Caros colegas... Apos muita leituras não consegui me livrar desta praga conhecida como Cid: ou lop.com, por ultimo fiz a instalação do programa Combofix, rodei, parecia que havia resolvido mas voltou as janelas. abaixo segue o Log do combofix, favor me ajudar a limpar o pc... ComboFix 08-08-11.01 - Usuario 2008-08-12 10:54:04.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1046.18.1534 [GMT -3:00] Executando de: D:\Temp\Programas diversos\ComboFix.exe * Criado um novo ponto de restauro **ATENÇAO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !!** . ((((((((((((((((((((((((((((((((((((( Outras Exclusões ))))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\_004335_.tmp.dll . ((((((((((((((((((((((( Ficheiros criados de 2008-07-12 to 2008-08-12 )))))))))))))))))))))))))))))))) . ``` 2008-08-08 09:58 . 2008-08-08 09:58 d-------- C:\Arquivos de programas\Programas RFB 2008-08-08 09:55 . 2008-08-08 10:15 d-------- C:\Recnet ``` 2008-08-08 09:55 . 2006-10-31 13:12 128,000 --a------ C:\WINDOWS\DesinstWRecnet.exe 2008-08-08 09:55 . 2008-02-12 14:27 122,880 --a------ C:\WINDOWS\DesinstRecnet.exe 2008-08-08 09:55 . 2006-10-31 13:12 5,361 --a------ C:\WINDOWS\DesinstWRecnet.ini 2008-08-08 09:55 . 2008-08-08 09:55 127 --a------ C:\WINDOWS\REC-NET.INI 2008-08-07 21:39 . 2008-08-07 21:39 d-------- C:\Lei 2008-08-07 21:39 . 2008-07-10 03:17 284,032 --a------ C:\WINDOWS\system32\XceedZip.dll 2008-08-07 21:36 . 2008-07-10 03:17 327,168 --a------ C:\WINDOWS\IsUn0416.exe 2008-08-06 17:55 . 2008-08-06 17:55 d-------- C:\Arquivos de programas\Microsoft CAPICOM 2.1.0.2 2008-08-06 17:06 . 2008-08-06 17:06 2,428 --a------ C:\XMLCAND_VEREADOR13125PTSC81795.ZIP 2008-08-06 16:09 . 2008-08-06 16:09 d-------- C:\Arquivos de programas\Justiça Eleitoral 2008-08-05 16:27 . 2005-09-22 15:01 379,904 --a------ C:\WINDOWS\system32\cnsselo.dll 2008-08-05 16:13 . 2008-08-05 16:52 d-------- C:\Arquivos de programas\CAIXA 2008-08-05 16:13 . 2006-01-10 15:27 1,044,480 --a------ C:\WINDOWS\system32\ROBOEX32.DLL 2008-08-05 16:13 . 2000-04-03 23:00 130,560 --------- C:\WINDOWS\system32\ZipDll.dll 2008-08-05 16:13 . 2000-03-29 23:00 125,440 --------- C:\WINDOWS\system32\UnzDll.dll 2008-08-05 16:13 . 1999-01-27 19:01 48,640 --a------ C:\WINDOWS\system32\INETWH32.dll 2008-08-05 16:13 . 2005-08-25 14:36 28,672 --a------ C:\WINDOWS\system32\base64.dll ``` 2008-08-05 10:49 . 2008-08-05 10:49 d-------- C:\Arquivos de programas\Alwil Software 2008-08-03 22:40 . 2008-08-03 22:40 d-------- C:\Documents and Settings\All Users\Dados de aplicativos\DVD Shrink 2008-08-03 22:40 . 2008-08-03 22:40 d-------- C:\Arquivos de programas\DVD Shrink 2008-08-03 20:52 . 2008-08-03 20:52 d-------- C:\Documents and Settings\Usuario\Dados de aplicativos\CyberLink ``` 2008-08-03 09:35 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll 2008-08-03 09:35 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll 2008-08-03 09:35 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui ``` 2008-08-02 09:58 . 2008-08-02 09:58 d-------- C:\Arquivos de programas\phone move locks 2008-08-02 09:52 . 2008-08-02 09:58 d-------- C:\Documents and Settings\Usuario\Contacts 2008-08-02 09:46 . 2008-08-10 11:37 d-------- C:\Arquivos de programas\Windows Live Toolbar 2008-08-02 09:45 . 2008-08-10 11:37 d----c--- C:\WINDOWS\system32\DRVSTORE 2008-08-02 09:33 . 2008-08-09 22:29 d-------- C:\Documents and Settings\All Users\Dados de aplicativos\WLInstaller 2008-08-02 09:33 . 2008-08-10 11:38 d-------- C:\Arquivos de programas\Windows Live 2008-08-02 09:33 . 2008-08-02 09:44 d--hsc--- C:\Arquivos de programas\Arquivos comuns\WindowsLiveInstaller 2008-08-02 09:29 . 2008-08-02 10:00 d-------- C:\Documents and Settings\Usuario\Dados de aplicativos\phone move locks 2008-08-02 09:29 . 2008-08-02 09:59 d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Lies shim upload curb 2008-07-30 22:09 . 2008-07-30 22:09 d-------- C:\Arquivos de programas\EPSON 2008-07-30 16:00 . 2008-08-06 14:21 d-------- C:\Abaco 2008-07-29 13:46 . 2008-08-12 10:43 d-------- C:\VSCIBACK 2008-07-29 12:19 . 2008-07-29 13:49 d-------- C:\SCI 2008-07-29 09:56 . 2008-07-29 09:56 d-------- C:\Arquivos de programas\Google 2008-07-29 09:50 . 2008-07-29 10:44 d-------- C:\WINDOWS\system32\Adobe 2008-07-29 09:22 . 2008-07-29 09:22 d-------- C:\Documents and Settings\Usuario\Dados de aplicativos\AdobeUM 2008-07-29 09:22 . 2008-07-29 09:22 d-------- C:\Arquivos de programas\Arquivos comuns\Adobe 2008-07-29 08:28 . 