte novamente o Pendrive no PC da mesma forma que descrevi antes

*Execute o UsbFix

*Clique em [supressão] e aguarde o término

*Remova o Pendrive

*Cole o relatório criado em C:\UsbFix.txt

Compartilhar este post

Link para o post
Compartilhar em outros sites

Felipe7l    0

Felipe7l
Postado

############################## | UsbFix 7.020 | [supressão]

 

Usuário: Felipe Rodrigues (Administrador) # FELIPE [ ]

Atualizado em 12/08/10 por El Desaparecido / C_XX

Começou em 14:38:29 | 18/08/2010

Site: http://pagesperso-orange.fr/NosTools/index.html

Contato: FindyKill.Contact@gmail.com

 

CPU: Intel® Pentium® 4 CPU 3.20GHz

CPU 2: Intel® Pentium® 4 CPU 3.20GHz

Microsoft Windows XP Professional (5.1.2600 32-Bit) # Service Pack 3

Internet Explorer 8.0.6001.18702

 

Windows Firewall: Habilitado

Antivirus: AntiVir Desktop 9.0.1.32 [Enabled | Updated]

RAM -> 512 Mb

C:\ (%systemdrive%) -> Disco fixo # 20 Gb (2 Mb livre - 12%) [] # NTFS

D:\ -> Disco fixo # 92 Gb (565 Mb livre - 1%) [DADOS] # NTFS

E:\ -> CD-ROM

F:\ -> Disco removível # 4 Gb (115 Mb livre - 3%) [Felipe] # FAT32

 

################## | Ficheiros # pastas infeciosos |

 

Supprimido ! F:\levic.exe

Supprimido ! F:\levic.scr

Não supprimido ! F:\autorun.inf

Supprimido ! F:\Documents.lnk

Supprimido ! F:\Music.lnk

Supprimido ! F:\New Folder.lnk

Supprimido ! F:\Passwords.lnk

Supprimido ! F:\Pictures.lnk

Supprimido ! F:\Videos.lnk

Supprimido ! F:\Video.lnk

Supprimido ! F:\RECYCLER32

 

################## | Registro |

 

 

################## | Mountpoints2 |

 

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{a3f2676c-9a6a-11df-bb82-001fd0f11875}

Supprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{a7e9ded6-a6f9-11df-bb9f-001fd0f11875}

 

################## | Listing |

 

[17/08/2010 - 18:43:24 | D ] C:\Arquivos de programas

[26/07/2010 - 16:25:35 | A | 0] C:\AUTOEXEC.BAT

[27/07/2010 - 20:22:06 | SH | 211] C:\boot.ini

[14/04/2008 - 09:00:00 | RASH | 4952] C:\Bootfont.bin

[02/08/2010 - 21:47:10 | HD ] C:\Config.Msi

[26/07/2010 - 16:25:35 | A | 0] C:\CONFIG.SYS

[26/07/2010 - 16:34:27 | D ] C:\Documents and Settings

[06/02/2004 - 17:20:46 | RA | 16384] C:\hpqimgrc.resources.dll

[26/07/2010 - 16:25:35 | RASH | 0] C:\IO.SYS

[26/07/2010 - 16:25:35 | RASH | 0] C:\MSDOS.SYS

[14/04/2008 - 09:00:00 | RASH | 47564] C:\NTDETECT.COM

[14/04/2008 - 09:00:00 | RASH | 251696] C:\ntldr

[26/07/2010 - 17:08:24 | D ] C:\NVIDIA

[18/08/2010 - 14:29:55 | ASH | 805306368] C:\pagefile.sys

[26/07/2010 - 17:07:22 | D ] C:\Program Files

[26/07/2010 - 16:38:42 | D ] C:\Progra~1

[18/08/2010 - 14:41:24 | SHD ] C:\RECYCLER

[26/07/2010 - 16:30:38 | SHD ] C:\System Volume Information

[29/07/2010 - 11:15:16 | D ] C:\The Book Of Eli.2010.BdRip.Xvid {1337x}-Noir

[18/08/2010 - 14:41:25 | D ] C:\UsbFix

[18/08/2010 - 14:41:25 | A | 1231] C:\UsbFix.txt

[10/08/2010 - 22:36:04 | D ] C:\WINDOWS

[09/06/2010 - 22:50:19 | D ] D:\333d92130049bcad831e4141

[25/10/2001 - 14:11:14 | A | 34944] D:\actionj.ttf

[01/01/2002 - 17:30:20 | A | 0] D:\AUTOEXEC.BAT

[26/07/2010 - 16:45:28 | D ] D:\Backup

[21/05/2010 - 09:29:33 | D ] D:\Backup C

[01/04/2010 - 22:25:28 | D ] D:\BywifiSave

[17/08/2010 - 17:09:16 | RD ] D:\Carolina

[03/07/2010 - 15:14:01 | D ] D:\CD

[01/01/2002 - 17:30:20 | A | 0] D:\CONFIG.SYS

[01/01/2002 - 17:30:20 | RASH | 0] D:\IO.SYS

[11/05/2010 - 18:59:42 | RD ] D:\MEUS DOCUMENTOS

[05/08/2010 - 17:00:47 | RD ] D:\Minhas músicas

[01/01/2002 - 17:30:20 | RASH | 0] D:\MSDOS.SYS

[15/08/2010 - 13:36:16 | D ] D:\Musicas

[18/08/2010 - 14:41:24 | SHD ] D:\RECYCLER

[10/07/2010 - 10:59:27 | D ] D:\Seriados

[14/07/2010 - 06:50:21 | A | 2886] D:\Seven Loader 7 Remove Wat 2.2.5 + Ghost Mode Infos.rar.torrent

[30/07/2010 - 20:42:59 | RD ] D:\Sony DSC S-600

[12/05/2010 - 15:21:13 | SHD ] D:\System Volume Information

[14/07/2010 - 07:09:08 | D ] D:\Torrents

[31/05/2010 - 00:12:40 | RD ] E:\AC DC

[11/11/2009 - 13:42:35 | RD ] E:\AC-DC - Electrified Toronto DVD 2009-LzY

[12/03/2009 - 16:38:11 | RD ] E:\ACDC

[21/05/2010 - 23:22:43 | RD ] E:\AETH9

[14/06/2010 - 20:40:10 | RD ] E:\Accept

[11/11/2009 - 22:20:58 | RD ] E:\Aerosmith

[07/11/2009 - 13:26:44 | RD ] E:\Anastacia

[12/11/2009 - 10:28:05 | RD ] E:\Aphex Twins

[07/02/2009 - 16:15:20 | RD ] E:\Appaloosa Soundtrack

[02/02/2009 - 00:45:45 | RD ] E:\Armandinho

[07/11/2009 - 14:06:09 | RD ] E:\Ashlee Simpson

[12/11/2009 - 11:08:03 | RD ] E:\Ashley Tisdale

[12/11/2009 - 11:16:15 | RD ] E:\AudioSlave

[12/11/2009 - 12:18:57 | RD ] E:\Avril Lavigne

[12/11/2009 - 12:32:12 | RD ] E:\Badfinger

[12/11/2009 - 12:40:16 | RD ] E:\Barão Vermelho

[12/11/2009 - 12:46:42 | RD ] E:\Basshunter

[12/11/2009 - 13:28:12 | RD ] E:\Bebel Gilberto

[21/01/2009 - 12:41:47 | RD ] E:\Bee Gees

[02/02/2009 - 00:53:43 | RD ] E:\Benny Benassi

[04/01/2009 - 11:38:09 | RD ] E:\Best of Adrenalina Remixes 2008 - Rede Transamérica

[02/02/2009 - 00:55:00 | RD ] E:\Beth Orton

[31/05/2010 - 00:40:07 | RD ] E:\Beyonce

[02/02/2009 - 00:55:23 | RD ] E:\Billy Corgan

[06/02/2009 - 15:51:26 | RD ] E:\Black Eyed Peas

[17/02/2009 - 15:59:13 | RD ] E:\Blind Melon

[02/02/2009 - 00:56:13 | RD ] E:\Blink 182

[31/05/2010 - 00:40:34 | RD ] E:\Bob Dylan - Together Through Life

[14/02/2009 - 19:34:48 | RD ] E:\Bob Marley

[14/02/2009 - 19:59:42 | RD ] E:\Bob Sinclair

[01/06/2010 - 20:30:26 | RD ] E:\Bon Jovi

[02/02/2009 - 00:44:34 | RD ] E:\Bossa cuca nova

[31/05/2010 - 00:41:12 | RD ] E:\Britney Spears

[07/02/2009 - 00:06:53 | RD ] E:\Bruce Dickinson

[27/11/2009 - 00:53:09 | RD ] E:\Bruce Springsteen

[07/06/2009 - 22:13:39 | RD ] E:\Bush - 1996 - Razorblade Suitcase

[19/04/2009 - 22:53:51 | RD ] E:\Capital Inicial

[02/02/2009 - 01:01:22 | RD ] E:\Cascada

[02/02/2009 - 01:01:55 | RD ] E:\Cassia Eller

[02/02/2009 - 01:02:19 | RD ] E:\Celine Dion

[02/02/2009 - 01:03:04 | RD ] E:\Chemical Brothers

[03/01/2010 - 13:00:57 | RD ] E:\Lie To Me

[12/09/2009 - 21:33:34 | SHD ] F:\RECYCLER

[25/10/2009 - 14:45:12 | SHD ] F:\FOUND.000

[04/02/2010 - 14:52:12 | SHD ] F:\FOUND.001

[02/07/2010 - 19:26:18 | SHD ] F:\CD

[03/07/2010 - 14:34:38 | N | 0] F:\352948021606375.ndif

[09/07/2010 - 00:06:44 | SHD ] F:\Dj Budu Dj Kilesse - Funk Mania (2010)

