[Resolvido] &nbspPc lento e travando muito.

Geh21 · Janeiro 17, 2011

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:30:04, on 17/1/2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

C:\WINDOWS\Explorer.EXE

C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &http://home.microsoft.com/intl/br/access/allinone.asp

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R3 - URLSearchHook: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)

O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Arquivos de programas\Shareaza\RazaWebHook32.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Download with &Shareaza - res://C:\Arquivos de programas\Shareaza\RazaWebHook32.dll/3000

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1279527410953

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1278215417234

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARQUIV~1\ARQUIV~1\Skype\SKYPE4~1.DLL

O23 - Service: avast! Antivirus - AVAST Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

--

End of file - 4491 bytes

Renato Utsch · Janeiro 20, 2011

Olá!

Desculpe-nos pela demora para responder.

Por favor, poderia dar uma explicação de seu problema?

Abraços :D

Geh21 · Janeiro 23, 2011

Obrigado por responder.

Bom meu pc tem horas que para de funcionar, dai eu tenho que clicar

no botão do gabinete pra poder desligar/iniciar novomente.

As vezes eu clico pra desligar no windows e só fica na tela

Windows esta sendo encerrado.

Esse é o meu problema.

Que tipo de log eu mando pra você poder analisar.?

obrigado pela atenção.

obs: isso se for o caso se não pode, se não pode encerrar o topico.

Renato Utsch · Janeiro 25, 2011

Olá!

Por favor, siga as instruções abaixo:

Faça o Download do DDS e salve no Desktop (Área de trabalho).

Temporariamente desative os seus programas de proteção.
Duplo clique em dds.scr.
Irá surgir uma tela preta com algumas informações. Não clique em nada, apenas aguarde!
Quando terminar, duas janelas abrirão: DDS.txt e Attach.txt.
Salve o resultado e cole-o no seu tópico.

OBS: Caso o link disponibilizado não funcione, tente baixar o DDS por ESTE link.

Abraços :D

Geh21 · Janeiro 26, 2011

DDS (Ver_10-12-12.02) - NTFSx86

Run by G‚ at 1:26:15,43 on qua 26/01/2011

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23

Microsoft Windows XP Home Edition 5.1.2600.3.1252.55.1046.18.447.223 [GMT -2:00]

AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

C:\WINDOWS\Explorer.EXE

C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe

C:\WINDOWS\PixArt\PAC7302\Monitor.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\WINDOWS\System32\svchost.exe -k Akamai

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

c:\ARQUIV~1\mcafee\SITEAD~1\mcsacore.exe

C:\WINDOWS\System32\svchost.exe -k imgsvc

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\system32\rundll32.exe

svchost.exe

C:\Documents and Settings\Gé\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com

mStart Page = hxxp://www.google.com

mWindow Title =

uInternet Connection Wizard,ShellNext = iexplore

uURLSearchHooks: H - No File

uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\arquiv~1\mcafee\sitead~1\mcieplg.dll

BHO: Shareaza Web Download Hook: {0eedb912-c5fa-486f-8334-57288578c627} - c:\arquivos de programas\shareaza\RazaWebHook32.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\arquivos de programas\arquivos comuns\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Auxiliar de Conexão do Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\arquivos de programas\arquivos comuns\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\arquiv~1\mcafee\sitead~1\mcieplg.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\arquivos de programas\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\arquivos de programas\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\arquiv~1\mcafee\sitead~1\mcieplg.dll

TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

TB: {ECDEE021-0D17-467F-A1FF-C7A115230949} - No File

EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

mRun: [avast5] c:\arquiv~1\alwils~1\avast5\avastUI.exe /nogui

mRun: [PAC7302_Monitor] c:\windows\pixart\pac7302\Monitor.exe

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

IE: Download with &Shareaza - c:\arquivos de programas\shareaza\RazaWebHook32.dll/3000

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\arquivos de programas\messenger\msmsgs.exe

Trusted Zone: microsoft.com\update

DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} - hxxp://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1279527410953

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1278215417234

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\arquiv~1\mcafee\sitead~1\McIEPlg.dll

