[Resolvido] &nbspSistema e internet congela

[EDSSX 0]

Boa noite !

 

 

Meu(inha_) windows seven/internet trava direto .

 

 

Segue os logs :

 

 

DDS (Ver_10-12-12.02) - NTFSx86

Run by Edson Luis at 22:44:09,94 on 28/10/2011

Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.1.0

Microsoft Windows 7 Enterprise 6.1.7601.1.1252.55.1033.18.512.46 [GMT -2:00]

 

 

============== Running Processes ===============

 

D:\Windows\system32\wininit.exe

D:\Windows\system32\lsm.exe

D:\Windows\system32\svchost.exe -k DcomLaunch

D:\Windows\system32\svchost.exe -k RPCSS

D:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

D:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

D:\Windows\system32\svchost.exe -k netsvcs

D:\Windows\system32\svchost.exe -k LocalService

D:\Windows\system32\svchost.exe -k NetworkService

D:\Windows\System32\spoolsv.exe

D:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

D:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

D:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

D:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe

D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

D:\Windows\system32\taskhost.exe

D:\Windows\system32\Dwm.exe

D:\Windows\Explorer.EXE

D:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe

D:\Windows\system32\SearchIndexer.exe

D:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

D:\Program Files\Windows Media Player\wmpnetwk.exe

D:\Windows\System32\svchost.exe -k LocalServicePeerNet

D:\Program Files\Mozilla Firefox\firefox.exe

D:\Program Files\Mozilla Firefox\plugin-container.exe

D:\Windows\system32\svchost.exe -k bthsvcs

D:\Windows\System32\svchost.exe -k secsvcs

D:\Program Files\Windows Live\Messenger\msnmsgr.exe

D:\Program Files\Windows Live\Contacts\wlcomm.exe

D:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe

D:\Users\Edson Luis\Downloads\HijackThis.exe

D:\Windows\system32\wbem\wmiprvse.exe

D:\Users\Edson Luis\Downloads\dds.scr

D:\Windows\system32\conhost.exe

 

============== Pseudo HJT Report ===============

 

uStart Page = hxxp://www.google.com.br/

uURLSearchHooks: H - No File

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - d:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - d:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

uRun: [msnmsgr] "d:\program files\windows live\messenger\msnmsgr.exe" /background

mRun: [PSUNMain] "d:\program files\panda security\panda cloud antivirus\PSUNMain.exe" /Traybar

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

Trusted Zone: microsoft.com\update

Trusted Zone: microsoft.com\windowsupdate

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab

DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Notify: AtiExtEvent - Ati2evxx.dll

 

================= FIREFOX ===================

 

FF - ProfilePath - d:\users\edsonl~1\appdata\roaming\mozilla\firefox\profiles\rkmrrjvd.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.br/

FF - prefs.js: network.proxy.type - 0

FF - plugin: d:\program files\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: d:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: d:\program files\java\jre7\bin\new_plugin\npdeployJava1.dll

FF - plugin: d:\program files\microsoft silverlight\4.0.60831.0\npctrlui.dll

FF - plugin: d:\program files\mozilla firefox\plugins\npdeployJava1.dll

FF - plugin: d:\users\edson luis\appdata\local\google\update\1.3.21.79\npGoogleUpdate3.dll

 

============= SERVICES / DRIVERS ===============

 

R0 360HookOem;360HookOem;d:\windows\system32\drivers\360HookOem.sys [2011-5-20 54912]

R0 Lbd;Lbd;d:\windows\system32\drivers\Lbd.sys [2011-5-2 64512]

R1 PSINKNC;PSINKNC;d:\windows\system32\drivers\PSINKNC.sys [2011-4-28 126024]

R2 PSINAflt;PSINAflt;d:\windows\system32\drivers\PSINAflt.sys [2011-7-5 143624]

R2 PSINFile;PSINFile;d:\windows\system32\drivers\PSINFile.sys [2011-4-28 99400]

R2 PSINProc;PSINProc;d:\windows\system32\drivers\PSINProc.sys [2011-4-28 111176]