[09/07/2010 - 00:09:00 | SHD ] F:\Mega Dance Live vol 2

[22/07/2010 - 13:59:58 | A | 289] F:\CD.lnk

[22/07/2010 - 13:59:58 | A | 289] F:\Dj Budu Dj Kilesse - Funk Mania (2010).lnk

[22/07/2010 - 13:59:58 | A | 289] F:\Mega Dance Live vol 2.lnk

[22/07/2010 - 13:59:58 | A | 289] F:\Imagens.lnk

[22/07/2010 - 14:00:00 | A | 289] F:\Jogos.lnk

[22/07/2010 - 13:50:50 | | 131] F:\autorun.inf

[22/07/2010 - 13:51:10 | SHD ] F:\Playlists

[22/07/2010 - 13:59:58 | A | 289] F:\Playlists.lnk

[22/07/2010 - 13:55:12 | SH | 70] F:\Bin

[22/07/2010 - 13:55:12 | SH | 70] F:\Driver

[22/07/2010 - 13:55:12 | SH | 70] F:\MSOCache

[22/07/2010 - 13:55:12 | SH | 70] F:\Recycled

[22/07/2010 - 13:55:12 | SH | 70] F:\Restore

[22/07/2010 - 13:55:12 | SH | 70] F:\System Volume Information

[09/08/2010 - 16:42:42 | AD ] F:\Videoclipes

[22/07/2010 - 13:59:56 | A | 289] F:\RECYCLER.lnk

[22/07/2010 - 13:59:58 | A | 289] F:\FOUND.000.lnk

[22/07/2010 - 13:59:58 | A | 289] F:\FOUND.001.lnk

[22/07/2010 - 13:59:58 | A | 289] F:\Others.lnk

[22/07/2010 - 13:59:58 | A | 289] F:\RECYCLER32.lnk

[27/01/2010 - 16:13:58 | ASH | 135168] F:\WMLicense.dat

[23/04/2009 - 23:35:04 | SHD ] F:\Videos

[27/04/2009 - 21:54:08 | SHD ] F:\Imagens

[23/04/2009 - 23:35:20 | SHD ] F:\Others

[23/04/2009 - 23:36:42 | SHD ] F:\Music

[18/03/2010 - 01:08:46 | SHD ] F:\Jogos

 

################## | Vaccin |

 

C:\Autorun.inf -> Folder criado por UsbFix (El Desaparecido & C_XX)

D:\Autorun.inf -> Folder criado por UsbFix (El Desaparecido & C_XX)

F:\Autorun.inf -> Folder criado por Panda USB Vaccine

 

################## | Upload |

 

Favor enviar o arquivo: C:\UsbFix_Upload_Me_FELIPE.zip

http://chiquitine.changelog.fr/Sample/Upload.php

Obrigado pela sua contribuição.

 

################## | E.O.F |

 

E agora? posso formatar o cartao que nao vai voltar as paradas das pastas transformadas em atalhos nao?

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

1.

Favor enviar o arquivo: C:\UsbFix_Upload_Me_FELIPE.zip para o link abaixo

http://chiquitine.changelog.fr/Sample/Upload.php

Obrigado pela sua contribuição.

 

2.

*Execute o UsbFix

*Clique em [uninstall]

 

3.

Conecte o pendrive no PC

 

Informe se alguma pasta já tem acesso. Apenas visualize.

Compartilhar este post

Link para o post
Compartilhar em outros sites

Felipe7l    0

Felipe7l
Postado

Nao tinha acesso a nenhuma pasta...

ai eu formatei o pen drive, botei o usbfix pra pesquisar de novo e no log nao tinha nada...

acho q ta resolvido!

Obrigado!

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

PROBLEMA RESOLVIDO!

 

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.

Compartilhar este post

Link para o post
Compartilhar em outros sites
Ir para a lista de tópicos Tópicos Resolvidos (Seguranca & Malwares)
×

Informação importante

Ao usar o fórum, você concorda com nossos Termos e condições.

  Aceito