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\arquiv~1\mcafee\sitead~1\McIEPlg.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\arquiv~1\arquiv~1\skype\SKYPE4~1.DLL

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\arquivos de programas\windows desktop search\MSNLNamespaceMgr.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\g9e74~1\dadosd~1\mozilla\firefox\profiles\9zvl3iem.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - Pesquisa Segura

FF - prefs.js: browser.startup.homepage - hxxp://pt-BR.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pt-BR:official

FF - prefs.js: keyword.URL - hxxp://br.search.yahoo.com/search?fr=mcafee&p=

FF - component: c:\arquivos de programas\mcafee\siteadvisor\components\McFFPlg.dll

FF - plugin: c:\arquivos de programas\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\documents and settings\gã©\configuraã§ãµes locais\dados de aplicativos\google\update\1.2.183.39\npGoogleOneClick8.dll

FF - plugin: c:\documents and settings\gã©\dados de aplicativos\mozilla\firefox\profiles\9zvl3iem.default\extensions\{e2883e8f-472f-4fb0-9522-ac9bf37916a7}\plugins\np_gp.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\arquivos de programas\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\arquivos de programas\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\arquivos de programas\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\arquivos de programas\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension

FF - Ext: Java Quick Starter: jqs@sun.com - c:\arquivos de programas\java\jre6\lib\deploy\jqs\ff

FF - Ext: McAfee SiteAdvisor: {B7082FAA-CB62-4872-9106-E42DD88EDE45} - c:\arquivos de programas\mcafee\SiteAdvisor

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}

FF - Ext: Adobe DLM (powered by getPlus®): {E2883E8F-472F-4fb0-9522-AC9BF37916A7} - %profile%\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}

============= SERVICES / DRIVERS ===============

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2010-7-3 294608]

R1 HWiNFO32;HWiNFO32 Kernel Driver;c:\arquivos de programas\hwinfo32\HWiNFO32.SYS [2010-7-4 20216]

R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2001-9-6 14336]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010-7-3 17744]

R2 avast! Antivirus;avast! Antivirus;c:\arquivos de programas\alwil software\avast5\AvastSvc.exe [2010-7-3 40384]

R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\arquiv~1\mcafee\sitead~1\mcsacore.exe [2011-1-22 88176]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\arquivos de programas\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]

S3 nosGetPlusHelper;getPlus® Helper 3004;c:\windows\system32\svchost.exe -k nosGetPlusHelper [2001-9-6 14336]

S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2001-9-6 14336]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

=============== Created Last 30 ================

2011-01-24 18:41:22 -------- d--h--r- c:\documents and settings\gé\Recent

2011-01-24 02:51:48 -------- d--h--w- c:\windows\PIF

2011-01-23 18:30:49 -------- d-----w- c:\docume~1\alluse~1\dadosd~1\Panda Security

2011-01-23 18:30:44 -------- dc----w- c:\arquivos de programas\Panda USB Vaccine

2011-01-23 05:25:57 -------- d-----w- C:\MSNCleaner

2011-01-23 04:23:43 -------- d-----w- c:\docume~1\g9e74~1\dadosd~1\Auslogics

2011-01-23 04:23:25 -------- dc----w- c:\arquivos de programas\Auslogics

2011-01-23 02:51:45 -------- d-----w- c:\docume~1\alluse~1\dadosd~1\McAfee Security Scan

2011-01-23 02:51:38 -------- dc----w- c:\arquivos de programas\McAfee Security Scan

2011-01-22 06:06:19 118784 ----a-w- c:\windows\system32\MSSTDFMT.DLL

2011-01-22 06:06:19 1071088 ----a-w- c:\windows\system32\MSCOMCTL.OCX

2011-01-22 06:06:17 -------- dc----w- c:\arquivos de programas\SpywareBlaster

2011-01-22 05:15:21 -------- d-----w- c:\arquivos de programas\arquivos comuns\McAfee

2011-01-22 05:15:10 -------- dc----w- c:\arquivos de programas\McAfee

2011-01-22 00:23:37 -------- d-----w- c:\docume~1\g9e74~1\config~1\dadosd~1\JockerSoft