R2 PSINProt;PSINProt;d:\windows\system32\drivers\PSINProt.sys [2011-4-28 112712]

R3 3xHybrid;SAA713x TV Card Service;d:\windows\system32\drivers\3xHybrid.sys [2010-12-1 1141888]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;d:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;d:\windows\system32\drivers\rdpvideominiport.sys [2011-2-23 15872]

S3 TsUsbFlt;TsUsbFlt;d:\windows\system32\drivers\TsUsbFlt.sys [2011-2-23 52224]

 

=============== Created Last 30 ================

 

2011-10-28 22:14:41 -------- d-----w- d:\users\edsonl~1\appdata\local\{F5CA0041-19BB-4CF0-9C1B-9A3FAC4F91A7}

2011-10-28 22:14:23 -------- d-----w- d:\users\edsonl~1\appdata\local\{F1B1BB94-FA78-455B-AA62-9C14DFC74C43}

2011-10-28 11:46:54 56200 ----a-w- d:\progra~2\microsoft\windows defender\definition updates\{3c0a7c77-a526-4e37-8e75-8aca27cfa505}\offreg.dll

2011-10-28 11:46:47 6668624 ----a-w- d:\progra~2\microsoft\windows defender\definition updates\{3c0a7c77-a526-4e37-8e75-8aca27cfa505}\mpengine.dll

2011-10-28 00:06:34 -------- d-----w- d:\users\edsonl~1\appdata\local\{804F9B0C-63BA-40C0-AE40-3F5E34901489}

2011-10-28 00:05:59 -------- d-----w- d:\users\edsonl~1\appdata\local\{8AB827E8-8614-4D7D-986C-59882734D711}

2011-10-27 12:04:29 -------- d-----w- d:\users\edsonl~1\appdata\local\{2897F100-EEF2-40BB-8AC8-3B364992C246}

2011-10-27 12:03:21 -------- d-----w- d:\users\edsonl~1\appdata\local\{6A09D7BE-AA8A-45FD-9063-AE3D50797426}

2011-10-26 23:37:03 -------- d-----w- d:\users\edsonl~1\appdata\local\{3C345069-D292-4C39-B02F-91966A7C589C}

2011-10-26 23:36:36 -------- d-----w- d:\users\edsonl~1\appdata\local\{F9DC1EAC-7DC5-45FD-88EC-E4B10E8AACD3}

2011-10-26 11:01:16 -------- d-----w- d:\users\edsonl~1\appdata\local\{30D9592C-60D6-4751-A991-C81E49DAF858}

2011-10-26 10:59:05 -------- d-----w- d:\users\edsonl~1\appdata\local\{6F929658-B494-42DF-A189-A982A78B3198}

2011-10-25 22:54:15 -------- d-----w- d:\users\edsonl~1\appdata\local\{731E5C86-34DF-42E9-878B-54B249DDC52E}

2011-10-25 22:53:15 -------- d-----w- d:\users\edsonl~1\appdata\local\{F90FB180-C3C0-4D68-B322-F193D3D2DEA2}

2011-10-24 14:13:58 -------- d-----w- d:\users\edsonl~1\appdata\local\{FD937E75-154A-498B-8953-9FD3641E7F7E}

2011-10-24 14:13:18 -------- d-----w- d:\users\edsonl~1\appdata\local\{A8B1B3EC-BCD3-4881-97D2-0E3D5BAD8E81}

2011-10-24 04:05:25 -------- d-----w- d:\users\edsonl~1\appdata\roaming\Panda Security

2011-10-24 04:02:20 -------- d-----w- d:\progra~2\Panda Security

2011-10-24 04:02:18 -------- d-----w- d:\program files\Panda Security

2011-10-24 02:11:25 -------- d-----w- d:\users\edsonl~1\appdata\local\{94E7AF12-9496-4E95-A0FF-359C9CB08D43}

2011-10-24 02:10:54 -------- d-----w- d:\users\edsonl~1\appdata\local\{2DBD8B1F-EC96-402E-9E8E-EEF5D6AB9E67}

2011-10-23 23:54:04 146304 ----a-r- d:\windows\system32\drivers\360FileOem.sys

2011-10-23 14:08:37 -------- d-----w- d:\users\edsonl~1\appdata\local\{6BE5402E-8376-4E8C-974E-CFFA2F8EFFD7}

2011-10-23 14:08:09 -------- d-----w- d:\users\edsonl~1\appdata\local\{5A9890AC-ED80-49BE-A36D-4FD66C7ECD6C}

2011-10-22 13:12:55 -------- d-----w- d:\users\edsonl~1\appdata\local\{68672461-63C4-4B68-820F-4D5F332931A9}

2011-10-22 13:12:31 -------- d-----w- d:\users\edsonl~1\appdata\local\{6B811924-C5B8-4785-BD3D-DC993293FD3E}

2011-10-22 01:11:12 -------- d-----w- d:\users\edsonl~1\appdata\local\{A946BD12-4639-4063-8698-048B90A106A9}

2011-10-22 01:10:44 -------- d-----w- d:\users\edsonl~1\appdata\local\{D60AC9EA-BAC4-41B5-9A75-7A04E4BCFBD9}

2011-10-21 13:09:10 -------- d-----w- d:\users\edsonl~1\appdata\local\{CFA3B34F-E4B8-4FAC-8288-F0E8717191C5}

2011-10-21 13:08:47 -------- d-----w- d:\users\edsonl~1\appdata\local\{DEE4E607-CBF1-442F-B5B4-7270479D83C9}

2011-10-21 00:49:34 -------- d-----w- d:\users\edsonl~1\appdata\local\{394B074B-96C3-49D9-BA82-E97AE98B16B1}

2011-10-21 00:49:08 -------- d-----w- d:\users\edsonl~1\appdata\local\{98CFE000-1960-4346-9AA1-F2E22C5F1D8D}

2011-10-20 12:31:54 -------- d-----w- d:\users\edsonl~1\appdata\local\{F30C3598-320E-4DFA-9E19-B3599D246826}

2011-10-20 12:31:28 -------- d-----w- d:\users\edsonl~1\appdata\local\{70259D2B-02BE-49EC-AEA8-046C3D22B84C}

2011-10-19 15:46:27 -------- d-----w- d:\users\edsonl~1\appdata\local\{40743B41-1D16-4D1E-84BB-3DD700B3CD64}

2011-10-19 15:46:02 -------- d-----w- d:\users\edsonl~1\appdata\local\{9F3D0450-B7B9-4557-905E-9B66DF3521F7}

2011-10-19 03:45:02 -------- d-----w- d:\users\edsonl~1\appdata\local\{311F897F-3301-4796-B3D2-9F554B446242}

2011-10-18 15:44:18 -------- d-----w- d:\users\edsonl~1\appdata\local\{D3B35C9A-7549-4DDD-8E81-7F221C54C94D}

2011-10-18 15:43:54 -------- d-----w- d:\users\edsonl~1\appdata\local\{69BB7DD0-2F9E-49DD-9A69-8DF97FA050EC}

2011-10-18 03:43:11 -------- d-----w- d:\users\edsonl~1\appdata\local\{F9FD70AB-39CB-44E8-9DA8-EE9482A77DEC}

2011-10-18 03:42:47 -------- d-----w- d:\users\edsonl~1\appdata\local\{E1A88D20-AFEF-4046-9BA2-B432B30CCA62}

2011-10-17 15:41:54 -------- d-----w- d:\users\edsonl~1\appdata\local\{ADAA700B-2E9D-496A-A7C0-BFBABF891AE2}

2011-10-17 15:40:59 -------- d-----w- d:\users\edsonl~1\appdata\local\{47FD2D64-571D-4C0A-80B7-371F78F454AA}

2011-10-16 13:39:24 -------- d-----w- d:\users\edsonl~1\appdata\local\{BF678830-537E-4E68-BB60-B337E9C801B2}

2011-10-16 13:38:58 -------- d-----w- d:\users\edsonl~1\appdata\local\{D5D71DEB-6580-40AB-991B-D8015FCABC42}

2011-10-15 13:35:31 -------- d-----w- d:\users\edsonl~1\appdata\local\{860999FE-B81E-465C-893A-2CE007B1F67E}

