[Resolvido] &nbspNão consigo instalar antivirus

MuriloAkils · Dezembro 2, 2010

Ola sou novo no forum mais ja tenho minha duvida eu peço a voces que me ajudem meu pc esta com virus quando baixo algum antivirus tipo avast e avg da erro na instalaçao alguem sabe oque é ?

aparece um erro bem assim ''Um erro foi encontrado clike aki para mais enformaçoes algo assim...''

Me ajudem por favor eu preciso de ajuda nem instala meus jogos eu consigo direito, e nem na hora de entrar o gameguard dos jogos detecta virus e o gameguard e deletado e nao consigo entrar no jogo ta f*** me ajudem..

João Prado · Dezembro 2, 2010

Olá MuriloAkils, seja bem vindo ao fórum.

Para que tenha uma boa participação em nossa comunidade sugiro que leia'>http://forum.imasters.com.br/index.php?app=core&module=help"]leia as regras do fórum.

Estou movendo seu tópico para a área de Segurança & Malwares. Poste um log do HiJackThis aqui para que o pessoal possa te ajudar.

Caso não saiba como proceder o pessoal da área irá te auxiliar.

wings · Dezembro 3, 2010

Olá MuriloAkils

Leia a regra 2 da sala de segurança.

MuriloAkils · Dezembro 4, 2010

Nhora de usar o hijack eu tenho que ta com o avg aberto ?

wings · Dezembro 4, 2010

Nhora de usar o hijack eu tenho que ta com o avg aberto ?

1. Você leu o tópico?...Há algo descrito sobre antivírus?

2. Como vai deixar o AVG aberto? Você citou antes:

...quando baixo algum antivirus tipo avast e avg da erro na instalaçao..

3. Logo conclui-se que seu problema foi resolvido. Ou seja, conseguiu instalar o antivírus.

MuriloAkils · Dezembro 4, 2010

mano eu baixo o anti virus nahora de instalar sempre da erro em qualker um ai no avg aparece la salvar log e pq eu vi umas pessoas resolvendo o problema pelo log sera que tu pode me ajuda na minha situaçao

wings · Dezembro 4, 2010

*Baixe o HijackThis e salve-o no desktop

*Execute o HijackThis

*Clique [Do a system scan and save a logfile].

*Cole o relatório

MuriloAkils · Dezembro 4, 2010

ogfile of Trend Micro HijackThis v2.0.4

Scan saved at 15:02:16, on 4/12/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\WINDOWS\system32\igfxsrvc.exe

D:\Arquivos de programas\LogMeIn Hamachi\hamachi-2-ui.exe

C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe

C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\DAEMON Tools Lite\daemon.exe

C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe

D:\Arquivos de programas\Ares\Ares.exe

C:\Documents and Settings\murilo\nuoiv.exe

D:\Arquivos de programas\Orbitdownloader\orbitdm.exe

D:\Arquivos de programas\LogMeIn Hamachi\hamachi-2.exe

C:\WINDOWS\system32\nlssrv32.exe

C:\Documents and Settings\All Users\Dados de aplicativos\QueryExplorer\queryexplorer119.exe

D:\Arquivos de programas\Orbitdownloader\orbitnet.exe

C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexStoreSvr.exe

C:\Arquivos de programas\QueryExplorer\queryexplorer.exe

C:\WINDOWS\System32\svchost.exe

C:\DOCUME~1\murilo\CONFIG~1\Temp\aqva.exe

C:\DOCUME~1\murilo\CONFIG~1\Temp\w7561c.exe

D:\Downloads\setup_av_free.exe

C:\DOCUME~1\murilo\CONFIG~1\Temp\_av_sfx.tm~a01684\avast.setup

C:\Arquivos de programas\Alwil Software\Avast5\vcredist_x86_SP1.exe

C:\Documents and Settings\murilo\Desktop\minimizer.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe

D:\riuvk.pif

C:\Documents and Settings\murilo\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.localstrike.com.ar/

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2304157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.localstrike.com.ar/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.localstrike.com.ar/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.localstrike.com.ar/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.localstrike.com.ar/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx

R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll

R3 - URLSearchHook: Softonic_Brasil Toolbar - {12fc3d37-2a42-4fe3-8489-81296878cba5} - C:\Arquivos de programas\Softonic_Brasil\tbSof2.dll

R3 - URLSearchHook: Messenger Plus Live Brazil Toolbar - {edbca961-4bf8-4cbe-8c63-a11dff9ed2d9} - C:\Arquivos de programas\Messenger_Plus_Live_Brazil\tbMes0.dll

R3 - URLSearchHook: MessengerPlusLive Brazil TB Toolbar - {c69650dc-9644-4580-aa86-0ea329ee6c60} - C:\Arquivos de programas\MessengerPlusLive_Brazil_TB\tbMes0.dll

R3 - URLSearchHook: (no name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - (no file)