2011-01-22 00:23:21 -------- dc----w- c:\arquivos de programas\JockerSoft

2011-01-21 22:00:18 -------- d-----w- C:\PenClean

2011-01-21 07:24:13 -------- d-----w- c:\windows\system32\CatRoot2

2011-01-21 07:24:13 -------- d-----w- c:\windows\system32\CatRoot

2011-01-21 03:56:06 48128 ----a-w- c:\windows\system32\Remove.exe

2011-01-21 03:55:59 -------- dc----w- c:\arquivos de programas\ANC

2011-01-21 03:55:58 129024 ----a-w- c:\windows\system32\SP7302.AX

2011-01-21 03:55:55 14336 ----a-w- c:\windows\system32\P7302USD.dll

2011-01-21 03:55:54 -------- d-----w- c:\arquivos de programas\arquivos comuns\PAC7302

2011-01-21 03:53:00 757760 ----a-w- c:\arquivos de programas\arquivos comuns\installshield\professional\runtime\11\50\intel32\iKernel.dll

2011-01-21 03:53:00 69715 ----a-w- c:\arquivos de programas\arquivos comuns\installshield\professional\runtime\11\50\intel32\ctor.dll

2011-01-21 03:53:00 5632 ----a-w- c:\arquivos de programas\arquivos comuns\installshield\professional\runtime\11\50\intel32\DotNetInstaller.exe

2011-01-21 03:53:00 274432 ----a-w- c:\arquivos de programas\arquivos comuns\installshield\professional\runtime\11\50\intel32\iscript.dll

2011-01-21 03:53:00 204800 ----a-w- c:\arquivos de programas\arquivos comuns\installshield\professional\runtime\11\50\intel32\iuser.dll

2011-01-21 03:52:59 200836 ----a-w- c:\arquivos de programas\arquivos comuns\installshield\professional\runtime\11\50\intel32\iGdi.dll

2011-01-21 03:52:58 331908 ----a-w- c:\arquivos de programas\arquivos comuns\installshield\professional\runtime\11\50\intel32\setup.dll

2011-01-21 03:04:08 -------- d-----w- C:\temp

2011-01-21 02:53:57 -------- d-----w- c:\documents and settings\gé\.yawcam

2011-01-21 02:53:36 -------- dc----w- c:\arquivos de programas\Yawcam

2011-01-18 02:12:04 -------- dc----w- c:\arquivos de programas\ElfBot NG

2011-01-18 01:58:27 -------- d-----w- c:\docume~1\g9e74~1\dadosd~1\Tibia

2011-01-18 01:44:23 -------- dc----w- c:\arquivos de programas\Tibia

2011-01-15 02:06:04 5504 ----a-w- c:\windows\system32\drivers\SETD3.tmp

2011-01-15 02:03:48 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys

2011-01-15 02:03:29 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys

2011-01-15 02:03:10 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys

2011-01-15 02:03:08 16384 ----a-w- c:\windows\system32\ipsink.ax

2011-01-15 02:02:37 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys

2011-01-15 02:02:15 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS

2011-01-15 02:02:15 19200 ----a-w- c:\windows\system32\drivers\SETC7.tmp

2011-01-15 02:01:47 85248 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys

2011-01-15 02:00:49 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys

2011-01-15 01:54:07 6656 ----a-w- c:\windows\system32\CoInst_071029.dll

2011-01-15 01:54:07 458752 ----a-w- c:\windows\system32\drivers\PAC7302.SYS

2011-01-15 01:53:37 -------- d-----w- c:\windows\PixArt

2011-01-15 01:36:34 54784 ----a-w- c:\windows\system32\vfwwdm32.dll

2011-01-15 01:36:29 43008 ----a-w- c:\windows\system32\ksxbar.ax

2011-01-15 01:36:28 91648 ----a-w- c:\windows\system32\kswdmcap.ax

2011-01-15 01:36:20 61952 ----a-w- c:\windows\system32\kstvtune.ax

2011-01-15 01:36:14 141056 ----a-w- c:\windows\system32\drivers\SETB.tmp

2011-01-12 23:47:47 -------- d-----r- c:\arquivos de programas\Skype

2011-01-12 16:50:33 59520 ----a-w- c:\windows\system32\drivers\SET9.tmp

2011-01-12 16:33:07 16128 ----a-w- c:\windows\system32\drivers\MODEMCSA.sys

2011-01-12 16:26:50 141056 ----a-w- c:\windows\system32\drivers\SET2D.tmp

2011-01-12 16:23:59 -------- d-----w- c:\windows\Motorola

2010-12-29 15:37:38 -------- d-----w- C:\Dic

==================== Find3M ====================

2010-12-31 20:06:36 38848 ----a-w- c:\windows\avastSS.scr

2010-11-18 18:15:22 86016 ----a-w- c:\windows\system32\isign32.dll

2010-11-12 20:53:06 472808 ----a-w- c:\windows\system32\deployJava1.dll

2010-11-12 18:34:10 73728 ----a-w- c:\windows\system32\javacpl.cpl

2010-11-09 14:52:35 249856 ----a-w- c:\windows\system32\odbc32.dll

2010-11-06 00:21:10 916480 ----a-w- c:\windows\system32\wininet.dll

2010-11-06 00:21:08 43520 ----a-w- c:\windows\system32\licmgr10.dll

2010-11-06 00:21:08 1469440 ------w- c:\windows\system32\inetcpl.cpl

2010-11-03 12:27:25 385024 ----a-w- c:\windows\system32\html.iec

2010-10-28 13:09:04 290048 ----a-w- c:\windows\system32\atmfd.dll

============= FINISH: 1:27:08,31 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows XP Home Edition

Boot Device: \Device\HarddiskVolume1

Install Date: 3/7/2010 12:33:00

System Uptime: 26/1/2011 01:14:47 (0 hours ago)

Motherboard: | | P4M800Pro-8237

Processor: Intel® Pentium® 4 CPU 3.00GHz | Socket 775 | 3000/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 75 GiB total, 37,112 GiB free.

D: is CDROM ()

E: is Removable

F: is Removable

G: is Removable

H: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP165: 31/10/2010 14:42:04 - Ponto de verificação do sistema

