|
|
#1
4. De dezembro de 2007, 11:10
| |||
| |||
| Oi Pessoal, Eu olhei em torno deste forum e muitos outros sites, à procura de uma solução para o meu problema. I've deparamos algumas threads diferentes sobre esse vírus, por isso peço desculpa por fazer uma nova, mas eu tentei as correções descritas nos referidos, e não recebi qualquer mais perto de se livrar dessa coisa. Quando abro o Gerenciador de Tarefas, existem 2 'iexplore.exe' processos em execução, normalmente utilizando um cerca de 10.000 K da madame, enquanto o outro é normalmente cerca de 40.000 K. Estes processos estão lá, embora eu não estou usando o Internet Explorer. Se eu tentar terminando estes processos, eles automaticamente retorno. Eu também estou recebendo internet explorer pop cada poucos minutos, o que eu estou assumindo que isso está causando. De qualquer forma, aqui está meu HijackThis log. Logfile do HijackThis v1.99.1 Scan guardado em 2:08:19, em 12/4/2007 Plataforma: Windows XP SP2 (WinNT 5/01/2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Executando processos: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7/5 \ guard.exe C: \ WINDOWS \ system32 \ CTsvcCDA.exe C: \ WINDOWS \ system32 \ nvsvc32.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ UAService7.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ rundll32.exe C: \ WINDOWS \ RTHDCPL.EXE C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ ISUSPM.exe C: \ Arquivos de Programas \ Internet Explorer \ iexplore.exe C: \ Program Files \ Creative \ MediaSource \ Detector \ CTDetect.exe C: \ Arquivos de Programas \ Internet Explorer \ iexplore.exe C: \ WINDOWS \ system32 \ wscntfy.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Microsoft Office \ OFFICE11 \ WINWORD.EXE C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ MSN Messenger \ msnmsgr.exe C: \ Program Files \ MSN Messenger \ livecall.exe C: \ Program Files \ MSN Messenger \ usnsvc.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ Program Files \ HijackThis \ HijackThis.exe O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Arquivos de Programas \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - (39F7E362-828A-4B5A-BCAF-5B79BFDFEA60) - C: \ Program Files \ BitComet \ tools \ BitCometBHO_1.1.7.4.dll O2 - BHO: (no name) - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Arquivos de Programas \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [SkyTel] SkyTel.EXE O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [Ã] "C: \ Program Files \ WinCustomize \ Ã \ logonstudio.exe" / RANDOM O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot O4 - HKLM \ .. \ Run: [organismo ferramenta segura drv] C: \ Documents and Settings \ All Users \ Application Data \ activo movimento corporal segura \ media bone.exe O4 - HKLM \ .. \ Run: [! AVG Anti-Spyware] "C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7/5 \ avgas.exe" / minimizada O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ MSN Messenger \ MsnMsgr.Exe" / background O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-quiet O4 - HKCU \ .. \ Run: [JoyAxis] C: \ DOCUME ~ 1 \ KENFAR ~ 1 \ Applic ~ 1 \ USERFL ~ 1 \ Vc cool.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [ISUSPM] "C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ ISUSPM.exe"-scheduler O4 - HKCU \ .. \ Run: [Creative Detector] "C: \ Program Files \ Creative \ MediaSource \ Detector \ CTDetect.exe" / R O4 - HKCU \ .. \ Run: [Uniblue RegistryBooster 2] C: \ Program Files \ Uniblue \ RegistryBooster 2 \ RegistryBooster.exe / S O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Arquivos de Programas \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O8 - Extra context menu item: & D & ownload & com BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddLink.htm O8 - Extra context menu item: & D & ownload all vídeo com BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddVideo.htm O8 - Extra context menu item: & D & ownload all with BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddAllLink.htm O8 - Extra context menu item: E & xportar para o Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ EXCEL.EXE/3000 O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra button: BitComet Search - (461CC20B-FB6E-4f16-8FE8-C29359DB100E) - C: \ Program Files \ BitComet \ tools \ BitCometBHO_1.1.7.4.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ REFIEBAR.DLL O9 - Extra button: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (00B71CFB-6864-4346-A978-C0A14556272C) (Checkers Class) -- http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: (20A60F0D-9AFA-4515-A0FD-83BD84642501) (Checkers Class) -- http://messenger.zone.msn.com/binary...r.cab56986.cab O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx1.mail.live.com/mail/w1/re...s/MSNPUpld.cab O16 - DPF: (5F8469B4-B055-49DD-83F7-62B522420ECC) (Facebook Photo Uploader Control) -- http://upload.facebook.com/controls/...toUploader.cab O16 - DPF: (8E0D4DE5-3180-4024-A327-4DFAD1796A8D) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: (BAE1D8DF-0B35-47E3-A1E7-EEB3FF2ECD19) (CPlayFirstddfotgControl Object) -- http://www.shockwave.com/content/din...g.1.0.0.33.cab O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab56907.cab O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab O16 - DPF: (DF780F87-FF2B-4DF8-92D0-73DB16A1543A) (PopCapLoader Object) -- http://www.shockwave.com/content/bej...loader_v10.cab O16 - DPF: (F04A8AE2-A59D-11D2-8792-00C04F8EF29D) (Hotmail Anexos Controle) -- http://by111fd.bay111.hotmail.msn.co...x/HMAtchmt.ocx O18 - Protocol: livecall - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL O18 - Protocol: msnim - (828030A1-22C1-4009-854F-8E305202313F) - C: \ PROGRA ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL O20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ system32 \ WgaLogon.dll O23 - Service: AVG Anti-Spyware Guard - Grisoft sro - C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7/5 \ guard.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C: \ WINDOWS \ system32 \ CTsvcCDA.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner -% ProgramFiles% \ WinPcap \ rpcapd.exe "-d-f"% ProgramFiles% \ WinPcap \ rpcapd.ini (file missing) O23 - Service: Securom User Access Service (V7) (UserAccess7) - Unknown owner - C: \ WINDOWS \ system32 \ UAService7.exe |
|
#2
4 de dezembro de 2007, 12:22
| |||
| |||
| Bem-vindo ao TCF. Duas perguntas, antes de continuar. 1. Por que não há antivírus correr? 2. Você tem o Firewall do Windows ligado?
__________________  |
|
#3
4 de dezembro de 2007, 12:45
| |||
| |||
| Firewall do Windows está ligado, e eu não tiver um anti-vírus no aqui agora (ruim, eu sei) |
|
#5
4 de dezembro de 2007, 13:19
| |||
| |||
| ok, ele é instalado. |
|
#6
4 de dezembro de 2007, 13:27
| |||
| |||
| Permitir visualização de arquivos de sistema e pastas ocultas 1. Clique em Direito Iniciar. 2. Selecione Painel de Controle. 3. Selecione o Ferramentas menu e clique em Opções de Pasta. 4. Selecione o Ver guia. 5. Sob a rubrica pastas e arquivos ocultos selecione Mostrar pastas e arquivos ocultos. 6. Desmarque Ocultar as extensões dos tipos de arquivo conhecidos opção. 7. Desmarque Ocultar os arquivos protegidos do sistema operacional (recomendado) opção. 8. Clique Aplicar. 9. Clique OK. -------------------- 1. Reboot em Modo de Segurança * Para entrar no Modo de Segurança. Reinicie o PC, e como o computador está inicializando começar a tocar "F8 Key". * Use a sua seta para mover para "Safe Mode" e pressione a tecla Enter. 2. Abrir HijackThis e selecione Fazer um sistema de verificação e só então colocar uma marca de verificação ao lado: O4 - HKLM \ .. \ Run: [organismo ferramenta segura drv] C: \ Documents and Settings \ All Users \ Application Data \ activo movimento corporal segura \ media bone.exe O4 - HKCU \ .. \ Run: [JoyAxis] C: \ DOCUME ~ 1 \ KENFAR ~ 1 \ Applic ~ 1 \ USERFL ~ 1 \ Vc cool.exe Agora, clique em Fix controlados. 3. Duplo clique em Meu Computador na área de trabalho e localize os seguintes arquivos / pastas e excluí-las (se houver) C: \ WINDOWS \ system32 \ cool.exe C: \ Documents and Settings \ KENFAR ~ 1 \ Application Data \ USERFL ~ 1 \ Vc cool.exe (o ~ 1 é o caminho abreviado) C: \ Documents and Settings \ All Users \ Application Data \ activo movimento corporal segura \ media bone.exe C: \ WINDOWS \ system32 \ media bone.exe Reiniciar em modo de inicialização normal. -------------------- Desinstale a cópia do HijackThis que você tem e instalar a nova versão a partir de Este Link Depois, um novo log HijackThis.
__________________ |
|
#7
4 de dezembro de 2007, 13:40
| |||
| |||
| Logfile da Trend Micro HijackThis v2.0.2 Scan guardado em 4:40:27, em 12/4/2007 Plataforma: Windows XP SP2 (WinNT 5/01/2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Executando processos: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ Services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7/5 \ guard.exe C: \ WINDOWS \ RTHDCPL.EXE C: \ WINDOWS \ system32 \ CTsvcCDA.exe C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ WINDOWS \ system32 \ nvsvc32.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe C: \ WINDOWS \ system32 \ UAService7.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ ISUSPM.exe C: \ Program Files \ Creative \ MediaSource \ Detector \ CTDetect.exe C: \ Arquivos de Programas \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Arquivos de Programas \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - (39F7E362-828A-4B5A-BCAF-5B79BFDFEA60) - C: \ Program Files \ BitComet \ tools \ BitCometBHO_1.1.7.4.dll O2 - BHO: (no name) - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Arquivos de Programas \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [SkyTel] SkyTel.EXE O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [Ã] "C: \ Program Files \ WinCustomize \ Ã \ logonstudio.exe" / RANDOM O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot O4 - HKLM \ .. \ Run: [! AVG Anti-Spyware] "C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7/5 \ avgas.exe" / minimizada O4 - HKLM \ .. \ Run: [avast!] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ MSN Messenger \ MsnMsgr.Exe" / background O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-quiet O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [ISUSPM] "C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ ISUSPM.exe"-scheduler O4 - HKCU \ .. \ Run: [Creative Detector] "C: \ Program Files \ Creative \ MediaSource \ Detector \ CTDetect.exe" / R O4 - HKCU \ .. \ Run: [Uniblue RegistryBooster 2] C: \ Program Files \ Uniblue \ RegistryBooster 2 \ RegistryBooster.exe / S O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Arquivos de Programas \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O8 - Extra context menu item: & D & ownload & com BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddLink.htm O8 - Extra context menu item: & D & ownload all vídeo com BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddVideo.htm O8 - Extra context menu item: & D & ownload all with BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddAllLink.htm O8 - Extra context menu item: E & xportar para o Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ EXCEL.EXE/3000 O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra button: BitComet Search - (461CC20B-FB6E-4f16-8FE8-C29359DB100E) - C: \ Program Files \ BitComet \ tools \ BitCometBHO_1.1.7.4.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ OFFICE11 \ REFIEBAR.DLL O9 - Extra button: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (00B71CFB-6864-4346-A978-C0A14556272C) (Checkers Class) -- http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: (20A60F0D-9AFA-4515-A0FD-83BD84642501) (Checkers Class) -- http://messenger.zone.msn.com/binary...r.cab56986.cab O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx1.mail.live.com/mail/w1/re...s/MSNPUpld.cab O16 - DPF: (5F8469B4-B055-49DD-83F7-62B522420ECC) (Facebook Photo Uploader Control) -- http://upload.facebook.com/controls/...toUploader.cab O16 - DPF: (8E0D4DE5-3180-4024-A327-4DFAD1796A8D) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: (BAE1D8DF-0B35-47E3-A1E7-EEB3FF2ECD19) (CPlayFirstddfotgControl Object) -- http://www.shockwave.com/content/din...g.1.0.0.33.cab O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab56907.cab O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab O16 - DPF: (DF780F87-FF2B-4DF8-92D0-73DB16A1543A) (PopCapLoader Object) -- http://www.shockwave.com/content/bej...loader_v10.cab O16 - DPF: (F04A8AE2-A59D-11D2-8792-00C04F8EF29D) (Hotmail Anexos Controle) -- http://by111fd.bay111.hotmail.msn.co...x/HMAtchmt.ocx O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - Grisoft sro - C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7/5 \ guard.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C: \ WINDOWS \ system32 \ CTsvcCDA.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C: \ Program Files \ WinPcap \ rpcapd.exe O23 - Service: Securom User Access Service (V7) (UserAccess7) - Unknown owner - C: \ WINDOWS \ system32 \ UAService7.exe -- Fim do processo - 7759 bytes |
|
#8
4 de dezembro de 2007, 13:53
| |||
| |||
| O log parece boa, como é o computador agora?
__________________ |
|
#9
4 de dezembro de 2007, 14:15
| |||
| |||
| É grande trabalho agora. o iexplore.exe tarefas não voltar, eu não tive pop-ups, e parece estar correndo um pouco mais rápido agora também. thanks a lot for the help! depois de olhar ao redor para os dias para saber como se livrar dessa, você é resolvida em pouco tempo haha, thanks again |
|
#10
4 de dezembro de 2007, 14:26
| |||
| |||
| Não tem problema. Você deve executar uma verificação de vírus Avast agora que está instalado. Também fazer download e executar SUPERAntiSpyware (SAS) SUPERAntiSpyware Free Edition para certificar-se de mais nada há que HijackThis não conseguiu encontrar. Confira as ferramentas gratuitas em este post Safe surf ........
__________________ |
