crazyfrog

Não encontrei a pasta de destino que você me pediu para procurar e excluir. Então apenas fiz a outra log do HijackThis... Logfile of Trend Micro HijackThis v2.0.4 Scan saved at | L. AnDreY | 05:38:33, on 19/9/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe C:\WINDOWS\system32\spoolsv.exe C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe C:\Arquivos de programas\Java\jre6\bin\jqs.exe C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\Explorer.EXE C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\ctfmon.exe C:\Arquivos de programas\Mozilla Firefox\firefox.exe C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\BITWAY\Desktop\HiJackThis.exe O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui O4 - HKLM\..\Run: [avgnt] "C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [sXe Injected] C:\Arquivos de programas\sXe Injected\sXe Injected.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O23 - Service: Avira AntiVir Programador (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe -- End of file - 2558 bytes Aí está.

não, eu que coloco meu nome alí, acho que foi por isso que você deve ter feito esta pergunta. Eu só coloco para deixar "legal" Vou na data e hora e coloco entre " 'exemplo' " aí ficam eu nome, só isso. E obrigado pela ajuda novamente.

Obrigado pela ajuda, a unidade C: e D: já esta sendo executada corretamente: aqui esta o log do Hjackthis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at | L. AnDreY | 20:59:10, on 11/9/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe C:\WINDOWS\system32\spoolsv.exe C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe C:\Arquivos de programas\Java\jre6\bin\jqs.exe C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wuauclt.exe C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe C:\Arquivos de programas\Mozilla Firefox\firefox.exe C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\ctfmon.exe C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\BITWAY\Desktop\HiJackThis.exe O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui O4 - HKLM\..\Run: [avgnt] "C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [sXe Injected] C:\Arquivos de programas\sXe Injected\sXe Injected.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O23 - Service: Avira AntiVir Programador (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe -- End of file - 2591 bytes PenClean: Iniciando relatório do PenClean 2.0.6-20090606 Por Renato Victor Mejias renatomejias@yahoo.com.br 11/9/2010 20:51:02 ----------------------------------------------------------- Arquivos excluídos do computador (Automa.H): C:\WINDOWS\System32\autorun.inf foi deletado com sucesso! ----------------------------------------------------------- Arquivos excluídos da unidade escolhida: C:\autorun.inf foi deletado com sucesso! D:\autorun.inf foi deletado com sucesso! ----------------------------------------------------------- Fim da análise no computador. ----------------------------------------------------------- O volume na unidade C nÆo tem nome. O n£mero de s‚rie do volume ‚ 2085-BDFD Pasta de C:\ 13/05/2010 | L. AnDreY | 09:52 <DIR> $AVG8.VAULT$ 11/09/2010 | L. AnDreY | 07:26 <DIR> Arquivos de programas 17/01/2010 | L. AnDreY | 08:03 0 AUTOEXEC.BAT 02/09/2010 | L. AnDreY | 06:09 211 boot.ini 14/04/2008 | L. AnDreY | 09:00 4.952 Bootfont.bin 17/01/2010 | L. AnDreY | 08:03 0 CONFIG.SYS 30/04/2003 | L. AnDreY | 10:55 249.856 Core.dll 02/04/2003 | L. AnDreY | 18:07 61.440 dbg.dll 17/01/2010 | L. AnDreY | 08:16 <DIR> Documents and Settings 06/09/2010 | L. AnDreY | 02:04 <DIR> dod 09/09/2010 | L. AnDreY | 21:38 <DIR> downloads 23/04/2003 | L. AnDreY | 10:27 110.592 FileSystem_Stdio.dll 28/04/2003 | L. AnDreY | 11:40 319.488 hlds.exe 30/04/2003 | L. AnDreY | 20:47 20.822 hlserver_readme.txt 30/04/2003 | L. AnDreY | 21:20 24.188 HLTV-Readme.txt 30/04/2003 | L. AnDreY | 10:12 1.569 hltv.cfg 30/04/2003 | L. AnDreY | 10:56 90.112 