RP166: 1/11/2010 16:54:07 - Ponto de verificação do sistema

RP167: 4/11/2010 22:27:50 - Ponto de verificação do sistema

RP168: 9/11/2010 12:20:41 - Ponto de verificação do sistema

RP169: 9/11/2010 17:25:25 - Instalação de driver não assinada

RP170: 9/11/2010 17:29:12 - Instalação de driver não assinada

RP171: 9/11/2010 20:01:23 - Instalação de driver não assinada

RP172: 10/11/2010 21:12:27 - Software Distribution Service 3.0

RP173: 14/11/2010 19:43:53 - Ponto de verificação do sistema

RP174: 15/11/2010 21:16:36 - Ponto de verificação do sistema

RP175: 16/11/2010 21:44:22 - Ponto de verificação do sistema

RP176: 19/11/2010 18:51:45 - Ponto de verificação do sistema

RP177: 24/11/2010 17:41:33 - Ponto de verificação do sistema

RP178: 26/11/2010 10:35:57 - Ponto de verificação do sistema

RP179: 1/12/2010 10:01:46 - Ponto de verificação do sistema

RP180: 2/12/2010 20:15:24 - Ponto de verificação do sistema

RP181: 6/12/2010 20:24:07 - Ponto de verificação do sistema

RP182: 9/12/2010 21:19:30 - Ponto de verificação do sistema

RP183: 11/12/2010 11:56:55 - Ponto de verificação do sistema

RP184: 14/12/2010 04:37:22 - Instalado Last War

RP185: 16/12/2010 03:00:30 - Software Distribution Service 3.0

RP186: 21/12/2010 22:50:40 - Instalação de driver não assinada

RP187: 24/12/2010 21:20:23 - Ponto de verificação do sistema

RP188: 25/12/2010 20:34:42 - Instalação de driver não assinada

RP189: 29/12/2010 13:35:40 - Instalação de driver não assinada

RP190: 1/1/2011 11:21:12 - Software Distribution Service 3.0

RP191: 3/1/2011 16:32:42 - Ponto de verificação do sistema

RP192: 4/1/2011 22:00:56 - Ponto de verificação do sistema

RP193: 5/1/2011 22:56:38 - Ponto de verificação do sistema

RP194: 7/1/2011 13:37:52 - Instalação de driver não assinada

RP195: 7/1/2011 14:34:35 - Instalação de driver não assinada

RP196: 8/1/2011 23:00:21 - Ponto de verificação do sistema

RP197: 11/1/2011 16:00:22 - Ponto de verificação do sistema

RP198: 12/1/2011 11:05:54 - Software Distribution Service 3.0

RP199: 12/1/2011 14:25:46 - Atualizar para driver não assinado

RP200: 12/1/2011 14:50:05 - Instalação de driver não assinada

RP201: 14/1/2011 17:05:35 - Instalação de driver não assinada

RP202: 14/1/2011 17:10:02 - Instalado PC Camera

RP203: 14/1/2011 17:12:43 - Removido Install(BRAZIL)

RP204: 14/1/2011 17:13:23 - Removido Last War

RP205: 14/1/2011 17:24:22 - Removed Skype Toolbars

RP206: 14/1/2011 17:25:17 - Removido PC Camera

RP207: 14/1/2011 23:33:05 - Instalação de driver não assinada

RP208: 14/1/2011 23:44:54 - Atualizar para driver não assinado

RP209: 14/1/2011 23:47:29 - Atualizar para driver não assinado

RP210: 15/1/2011 00:00:48 - Instalação de driver não assinada

RP211: 17/1/2011 13:38:47 - Removido PC Camera

RP212: 21/1/2011 01:48:20 - Instalado PC Camera

RP213: 21/1/2011 01:55:54 - Instalado PC Camera

RP214: 21/1/2011 01:58:47 - Instalação de driver não assinada

RP215: 21/1/2011 03:56:01 - Software Distribution Service 3.0

RP216: 21/1/2011 04:20:18 - Software Distribution Service 3.0

RP217: 21/1/2011 04:31:45 - Software Distribution Service 3.0

RP218: 23/1/2011 00:45:31 - Installed Java 6 Update 23

RP219: 23/1/2011 00:57:03 - Removed Adobe Reader 9.4.1 - Português.

RP220: 23/1/2011 13:56:06 - Instalação de driver não assinada

==== Installed Programs ======================

7-Zip 4.65

Adobe Download Manager

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Reader X - Português

Akamai NetSession Interface

Ares 2.1.5

Arquivo do WinRAR

Assistente de Conexão do Windows Live

Atualização de Segurança para Windows Internet Explorer 8 (KB2183461)

Atualização de Segurança para Windows Internet Explorer 8 (KB2360131)

Atualização de Segurança para Windows Internet Explorer 8 (KB2416400)

Atualização de Segurança para Windows Internet Explorer 8 (KB971961)

Atualização de Segurança para Windows Internet Explorer 8 (KB981332)

Atualização de Segurança para Windows Internet Explorer 8 (KB982381)

Atualização de Segurança para Windows XP (KB923789)

Atualização para Windows Internet Explorer 8 (KB2447568)

Atualização para Windows Internet Explorer 8 (KB976662)

Atualização para Windows Internet Explorer 8 (KB982632)

Auslogics Disk Defrag

avast! Free Antivirus

CCleaner

Dic Michaelis - UOL

ElfBot NG 4.5.9

ESET Online Scanner v3

Ferramenta de Carregamento do Windows Live

Google Chrome

HijackThis 2.0.2

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows XP (KB954550-v5)

HWiNFO32 Version 3.55

Java Auto Updater

Java 6 Update 23

Malwarebytes' Anti-Malware

McAfee Security Scan Plus

McAfee SiteAdvisor

Microsoft .NET Framework (English)

Microsoft .NET Framework (English) v1.0.3705

Microsoft .NET Framework 1.0 Hotfix (KB928367)

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Brazilian Portuguese Language Pack

Microsoft .NET Framework 1.1 Security Update (KB2416447)

