************************************************************************************ ISeeYouXP v2.0 Beta 14 ISeeYouXP v1.3.0-v2.0 Beta 14 Copyright - ShadowPuterDude ISeeYouXP v1.2.9 and earlier Copyright - PhilliePhan ------------------------------------------------------------------------------------ **** PLEASE NOTE THAT MOST (if not ALL) OF THE ITEMS BELOW ARE NOT BADDIES! **** **** PLEASE CONSULT A KNOWLEDGEABLE PERSON BEFORE TAKING ANY ACTION. **** ************************************************************************************ Windows/Browser/Java Versions: Microsoft (R) Windows Script Host Verso 5.6 Copyright (C) 1996-2001 Microsoft Corporation. Todos os direitos reservados. Microsoft Windows XP Professional Version: 5.1.2600 Service Pack: 2.0 Windows Directory: C:\WINDOWS Microsoft (R) Windows Script Host Verso 5.6 Copyright (C) 1996-2001 Microsoft Corporation. Todos os direitos reservados. Internet Explorer Version: 7.0.5730.13 Build: 75730 Language: Ingls (Estados Unidos) Path: C:\Arquivos de programas\Internet Explorer Microsoft (R) Windows Script Host Verso 5.6 Copyright (C) 1996-2001 Microsoft Corporation. Todos os direitos reservados. Boot State: Normal boot Scan done at 11:46:39,06, qui 20/11/2008 ------------------------------------------------------------------------------------ ISeeYouXP installation folder and files "C:\ISeeYouXP\" bootst~1.vbs 28 May 2007 359 "bootstate.vbs" change.log 8 Jun 2008 5012 "change.log" chodefix.bat 18 Apr 2007 5387 "chodefix.bat" fixchode.reg 18 Apr 2007 528 "fixChode.reg" fixexp~1.bat 24 Feb 2007 487 "FixExplorerPolicies.bat" getunk~1.bat 12 Aug 2006 1478 "GetUnKeys.bat" grep.exe 24 Dec 2004 160768 "grep.exe" hideit.bat 17 Oct 2007 1072 "HideIT.bat" ieinfo.vbs 28 May 2007 514 "ieinfo.vbs" iesecu~1.bat 28 Oct 2007 72 "IESecurityZones.bat" iesecu~1.vbs 8 Nov 2007 2399 "IESecurityZones.vbs" iseeyo~1.bat 8 Jun 2008 211377 "ISeeYouXP.bat" libico~1.dll 16 Mar 2004 898048 "libiconv2.dll" libintl3.dll 9 Oct 2004 101888 "libintl3.dll" locate.com 14 Jan 2005 11254 "locate.com" md5sum.exe 5 Aug 2007 49152 "md5sum.exe" msconf~1.bat 24 Feb 2007 578 "MSConfigFix.bat" osinfo.vbs 28 May 2007 598 "osinfo.vbs" pcbutts.txt 25 Mar 2007 5167 "PCBUTTS.TXT" pcre.dll 14 Nov 2004 183313 "pcre.dll" pv.exe 3 Mar 2006 73728 "pv.exe" regedi~1.bat 30 Mar 2007 650 "RegEditFix.bat" regfix.bat 18 Apr 2007 145 "Regfix.bat" servic~1.vbs 28 May 2007 672 "servicesinfo.vbs" showit.bat 17 Oct 2007 1013 "ShowIT.bat" swreg.exe 5 Apr 2007 139776 "swreg.exe" system~1.bat 28 Feb 2007 369 "SystemRestoreFix.bat" taskmg~1.bat 24 Feb 2007 288 "TaskMgrFix.bat" 28 items found: 28 files, 0 directories. Total of file sizes: 1.856.092 bytes 1,77 M ------------------------------------------------------------------------------------ System Environment Variables ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\Denise\Dados de aplicativos CLIENTNAME=Console CommonProgramFiles=C:\Arquivos de programas\Arquivos comuns COMPUTERNAME=0786DB59231B479 ComSpec=C:\WINDOWS\system32\cmd.exe errcode=0 FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Denise LOGONSERVER=\\0786DB59231B479 NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Arquivos de programas\Microsoft SQL Server\80\Tools\Binn;C:\Arquivos de programas\Arquivos comuns\Adobe\AGL PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 3 Stepping 3, GenuineIntel PROCESSOR_LEVEL=15 PROCESSOR_REVISION=0303 ProgramFiles=C:\Arquivos de programas PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\Denise\CONFIG~1\Temp TMP=C:\DOCUME~1\Denise\CONFIG~1\Temp USERDOMAIN=0786DB59231B479 USERNAME=Denise USERPROFILE=C:\Documents and Settings\Denise windir=C:\WINDOWS ------------------------------------------------------------------------------------ Showing any Pocket Killbox backup files No matches found. ------------------------------------------------------------------------------------ Displaying BOOT.INI: [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect ------------------------------------------------------------------------------------ Displaying SYSTEM.INI: ; for 16-bit app support [drivers] wave=mmdrv.dll timer=timer.drv [mci] [driver32] [386enh] woafont=app850.FON EGA80WOA.FON=EGA80850.FON EGA40WOA.FON=EGA40850.FON CGA80WOA.FON=CGA80850.FON CGA40WOA.FON=CGA40850.FON ------------------------------------------------------------------------------------ Displaying WIN.INI: ; for 16-bit app support [fonts] [extensions] [mci extensions] [files] [Mail] MAPI=1 [MCI Extensions.BAK] aif=MPEGVideo aifc=MPEGVideo aiff=MPEGVideo asf=MPEGVideo asx=MPEGVideo au=MPEGVideo m1v=MPEGVideo m3u=MPEGVideo mp2=MPEGVideo mp2v=MPEGVideo mp3=MPEGVideo mpa=MPEGVideo mpe=MPEGVideo mpeg=MPEGVideo mpg=MPEGVideo mpv2=MPEGVideo snd=MPEGVideo wax=MPEGVideo wm=MPEGVideo wma=MPEGVideo wmv=MPEGVideo wmx=MPEGVideo wpl=MPEGVideo wvx=MPEGVideo [annie] CaptureFile= VideoDevice2=@device:pnp:\\?\usb#vid_0c45&pid_627b#5&13bdaf83&0&2#{65e8773d-8f56-11d0-a3b9-00a0c9223196}\global AudioDevice2= CaptureAudio=0 CaptureCC=0 MasterStream=1 UseTimeLimit=0 TimeLimit=0 WantPreview=1 UseFrameRate=1 FrameRate=333333 [Correio] CMC=1 CMCDLLNAME=mapi.dll CMCDLLNAME32=mapi32.dll MAPI=1 MAPIX=1 MAPIXVER=1.0.0.1 OLEMessaging=1 [IRIS_IPE] menu=12 [Readiris] Scanner32=Twaino38,23 ------------------------------------------------------------------------------------ Displaying AUTOEXEC.BAT: ------------------------------------------------------------------------------------ Displaying CONFIG.SYS: ------------------------------------------------------------------------------------ Displaying Running Processes: PROCESS PID PRIO PATH smss.exe 472 Normal C:\WINDOWS\System32\smss.exe csrss.exe 528 Normal C:\WINDOWS\system32\csrss.exe winlogon.exe 552 High C:\WINDOWS\system32\winlogon.exe services.exe 596 Normal C:\WINDOWS\system32\services.exe lsass.exe 608 Normal C:\WINDOWS\system32\lsass.exe svchost.exe 768 Normal C:\WINDOWS\system32\svchost.exe svchost.exe 816 Normal C:\WINDOWS\system32\svchost.exe svchost.exe 856 Normal C:\WINDOWS\System32\svchost.exe svchost.exe 924 Normal C:\WINDOWS\system32\svchost.exe svchost.exe 956 Normal C:\WINDOWS\system32\svchost.exe spoolsv.exe 1112 Normal C:\WINDOWS\system32\spoolsv.exe sched.exe 1184 Normal C:\Arquivos de programas\Avira\AntiVir PersonalEdition Classic\sched.exe avguard.exe 1284 Normal C:\Arquivos de programas\Avira\AntiVir PersonalEdition Classic\avguard.exe svchost.exe 1448 Normal C:\WINDOWS\system32\svchost.exe Explorer.EXE 1740 Normal C:\WINDOWS\Explorer.EXE realsched.exe 1968 Normal C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe vsnp2std.exe 1984 Normal C:\WINDOWS\vsnp2std.exe jusched.exe 1996 Normal C:\Arquivos de programas\Java\jre1.6.0_07\bin\jusched.exe HPWuSchd2.exe 2004 Normal C:\Arquivos de programas\HP\HP Software Update\HPWuSchd2.exe avgnt.exe 2012 Normal C:\Arquivos de programas\Avira\AntiVir PersonalEdition Classic\avgnt.exe MsnMsgr.Exe 2020 Normal C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe ctfmon.exe 172 Normal C:\WINDOWS\system32\ctfmon.exe alg.exe 1908 Normal C:\WINDOWS\System32\alg.exe Mobile Partner.exe 2556 Normal C:\Arquivos de programas\Mobile Partner\Mobile Partner.exe wuauclt.exe 3216 Normal C:\WINDOWS\system32\wuauclt.exe usnsvc.exe 3384 Normal C:\Arquivos de programas\MSN Messenger\usnsvc.exe iexplore.exe 4044 Normal C:\Arquivos de programas\Internet Explorer\iexplore.exe cmd.exe 3124 Normal C:\WINDOWS\system32\cmd.exe ntvdm.exe 1948 Normal C:\WINDOWS\system32\ntvdm.exe wmiprvse.exe 844 Normal C:\WINDOWS\system32\wbem\wmiprvse.exe pv.exe 3620 Normal C:\ISEEYO~1\pv.exe ------------------------------------------------------------------------------------ Displaying Windows Services: Microsoft (R) Windows Script Host Verso 5.6 Copyright (C) 1996-2001 Microsoft Corporation. Todos os direitos reservados. Name: Adobe LM Service Display Name: Adobe LM Service Description: AdobeLM Service Path Name: "C:\Arquivos de programas\Arquivos comuns\Adobe Systems Shared\Service\Adobelmsvc.exe" Start Mode: Manual State: Stopped Name: Alerter Display Name: Alerta Description: Notifica os usurios e computadores selecionados de alertas administrativos. Se o servio for interrompido, os programas que usam alertas administrativos no os recebero. Se este servio for desativado, quaisquer servios que dele dependam diretamente no sero inicializados. Path Name: C:\WINDOWS\system32\svchost.exe -k LocalService Start Mode: Disabled State: Stopped Name: ALG Display Name: Servio 'Gateway de camada de aplicativo' Description: Fornece suporte a plug-ins de protocolos de terceiros para o Compartilhamento de Conexo com a Internet e o Firewall do Windows. Path Name: C:\WINDOWS\System32\alg.exe Start Mode: Manual State: Running Name: AntiVirScheduler Display Name: Avira AntiVir Personal - Free Antivirus Scheduler Description: Service to schedule Avira AntiVir Personal - Free Antivirus jobs and updates. Path Name: "C:\Arquivos de programas\Avira\AntiVir PersonalEdition Classic\sched.exe" Start Mode: Auto State: Running Name: AntiVirService Display Name: Avira AntiVir Personal - Free Antivirus Guard Description: Offers permanent protection against viruses and malware with the AntiVir search engine. Path Name: "C:\Arquivos de programas\Avira\AntiVir PersonalEdition Classic\avguard.exe" Start Mode: Auto State: Running Name: AppMgmt Display Name: Gerenciamento de aplicativo Description: Fornece servios de instalao de software como 'Atribuir', 'Publicar' e 'Remover'. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Manual State: Stopped Name: aspnet_state Display Name: ASP.NET State Service Description: Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start. Path Name: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe Start Mode: Manual State: Stopped Name: AudioSrv Display Name: udio do Windows Description: Gerencia dispositivos de udio para programas baseados em Windows. Se este servio for interrompido, os dispositivos de udio e efeitos no funcionaro adequadamente. Se este servio for desativado, quaisquer servios que dele dependam diretamente no sero inicializados. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: BITS Display Name: Servio de transferncia inteligente de plano de fundo Description: Transfere dados entre clientes e servidores em segundo plano. Se o BITS estiver desabilitado, recursos como o Windows Update no funcionaro corretamente. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Manual State: Stopped Name: Browser Display Name: Localizador de computadores Description: Mantm uma lista atualizada de computadores na rede e fornece a computadores designados navegadores. Se este servio for interrompido, esta lista no ser atualizada ou mantida. Se este servio for desativado, quaisquer servios que dele dependam diretamente no sero inicializados. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Stopped Name: CiSvc Display Name: Indexing Service Description: Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. Path Name: C:\WINDOWS\system32\cisvc.exe Start Mode: Manual State: Stopped Name: ClipSrv Display Name: rea de armazenamento Description: Permite que o 'Visualizador da rea de armazenamento' armazene informaes e compartilhe-as com computadores remotos. Se o servio for parado, o 'Visualizador da rea de armazenamento' no poder compartilhar informaes com computadores remotos. Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\system32\clipsrv.exe Start Mode: Disabled State: Stopped Name: clr_optimization_v2.0.50727_32 Display Name: .NET Runtime Optimization Service v2.0.50727_X86 Description: Microsoft .NET Framework NGEN Path Name: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe Start Mode: Manual State: Stopped Name: COMSysApp Display Name: Aplicativo de sistema COM+ Description: Gerencia a configurao e o controle dos componentes baseados no modelo de objeto componente (COM)+. Se o servio parar, a maioria dos componentes baseados no COM+ no funcionar adequadamente. Se o servio for desativado, qualquer servio explicitamente dependente dele falhar ao ser iniciado. Path Name: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} Start Mode: Manual State: Stopped Name: CryptSvc Display Name: Servios de criptografia Description: Fornece trs servios de gerenciamento: servio de banco de dados de catlogo, que confirma as assinaturas dos arquivos do Windows; servio de raiz protegida, que adiciona e remove certificados de autoridades de certificao raiz deste computador, e o servio de chave, que ajuda a registrar este computador para certificados. Se este servio for interrompido, esses servios de gerenciamento no funcionaro adequadamente. Se este servio for desativado, quaisquer servios que dele dependam diretamente deixaro de ser iniciados. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: DcomLaunch Display Name: Inicializador de Processo de Servidor DCOM Description: Fornece funcionalidade de inicializao para servios DCOM. Path Name: C:\WINDOWS\system32\svchost -k DcomLaunch Start Mode: Auto State: Running Name: Dhcp Display Name: Cliente DHCP Description: Gerencia a configurao de rede registrando e atualizando endereos IP e nomes DNS. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: dmadmin Display Name: Servio administrativo do gerenciador de disco lgico Description: Configura volumes e unidades de disco rgido. O servio executado apenas para processos de configurao e depois pra. Path Name: C:\WINDOWS\System32\dmadmin.exe /com Start Mode: Manual State: Stopped Name: dmserver Display Name: Gerenciador de discos lgicos Description: Detecta e monitora novas unidades de disco rgido e envia as informaes de volume de disco para o servio administrativo de gerenciador de discos lgicos para configurao. Se este servio for parado, o status de disco dinmico e as informaes de configurao podem se tornar obsoletos. Se este servio for desativado, os servios que dependerem dele explicittamente no sero iniciados. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: Dnscache Display Name: Cliente DNS Description: Resolve e armazena em cache nomes Domain Name System (DNS) para este computador. Se este servio for parado, o computador no poder resolver nomes DNS nem localizador controladores de domnio do Active Directory. Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\system32\svchost.exe -k NetworkService Start Mode: Auto State: Running Name: ERSvc Display Name: Error Reporting Service Description: Allows error reporting for services and applictions running in non-standard environments. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: Eventlog Display Name: Log de eventos Description: Registra mensagens de eventos emitidas por Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. Path Name: C:\WINDOWS\system32\services.exe Start Mode: Auto State: Running Name: EventSystem Display Name: Sistema de eventos COM+ Description: D suporte para o servio de notificao de eventos do sistema (SENS), o qual fornece distribuio automtica dos eventos para inscrever componentes do modelo de objeto componente (COM). Se o servio for interrompido, o SENS ser fechado e no poder fornecer notificaes de logon e logoff. Se o servio for desativado, qualquer servio explicitamente dependente dele ir falhar ao ser iniciado. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Manual State: Running Name: FastUserSwitchingCompatibility Display Name: Compatibilidade com 'Troca rpida de usurio' Description: Fornece gerenciamento de aplicativos que exigem assistncia em um ambiente de vrios usurios. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Manual State: Running Name: helpsvc Display Name: Ajuda e suporte Description: Permite que o 'Centro de ajuda e suporte' seja executado neste computador. Se esse servio for interrompido, o 'Centro de ajuda e suporte' no estar disponvel. Se esse servio for desativado, haver falha na inicializao de todos os servios que dependem dele de forma explcita. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: HidServ Display Name: HID Input Service Description: Permite acesso de entrada genrica a dispositivos de interface humana (Human Interface Devices, HID), que ativam e mantm o uso de botes ativados predefinidos em teclados, controles remotos e outros dispositivos de multimdia. Se este servio for parado, os botes ativados controlados pelo servio deixaro de funcionar. Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Disabled State: Stopped Name: HTTPFilter Display Name: HTTP SSL Description: Este servio implementa o protocolo de transferncia segura de hipertexto (HTTPS) para o servio HTTP, usando a camada de soquete seguro (SSL). Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\System32\svchost.exe -k HTTPFilter Start Mode: Manual State: Stopped Name: ImapiService Display Name: IMAPI CD-Burning COM Service Description: Gerencia a gravao de CDs por meio da interface IMAPI. Se esse servio for interrompido, o computador no poder gravar CDs. Se o servio for desativado, quaisquer servios que dele dependam diretamente no sero iniciados. Path Name: C:\WINDOWS\system32\imapi.exe Start Mode: Manual State: Stopped Name: lanmanserver Display Name: Servidor Description: Oferece suporte a compartilhamento na rede de arquivo, impresso e pipes nomeados para este computador. Se este servio for interrompido, quaisquer servios que dele dependam diretamente no sero inicializados. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: lanmanworkstation Display Name: Estao de trabalho Description: Cria e mantm conexes de rede de cliente com servidores remotos. Se este servio for interrompido, essas conexes no estaro disponveis. Se este servio for desativado, quaisquer servios que dele dependam no sero inicializados. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: LmHosts Display Name: Auxiliar NetBIOS TCP/IP Description: Ativa o suporte a NetBIOS atravs do servio TCP/IP (NetBT) e da resoluo de nomes NetBIOS. Path Name: C:\WINDOWS\system32\svchost.exe -k LocalService Start Mode: Auto State: Running Name: Messenger Display Name: Mensageiro Description: Transmite mensagens net send e do servio 'Alerta' entre clientes e servidores. Este servio no est relacionado ao Windows Messenger. Se este servio for interrompido, as mensagens do servio 'Alerta' no sero transmitidas. Se este servio for desativado, quaisquer servios que dele dependam diretamente no sero inicializados. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Disabled State: Stopped Name: mnmsrvc Display Name: Compartilhamento remoto da rea de trabalho do NetMeeting Description: Habilita um usurio autorizado a acessar este computador remotamente por meio do NetMeeting em uma intranet corporativa. Se este servio for interrompido, o compartilhamento da rea de trabalho remota no estar disponvel. Se este servio for desabilitado, quaisquer servios que dele dependam no sero iniciados. Path Name: C:\WINDOWS\system32\mnmsrvc.exe Start Mode: Manual State: Stopped Name: MSDTC Display Name: Coordenador de transaes distribudas Description: Coordena transaes que abrangem mltiplos gerenciadores de recursos, tais como bancos de dados, filas de mensagens e sistemas de arquivos. Se este servio for interrompido, essas transaes no ocorrero. Se este servio for desativado, os servios que dependem explicitamente dele falharo ao serem iniciados. Path Name: C:\WINDOWS\system32\msdtc.exe Start Mode: Manual State: Stopped Name: MSIServer Display Name: Windows Installer Description: Adiciona, modifica e remove aplicativos fornecidos como um pacote do Windows Installer (*.msi). Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\system32\msiexec.exe /V Start Mode: Manual State: Stopped Name: MSSQL$SONY_MEDIAMGR Display Name: MSSQL$SONY_MEDIAMGR Description: Path Name: C:\Arquivos de programas\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -sSONY_MEDIAMGR Start Mode: Manual State: Stopped Name: MSSQLServerADHelper Display Name: MSSQLServerADHelper Description: Path Name: C:\Arquivos de programas\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe Start Mode: Manual State: Stopped Name: NetDDE Display Name: DDE de rede Description: Fornece transporte e segurana de rede para Dynamic Data Exchange (DDE) para programas executados no mesmo computador ou em computadores diferentes. Se este servio for parado, o transporte e segurana DDE no estaro disponveis. Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\system32\netdde.exe Start Mode: Disabled State: Stopped Name: NetDDEdsdm Display Name: DSDM de DDE de rede Description: Gerencia compartilhamentos de rede do tipo DDE (Dynamic Data Exchange). Se este servio for parado, os compartilhamentos de rede DDE no estaro disponveis. Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\system32\netdde.exe Start Mode: Disabled State: Stopped Name: Netlogon Display Name: Logon de rede Description: D suporte autenticao de passagem de eventos de logon de contas para os computadores de um domnio. Path Name: C:\WINDOWS\system32\lsass.exe Start Mode: Manual State: Stopped Name: Netman Display Name: Conexes de rede Description: Gerencia objetos da pasta de conexes de rede e Dial-Up, na qual voc pode exibir conexes remotas e de rede local. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Manual State: Running Name: Nla Display Name: Reconhecimento de local da rede (NLA) Description: Rene e armazena informaes sobre configuraes e locais da rede, bem como notifica os aplicativos quando essas informaes so alteradas. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Manual State: Running Name: NtLmSsp Display Name: Fornecedor de suporte de segurana NT LM Description: Fornece segurana a programas de chamada de procedimento remoto (remote procedure call, RPC) que usam transportes que no pipes nomeados. Path Name: C:\WINDOWS\system32\lsass.exe Start Mode: Manual State: Stopped Name: NtmsSvc Display Name: Armazenamento removvel Description: Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Manual State: Stopped Name: PlugPlay Display Name: Plug and Play Description: Permite que um computador reconhea e se adapte a alteraes de hardware com pouca ou nenhuma interveno do usurio. Se este servio for parado ou desativado, o sistema se tornar instvel. Path Name: C:\WINDOWS\system32\services.exe Start Mode: Auto State: Running Name: Pml Driver HPZ12 Display Name: Pml Driver HPZ12 Description: Path Name: C:\WINDOWS\system32\HPZipm12.exe Start Mode: Auto State: Stopped Name: PolicyAgent Display Name: Servios IPSEC Description: Gerencia a diretiva de segurana IP e inicia o ISAKMP/Oakley (IKE) e o driver de segurana IP. Path Name: C:\WINDOWS\system32\lsass.exe Start Mode: Auto State: Running Name: ProtectedStorage Display Name: Armazenamento protegido Description: Fornece o armazenamento protegido para dados sensveis, como chaves privadas, para evitar o acesso de servios, processos ou usurios sem autorizao. Path Name: C:\WINDOWS\system32\lsass.exe Start Mode: Auto State: Running Name: RasAuto Display Name: Gerenciador de conexo de acesso remoto automtico Description: Cria uma conexo a uma rede remota sempre que um programa faz referncia a um nome ou endereo remoto DNS ou NetBios. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Manual State: Stopped Name: RasMan Display Name: Gerenciador de conexo de acesso remoto Description: Cria uma conexo de rede. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Manual State: Running Name: RDSessMgr Display Name: Gerenciador de sesso de ajuda de rea de trabalho remota Description: Gerencia e controla a 'Assistncia remota'. Se esse servio for interrompido, a 'Assistncia remota' ficar indisponvel. Antes de interromper esse servio, consulte a guia 'Dependncias' da caixa de dilogo 'Propriedades'. Path Name: C:\WINDOWS\system32\sessmgr.exe Start Mode: Manual State: Stopped Name: RemoteAccess Display Name: Roteamento e acesso remoto Description: Oferece servios de roteamento a empresas em ambientes de rede local e de longa distncia. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Disabled State: Stopped Name: RemoteRegistry Display Name: Registro remoto Description: Permite que usurios remotos modifiquem configuraes do Registro neste computador. Se este servio for parado, o Registro s poder ser modificado por usurios deste computador. Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\system32\svchost.exe -k LocalService Start Mode: Auto State: Running Name: RpcLocator Display Name: Alocador Remote Procedure Call (RPC) Description: Gerencia o banco de dados do servio de nomes RPC. Path Name: C:\WINDOWS\system32\locator.exe Start Mode: Manual State: Stopped Name: RpcSs Display Name: Chamada de procedimento remoto (RPC) Description: Fornece o mapeador de ponto de extremidade e outros servios RPC variados. Path Name: C:\WINDOWS\system32\svchost -k rpcss Start Mode: Auto State: Running Name: RSVP Display Name: QoS RSVP Description: Fornece a funcionalidade de sinalizao de rede e configurao do controle do trfego local para programas compatveis com QoS e miniaplicativos de controle. Path Name: C:\WINDOWS\system32\rsvp.exe Start Mode: Manual State: Stopped Name: SamSs Display Name: Gerenciador de contas de segurana Description: Armazena informaes sobre segurana para contas de usurio local. Path Name: C:\WINDOWS\system32\lsass.exe Start Mode: Auto State: Running Name: SCardSvr Display Name: Carto inteligente Description: Gerencia o acesso a leitores de carto inteligente por este computador. Se este servio for parado, o computador no poder ler cartes inteligentes. Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\System32\SCardSvr.exe Start Mode: Manual State: Stopped Name: Schedule Display Name: Agendador de tarefas Description: Permite que um usurio configure e agende tarefas automatizadas no computador. Se este servio for interrompido, essas tarefas no sero executadas nos horrios agendados. Se este servio for desativado, quaisquer servios que dele dependam diretamente no sero iniciados. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: seclogon Display Name: Logon secundrio Description: Ativa a inicializao de processos sob credenciais alternadas. Se este servio for interrompido, este tipo de acesso por logon no estar disponvel. Se este servio for desativado, quaisquer servios que dele dependam diretamente no sero iniciados. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: SENS Display Name: Notificao de eventos de sistema Description: Rastreia eventos do sistema como eventos de logon do Windows, rede e energia. Notifica assinantes do Sistema de evento COM+ destes eventos. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: SharedAccess Display Name: Firewall do Windows/Compartilhamento de Conexo com a Internet (ICS) Description: Fornece servios de converso de endereos de rede, endereamento e resoluo de nomes e/ou preveno de invaso para uma rede domstica ou de pequena empresa. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: ShellHWDetection Display Name: Deteco do hardware do shell Description: Fornece notificaes de eventos de hardware 'Reproduo automtica'. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: Spooler Display Name: Spooler de impresso Description: Carrega arquivos na memria para impresso posterior. Path Name: C:\WINDOWS\system32\spoolsv.exe Start Mode: Auto State: Running Name: SQLAgent$SONY_MEDIAMGR Display Name: SQLAgent$SONY_MEDIAMGR Description: Path Name: C:\Arquivos de programas\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -i SONY_MEDIAMGR Start Mode: Manual State: Stopped Name: srservice Display Name: Servio de restaurao do sistema Description: Executa funes de restaurao do sistema. Para interromper o servio, desative a 'Restaurao do sistema' na guia 'Restaurao do sistema' em 'Meu computador' -> 'Propriedades' Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: SSDPSRV Display Name: Servio de descoberta SSDP Description: Ativa a descoberta de dispositivos UPnP na rede domstica. Path Name: C:\WINDOWS\system32\svchost.exe -k LocalService Start Mode: Manual State: Running Name: stisvc Display Name: Assistente de aquisio de imagens do Windows (WIA) Description: Fornece servios de aquisio de imagens para scanners e cmeras Path Name: C:\WINDOWS\system32\svchost.exe -k imgsvc Start Mode: Auto State: Running Name: SwPrv Display Name: MS Software Shadow Copy Provider Description: Gerencia cpias de sombra de volume baseadas em software obtidas pelo servio de cpias de sombra de volume. Se o servio for interrompido, as cpias de sombra baseadas em software no podero ser gerenciadas. Se o servio for desativado, os servios que dependerem dele diretamente no sero iniciados. Path Name: C:\WINDOWS\system32\dllhost.exe /Processid:{5E4F3833-8289-42CD-8CA6-02E3741BFAFB} Start Mode: Manual State: Stopped Name: SysmonLog Display Name: Logs e alertas de desempenho Description: Coleta dados de desempenho de computadores locais ou remotos com base em parmetros de agendamento pr-configurados; em seguida, grava os dados em um log ou dispara um alerta. Se este servio for parado, as informaes de desempenho no sero coletadas. Se este servio for desativado, os servios que dependerem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\system32\smlogsvc.exe Start Mode: Manual State: Stopped Name: TapiSrv Display Name: Telefonia Description: Fornece suporte telefonia API (TAPI) para programas que controlam dispositivos de telefonia e conexes de voz baseadas em IP no computador local e, atravs da rede local, em servidores que tambm esto executando o servio. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Manual State: Running Name: TermService Display Name: Servios de terminal Description: Permite que vrios usurios sejam conectados interativamente a um computador e que as reas de trabalho e os aplicativos sejam exibidos a computadores remotos. A base da rea de trabalho remota (inclusive a rea de trabalho remota para administradores), da opo de alternar-se rapidamente entre usurios, da assistncia remota e do Terminal Server. Path Name: C:\WINDOWS\System32\svchost -k DComLaunch Start Mode: Manual State: Running Name: Themes Display Name: Temas Description: Fornece gerenciamento de temas para experincia do usurio. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: TlntSvr Display Name: Telnet Description: Permite que um usurio remoto faa logon neste computador e execute programas. Fornece suporte a vrios clientes Telnet TCP/IP, inclusive computadores baseados em UNIX e Windows. Se este servio for parado, o acesso de usurios remotos a programas poder no estar disponvel. Se este servio for desativado, os servios que dependem dele explicitamente no sero iniciados. Path Name: C:\WINDOWS\system32\tlntsvr.exe Start Mode: Disabled State: Stopped Name: TrkWks Display Name: Cliente de rastreamento de link distribudo Description: Mantm vnculos entre arquivos NTFS em um computador ou entre computadores em um domnio de rede. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: upnphost Display Name: Host de dispositivo Plug and Play universal Description: Oferece suporte para hospedar dispositivos Plug and Play universais. Path Name: C:\WINDOWS\system32\svchost.exe -k LocalService Start Mode: Manual State: Stopped Name: UPS Display Name: Uninterruptible Power Supply Description: Manages an uninterruptible power supply (UPS) connected to the computer. Path Name: C:\WINDOWS\System32\ups.exe Start Mode: Manual State: Stopped Name: usnjsvc Display Name: Servio de Compartilhamento de Pastas Messenger do USN Journal Reader Description: Servio instalado pelo Messenger para habilitar cenrios de compartilhamento Path Name: "C:\Arquivos de programas\MSN Messenger\usnsvc.exe" Start Mode: Manual State: Running Name: VSS Display Name: Cpia de volume em memria Description: Gerencia e implementa cpias de volume em memria usados para o backup e outros propsitos. Se este servio for interrompido, as cpias em memria no estaro disponveis para backup e o backup pode falhar. Se este servio for desativado, quaisquer servios que dele dependam diretamente no sero iniciados. Path Name: C:\WINDOWS\System32\vssvc.exe Start Mode: Manual State: Stopped Name: W32Time Display Name: Horrio do Windows Description: Mantm sincronizao de data e hora em todos os clientes e servidores da rede. Se este servio for interrompido, a sincronizao no ficar disponvel. Se este servio for desativado, os servios que dele dependem explicitamente no sero iniciados. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: WebClient Display Name: Cliente da Web Description: Permite que programas baseados em Windows criem, acessem e modifiquem arquivos baseados na Internet. Se este servio for interrompido, essas funes no estaro disponveis. Se este servio for desativado, quaisquer servios que dele dependam diretamente no sero iniciados. Path Name: C:\WINDOWS\system32\svchost.exe -k LocalService Start Mode: Auto State: Running Name: winmgmt Display Name: Testador de instrumentao de gerenciam. do Windows Description: Fornece uma interface comum e um modelo de objeto para o acesso a informaes de gerenciamento sobre o sistema operacional, dispositivos, aplicativos e servios. Se esse servio for parado, a maioria dos itens de software baseados no Windows no funcionar corretamente. Se este servio for desativado, os servios que dependerem explicitamente dele no sero iniciados. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: WmdmPmSN Display Name: Servio de Nmero de Srie de Mdia Porttil Description: Recupera o nmero de srie de qualquer player de mdia porttil conectado a seu computador. Se este servio for interrompido, o contedo protegido pode no ser baixado para o dispositivo. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Manual State: Stopped Name: Wmi Display Name: Extenses de driver de instrum. gerenc. do Windows Description: Fornece informaes sobre gerenciamento de sistemas para drivers e de drivers. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Manual State: Stopped Name: WmiApSrv Display Name: Adaptador de desempenho WMI Description: Fornece informaes da biblioteca de desempenho dos provedores HiPerf WMI. Path Name: C:\WINDOWS\system32\wbem\wmiapsrv.exe Start Mode: Manual State: Stopped Name: wscsvc Display Name: Central de Segurana Description: Monitora as configuraes e definies de segurana do sistema. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: wuauserv Display Name: Atualizaes Automticas Description: Ativa o download e instalao das atualizaes do site Windows Update. Se o servio for desativado, o computador no poder usar o recurso Atualizaes automticas do site Windows Update. Path Name: C:\WINDOWS\system32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: WZCSVC Display Name: Configurao zero sem fio Description: Fornece configurao automtica para os adaptadores 802.11 Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Auto State: Running Name: xmlprov Display Name: Servio de Configurao de Rede Description: Gerencia arquivos de configurao XML por domnio para configurao automtica de rede. Path Name: C:\WINDOWS\System32\svchost.exe -k netsvcs Start Mode: Manual State: Stopped ------------------------------------------------------------------------------------ Displaying LOG for Microsoft Windows Malicious Software Removal Tool: --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v2.4, November 2008 Started On Mon Nov 17 00:55:40 2008 Results Summary: ---------------- No infection found. Return code: 0 Microsoft Windows Malicious Software Removal Tool Finished On Mon Nov 17 00:57:10 2008 --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v2.4, November 2008 Started On Mon Nov 17 00:57:12 2008 ->Scan ERROR: resource process://pid:3636 (code 0x00000057 (87)) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v2.4, November 2008 Started On Mon Nov 17 09:52:35 2008 Results Summary: ---------------- No infection found. Return code: 0 Microsoft Windows Malicious Software Removal Tool Finished On Mon Nov 17 09:54:13 2008 ---------------------------------------------------------------------------- Listing HKCU Explorer\Advanced//Hidden and SuperHidden Registry Keys if Hidden = 0 then Hidden Files and Folders are not shown if SuperHidden = 1 is the desired default value. if ShowSuperHidden = 0 then System Files are not shown if HideFileExt = 1 then File Extension are not shown We want their values to be (from top to bottom) 1,1,1,0 ---------------------------------------------------------------------------- HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\advanced Hidden REG_DWORD 1 (0x1) SuperHidden REG_DWORD 1 (0x1) ShowSuperHidden REG_DWORD 1 (0x1) HideFileExt REG_DWORD 0 (0x0) ************************************************************************************ Examining Select Windows Registry Keys ------------------------------------------------------------------------------------ -------------------------------------------------------------------------- Items Found in ZoneMap\Domains: -------------------------------------------------------------------------- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\zonemap\domains REG_SZ HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\zonemap\domains\msn.com ---------------------------------------------------------------------------- Current User ZoneMap ProtocolDefaults ---------------------------------------------------------------------------- HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\protocoldefaults REG_SZ http REG_DWORD 3 (0x3) https REG_DWORD 3 (0x3) ftp REG_DWORD 3 (0x3) file REG_DWORD 3 (0x3) @ivt REG_DWORD 1 (0x1) shell REG_DWORD 0 (0x0) ---------------------------------------------------------------------------- Default URL Prefix Keys ---------------------------------------------------------------------------- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\url HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\url\DefaultPrefix REG_SZ http:// HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\url\Prefixes ftp REG_SZ ftp:// gopher REG_SZ gopher:// home REG_SZ http:// mosaic REG_SZ http:// www REG_SZ http:// -------------------------------------------------------------------------- Startup Items Disabled via MSCONFIG: -------------------------------------------------------------------------- -------------------------------------------------------------------------- Select