2011-10-15 13:35:05 -------- d-----w- d:\users\edsonl~1\appdata\local\{BBFFAC72-F6D9-4CC4-AB2A-F0C7D62247E0}

2011-10-14 12:57:32 -------- d-----w- d:\users\edsonl~1\appdata\local\{E265032E-566C-45F3-B095-D4A59C85DDAF}

2011-10-14 12:56:32 -------- d-----w- d:\users\edsonl~1\appdata\local\{A6884348-61F9-40D7-864D-104D971DFDAA}

2011-10-14 00:54:50 -------- d-----w- d:\users\edsonl~1\appdata\local\{50931753-39CE-43D1-BE6E-F9EF1D3B96B6}

2011-10-13 12:54:04 -------- d-----w- d:\users\edsonl~1\appdata\local\{6DFA14B2-8D20-47CC-87AB-421CD33A7F07}

2011-10-13 12:53:37 -------- d-----w- d:\users\edsonl~1\appdata\local\{BE83BEFA-0B95-4329-AFB3-0247367C4D94}

2011-10-12 15:39:29 75776 ----a-w- d:\windows\system32\psisrndr.ax

2011-10-12 15:39:29 465408 ----a-w- d:\windows\system32\psisdecd.dll

2011-10-12 15:39:23 571904 ----a-w- d:\windows\system32\oleaut32.dll

2011-10-12 15:39:23 233472 ----a-w- d:\windows\system32\oleacc.dll

2011-10-12 15:38:47 2334720 ----a-w- d:\windows\system32\win32k.sys

2011-10-12 15:29:19 -------- d-----w- d:\users\edsonl~1\appdata\local\{BE831935-317D-45C8-8EAC-08B207155D5B}

2011-10-12 15:28:51 -------- d-----w- d:\users\edsonl~1\appdata\local\{B0FDC36E-F7EB-4BE6-AFA2-723B188B5D36}

2011-10-12 01:13:57 -------- d-----w- d:\users\edsonl~1\appdata\local\{9EA7C40A-8240-4E7B-AAFE-6C3C49E686A8}

2011-10-12 01:13:31 -------- d-----w- d:\users\edsonl~1\appdata\local\{FB6B7553-6DB4-4A7B-A00F-63A9EB3C1068}

2011-10-11 13:12:57 -------- d-----w- d:\users\edsonl~1\appdata\local\{7D78B131-F46E-4A6B-9142-571973811D99}

2011-10-11 13:12:32 -------- d-----w- d:\users\edsonl~1\appdata\local\{5B5D0F83-9E12-448A-B1C6-E5E3314B5F76}

2011-10-11 01:11:51 -------- d-----w- d:\users\edsonl~1\appdata\local\{4D0A47D1-65A1-468F-BF1C-CD5E2EC60D4F}

2011-10-11 01:11:24 -------- d-----w- d:\users\edsonl~1\appdata\local\{9120CE02-9AD4-461C-BCFE-A35E58C04467}

2011-10-10 13:09:15 -------- d-----w- d:\users\edsonl~1\appdata\local\{FA8413C2-F0F3-4A7C-9432-F8B97BC810AE}

2011-10-10 13:08:53 -------- d-----w- d:\users\edsonl~1\appdata\local\{A2315DA4-3BED-4F5C-B308-5C2EC29CC12D}

2011-10-10 01:06:40 -------- d-----w- d:\users\edsonl~1\appdata\local\{35D15065-53D5-4DAA-92B8-D375028F21A1}

2011-10-09 13:04:27 -------- d-----w- d:\users\edsonl~1\appdata\local\{AFA1F5E6-82A8-421B-969B-74DD549BE0EA}

2011-10-09 13:04:07 -------- d-----w- d:\users\edsonl~1\appdata\local\{397CFE00-E8B7-4115-8C58-73E72ADAA8D6}

2011-10-09 00:59:50 -------- d-----w- d:\users\edsonl~1\appdata\local\{AC578EBB-C767-49AA-8F57-B3D648076C06}