Microsoft .NET Framework 1.1 Security Update (KB979906)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - PTB

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - PTB

Microsoft .NET Framework 3.5 Language Pack SP1 - ptb

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Client Profile PTB Language Pack

Microsoft Application Error Reporting

Microsoft Choice Guard

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Silverlight

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Motorola SM56 Speakerphone Modem

Mozilla Firefox (3.6.13)

MSVCRT

MSXML 6.0 Parser (KB925673)

MV RegClean 5.9

Pacote de Idiomas do Microsoft .NET Framework 3.5 SP1 - PTB

Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil)

Pacote de Provedor de Serviços de Criptografia para o Microsoft Base Smart Card

Panda USB Vaccine 1.0.1.4

PC Camera

Platform

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)

Segoe UI

Shareaza 2.5.3.0

Skype™ 5.1

SpywareBlaster 4.4

Stella 2.8.4

Tibia

Unlocker 1.9.0

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

VIA Gerenciador de dispositivo de plataforma

VIA Rhine-Family Fast-Ethernet Adapter

VIA/S3G Display Driver 6.14.10.0380

WebFldrs XP

Windows Genuine Advantage Validation Tool (KB892130)

Windows Internet Explorer 8

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Messenger

Windows Management Framework Core

Windows Media Format 11 runtime

Windows Media Player 11

Windows Search 4.0

Windows XP Service Pack 3

XML Paper Specification Shared Components Language Pack 1.0

XP Codec Pack

==== End Of File ===========================

Renato Utsch · Fevereiro 2, 2011

Olá!

Desculpe-me a demora para responder... O fórum ficou offline, por isso não tive como dar a resposta.

Por favor, siga as instruções abaixo:

<< 1 >>

Siga o tutorial abaixo e execute o Ad-Remover. Poste o log gerado. Utilize a opção CLEAN.

Tutorial do Ad-Remover

<< 2 >>

Poste um novo log do DDS.

Abraços :D

Geh21 · Fevereiro 3, 2011

======= REPORT FROM AD-REMOVER 2.0.0.2,D | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 29/01/11 at 16:00

Contact: AdRemover[DOT]contact[AT]gmail[DOT]com

website: http://www.teamxscript.org

C:\Arquivos de programas\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 19:14:08 on 03/02/2011, Normal boot

Microsoft Windows XP Home Edition Service Pack 3 (X86)

Gé@CASA ( )

============== ACTION(S) ==============

Folder deleted: C:\Documents and Settings\Gé\Dados de aplicativos\Mozilla\FireFox\Profiles\9zvl3iem.default\conduit

File deleted: C:\Documents and Settings\Gé\Dados de aplicativos\Mozilla\FireFox\Profiles\9zvl3iem.default\searchplugins\conduit.xml

Folder deleted: C:\Documents and Settings\Gé\Configurações locais\Dados de aplicativos\Conduit

Folder deleted: C:\Arquivos de programas\Conduit

(!) -- Temporary files deleted.

-- File opened: C:\Documents and Settings\Gé\Dados de aplicativos\Mozilla\FireFox\Profiles\9zvl3iem.default\Prefs.js --

Line deleted: user_pref("CT1098640.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...

Line deleted: user_pref("CT1098640.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT109...

Line deleted: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr...

Line deleted: user_pref("CommunityToolbar.ToolbarsList", "CT1098640");

Line deleted: user_pref("CommunityToolbar.ToolbarsList2", "CT1098640");

Line deleted: user_pref("CommunityToolbar.alert.alertInfoInterval", 60);

Line deleted: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Jul 18 2010 03:52:16 GMT-0300 (Hora ...

Line deleted: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");

Line deleted: user_pref("CommunityToolbar.alert.locale", "en");

Line deleted: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);

Line deleted: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jul 18 2010 00:28:26 GMT-0300 (Hora ofic...

Line deleted: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1276093853");

Line deleted: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);

Line deleted: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");

Line deleted: user_pref("CommunityToolbar.alert.showTrayIcon", false);

Line deleted: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);

Line deleted: user_pref("CommunityToolbar.alert.userId", "{ad5ebd80-8158-45d3-9b5d-5aead0c0ef9e}");

Line deleted: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Jul 18 2010 00:28:33 GMT-0300 (Hor...