AutoRun Registry Keys: -------------------------------------------------------------------------- HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run MsnMsgr REG_SZ "C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe" /background Free Download Manager REG_SZ "C:\Arquivos de programas\Free Download Manager\fdm.exe" -autorun Skype REG_SZ "C:\Arquivos de programas\Skype\Phone\Skype.exe" /nosplash /minimized ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runservices HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run SoundMan REG_SZ SOUNDMAN.EXE NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe WireLessKeyboard REG_SZ C:\Arquivos de programas\Multimedia Keyboard Driver\StartAutorun.exe PS2USBKbdDrv.exe TkBellExe REG_SZ "C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" -osboot tsnp2std REG_SZ C:\WINDOWS\tsnp2std.exe snp2std REG_SZ C:\WINDOWS\vsnp2std.exe SunJavaUpdateSched REG_SZ "C:\Arquivos de programas\Java\jre1.6.0_07\bin\jusched.exe" HP Software Update REG_SZ C:\Arquivos de programas\HP\HP Software Update\HPWuSchd2.exe avgnt REG_SZ "C:\Arquivos de programas\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservicesonce HKEY_USERS\.default\software\microsoft\windows\currentversion\run CTFMON.EXE REG_SZ C:\WINDOWS\system32\CTFMON.EXE HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run CTFMON.EXE REG_SZ C:\WINDOWS\system32\CTFMON.EXE HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\runonce HKEY_USERS\s-1-5-19\software\microsoft\windows\currentversion\run CTFMON.EXE REG_SZ C:\WINDOWS\system32\CTFMON.EXE HKEY_USERS\s-1-5-20\software\microsoft\windows\currentversion\run CTFMON.EXE REG_SZ C:\WINDOWS\system32\CTFMON.EXE -------------------------------------------------------------------------- WinLogon Notify Registry Key: -------------------------------------------------------------------------- HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain Asynchronous REG_DWORD 0 (0x0) Impersonate REG_DWORD 0 (0x0) DllName REG_EXPAND_SZ crypt32.dll Logoff REG_SZ ChainWlxLogoffEvent HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet Asynchronous REG_DWORD 0 (0x0) Impersonate REG_DWORD 0 (0x0) DllName REG_EXPAND_SZ cryptnet.dll Logoff REG_SZ CryptnetWlxLogoffEvent HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll DLLName REG_SZ cscdll.dll Logon REG_SZ WinlogonLogonEvent Logoff REG_SZ WinlogonLogoffEvent ScreenSaver REG_SZ WinlogonScreenSaverEvent Startup REG_SZ WinlogonStartupEvent Shutdown REG_SZ WinlogonShutdownEvent StartShell REG_SZ WinlogonStartShellEvent Impersonate REG_DWORD 0 (0x0) Asynchronous REG_DWORD 1 (0x1) HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp DLLName REG_SZ wlnotify.dll Logon REG_SZ SCardStartCertProp Logoff REG_SZ SCardStopCertProp Lock REG_SZ SCardSuspendCertProp Unlock REG_SZ SCardResumeCertProp Enabled REG_DWORD 1 (0x1) Impersonate REG_DWORD 1 (0x1) Asynchronous REG_DWORD 1 (0x1) HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule Asynchronous REG_DWORD 0 (0x0) DllName REG_EXPAND_SZ wlnotify.dll Impersonate REG_DWORD 0 (0x0) StartShell REG_SZ SchedStartShell Logoff REG_SZ SchedEventLogOff HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy Logoff REG_SZ WLEventLogoff Impersonate REG_DWORD 0 (0x0) Asynchronous REG_DWORD 1 (0x1) DllName REG_EXPAND_SZ sclgntfy.dll HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn DLLName REG_SZ WlNotify.dll Lock REG_SZ SensLockEvent Logon REG_SZ SensLogonEvent Logoff REG_SZ SensLogoffEvent Safe REG_DWORD 1 (0x1) MaxWait REG_DWORD 600 (0x258) StartScreenSaver REG_SZ SensStartScreenSaverEvent StopScreenSaver REG_SZ SensStopScreenSaverEvent Startup REG_SZ SensStartupEvent Shutdown REG_SZ SensShutdownEvent StartShell REG_SZ SensStartShellEvent PostShell REG_SZ SensPostShellEvent Disconnect REG_SZ SensDisconnectEvent Reconnect REG_SZ SensReconnectEvent Unlock REG_SZ SensUnlockEvent Impersonate REG_DWORD 1 (0x1) Asynchronous REG_DWORD 1 (0x1) HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv Asynchronous REG_DWORD 0 (0x0) DllName REG_EXPAND_SZ wlnotify.dll Impersonate REG_DWORD 0 (0x0) Logoff REG_SZ TSEventLogoff Logon REG_SZ TSEventLogon PostShell REG_SZ TSEventPostShell Shutdown REG_SZ TSEventShutdown StartShell REG_SZ TSEventStartShell Startup REG_SZ TSEventStartup MaxWait REG_DWORD 600 (0x258) Reconnect REG_SZ TSEventReconnect Disconnect REG_SZ TSEventDisconnect HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon DLLName REG_SZ wlnotify.dll Logon REG_SZ RegisterTicketExpiredNotificationEvent Logoff REG_SZ UnregisterTicketExpiredNotificationEvent Impersonate REG_DWORD 1 (0x1) Asynchronous REG_DWORD 1 (0x1) -------------------------------------------------------------------------- Shared Task Scheduler Registry Items: -------------------------------------------------------------------------- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler {438755C2-A8BA-11D1-B96B-00A0C90312E1} REG_SZ Pr-carregador Browseui {8C7461EF-2B13-11d2-BE35-3078302C2030} REG_SZ Daemon de cache de categorias de componente {A3717295-941D-416F-9384-ED1736729F1C} REG_SZ scpLIB -------------------------------------------------------------------------- Scheduled Tasks: -------------------------------------------------------------------------- O volume na unidade C no tem nome. O nmero de srie do volume 3CA4-A5F9 Pasta de C:\WINDOWS\tasks 04/10/2008 01:40 . 04/10/2008 01:40 .. 31/12/2002 10:00 65 desktop.ini 20/11/2008 11:35 6 SA.DAT 2 arquivo(s) 71 bytes Total de arquivos na lista: 2 arquivo(s) 71 bytes 2 pasta(s) 16.939.667.456 bytes disponveis HR C:\WINDOWS\tasks\desktop.ini A H C:\WINDOWS\tasks\SA.DAT ---------------------------------------------------------------------------- ShellExecuteHooks Registry Keys ---------------------------------------------------------------------------- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks {AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ ---------------------------------------------------------------------------- ShellServiceObjectDelayLoad Registry Keys ---------------------------------------------------------------------------- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload PostBootReminder REG_SZ {7849596a-48ea-486e-8937-a2a3009f31a9} CDBurn REG_SZ {fbeb8a05-beee-4442-804e-409d6c4515e9} WebCheck REG_SZ {E6FB5E20-DE35-11CF-9C87-00AA005127ED} SysTray REG_SZ {35CEC8A3-2BE6-11D2-8773-92E220524153} CompIBBrd REG_SZ {A3717295-941D-416F-9384-ED1736729F1C} ---------------------------------------------------------------------------- ModuleUsage Registry Keys: ---------------------------------------------------------------------------- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\C:/WINDOWS/Downloaded Program Files/CONFLICT.1/FP_AX_CAB_INSTALLER.exe .Owner REG_SZ {D27CDB6E-AE6D-11CF-96B8-444553540000} {D27CDB6E-AE6D-11CF-96B8-444553540000} REG_SZ HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\C:/WINDOWS/Downloaded Program Files/CONFLICT.2/FP_AX_CAB_INSTALLER.exe .Owner REG_SZ {D27CDB6E-AE6D-11CF-96B8-444553540000} {D27CDB6E-AE6D-11CF-96B8-444553540000} REG_SZ HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\C:/WINDOWS/Downloaded Program Files/FP_AX_CAB_INSTALLER.exe .Owner REG_SZ {D27CDB6E-AE6D-11CF-96B8-444553540000} {D27CDB6E-AE6D-11CF-96B8-444553540000} REG_SZ HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\C:/WINDOWS/Downloaded Program Files/MessengerStatsPAClient.dll .Owner REG_SZ {C3F79A2B-B9B4-4A66-B012-3EE46475B072} {C3F79A2B-B9B4-4A66-B012-3EE46475B072} REG_SZ HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\C:/WINDOWS/Downloaded