2011-10-08 12:59:03 -------- d-----w- d:\users\edsonl~1\appdata\local\{A2438236-50E0-47CE-A75E-73CCC4B8AC65}

2011-10-08 12:58:39 -------- d-----w- d:\users\edsonl~1\appdata\local\{98B4DF75-A736-46C2-BFB5-B695510575B8}

2011-10-08 00:57:46 -------- d-----w- d:\users\edsonl~1\appdata\local\{82994D54-19B7-46D5-BB0B-DAF9F9DAC6F6}

2011-10-08 00:57:10 -------- d-----w- d:\users\edsonl~1\appdata\local\{8F3B1B4E-168D-474B-9420-D595E3B391D9}

2011-10-07 11:05:13 -------- d-----w- d:\users\edsonl~1\appdata\local\{8C0EF2B1-EF42-485C-9AD2-9FC5C0E5ED23}

2011-10-07 11:04:37 -------- d-----w- d:\users\edsonl~1\appdata\local\{4ED9962A-99F4-41FD-BB9F-79F95EA136A2}

2011-10-06 12:10:45 -------- d-----w- d:\users\edsonl~1\appdata\local\{922447ED-7CD0-4B96-A21B-43372250A33A}

2011-10-06 12:10:19 -------- d-----w- d:\users\edsonl~1\appdata\local\{212A6573-A588-4342-8724-EC09E38BC017}

2011-10-06 00:09:47 -------- d-----w- d:\users\edsonl~1\appdata\local\{8E188336-09EC-45AB-BEC3-5784E5265D9E}

2011-10-06 00:09:31 -------- d-----w- d:\users\edsonl~1\appdata\local\{318A6C59-0CC8-4EE1-B3AC-E5BEFC274983}

2011-10-05 10:46:37 -------- d-----w- d:\users\edsonl~1\appdata\local\{147D0C31-DD99-42FC-8BDE-AE5ACBDDC90F}

2011-10-05 10:46:25 -------- d-----w- d:\users\edsonl~1\appdata\local\{6A3F5722-40BC-4588-999A-E6D6FD50378B}

2011-10-04 15:10:08 -------- d-----w- d:\users\edsonl~1\appdata\roaming\f-secure

2011-10-04 15:06:31 -------- d-----w- d:\progra~2\F-Secure

2011-10-04 12:11:59 -------- d-----w- d:\users\edsonl~1\appdata\local\{9018A5B5-170B-4C91-97EC-DDE9DCA984BA}

2011-10-04 12:11:35 -------- d-----w- d:\users\edsonl~1\appdata\local\{D5BC8227-22B9-4CA3-BEAD-F5F6A97560C4}

2011-10-04 00:08:40 -------- d-----w- d:\users\edsonl~1\appdata\local\{3D959386-4002-413F-A928-50862850687A}

2011-10-04 00:07:53 -------- d-----w- d:\users\edsonl~1\appdata\local\{E9ADEAA9-51CD-4A0D-8001-A7B182FF10D4}

2011-10-03 12:05:57 -------- d-----w- d:\users\edsonl~1\appdata\local\{EE3F9ACC-56E0-4C5E-B915-A69FA08D9A74}

2011-10-03 12:05:27 -------- d-----w- d:\users\edsonl~1\appdata\local\{6919E495-82F8-448A-9971-DF7093CFD90E}

2011-10-03 00:04:43 -------- d-----w- d:\users\edsonl~1\appdata\local\{72AED5B1-91BA-49D9-B8BE-76B5C0AF88E1}

2011-10-03 00:04:18 -------- d-----w- d:\users\edsonl~1\appdata\local\{9AA394FC-8171-4508-9B55-003AD7AABCB2}

2011-10-02 21:46:37 -------- d-----w- d:\program files\CCleaner

2011-10-02 20:41:40 22216 ----a-w- d:\windows\system32\drivers\mbam.sys

2011-10-02 12:03:44 -------- d-----w- d:\users\edsonl~1\appdata\local\{9D960EAA-8D03-48FA-A035-AA11E5803679}

2011-10-02 12:03:19 -------- d-----w- d:\users\edsonl~1\appdata\local\{DCE54AD9-0586-4647-84F5-91BFD13ED159}

2011-10-02 00:02:32 -------- d-----w- d:\users\edsonl~1\appdata\local\{F754140D-31CC-4E91-AFAD-37FFDE3F8A7F}

2011-10-02 00:02:05 -------- d-----w- d:\users\edsonl~1\appdata\local\{59FDF809-06F0-4EA2-99EE-A306A92EE7A4}

2011-10-01 11:59:23 -------- d-----w- d:\users\edsonl~1\appdata\local\{36FB494B-CD40-4CBE-A098-9A694BD7B2C7}

2011-10-01 11:58:41 -------- d-----w- d:\users\edsonl~1\appdata\local\{58155D43-6DED-45C6-8882-AD6FF2253718}

2011-09-30 23:57:33 -------- d-----w- d:\users\edsonl~1\appdata\local\{61A52F0F-702A-4925-A357-903C7214C1A3}

2011-09-30 11:56:29 -------- d-----w- d:\users\edsonl~1\appdata\local\{23586458-6305-4332-83DC-5DD4C55D8161}

2011-09-30 11:56:04 -------- d-----w- d:\users\edsonl~1\appdata\local\{C51A796B-9998-4D05-858E-69DE124B1C43}

2011-09-29 18:30:19 -------- d-----w- d:\users\edsonl~1\appdata\local\{A509E3CB-3A9B-40FA-8ACF-0ADFF4E661A1}

2011-09-29 18:29:52 -------- d-----w- d:\users\edsonl~1\appdata\local\{9146581C-CA4D-4E39-AFD4-AD82F8CC785C}

 

==================== Find3M ====================

 

2011-10-27 17:10:37 1228 ----a-w- D:\FixitRegBackup.reg

2011-10-04 19:00:56 414368 ----a-w- d:\windows\system32\FlashPlayerCPLApp.cpl

2011-10-03 04:50:34 544656 ----a-w- d:\windows\system32\deployJava1.dll

2011-09-01 02:35:59 1798144 ----a-w- d:\windows\system32\jscript9.dll

2011-09-01 02:28:15 1126912 ----a-w- d:\windows\system32\wininet.dll

2011-09-01 02:22:54 2382848 ----a-w- d:\windows\system32\mshtml.tlb

 

============= FINISH: 22:50:32,83 ===============

 

 

 

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

 

DDS (Ver_10-12-12.02)

 

Microsoft Windows 7 Enterprise

Boot Device: \Device\HarddiskVolume1

Install Date: 29/01/2011 22:13:48

System Uptime: 28/10/2011 20:09:43 (2 hours ago)

 

Motherboard: ECS | | M825G

Processor: AMD Sempron 2400+ | Socket-A | 1666/166mhz

 

==== Disk Partitions =========================

 

A: is Removable

C: is FIXED (NTFS) - 17 GiB total, 10,464 GiB free.

D: is FIXED (NTFS) - 59 GiB total, 20,338 GiB free.

E: is CDROM ()

 

==== Disabled Device Manager Items =============

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsldebc8b84

Device ID: ROOT\LEGACY_MPKSLDEBC8B84\0000

Manufacturer:

Name: MpKsldebc8b84

PNP Device ID: ROOT\LEGACY_MPKSLDEBC8B84\0000

Service: MpKsldebc8b84

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsla83e3892

Device ID: ROOT\LEGACY_MPKSLA83E3892\0000

Manufacturer:

Name: MpKsla83e3892

PNP Device ID: ROOT\LEGACY_MPKSLA83E3892\0000

Service: MpKsla83e3892

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsla8ded396

Device ID: ROOT\LEGACY_MPKSLA8DED396\0000

Manufacturer:

Name: MpKsla8ded396

PNP Device ID: ROOT\LEGACY_MPKSLA8DED396\0000

Service: MpKsla8ded396

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl18306c09

Device ID: ROOT\LEGACY_MPKSL18306C09\0000

Manufacturer:

Name: MpKsl18306c09

PNP Device ID: ROOT\LEGACY_MPKSL18306C09\0000

Service: MpKsl18306c09

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsle5123dc0

Device ID: ROOT\LEGACY_MPKSLE5123DC0\0000

Manufacturer:

Name: MpKsle5123dc0

PNP Device ID: ROOT\LEGACY_MPKSLE5123DC0\0000

Service: MpKsle5123dc0

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKslaa9488f7

Device ID: ROOT\LEGACY_MPKSLAA9488F7\0000

Manufacturer:

Name: MpKslaa9488f7

PNP Device ID: ROOT\LEGACY_MPKSLAA9488F7\0000

Service: MpKslaa9488f7

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKslee3c0906

Device ID: ROOT\LEGACY_MPKSLEE3C0906\0000

Manufacturer:

Name: MpKslee3c0906

PNP Device ID: ROOT\LEGACY_MPKSLEE3C0906\0000

Service: MpKslee3c0906

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl7867e008

Device ID: ROOT\LEGACY_MPKSL7867E008\0000

Manufacturer:

Name: MpKsl7867e008

PNP Device ID: ROOT\LEGACY_MPKSL7867E008\0000

Service: MpKsl7867e008

 

Class GUID:

Description: PCI Simple Communications Controller

Device ID: PCI\VEN_1106&DEV_3068&SUBSYS_4C211543&REV_80\3&18D45AA6&0&8E

Manufacturer:

Name: PCI Simple Communications Controller

PNP Device ID: PCI\VEN_1106&DEV_3068&SUBSYS_4C211543&REV_80\3&18D45AA6&0&8E

Service:

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKslee872fe2

Device ID: ROOT\LEGACY_MPKSLEE872FE2\0000

Manufacturer:

Name: MpKslee872fe2

PNP Device ID: ROOT\LEGACY_MPKSLEE872FE2\0000

Service: MpKslee872fe2

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKslb2280dc1

Device ID: ROOT\LEGACY_MPKSLB2280DC1\0000

Manufacturer:

Name: MpKslb2280dc1

PNP Device ID: ROOT\LEGACY_MPKSLB2280DC1\0000

Service: MpKslb2280dc1

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl790fefb3

Device ID: ROOT\LEGACY_MPKSL790FEFB3\0000

Manufacturer:

Name: MpKsl790fefb3

PNP Device ID: ROOT\LEGACY_MPKSL790FEFB3\0000

Service: MpKsl790fefb3

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKslb6d617b1

Device ID: ROOT\LEGACY_MPKSLB6D617B1\0000

Manufacturer:

Name: MpKslb6d617b1

PNP Device ID: ROOT\LEGACY_MPKSLB6D617B1\0000

Service: MpKslb6d617b1

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKslf5acc910

Device ID: ROOT\LEGACY_MPKSLF5ACC910\0000

Manufacturer:

Name: MpKslf5acc910

PNP Device ID: ROOT\LEGACY_MPKSLF5ACC910\0000

Service: MpKslf5acc910

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKslfc4dd0c2

Device ID: ROOT\LEGACY_MPKSLFC4DD0C2\0000

Manufacturer:

Name: MpKslfc4dd0c2

PNP Device ID: ROOT\LEGACY_MPKSLFC4DD0C2\0000

Service: MpKslfc4dd0c2

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKslfe7356a1

Device ID: ROOT\LEGACY_MPKSLFE7356A1\0000

Manufacturer:

Name: MpKslfe7356a1

PNP Device ID: ROOT\LEGACY_MPKSLFE7356A1\0000

Service: MpKslfe7356a1

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl3d28269a

Device ID: ROOT\LEGACY_MPKSL3D28269A\0000

Manufacturer:

Name: MpKsl3d28269a

PNP Device ID: ROOT\LEGACY_MPKSL3D28269A\0000

Service: MpKsl3d28269a

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl8e160de3

Device ID: ROOT\LEGACY_MPKSL8E160DE3\0000

Manufacturer:

Name: MpKsl8e160de3

PNP Device ID: ROOT\LEGACY_MPKSL8E160DE3\0000

Service: MpKsl8e160de3

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl05e81f3a

Device ID: ROOT\LEGACY_MPKSL05E81F3A\0000

Manufacturer:

