Ir para conteúdo
Fórum Script Brasil

crazyfrog

Membros
 Perfil  Explorar Conteúdo

  • Total de itens

    4

  • Registro em

  • Última visita

 Tipo de Conteúdo 

Posts postados por crazyfrog

  1. VIRUS Autorun.inf e Mvmdh.exe

    em Remoção De Malwares

    Postado

    Não encontrei a pasta de destino que você me pediu para procurar e excluir.

    Então apenas fiz a outra log do HijackThis...

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at | L. AnDreY | 05:38:33, on 19/9/2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

    C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

    C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\WINDOWS\Explorer.EXE

    C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe

    C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe

    C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Arquivos de programas\Mozilla Firefox\firefox.exe

    C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe

    C:\Documents and Settings\BITWAY\Desktop\HiJackThis.exe

    O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui

    O4 - HKLM\..\Run: [avgnt] "C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe" /min

    O4 - HKLM\..\Run: [sXe Injected] C:\Arquivos de programas\sXe Injected\sXe Injected.exe

    O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O23 - Service: Avira AntiVir Programador (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    --

    End of file - 2558 bytes

    Aí está.

  3. VIRUS Autorun.inf e Mvmdh.exe

    em Remoção De Malwares

    Postado

    Obrigado pela ajuda, a unidade C: e D: já esta sendo executada corretamente:

    aqui esta o log do Hjackthis:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at | L. AnDreY | 20:59:10, on 11/9/2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

    C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

    C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\wuauclt.exe

    C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe

    C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe

    C:\Arquivos de programas\Mozilla Firefox\firefox.exe

    C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe

    C:\Documents and Settings\BITWAY\Desktop\HiJackThis.exe

    O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui

    O4 - HKLM\..\Run: [avgnt] "C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe" /min

    O4 - HKLM\..\Run: [sXe Injected] C:\Arquivos de programas\sXe Injected\sXe Injected.exe

    O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O23 - Service: Avira AntiVir Programador (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe

    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    --

    End of file - 2591 bytes

    PenClean:

    Iniciando relatório do PenClean 2.0.6-20090606

    Por Renato Victor Mejias

    renatomejias@yahoo.com.br

    11/9/2010 20:51:02

    -----------------------------------------------------------

    Arquivos excluídos do computador (Automa.H):

    C:\WINDOWS\System32\autorun.inf foi deletado com sucesso!

    -----------------------------------------------------------

    Arquivos excluídos da unidade escolhida:

    C:\autorun.inf foi deletado com sucesso!

    D:\autorun.inf foi deletado com sucesso!

    -----------------------------------------------------------

    Fim da análise no computador.

    -----------------------------------------------------------

    O volume na unidade C nÆo tem nome.