Program Files/MsnPUpld.dll .Owner REG_SZ {4F1E5B1A-2A80-42CA-8532-2D05CB959537} {4F1E5B1A-2A80-42CA-8532-2D05CB959537} REG_SZ HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\C:/WINDOWS/Downloaded Program Files/PURen-us.dll .Owner REG_SZ {4F1E5B1A-2A80-42CA-8532-2D05CB959537} {4F1E5B1A-2A80-42CA-8532-2D05CB959537} REG_SZ HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\C:/WINDOWS/system32/wuweb.dll .Owner REG_SZ Unknown Owner {6414512B-B978-451D-A0D8-FCFDF33E833C} REG_SZ ---------------------------------------------------------------------------- BHO Registry Keys: ---------------------------------------------------------------------------- HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670} NoExplorer REG_DWORD 1 (0x1) HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{2E3C3651-B19C-4DD9-A979-901EC3E930AF} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3049C3E9-B461-4BC5-8870-4C09146192CA} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{7E853D72-626A-48EC-A868-BA8D5E23E045} HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} -------------------------------------------------------------------------- Select Policy Keys: -------------------------------------------------------------------------- HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer NoDrives REG_DWORD 0 (0x0) HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system HideLegacyLogonScripts REG_DWORD 0 (0x0) HideLogoffScripts REG_DWORD 0 (0x0) HideStartupScripts REG_DWORD 0 (0x0) RunLogonScriptSync REG_DWORD 1 (0x1) RunStartupScriptSync REG_DWORD 0 (0x0) HKEY_CURRENT_USER\software\policies\microsoft\internet explorer HKEY_CURRENT_USER\software\policies\microsoft\internet explorer\Control Panel HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer NoDriveTypeAutoRun REG_DWORD 227 (0xe3) NoDrives REG_DWORD 0 (0x0) NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff) HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\Run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system dontdisplaylastusername REG_DWORD 0 (0x0) legalnoticecaption REG_SZ legalnoticetext REG_SZ shutdownwithoutlogon REG_DWORD 1 (0x1) undockwithoutlogon REG_DWORD 1 (0x1) HideLegacyLogonScripts REG_DWORD 0 (0x0) HideLogoffScripts REG_DWORD 0 (0x0) RunLogonScriptSync REG_DWORD 1 (0x1) RunStartupScriptSync REG_DWORD 0 (0x0) HideStartupScripts REG_DWORD 0 (0x0) DisableRegistryTools REG_DWORD 0 (0x0) HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer\run HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer\run HKEY_USERS\.default\software\microsoft\windows\currentversion\policies HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\Explorer HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer\run HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer\run HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\system ************************************************************************************ Checking File System for suspicious Files -------------------------------------------------------------------------- Items in the Root Directory: -------------------------------------------------------------------------- Locating all files created in C:\ "C:\" $VAULT$.AVG 7 Feb 2008 "$VAULT$.AVG" 0786db~1.txt 4 Sep 2008 15 "0786DB59231B479040908162129.txt" aa.txt 3 Mar 2008 35 "aa.txt" ARCHIV~1 17 Jul 2008 "Archivos de programa" ARQUIV~1 2 Feb 2008 "Arquivos de programas" autoexec.bat 2 Feb 2008 0 "AUTOEXEC.BAT" AUTORUN.INF 17 Nov 2008 "autorun.inf" boot.bak 2 Feb 2008 211 "Boot.bak" boot.ini 16 Nov 2008 281 "boot.ini" bootfont.bin 31 Dec 2002 4952 "Bootfont.bin" cltest.txt 3 Jun 2008 0 "cltest.txt" CMDCONS 16 Nov 2008 "cmdcons" cmldr 3 Aug 2004 261856 "cmldr" combofix.txt 19 Nov 2008 29448 "ComboFix.txt" CONFIG.MSI 10 Jun 2008 "Config.Msi" config.sys 2 Feb 2008 0 "CONFIG.SYS" debug.log 9 May 2008 0 "debug.log" DOCUME~1 2 Feb 2008 "Documents and Settings" DOWNLO~1 7 Jun 2008 "Downloads" DRIVERS 15 Jun 2008 "Drivers" io.sys 2 Feb 2008 0 "IO.SYS" ISEEYO~1 20 Nov 2008 "ISeeYouXP" LINHAD~1 24 Sep 2008 "LinhaDefensiva" msdos.sys 2 Feb 2008 0 "MSDOS.SYS" MSNCLE~1 24 Sep 2008 "MSNCleaner" ntdetect.com 31 Dec 2002 47564 "NTDETECT.COM" ntldr 31 Dec 2002 251168 "ntldr" pagefile.sys 20 Nov 2008 1156812800 "pagefile.sys" PROGRA~1 17 Jul 2008 "Program Files" QOOBOX 16 Nov 2008 "Qoobox" RECYCLER 19 Nov 2008 "RECYCLER" snp2sx~1.raw 18 Mar 2008 230424 "snp2sxp-001.raw" sq13b8~1.sqm 28 Jul 2008 172 "sqmnoopt10.sqm" sq2fa0~1.sqm 14 Apr 2008 244 "sqmnoopt06.sqm" sq2fa4~1.sqm 29 Apr 2008 244 "sqmnoopt07.sqm" sq2fa8~1.sqm 14 Apr 2008 244 "sqmnoopt04.sqm" sq2fac~1.sqm 14 Apr 2008 244 "sqmnoopt05.sqm" sq3fa8~1.sqm 27 May 2008 244 "sqmnoopt08.sqm" sq3fac~1.sqm 27 Jul 2008 244 "sqmnoopt09.sqm" sqa368~1.sqm 28 Jul 2008 268 "sqmdata10.sqm" sqa37a~1.sqm 14 Apr 2008 268 "sqmdata04.sqm" sqa38a~1.sqm 27 May 2008 268 "sqmdata08.sqm" sqa77a~1.sqm 14 Apr 2008 268 "sqmdata05.sqm" sqa78a~1.sqm 27 Jul 2008 268 "sqmdata09.sqm" sqab7a~1.sqm 14 Apr 2008 268 "sqmdata06.sqm" sqaf7a~1.sqm 29 Apr 2008 268 "sqmdata07.sqm" sqmdat~1.sqm 14 Apr 2008 268 "sqmdata00.sqm" sqmdat~2.sqm 14 Apr 2008 268 "sqmdata01.sqm" sqmdat~3.sqm 14 Apr 2008 268 "sqmdata02.sqm" sqmdat~4.sqm 14 Apr 2008 268 "sqmdata03.sqm" sqmnoo~1.sqm 14 Apr 2008 244 "sqmnoopt00.sqm" sqmnoo~2.sqm 14 Apr 2008 244 "sqmnoopt01.sqm" sqmnoo~3.sqm 14 Apr 2008 244 "sqmnoopt02.sqm" sqmnoo~4.sqm 14 Apr 2008 244 "sqmnoopt03.sqm" SYSTEM~1 2 Feb 2008 "System Volume Information" TRUCOD~1 2 Nov 2008 "TrucoDTONA" txp.tmp 15 Mar 2008 0 "txp.tmp" WINDOWS 2 Feb 2008 "WINDOWS" 58 items found: 40 files (29 H/S), 18 directories (5 H/S). Total of file sizes: 1.157.644.314 bytes 1,08 G -------------------------------------------------------------------------- Locating all Backup files on C: -------------------------------------------------------------------------- Locating all *.BAK* files "C:\" boot.bak 2 Feb 2008 211 "Boot.bak" "C:\WINDOWS\" imsins.bak 18 Nov 2008 1393 "imsins.BAK" "C:\Arquivos de programas\eMule\" downlo~1.bak 16 Nov 2008 6404 "downloads.bak" "C:\Arquivos de programas\eMule\config\" client~1.bak 15 Nov 2008 253832 "clients.met.bak" "C:\Arquivos de programas\eMule\Temp\" 001par~1.bak 16 Nov 2008 254 "001.part.met.bak" 002par~1.bak 16 Nov 2008 229 "002.part.met.bak" 003par~1.bak 16 Nov 2008 185 "003.part.met.bak" 004par~1.bak 16 Nov 2008 321 "004.part.met.bak" 005par~1.bak 16 Nov 2008 206 "005.part.met.bak" 006par~1.bak 16 Nov 2008 169 "006.part.met.bak" 007par~1.bak 16 Nov 2008 187 "007.part.met.bak" 008par~1.bak 16 Nov 2008 176 "008.part.met.bak" 009par~1.bak 16 Nov 2008 160 "009.part.met.bak" 010par~1.bak 16 Nov 2008 170 "010.part.met.bak" 011par~1.bak 16 Nov 2008 173 "011.part.met.bak" 012par~1.bak 16 Nov 2008 300 "012.part.met.bak" 013par~1.bak 16 Nov 2008 182 "013.part.met.bak" 014par~1.bak 16 Nov 2008 165 "014.part.met.bak" 015par~1.bak 16 Nov 2008 180 "015.part.met.bak" 016par~1.bak 16 Nov 2008 168 "016.part.met.bak" 017par~1.bak 16 Nov 2008 152 "017.part.met.bak" 018par~1.bak 16 Nov 2008 153 "018.part.met.bak" 019par~1.bak 16 Nov 2008 232 "019.part.met.bak" 020par~1.bak 16 Nov 2008 135 "020.part.met.bak" 021par~1.bak 16 Nov 2008 152 "021.part.met.bak" 022par~1.bak 16 Nov 2008 255 "022.part.met.bak" 024par~1.bak 16 Nov 2008 281 "024.part.met.bak" 039par~1.bak 16 Nov 2008 150 "039.part.met.bak" 040par~1.bak 16 Nov 2008 188 "040.part.met.bak" "C:\WINDOWS\Debug\Setup\" updsh.bak 5 Sep 2008 664718 "UpdSh.bak" "C:\Documents and Settings\Denise\Dados de aplicativos\LimeWire\" fileurns.bak 24 Jul 2008 712 "fileurns.bak" "C:\WINDOWS\Debug\Setup\Backup\" intppm~1.bak 6 Sep 2008 4 "INTPPM_Backup.bak" "C:\Documents