Name: MpKsl05e81f3a

PNP Device ID: ROOT\LEGACY_MPKSL05E81F3A\0000

Service: MpKsl05e81f3a

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl94251af1

Device ID: ROOT\LEGACY_MPKSL94251AF1\0000

Manufacturer:

Name: MpKsl94251af1

PNP Device ID: ROOT\LEGACY_MPKSL94251AF1\0000

Service: MpKsl94251af1

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl4c026cd4

Device ID: ROOT\LEGACY_MPKSL4C026CD4\0000

Manufacturer:

Name: MpKsl4c026cd4

PNP Device ID: ROOT\LEGACY_MPKSL4C026CD4\0000

Service: MpKsl4c026cd4

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl9a6f0553

Device ID: ROOT\LEGACY_MPKSL9A6F0553\0000

Manufacturer:

Name: MpKsl9a6f0553

PNP Device ID: ROOT\LEGACY_MPKSL9A6F0553\0000

Service: MpKsl9a6f0553

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl5284be21

Device ID: ROOT\LEGACY_MPKSL5284BE21\0000

Manufacturer:

Name: MpKsl5284be21

PNP Device ID: ROOT\LEGACY_MPKSL5284BE21\0000

Service: MpKsl5284be21

 

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: MpKsl11542338

Device ID: ROOT\LEGACY_MPKSL11542338\0000

Manufacturer:

Name: MpKsl11542338

PNP Device ID: ROOT\LEGACY_MPKSL11542338\0000

Service: MpKsl11542338

 

==== System Restore Points ===================

 

 

==== Installed Programs ======================

 

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader X (10.0.1) - Português

Adobe Reader X (10.1.1) - Português

Adobe Shockwave Player 11.6

ATI - Software Uninstall Utility

ATI Display Driver

CCleaner

D3DX10

Gadwin PrintScreen

Google Chrome

Java Auto Updater

Java SE Development Kit 7 Update 1

LibreOffice 3.3

Malwarebytes' Anti-Malware versão 1.51.2.1300

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Silverlight

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

Mozilla Firefox 8.0 (x86 pt-BR)

MSVCRT

Opera 11.51

Panda Cloud Antivirus

Revo Uninstaller 1.92

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Extended (KB2416472)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

swMSM

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

VIA Rhine Family Fast Ethernet Adapter

Visual C++ 2008 x86 Runtime - (v9.0.30729)

Visual C++ 2008 x86 Runtime - v9.0.30729.01

Windows Internet Explorer Platform Preview

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Messenger

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

 

==== End Of File ===========================

 

 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 22:54:06, on 28/10/2011

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

 

Running processes:

D:\Windows\system32\taskhost.exe

D:\Windows\system32\Dwm.exe

D:\Windows\Explorer.EXE

D:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe

D:\Program Files\Mozilla Firefox\firefox.exe

D:\Program Files\Mozilla Firefox\plugin-container.exe

D:\Program Files\Windows Live\Messenger\msnmsgr.exe

D:\Program Files\Windows Live\Contacts\wlcomm.exe

D:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe

D:\Users\Edson Luis\Downloads\HijackThis.exe

D:\Users\Edson Luis\Downloads\dds.scr

D:\Windows\system32\conhost.exe

D:\Windows\system32\cmd.exe

D:\Users\Edson Luis\AppData\Local\temp\497E.tmp\PEV.DAT

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [PSUNMain] "D:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe" /Traybar

O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - D:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\Windows\system32\Ati2evxx.exe

O23 - Service: Panda Cloud Antivirus Service (NanoServiceMain) - Panda Security, S.L. - D:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe

 

--

End of file - 2658 bytes

 

 

Abraços e obrigado desde já .

[wings 22]

Olá EDSSX

 

O seu caso já está em andamento no Linha Defensiva.

 

Procede?

[EDSSX 0]

Bom dia ! wings

 

 

 

Sim ; positivo !

Pode trancar aqui .

 

 

Abraços

[wings 22]

PROBLEMA RESOLVIDO

 

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.