O1 - Hosts: 74.125.45.100 4-open-davinci.com

O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com

O1 - Hosts: 74.125.45.100 privatesecuredpayments.com

O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com

O1 - Hosts: 74.125.45.100 getantivirusplusnow.com

O1 - Hosts: 74.125.45.100 secure-plus-payments.com

O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com

O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com

O1 - Hosts: 74.125.45.100 www.getavplusnow.com

O1 - Hosts: 74.125.45.100 safebrowsing-cache.google.com

O1 - Hosts: 74.125.45.100 urs.microsoft.com

O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com

O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com

O1 - Hosts: 74.125.45.100 paysoftbillsolution.com

O1 - Hosts: 74.125.45.100 protected.maxisoftwaremart.com

O1 - Hosts: 74.55.176.156 www.google.com

O1 - Hosts: 74.55.176.156 google.com

O1 - Hosts: 74.55.176.156 google.com.au

O1 - Hosts: 74.55.176.156 www.google.com.au

O1 - Hosts: 74.55.176.156 google.be

O1 - Hosts: 74.55.176.156 www.google.be

O1 - Hosts: 74.55.176.156 google.com.br

O1 - Hosts: 74.55.176.156 www.google.com.br

O1 - Hosts: 74.55.176.156 google.ca

O1 - Hosts: 74.55.176.156 www.google.ca

O1 - Hosts: 74.55.176.156 google.ch

O1 - Hosts: 74.55.176.156 www.google.ch

O1 - Hosts: 74.55.176.156 google.de

O1 - Hosts: 74.55.176.156 www.google.de

O1 - Hosts: 74.55.176.156 google.dk

O1 - Hosts: 74.55.176.156 www.google.dk

O1 - Hosts: 74.55.176.156 google.fr

O1 - Hosts: 74.55.176.156 www.google.fr

O1 - Hosts: 74.55.176.156 google.ie

O1 - Hosts: 74.55.176.156 www.google.ie

O1 - Hosts: 74.55.176.156 google.it

O1 - Hosts: 74.55.176.156 www.google.it

O1 - Hosts: 74.55.176.156 google.co.jp

O1 - Hosts: 74.55.176.156 www.google.co.jp

O1 - Hosts: 74.55.176.156 google.nl

O1 - Hosts: 74.55.176.156 www.google.nl

O1 - Hosts: 74.55.176.156 google.no

O1 - Hosts: 74.55.176.156 www.google.no

O1 - Hosts: 74.55.176.156 google.co.nz

O1 - Hosts: 74.55.176.156 www.google.co.nz

O1 - Hosts: 74.55.176.156 google.pl

O1 - Hosts: 74.55.176.156 www.google.pl

O1 - Hosts: 74.55.176.156 google.se

O1 - Hosts: 74.55.176.156 www.google.se

O1 - Hosts: 74.55.176.156 google.co.uk

O1 - Hosts: 74.55.176.156 www.google.co.uk

O1 - Hosts: 74.55.176.156 google.co.za

O1 - Hosts: 74.55.176.156 www.google.co.za

O1 - Hosts: 74.55.176.156 www.google-analytics.com

O1 - Hosts: 74.55.176.156 www.bing.com

O1 - Hosts: 74.55.176.156 search.yahoo.com

O1 - Hosts: 74.55.176.156 www.search.yahoo.com

O1 - Hosts: 74.55.176.156 uk.search.yahoo.com

O1 - Hosts: 74.55.176.156 ca.search.yahoo.com

O1 - Hosts: 74.55.176.156 de.search.yahoo.com

O1 - Hosts: 74.55.176.156 fr.search.yahoo.com

O1 - Hosts: 74.55.176.156 au.search.yahoo.com

O1 - Hosts: 74.55.176.156 www.youtube.com

O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - D:\Arquivos de programas\Orbitdownloader\orbitcth.dll

O2 - BHO: Softonic_Brasil Toolbar - {12fc3d37-2a42-4fe3-8489-81296878cba5} - C:\Arquivos de programas\Softonic_Brasil\tbSof2.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: ShoppingReport2 - {258C9770-1713-4021-8D7E-1F184A2BD754} - C:\Arquivos de programas\ShoppingReport2\Bin\2.7.27\ShoppingReport.dll

O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Arquivos de programas\ConduitEngine\ConduitEngine.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Arquivos de programas\AVG\AVGLS\avgssie.dll (file missing)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: (no name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (file missing)

O2 - BHO: MessengerPlusLive Brazil TB Toolbar - {c69650dc-9644-4580-aa86-0ea329ee6c60} - C:\Arquivos de programas\MessengerPlusLive_Brazil_TB\tbMes0.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll

O2 - BHO: Messenger Plus Live Brazil Toolbar - {edbca961-4bf8-4cbe-8c63-a11dff9ed2d9} - C:\Arquivos de programas\Messenger_Plus_Live_Brazil\tbMes0.dll

O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Arquivos de programas\DAEMON Tools Toolbar\DTToolbar.dll

O3 - Toolbar: Softonic_Brasil Toolbar - {12fc3d37-2a42-4fe3-8489-81296878cba5} - C:\Arquivos de programas\Softonic_Brasil\tbSof2.dll

O3 - Toolbar: Messenger Plus Live Brazil Toolbar - {edbca961-4bf8-4cbe-8c63-a11dff9ed2d9} - C:\Arquivos de programas\Messenger_Plus_Live_Brazil\tbMes0.dll

O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - D:\Arquivos de programas\Orbitdownloader\GrabPro.dll

O3 - Toolbar: MessengerPlusLive Brazil TB Toolbar - {c69650dc-9644-4580-aa86-0ea329ee6c60} - C:\Arquivos de programas\MessengerPlusLive_Brazil_TB\tbMes0.dll

O3 - Toolbar: (no name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - (no file)

O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Arquivos de programas\ConduitEngine\ConduitEngine.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\Arquivos de programas\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Arquivos de programas\DAEMON Tools Lite\daemon.exe" -autorun

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [MessengerPlus3] "D:\\MsgPlus.exe" /WinStart

O4 - HKCU\..\Run: [ares] "D:\Arquivos de programas\Ares\Ares.exe" -h

O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [nuoiv] C:\Documents and Settings\murilo\nuoiv.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

O4 - Startup: Recorte de tela e Iniciador do OneNote 2007.lnk = C:\Arquivos de programas\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Global Startup: Orbit.lnk = D:\Arquivos de programas\Orbitdownloader\orbitdm.exe

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O8 - Extra context menu item: &Download by Orbit - res://D:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Grab video by Orbit - res://D:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Do&wnload selected by Orbit - res://D:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://D:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/202

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARQUIV~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARQUIV~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Arquivos de programas\ShoppingReport2\Bin\2.7.27\ShoppingReport.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Arquivos de programas\ShoppingReport2\Bin\2.7.27\ShoppingReport.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/pt/uno1/GAME_UNO1.cab

O16 - DPF: {8F60EE6F-DC53-4F9C-9E66-84BD2A545805} (CsLauncher Class) - http://hb.getamped.com/start/CsLauncher.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Arquivos de programas\AVG\AVGLS\avgpp.dll (file missing)

O22 - SharedTaskScheduler: Pré-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Daemon de cache de categorias de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: AVGIDSAgent - Unknown owner - C:\Arquivos de programas\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (file missing)

O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Arquivos de programas\LogMeIn Hamachi\hamachi-2.exe

O23 - Service: NBService - Nero AG - C:\Arquivos de programas\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\WINDOWS\system32\nlssrv32.exe

O23 - Service: NMIndexingService - Nero AG - C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

O23 - Service: QueryExplorer Service - Unknown owner - C:\Documents and Settings\All Users\Dados de aplicativos\QueryExplorer\queryexplorer119.exe

--

End of file - 15471 bytes

wings · Dezembro 4, 2010

*Baixe o RSIT e salve-o no desktop

*Execute o RSIT e clique [Continue]

*Cole o relatório C:\rsit\log.txt

MuriloAkils · Dezembro 4, 2010

Logfile of random's system information tool 1.08 (written by random/random)

Run by murilo at 2010-12-04 16:06:14

Microsoft Windows XP Professional Service Pack 3

System drive C: has 5 GB (23%) free of 20 GB

Total RAM: 503 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 16:06:35, on 4/12/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\WINDOWS\system32\igfxsrvc.exe

D:\Arquivos de programas\LogMeIn Hamachi\hamachi-2-ui.exe

C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe

C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\DAEMON Tools Lite\daemon.exe

C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe

D:\Arquivos de programas\Ares\Ares.exe

C:\Documents and Settings\murilo\nuoiv.exe

D:\Arquivos de programas\Orbitdownloader\orbitdm.exe

D:\Arquivos de programas\LogMeIn Hamachi\hamachi-2.exe

C:\WINDOWS\system32\nlssrv32.exe

C:\Documents and Settings\All Users\Dados de aplicativos\QueryExplorer\queryexplorer119.exe

D:\Arquivos de programas\Orbitdownloader\orbitnet.exe

C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexStoreSvr.exe

C:\Arquivos de programas\QueryExplorer\queryexplorer.exe

C:\WINDOWS\System32\svchost.exe

C:\DOCUME~1\murilo\CONFIG~1\Temp\aqva.exe

C:\DOCUME~1\murilo\CONFIG~1\Temp\w7561c.exe

D:\Downloads\setup_av_free.exe

C:\DOCUME~1\murilo\CONFIG~1\Temp\_av_sfx.tm~a01684\avast.setup

C:\Arquivos de programas\Alwil Software\Avast5\vcredist_x86_SP1.exe

C:\Documents and Settings\murilo\Desktop\minimizer.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe

C:\Documents and Settings\murilo\Desktop\RSIT.exe

C:\Arquivos de programas\trend micro\murilo.exe