Line deleted: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1098640");

Line deleted: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1098640&Sea...

-- File closed --

Key deleted: HKCU\Software\Conduit

Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}

============== ADDITIONNAL SCAN ==============

** Mozilla Firefox Version [3.6.13 (pt-BR)] **

-- C:\Documents and Settings\Gé\Dados de aplicativos\Mozilla\FireFox\Profiles\9zvl3iem.default\Prefs.js --

browser.search.defaultenginename, Pesquisa Segura

browser.search.selectedEngine, Pesquisa Segura

browser.startup.homepage, hxxp://pt-BR.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pt-BR:official

browser.startup.homepage_override.mstone, rv:1.9.2.13

keyword.URL, hxxp://br.search.yahoo.com/search?fr=mcafee&p=

-- C:\Documents and Settings\Gil\Dados de aplicativos\Mozilla\FireFox\Profiles\idecyhgu.default\Prefs.js --

browser.search.defaultenginename, Pesquisa Segura

browser.search.selectedEngine, Pesquisa Segura

browser.startup.homepage_override.mstone, rv:1.9.2.13

keyword.URL, hxxp://br.search.yahoo.com/search?fr=mcafee&p=

========================================

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main]

AutoHide: yes

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Do404Search: 0x01000000

Enable Browser Extensions: yes

Local Page: C:\WINDOWS\system32\blank.htm

Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896

Show_ToolBar: yes

Start Page: hxxp://fr.msn.com/

Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896

Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Delete_Temp_Files_On_Exit: yes

Local Page: C:\WINDOWS\system32\blank.htm

Search bar: hxxp://search.msn.com/spbasic.htm

Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

Blank: res://mshtml.dll/blank.htm

========================================

C:\Arquivos de programas\Ad-Remover\Quarantine: 6 File(s)

C:\Arquivos de programas\Ad-Remover\Backup: 14 File(s)

C:\Ad-Report-CLEAN[1].txt - 03/02/2011 (2928 Byte(s))

End at: 19:17:43, 03/02/2011

============== E.O.F ==============

DDS (Ver_10-12-12.02) - NTFSx86

Run by G‚ at 19:27:24,54 on qui 03/02/2011

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23

Microsoft Windows XP Home Edition 5.1.2600.3.1252.55.1046.18.447.118 [GMT -2:00]

AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

C:\WINDOWS\Explorer.EXE

C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe

C:\WINDOWS\PixArt\PAC7302\Monitor.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\WINDOWS\System32\cisvc.exe

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

c:\ARQUIV~1\mcafee\SITEAD~1\mcsacore.exe

C:\WINDOWS\System32\svchost.exe -k imgsvc

C:\WINDOWS\system32\rundll32.exe

svchost.exe

C:\Documents and Settings\Gé\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe

C:\WINDOWS\system32\cidaemon.exe

C:\Documents and Settings\Gé\Desktop\dds.scr

============== Pseudo HJT Report ===============

uWindow Title =

mWindow Title =

uInternet Connection Wizard,ShellNext = iexplore

uURLSearchHooks: H - No File

uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\arquiv~1\mcafee\sitead~1\mcieplg.dll

BHO: Shareaza Web Download Hook: {0eedb912-c5fa-486f-8334-57288578c627} - c:\arquivos de programas\shareaza\RazaWebHook32.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\arquivos de programas\arquivos comuns\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Auxiliar de Conexão do Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\arquivos de programas\arquivos comuns\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Easy Photo Print: {9421dd08-935f-4701-a9ca-22df90ac4ea6} - c:\arquivos de programas\epson software\easy photo print\EPTBL.dll

BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\arquiv~1\mcafee\sitead~1\mcieplg.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\arquivos de programas\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\arquivos de programas\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\arquiv~1\mcafee\sitead~1\mcieplg.dll

TB: Easy Photo Print: {9421dd08-935f-4701-a9ca-22df90ac4ea6} - c:\arquivos de programas\epson software\easy photo print\EPTBL.dll