2008-07-29 08:52 d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Spybot - Search & Destroy 2008-07-29 08:28 . 2008-07-29 08:28 d-------- C:\Arquivos de programas\Spybot - Search & Destroy ``` 2008-07-14 16:01 . 2008-05-09 07:55 180,224 -----c--- C:\WINDOWS\system32\dllcache\scrobj.dll 2008-07-14 16:01 . 2008-05-09 07:55 172,032 -----c--- C:\WINDOWS\system32\dllcache\scrrun.dll 2008-07-14 16:01 . 2008-05-08 08:24 155,648 -----c--- C:\WINDOWS\system32\dllcache\wscript.exe 2008-07-14 16:01 . 2008-05-09 05:45 135,168 -----c--- C:\WINDOWS\system32\dllcache\cscript.exe 2008-07-14 16:01 . 2008-05-09 07:55 90,112 -----c--- C:\WINDOWS\system32\dllcache\wshext.dll 2008-07-12 10:09 . 2008-07-12 10:09 d-------- C:\Arquivos de programas\Motorola 2008-07-12 10:09 . 2006-11-22 06:35 982,272 -ra------ C:\WINDOWS\system32\drivers\smserial.sys 2008-07-12 10:09 . 2006-11-22 06:31 196,608 -ra------ C:\WINDOWS\system32\sm56co6a.dll 2008-07-12 10:09 . 2001-08-17 21:57 16,128 --a------ C:\WINDOWS\system32\drivers\MODEMCSA.sys 2008-07-12 10:09 . 2001-08-17 21:57 16,128 --a--c--- C:\WINDOWS\system32\dllcache\modemcsa.sys . ((((((((((((((((((((((((((((((((((((( Relatório Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-05 13:23 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\avg8 2008-06-20 17:48 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys 2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys 2008-06-14 17:34 272,384 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 14:29 315,392 ----a-w C:\WINDOWS\HideWin.exe . (((((((((((((((((((((((((( Pontos de Carregamento do Registro ))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Nota* entradas vazias & legítimas por defeito não são mostradas. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 19:20 15360] "SpybotSD TeaTimer"="C:\Arquivos de programas\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 09:42 2156368] "Gram Trans"="C:\DOCUME~1\Usuario\DADOSD~1\PHONEM~1\DumbGlue.exe" [2008-08-02 09:58 519168] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-11-28 02:55 98304] "igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-11-28 02:52 77824] "igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-11-28 02:55 118784] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 01:41 8523776] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 01:41 81920] "SMSERIAL"="C:\Arquivos de programas\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 06:31 630784] "upload curb default new"="C:\Documents and Settings\All Users\Dados de aplicativos\Lies shim upload curb\Live Two.exe" [2008-08-12 09:42 1364992] "avast!"="C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 11:38 78008] "SkyTel"="SkyTel.EXE" [2007-06-15 05:45 1826816 C:\WINDOWS\SkyTel.exe] "nwiz"="nwiz.exe" [2007-12-05 01:41 1626112 C:\WINDOWS\system32\nwiz.exe] "RTHDCPL"="RTHDCPL.EXE" [2007-07-05 05:08 16380416 C:\WINDOWS\RTHDCPL.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-13 19:20 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.YV12"= yv12vfw.dll "VIDC.FFDS"= ffdshow.ax [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Arquivos de programas\\Messenger\\msmsgs.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 11:35] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 11:37] *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 . Conteúdo da pasta 'Tarefas Agendadas' 2008-08-12 C:\WINDOWS\Tasks\AA33611F91BD12AF.job - c:\docume~1\usuario\dadosd~1\phonem~1\LONGLOAD32.exe [2008-08-02 10:00] . - - - - ORFAOS REMOVIDOS - - - - HKCU-Run-msnmsgr - C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe . ------- Ccan Suplementar ------- . O8 -: E&xportar para o Microsoft Excel - C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [http://www.gmer.net](http://www.gmer.net) Rootkit scan 2008-08-12 10:55:07 Windows 5.1.2600 Service Pack 3 NTFS Procurando processos ocultos ... Procurando entradas auto inicializáveis ocultas ... Procurando ficheiros ocultos ... Varredura completada com sucesso Ficheiros ocultos: 0 ************************************************************************** . Tempo para conclusão: 2008-08-12 10:55:37 ComboFix-quarantined-files.txt 2008-08-12 13:55:35 Pre-Run: 12 pasta(s) 68,670,840,832 bytes disponíveis Post-Run: 15 pasta(s) 68,671,553,536 bytes disponíveis 141 --- E O F --- 2008-08-06 20:55:23

fvo

Problema no WIndows

[Resolvido!] Janelas cid: