Ir ao conteúdo
  • Cadastre-se
regilenejeff

analisem por favor

Recommended Posts

DDS (Version 1.0) - NTFSx86

Run by Administrador at 12:41:56,95 on dom 30/11/2008

Microsoft Windows XP Professional 5.1.2600.2.1252.55.1046.18.895.357 [GMT -2:00]

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\Arquivos de programas\Panda Security\Panda Antivirus 2008\pavsrv51.exe

C:\Arquivos de programas\Panda Security\Panda Antivirus 2008\AVENGINE.EXE

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

C:\WINDOWS\Explorer.EXE

svchost.exe

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Arquivos de programas\CyberLink\PowerDVD\PDVDServ.exe

C:\Arquivos de programas\Java\jre6\bin\jusched.exe

C:\Arquivos de programas\COMODO\SafeSurf\cssurf.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\Nokia\Nokia PC Suite 7\PCSync2.exe

C:\Arquivos de programas\Nokia\Nokia PC Suite 7\PCSuite.exe

C:\WINDOWS\system32\sistray.exe

C:\Arquivos de programas\COMODO\COMODO Internet Security\cmdagent.exe

C:\Arquivos de programas\Symantec\Norton Ghost 2003\GhostStartService.exe

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Arquivos de programas\Panda Security\Panda Antivirus 2008\PsCtrls.exe

C:\Arquivos de programas\Arquivos comuns\Panda Software\PavShld\pavprsrv.exe

C:\Arquivos de programas\Panda Security\Panda Antivirus 2008\PsImSvc.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Arquivos de programas\PC Connectivity Solution\ServiceLayer.exe

C:\Arquivos de programas\PC Connectivity Solution\Transports\NclRSSrv.exe

C:\Arquivos de programas\Arquivos comuns\Nokia\MPAPI\MPAPI3s.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Administrador\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.comodo.com/search/

uInternet Connection Wizard,ShellNext = iexplore

BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\arquivos de programas\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll

BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\arquivos de programas\askbardis\bar\bin\askBar.dll

BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\arquivos de programas\java\jre6\bin\ssv.dll

BHO: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\arquivos de programas\java\jre6\bin\jp2ssv.dll

BHO: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\arquivos de programas\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\arquivos de programas\askbardis\bar\bin\askBar.dll

TB: {3041D03E-FD4B-44E0-B742-2D9B88305F98} - c:\arquivos de programas\askbardis\bar\bin\askBar.dll

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [Nokia.PCSync] "c:\arquivos de programas\nokia\nokia pc suite 7\PCSync2.exe" /NoDialog

uRun: [PC Suite Tray] "c:\arquivos de programas\nokia\nokia pc suite 7\PCSuite.exe" -onlytray

mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [skyTel] SkyTel.EXE

mRun: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

mRun: [RemoteControl] "c:\arquivos de programas\cyberlink\powerdvd\PDVDServ.exe"

mRun: [GhostStartTrayApp] c:\arquivos de programas\symantec\norton ghost 2003\GhostStartTrayApp.exe

mRun: [sunJavaUpdateSched] "c:\arquivos de programas\java\jre6\bin\jusched.exe"

mRun: [COMODO SafeSurf] "c:\arquivos de programas\comodo\safesurf\cssurf.exe" -s

mRun: [COMODO Internet Security] "c:\arquivos de programas\comodo\comodo internet security\cfp.exe" -h

mRun: [APVXDWIN] "c:\arquivos de programas\panda security\panda antivirus 2008\APVXDWIN.EXE" /s

dRunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N

StartupFolder: c:\docume~1\alluse~1\menuin~1\progra~1\inicia~1\utilit~1.lnk - c:\windows\system32\sistray.exe

uPolicies-explorer: ForceClassicControlPanel = 1 (0x1)

dPolicies-explorer: ForceClassicControlPanel = 1 (0x1)

IE: E&xportar para o Microsoft Excel - c:\arquiv~1\micros~1\office11\EXCEL.EXE/3000

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\arquivos de programas\messenger\msmsgs.exe

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\arquiv~1\micros~1\office11\REFIEBAR.DLL

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\arquivos de programas\messenger\msmsgs.exe

LSP: c:\arquivos de programas\panda security\panda antivirus 2008\pavlsp.dll

Notify: avldr - avldr.dll

AppInit_DLLs: c:\windows\system32\guard32.dll c:\windows\system32\cssdll32.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2008-11-27 28544]

R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [2008-11-20 99216]

R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2008-11-20 31504]

R1 GhPciScan;GhostPciScanner;\??\c:\arquivos de programas\symantec\norton ghost 2003\ghpciscan.sys [2003-12-17 5632]

R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2008-11-20 38968]

R2 PavProc;Panda Process Protection Driver;\??\c:\windows\system32\drivers\PavProc.sys [2008-11-20 178872]

=============== Created Last 30 ================

2008-11-28 17:04 <DIR> --d----- C:\LinhaDefensiva

2008-11-28 12:50 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\Malwarebytes

2008-11-28 12:49 15,504 a------- c:\windows\system32\drivers\mbam.sys

2008-11-28 12:49 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys

2008-11-28 12:49 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\Malwarebytes

2008-11-28 12:49 <DIR> --d----- c:\arquivos de programas\Malwarebytes' Anti-Malware

2008-11-28 00:14 250 a------- c:\windows\gmer.ini

2008-11-27 00:06 28,544 a------- c:\windows\system32\drivers\pavboot.sys

2008-11-25 19:07 268 a---h--- C:\sqmdata00.sqm

2008-11-25 19:07 244 a---h--- C:\sqmnoopt00.sqm

2008-11-25 14:47 25,600 ac------ c:\windows\system32\dllcache\usbser.sys

2008-11-25 14:47 25,600 a------- c:\windows\system32\drivers\usbser.sys

2008-11-25 14:46 0 a---h--- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf

2008-11-25 14:46 0 a---h--- c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf

2008-11-25 14:45 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\PC Suite

2008-11-25 14:45 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\Nokia

2008-11-25 14:45 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\PC Suite

2008-11-25 14:44 <DIR> --d----- c:\arquivos de programas\arquivos comuns\PCSuite

2008-11-25 14:44 <DIR> --d----- c:\arquivos de programas\arquivos comuns\Nokia

2008-11-25 14:43 21,632 a------- c:\windows\system32\drivers\pccsmcfd.sys

2008-11-25 14:43 <DIR> --d----- c:\arquivos de programas\PC Connectivity Solution

2008-11-25 14:42 8,064 a------- c:\windows\system32\drivers\usbser_lowerfltj.sys

2008-11-25 14:42 8,064 a------- c:\windows\system32\drivers\usbser_lowerflt.sys

2008-11-25 14:42 20,864 a------- c:\windows\system32\drivers\ccdcmbo.sys

2008-11-25 14:42 17,536 a------- c:\windows\system32\drivers\ccdcmb.sys

2008-11-25 14:42 659,968 a------- c:\windows\system32\nmwcdcocls.dll

2008-11-25 14:42 1,419,232 a------- c:\windows\system32\wdfcoinstaller01005.dll

2008-11-25 14:42 90,624 a------- c:\windows\system32\nmwcdcls.dll

2008-11-25 14:42 <DIR> --d----- c:\arquivos de programas\Nokia

2008-11-25 14:40 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\Installations

2008-11-23 23:24 139,536 a------- c:\windows\system32\javaee.dll

2008-11-22 00:12 50 a------- c:\windows\MegaManager.INI

2008-11-21 23:42 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\Megaupload

2008-11-21 23:39 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\Megaupload

2008-11-21 23:39 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\EmailNotifier

2008-11-21 23:39 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\EmailNotifier

2008-11-21 21:44 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\uTorrent

2008-11-20 23:50 38,968 a------- c:\windows\system32\drivers\ShlDrv51.sys

2008-11-20 23:50 178,872 a------- c:\windows\system32\drivers\PavProc.sys

2008-11-20 19:32 264 a------- c:\windows\system32\PavCPL.dat

2008-11-20 19:32 83,896 a------- c:\windows\system32\drivers\pavdrv51.sys

2008-11-20 19:32 <DIR> --d----- c:\windows\system32\PAV

2008-11-20 19:32 54,832 a------- c:\windows\system32\pavcpl.cpl

2008-11-20 19:15 <DIR> --d----- c:\arquivos de programas\SpywareBlaster

2008-11-20 17:19 249,592 a------- c:\windows\system32\cssdll32.dll

2008-11-20 17:19 <DIR> --d----- c:\arquivos de programas\AskBarDis

2008-11-20 17:18 143,096 a------- c:\windows\system32\guard32.dll

2008-11-20 17:18 99,216 a------- c:\windows\system32\drivers\cmdguard.sys

2008-11-20 17:18 31,504 a------- c:\windows\system32\drivers\cmdhlp.sys

2008-11-20 17:18 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\comodo

2008-11-20 17:18 <DIR> --d----- c:\arquivos de programas\COMODO

2008-11-20 12:42 73,728 a------- c:\windows\system32\javacpl.cpl

2008-11-20 12:38 <DIR> --d----- c:\windows\system32\appmgmt

2008-11-20 11:29 2,140,160 -c------ c:\windows\system32\dllcache\ntkrnlmp.exe

2008-11-20 11:29 2,184,576 -c------ c:\windows\system32\dllcache\ntoskrnl.exe

2008-11-20 11:29 2,061,952 -c------ c:\windows\system32\dllcache\ntkrnlpa.exe

2008-11-20 11:29 2,019,840 -c------ c:\windows\system32\dllcache\ntkrpamp.exe

2008-11-20 01:07 50,736 a------- c:\windows\system32\avldr.dll

2008-11-20 01:07 <DIR> --d----- c:\arquivos de programas\Panda Security

2008-11-20 00:57 <DIR> --d----- c:\windows\system32\CatRoot_bak

2008-11-20 00:45 <DIR> a-dshr-- C:\cmdcons

2008-11-18 19:48 410,976 a------- c:\windows\system32\deploytk.dll

2008-11-15 10:00 <DIR> --d----- C:\fsaua.data

2008-11-13 22:14 <DIR> --d----- c:\arquivos de programas\MundoBiblico

2008-11-13 15:25 30,992 a------- c:\windows\system32\temp.00F

2008-11-13 15:25 30,992 a------- c:\windows\system32\temp.00B

2008-11-13 15:25 152,064 a------- c:\windows\system32\temp.00D

2008-11-13 15:25 152,064 a------- c:\windows\system32\temp.009

2008-11-13 15:25 77,878 a------- c:\windows\system32\temp.00E

2008-11-13 15:25 77,878 a------- c:\windows\system32\temp.00A

2008-11-13 15:25 65,024 a------- c:\windows\system32\temp.00C

2008-11-13 15:25 65,024 a------- c:\windows\system32\temp.008

2008-11-13 15:16 <DIR> --d----- c:\arquivos de programas\arquivos comuns\Opus Shared

2008-11-13 15:14 <DIR> --d----- c:\arquivos de programas\Microsoft Calculator Plus

2008-11-12 13:53 86,016 a------- c:\windows\unvise32.exe

2008-11-11 19:52 26,496 ac------ c:\windows\system32\dllcache\usbstor.sys

2008-11-04 19:47 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\HipSoft

==================== Find3M ====================

2008-11-23 23:28 2,678 a------- c:\windows\java\packages\data\2XNHZJPR.DAT

2008-11-23 23:24 2,678 a------- c:\windows\java\packages\data\GWJDB3RR.DAT

2008-11-23 23:24 2,678 a------- c:\windows\java\packages\data\H75F1F1Z.DAT

2008-11-23 23:23 2,678 a------- c:\windows\java\packages\data\N3JV9NDJ.DAT

2008-11-23 23:23 2,678 a------- c:\windows\java\packages\data\A7RPFFDZ.DAT

2008-11-20 23:50 <DIR> --d----- c:\arquivos de programas\arquivos comuns\Panda Software

2008-11-20 13:14 <DIR> --d----- c:\arquivos de programas\Messenger

2008-11-20 12:39 344,734 a------- c:\windows\system32\perfh016.dat

2008-11-20 12:39 48,846 a------- c:\windows\system32\perfc016.dat

2008-11-05 12:44 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\LimeWire

2008-10-28 13:09 86,327 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat

2008-10-27 14:09 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\sentinel

2008-10-27 11:55 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\Avira

2008-09-15 13:40 1,846,144 a------- c:\windows\system32\win32k.sys

2008-09-04 14:45 1,106,944 a------- c:\windows\system32\msxml3.dll

2008-07-15 23:54 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\Symantec

2008-07-15 23:54 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\Symantec

2008-07-15 23:41 <DIR> --d----- c:\docume~1\admini~1\dadosd~1\Vso

2008-07-15 23:41 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\DVDXStudio

============= FINISH: 12:42:26,57 ===============

Compartilhar este post


Link para o post
Compartilhar em outros sites

Poste um novo log do DDS, por gentileza.

Compartilhar este post


Link para o post
Compartilhar em outros sites





Sobre o Clube do Hardware

No ar desde 1996, o Clube do Hardware é uma das maiores, mais antigas e mais respeitadas publicações sobre tecnologia do Brasil. Leia mais

Direitos autorais

Não permitimos a cópia ou reprodução do conteúdo do nosso site, fórum, newsletters e redes sociais, mesmo citando-se a fonte. Leia mais

×