hltv.exe 04/03/2010 | L. AnDreY | 16:03 0 hpzids01.log 25/03/2003 | L. AnDreY | 14:58 1.114.822 hw.dll 06/09/2010 | L. AnDreY | 02:04 142.552 INSTALL.LOG 17/01/2010 | L. AnDreY | 08:03 0 IO.SYS 20/02/2010 | L. AnDreY | 09:49 0 khw 17/01/2010 | L. AnDreY | 14:45 0 LOG.TXT 17/01/2010 | L. AnDreY | 08:03 0 MSDOS.SYS 28/07/2010 | L. AnDreY | 23:18 <DIR> My Music 09/06/2010 | L. AnDreY | 14:41 <DIR> Novapasta 14/04/2008 | L. AnDreY | 09:00 47.564 NTDETECT.COM 14/04/2008 | L. AnDreY | 09:00 251.696 ntldr 06/09/2010 | L. AnDreY | 17:26 <DIR> output 11/09/2010 | L. AnDreY | 20:17 402.653.184 pagefile.sys 11/09/2010 | L. AnDreY | 20:53 <DIR> PenClean 06/09/2010 | L. AnDreY | 02:03 <DIR> platform 30/04/2003 | L. AnDreY | 10:54 188.416 proxy.dll 17/01/2010 | L. AnDreY | 08:56 <DIR> RECYCLER 28/04/2003 | L. AnDreY | 13:29 2.969.600 Steam_1110.dll 25/03/2003 | L. AnDreY | 14:58 1.018.693 sw.dll 30/04/2003 | L. AnDreY | 10:27 1.531.904 swds.dll 17/01/2010 | L. AnDreY | 08:14 <DIR> System Volume Information 06/09/2010 | L. AnDreY | 02:03 <DIR> valve 28/04/2003 | L. AnDreY | 11:40 221.243 vgui2.dll 11/09/2010 | L. AnDreY | 07:33 <DIR> WINDOWS 27 arquivo(s) 411.022.904 bytes 14 pasta(s) 28.554.248.192 bytes dispon¡veis Aí esta os Logs, desde já agradeço.

:( Não estou conseguindo remover estes virus do meu computador, já tentei vários sites e ajudas e não consegui remover, nem manualmente. O virus Autorun.inf não me permiti abrir o C: simplismente com dois cliques, preciso clicar com o botão direito em explorar... O mvmdh.exe não sei ao certo... mas ambos os virus não param de me apresentar ameaças, toda hora o meu anti-vírus da um alerta, não agoento mais isso. Preciso de ajuda, aqui esta o LOG: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at | L. AnDreY | 06:01:39, on 11/9/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\windows\system32\ejnbx.exe C:\windows\gtieu.exe C:\windows\system\bnrrk.exe C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\ctfmon.exe C:\Arquivos de programas\Java\jre6\bin\jqs.exe c:\windows\inf\xlfks.exe C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE c:\arquivos de programas\arquivos comuns\krkak.exe c:\windows\config\aakyx.exe C:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe c:\windows\system32\taeux.exe C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe C:\Arquivos de programas\Alwil Software\Avast5\avastUI.exe C:\WINDOWS\system32\mmc.exe C:\WINDOWS\system32\DfrgNtfs.exe C:\Arquivos de programas\Mozilla Firefox\firefox.exe C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbam.exe C:\Documents and Settings\BITWAY\Desktop\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.localstrike.com.ar/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/home?AF=14542 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.localstrike.com.ar/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.localstrike.com.ar/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.localstrike.com.ar/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.localstrike.com.ar/ R3 - URLSearchHook: FreeOnlineRadioPlayerRecorder Toolbar - {f999a48b-1950-4d81-9971-79018f807b4b} - C:\Arquivos de programas\FreeOnlineRadioPlayerRecorder\tbFree.dll R3 - URLSearchHook: Babylon-English Toolbar - {ce18769b-c7fa-42d2-860d-17c4662c70ad} - C:\Arquivos de programas\Babylon-English\tbBaby.dll O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Bho - Browser helper object - {19F6F6ED-BD98-4740-BDC9-F019381AB7CA} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: Bho - Browser helper object - {22F4FBF5-DE1F-401C-B6EE-E0794EA52E31} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: Bho - Browser helper object - {36E2C9CC-76BA-4598-9000-58D32A790A4B} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: Bho - Browser helper object - {51BC73EC-110E-479D-B62B-1234F2AC396D} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Arquivos de programas\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Bho - Browser helper object - {7B0BCCC1-5D89-419F-A715-1BDBF04BEF20} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: Bho - Browser helper object - {818618C4-DEB9-465C-9C44-113BC748A9EA} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: Bho - Browser helper object - {8E5B6C16-DEBB-43AC-8F93-F6EC79D1DD87} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: (no name) - {8e8f7f2c-f2e2-71b7-d609-ddbba6acc7f4} - (no file) O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Bho - Browser helper object - {B306906A-6429-4CE1-B8CD-7D8A40ED9538} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: Bho - Browser helper object - {C3D906BB-82C0-455E-B68A-39E07C309312} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: Babylon-English Toolbar - {ce18769b-c7fa-42d2-860d-17c4662c70ad} - C:\Arquivos de programas\Babylon-English\tbBaby.dll O2 - BHO: Bho - Browser helper object - {D4B066DA-0E33-4F7C-A8F1-2D3D404D978B} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll O2 - BHO: Bho - Browser helper object - {E3FD4336-0B13-42A4-85A0-AA7B1EAE4527} - C:\ARQUIV~1\INTERN~1\pdm2.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: (no name) - {edbca961-4bf8-4cbe-8c63-a11dff9ed2d9} - (no file) O2 - BHO: FreeOnlineRadioPlayerRecorder Toolbar - {f999a48b-1950-4d81-9971-79018f807b4b} - C:\Arquivos de programas\FreeOnlineRadioPlayerRecorder\tbFree.dll O2 - BHO: Bho - Browser helper object - {FC6C4C3B-69DE-4A52-BAAD-2AD8E8A5262B} - C:\ARQUIV~1\INTERN~1\pdm2.dll O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: FreeOnlineRadioPlayerRecorder Toolbar - {f999a48b-1950-4d81-9971-79018f807b4b} - C:\Arquivos de programas\FreeOnlineRadioPlayerRecorder\tbFree.dll O3 - Toolbar: Babylon-English Toolbar - {ce18769b-c7fa-42d2-860d-17c4662c70ad} - C:\Arquivos de programas\Babylon-English\tbBaby.dll O4 - HKLM\..\Run: [sXe Injected] C:\Arquivos de programas\sXe Injected\sXe Injected.exe O4 - HKLM\..\Run: [tDefault] c:\windows\system32\ejnbx.exe O4 - HKLM\..\Run: [settings] c:\windows\gtieu.exe O4 - HKLM\..\Run: [systemT] c:\windows\system\bnrrk.exe O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\BITWAY\CONFIG~1\Temp\herss.exe O4 - HKCU\..\Run: [api32] C:\DOCUME~1\BITWAY\CONFIG~1\Temp\apiqq.exe O4 - HKCU\..\Run: [RSetting] c:\windows\inf\xlfks.exe O4 - HKCU\..\Run: [userTools] c:\arquivos de programas\arquivos comuns\krkak.exe O4 - HKCU\..\Run: [CheckS] c:\windows\config\aakyx.exe O4 - HKCU\..\Run: [DeviceSys] c:\windows\system32\taeux.exe O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Arquivos de programas\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Arquivos de programas\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Arquivos de programas\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O22 - SharedTaskScheduler: Pré-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Daemon de cache de categorias de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe eu tentei clicar em Fix Checked, e então reiniciei em modo segurança, depois voltei pro modo iniciar normalmente (este log que eu postei foi o que eu fiz antes de fazer o processo de Fix Checked, e log atual é este. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at | L. AnDreY | 06:47:41, on 11/9/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe C:\WINDOWS\Explorer.EXE C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe C:\WINDOWS\system32\spoolsv.exe C:\Arquivos de programas\Java\jre6\bin\jqs.exe C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Arquivos de programas\Mozilla Firefox\firefox.exe C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\BITWAY\Desktop\HiJackThis.exe O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe Talvez o vírus continua no pc, não está dando alerta, mas o meu DISCO C: não esta abrindo normalmente, então acho que os virus continuam no PC, se talvez o problema seja apenas uma configuração por favor me digam o que fazer ... Desde já agradeço.