    O n£mero de s‚rie do volume ‚ 2085-BDFD

    Pasta de C:\

    13/05/2010 | L. AnDreY | 09:52 <DIR> $AVG8.VAULT$

    11/09/2010 | L. AnDreY | 07:26 <DIR> Arquivos de programas

    17/01/2010 | L. AnDreY | 08:03 0 AUTOEXEC.BAT

    02/09/2010 | L. AnDreY | 06:09 211 boot.ini

    14/04/2008 | L. AnDreY | 09:00 4.952 Bootfont.bin

    17/01/2010 | L. AnDreY | 08:03 0 CONFIG.SYS

    30/04/2003 | L. AnDreY | 10:55 249.856 Core.dll

    02/04/2003 | L. AnDreY | 18:07 61.440 dbg.dll

    17/01/2010 | L. AnDreY | 08:16 <DIR> Documents and Settings

    06/09/2010 | L. AnDreY | 02:04 <DIR> dod

    09/09/2010 | L. AnDreY | 21:38 <DIR> downloads

    23/04/2003 | L. AnDreY | 10:27 110.592 FileSystem_Stdio.dll

    28/04/2003 | L. AnDreY | 11:40 319.488 hlds.exe

    30/04/2003 | L. AnDreY | 20:47 20.822 hlserver_readme.txt

    30/04/2003 | L. AnDreY | 21:20 24.188 HLTV-Readme.txt

    30/04/2003 | L. AnDreY | 10:12 1.569 hltv.cfg

    30/04/2003 | L. AnDreY | 10:56 90.112 hltv.exe

    04/03/2010 | L. AnDreY | 16:03 0 hpzids01.log

    25/03/2003 | L. AnDreY | 14:58 1.114.822 hw.dll

    06/09/2010 | L. AnDreY | 02:04 142.552 INSTALL.LOG

    17/01/2010 | L. AnDreY | 08:03 0 IO.SYS

    20/02/2010 | L. AnDreY | 09:49 0 khw

    17/01/2010 | L. AnDreY | 14:45 0 LOG.TXT

    17/01/2010 | L. AnDreY | 08:03 0 MSDOS.SYS

    28/07/2010 | L. AnDreY | 23:18 <DIR> My Music

    09/06/2010 | L. AnDreY | 14:41 <DIR> Novapasta

    14/04/2008 | L. AnDreY | 09:00 47.564 NTDETECT.COM

    14/04/2008 | L. AnDreY | 09:00 251.696 ntldr

    06/09/2010 | L. AnDreY | 17:26 <DIR> output

    11/09/2010 | L. AnDreY | 20:17 402.653.184 pagefile.sys

    11/09/2010 | L. AnDreY | 20:53 <DIR> PenClean

    06/09/2010 | L. AnDreY | 02:03 <DIR> platform

    30/04/2003 | L. AnDreY | 10:54 188.416 proxy.dll

    17/01/2010 | L. AnDreY | 08:56 <DIR> RECYCLER

    28/04/2003 | L. AnDreY | 13:29 2.969.600 Steam_1110.dll

    25/03/2003 | L. AnDreY | 14:58 1.018.693 sw.dll

    30/04/2003 | L. AnDreY | 10:27 1.531.904 swds.dll

    17/01/2010 | L. AnDreY | 08:14 <DIR> System Volume Information

    06/09/2010 | L. AnDreY | 02:03 <DIR> valve

    28/04/2003 | L. AnDreY | 11:40 221.243 vgui2.dll

    11/09/2010 | L. AnDreY | 07:33 <DIR> WINDOWS

    27 arquivo(s) 411.022.904 bytes

    14 pasta(s) 28.554.248.192 bytes dispon¡veis

    Aí esta os Logs, desde já agradeço.

  4. VIRUS Autorun.inf e Mvmdh.exe

    em Remoção De Malwares

    Postado

    :( Não estou conseguindo remover estes virus do meu computador, já tentei vários sites e ajudas e não consegui remover, nem manualmente.

    O virus Autorun.inf não me permiti abrir o C: simplismente com dois cliques, preciso clicar com o botão direito em explorar...

    O mvmdh.exe não sei ao certo...

    mas ambos os virus não param de me apresentar ameaças, toda hora o meu anti-vírus da um alerta, não agoento mais isso.

    Preciso de ajuda, aqui esta o LOG:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at | L. AnDreY | 06:01:39, on 11/9/2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\windows\system32\ejnbx.exe

    C:\windows\gtieu.exe

    C:\windows\system\bnrrk.exe

    C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    c:\windows\inf\xlfks.exe

    C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

    c:\arquivos de programas\arquivos comuns\krkak.exe

    c:\windows\config\aakyx.exe

    C:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe

    c:\windows\system32\taeux.exe

    C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

    C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    C:\Arquivos de programas\Alwil Software\Avast5\avastUI.exe

    C:\WINDOWS\system32\mmc.exe

    C:\WINDOWS\system32\DfrgNtfs.exe

    C:\Arquivos de programas\Mozilla Firefox\firefox.exe

    C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe

    C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbam.exe

    C:\Documents and Settings\BITWAY\Desktop\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.localstrike.com.ar/

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/home?AF=14542

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.localstrike.com.ar/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.localstrike.com.ar/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.localstrike.com.ar/

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.localstrike.com.ar/

    R3 - URLSearchHook: FreeOnlineRadioPlayerRecorder Toolbar - {f999a48b-1950-4d81-9971-79018f807b4b} - C:\Arquivos de programas\FreeOnlineRadioPlayerRecorder\tbFree.dll

    R3 - URLSearchHook: Babylon-English Toolbar - {ce18769b-c7fa-42d2-860d-17c4662c70ad} - C:\Arquivos de programas\Babylon-English\tbBaby.dll

    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Bho - Browser helper object - {19F6F6ED-BD98-4740-BDC9-F019381AB7CA} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: Bho - Browser helper object - {22F4FBF5-DE1F-401C-B6EE-E0794EA52E31} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: Bho - Browser helper object - {36E2C9CC-76BA-4598-9000-58D32A790A4B} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: Bho - Browser helper object - {51BC73EC-110E-479D-B62B-1234F2AC396D} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Arquivos de programas\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

    O2 - BHO: Bho - Browser helper object - {7B0BCCC1-5D89-419F-A715-1BDBF04BEF20} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: Bho - Browser helper object - {818618C4-DEB9-465C-9C44-113BC748A9EA} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: Bho - Browser helper object - {8E5B6C16-DEBB-43AC-8F93-F6EC79D1DD87} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: (no name) - {8e8f7f2c-f2e2-71b7-d609-ddbba6acc7f4} - (no file)

    O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Bho - Browser helper object - {B306906A-6429-4CE1-B8CD-7D8A40ED9538} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: Bho - Browser helper object - {C3D906BB-82C0-455E-B68A-39E07C309312} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: Babylon-English Toolbar - {ce18769b-c7fa-42d2-860d-17c4662c70ad} - C:\Arquivos de programas\Babylon-English\tbBaby.dll

    O2 - BHO: Bho - Browser helper object - {D4B066DA-0E33-4F7C-A8F1-2D3D404D978B} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll

    O2 - BHO: Bho - Browser helper object - {E3FD4336-0B13-42A4-85A0-AA7B1EAE4527} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O2 - BHO: (no name) - {edbca961-4bf8-4cbe-8c63-a11dff9ed2d9} - (no file)

    O2 - BHO: FreeOnlineRadioPlayerRecorder Toolbar - {f999a48b-1950-4d81-9971-79018f807b4b} - C:\Arquivos de programas\FreeOnlineRadioPlayerRecorder\tbFree.dll

    O2 - BHO: Bho - Browser helper object - {FC6C4C3B-69DE-4A52-BAAD-2AD8E8A5262B} - C:\ARQUIV~1\INTERN~1\pdm2.dll

    O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll

    O3 - Toolbar: FreeOnlineRadioPlayerRecorder Toolbar - {f999a48b-1950-4d81-9971-79018f807b4b} - C:\Arquivos de programas\FreeOnlineRadioPlayerRecorder\tbFree.dll

    O3 - Toolbar: Babylon-English Toolbar - {ce18769b-c7fa-42d2-860d-17c4662c70ad} - C:\Arquivos de programas\Babylon-English\tbBaby.dll

    O4 - HKLM\..\Run: [sXe Injected] C:\Arquivos de programas\sXe Injected\sXe Injected.exe

    O4 - HKLM\..\Run: [tDefault] c:\windows\system32\ejnbx.exe

    O4 - HKLM\..\Run: [settings] c:\windows\gtieu.exe

    O4 - HKLM\..\Run: [systemT] c:\windows\system\bnrrk.exe

    O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui

    O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

    O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\BITWAY\CONFIG~1\Temp\herss.exe

    O4 - HKCU\..\Run: [api32] C:\DOCUME~1\BITWAY\CONFIG~1\Temp\apiqq.exe

    O4 - HKCU\..\Run: [RSetting] c:\windows\inf\xlfks.exe

    O4 - HKCU\..\Run: [userTools] c:\arquivos de programas\arquivos comuns\krkak.exe

    O4 - HKCU\..\Run: [CheckS] c:\windows\config\aakyx.exe

    O4 - HKCU\..\Run: [DeviceSys] c:\windows\system32\taeux.exe

    O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Google Sidewiki... - res://C:\Arquivos de programas\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

    O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Arquivos de programas\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Arquivos de programas\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

    O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O22 - SharedTaskScheduler: Pré-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Daemon de cache de categorias de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    O23 - Service: ProtexisLicensing - Unknown owner - C:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PSIService.exe

    eu tentei clicar em Fix Checked, e então reiniciei em modo segurança, depois voltei pro modo iniciar normalmente (este log que eu postei foi o que eu fiz antes de fazer o processo de Fix Checked, e log atual é este.

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at | L. AnDreY | 06:47:41, on 11/9/2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    C:\WINDOWS\Explorer.EXE

    C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\Arquivos de programas\Mozilla Firefox\firefox.exe

    C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe

    C:\Documents and Settings\BITWAY\Desktop\HiJackThis.exe

    O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui

    O23 - Service: avast! Antivirus - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

    Talvez o vírus continua no pc, não está dando alerta, mas o meu DISCO C: não esta abrindo normalmente, então acho que os virus continuam no PC, se talvez o problema seja apenas uma configuração por favor me digam o que fazer ...

    Desde já agradeço.

×
×
  • Criar Novo...