and Settings\Default User\Dados de aplicativos\Microsoft\Internet Explorer\" brndlog.bak 2 Feb 2008 113 "brndlog.bak" "C:\Documents and Settings\Denise\Dados de aplicativos\Ahead\NeroVision\" gchwcfg.bak 12 Jun 2008 7288 "GCHWCfg.bak" "C:\Documents and Settings\Denise\Dados de aplicativos\Microsoft\Internet Explorer\" brndlog.bak 2 Feb 2008 141 "brndlog.bak" "C:\WINDOWS\pchealth\helpctr\Config\Cache\" profes~1.bak 11 Jul 2008 181292 "Professional_32_1046.dat.bak" "C:\Documents and Settings\Denise\Configuraes locais\Dados de aplicativos\Sony\Vegas\7.0\" 000011~1.bak 18 Jul 2008 165568 "000011cc.autosave.veg.bak" "C:\Documents and Settings\Denise\Configuraes locais\Dados de aplicativos\Sony\Vegas Movie Studio\8.0\" 000002~1.bak 25 Feb 2008 110664 "0000020c.autosave.vf.bak" 000005~1.bak 22 Feb 2008 47624 "000005f4.autosave.vf.bak" 000006~1.bak 25 Feb 2008 117232 "000006dc.autosave.vf.bak" "C:\WINDOWS\system32\config\systemprofile\Dados de aplicativos\Microsoft\Internet Explorer\" brndlog.bak 2 Feb 2008 113 "brndlog.bak" 41 items found: 41 files, 0 directories. Total of file sizes: 1.562.232 bytes 1,49 M -------------------------------------------------------------------------- Locating all copies of Internet Explorer on C: -------------------------------------------------------------------------- Locating all copies of Internet Explorer "C:\Arquivos de programas\Internet Explorer\" iexplore.exe 23 Aug 2008 635848 "iexplore.exe" "C:\WINDOWS\ie7\" iexplore.exe 31 Dec 2002 93184 "iexplore.exe" "C:\WINDOWS\ie7updates\KB956390-IE7\" iexplore.exe 13 Aug 2007 622080 "iexplore.exe" "C:\WINDOWS\system32\dllcache\" iexplore.exe 23 Aug 2008 635848 "iexplore.exe" "C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\" iexplore.exe 23 Aug 2008 635848 "iexplore.exe" "C:\WINDOWS\SoftwareDistribution\Download\0bd93937a84337966dcbb1c34e8c1b2f\" iexplore.exe 14 Apr 2008 93184 "iexplore.exe" "C:\WINDOWS\SoftwareDistribution\Download\c27191e3576e2879433c8d6dfff80117\SP2GDR\" iexplore.exe 23 Aug 2008 635848 "iexplore.exe" "C:\WINDOWS\SoftwareDistribution\Download\c27191e3576e2879433c8d6dfff80117\SP2QFE\" iexplore.exe 23 Aug 2008 635848 "iexplore.exe" 8 items found: 8 files, 0 directories. Total of file sizes: 3.987.688 bytes 3,80 M -------------------------------------------------------------------------- Locating all copies of beep.sy_ on C: -------------------------------------------------------------------------- Locating all copies of Internet Explorer No matches found. -------------------------------------------------------------------------- Locating all copies of beep.sys on C: -------------------------------------------------------------------------- Locating all copies of Internet Explorer "C:\WINDOWS\system32\dllcache\" beep.sys 31 Dec 2002 4224 "beep.sys" "C:\WINDOWS\system32\drivers\" beep.sys 31 Dec 2002 4224 "beep.sys" 2 items found: 2 files, 0 directories. Total of file sizes: 8.448 bytes 8,25 K -------------------------------------------------------------------------- Locating all copies of Windows Explorer on C: -------------------------------------------------------------------------- Locating all copies of Windows Explorer "C:\WINDOWS\" explorer.exe 13 Jun 2007 1035264 "explorer.exe" "C:\WINDOWS\$NtUninstallKB938828$\" explorer.exe 31 Dec 2002 1034240 "explorer.exe" "C:\WINDOWS\system32\dllcache\" explorer.exe 13 Jun 2007 1035264 "explorer.exe" "C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\" explorer.exe 13 Jun 2007 1035264 "explorer.exe" "C:\WINDOWS\SoftwareDistribution\Download\0bd93937a84337966dcbb1c34e8c1b2f\" explorer.exe 14 Apr 2008 1035776 "explorer.exe" 5 items found: 5 files, 0 directories. Total of file sizes: 5.175.808 bytes 4,93 M -------------------------------------------------------------------------- Items in Document and Settings: -------------------------------------------------------------------------- Listing contents of C:\Documents and Settings "C:\Documents and Settings\" ALLUSE~1 2 Feb 2008 "All Users" DEFAUL~1 2 Feb 2008 "Default User" DENISE 2 Feb 2008 "Denise" LOCALS~1 2 Feb 2008 "LocalService" NETWOR~1 2 Feb 2008 "NetworkService" 5 items found: 0 files, 5 directories (3 H/S). -------------------------------------------------------------------------- Desktop Items: -------------------------------------------------------------------------- Locating all files created in C:\Documents and Settings\Denise\Desktop within the last 90 days. "C:\Documents and Settings\Denise\Desktop\" atalho~1.lnk 17 Nov 2008 841 "Atalho para ComboFix.lnk" ccleaner.lnk 13 Nov 2008 1620 "CCleaner.lnk" eusing~1.lnk 13 Nov 2008 780 "Eusing Free Registry Cleaner.lnk" flash_~1.exe 17 Nov 2008 132597 "Flash_Disinfector.exe" iseeyo~1.lnk 20 Nov 2008 534 "ISeeYouXP.lnk" limpeza.bat 13 Nov 2008 323 "limpeza.bat" thumbs.db 6 Nov 2008 32768 "Thumbs.db" TRAFIC 17 Nov 2008 "Trafic" 8 items found: 7 files (1 H/S), 1 directory. Total of file sizes: 169.463 bytes 165,49 K Locating all files created in C:\Documents and Settings\All Users\Desktop\ within the last 90 days. "C:\Documents and Settings\All Users\Desktop\" malwar~1.lnk 15 Nov 2008 736 "Malwarebytes' Anti-Malware.lnk" 1 item found: 1 file, 0 directories. Total of file sizes: 736 bytes 0,72 K -------------------------------------------------------------------------- Start Menu Items: -------------------------------------------------------------------------- Locating all files created inC:\Documents and Settings\Denise\Start Menu within the last 90 days. No matches found. Locating all files created in C:\Documents and Settings\Denise\Start Menu\Programs\Startup within the last 90 days. No matches found. Locating all files created in C:\Documents and Settings\All Users\Start Menu within the last 90 days. No matches found. Locating all files created in C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ within the last 90 days. No matches found. -------------------------------------------------------------------------- Application Data Items: -------------------------------------------------------------------------- Locating all files created in C:\Documents and Settings\Denise\Application Data\ within the last 90 days. No matches found. Locating all files created in C:\Documents and Settings\Denise\Local Settings\Application Data\ within the last 90 days. No matches found. Locating all files created in C:\Documents and Settings\All Users\Application Data\ within the last 90 days. No matches found. -------------------------------------------------------------------------- C:\Documents and Settings\Denise\Local Settings\TEMP: -------------------------------------------------------------------------- Locating all files created in C:\Documents and Settings\Denise\Local Settings\TEMP within the last 90 days. -------------------------------------------------------------------------- Items in Templates Folder: -------------------------------------------------------------------------- Locating all files created in C:\Documents and Settings\Denise\Templates No matches found. -------------------------------------------------------------------------- Items in Program Files: -------------------------------------------------------------------------- Locating all files created in C:\Arquivos de programas\ within the last 90 days. "C:\Arquivos de programas\" AVIRA 13 Nov 2008 "Avira" CCLEANER 13 Nov 2008 "CCleaner" EMULE 1 Nov 2008 "eMule" ESET 24 Sep 2008 "ESET" EUSING~1 13 Nov 2008 "Eusing Free Registry Cleaner" GOOGLE 1 Nov 2008 "Google" HEWLET~1 28 Aug 2008 "Hewlett-Packard" MALWAR~1 15 Nov 2008 "Malwarebytes' Anti-Malware" MSXML4~1.0 30 Aug 2008 "MSXML 4.0" SKYPE 4 Sep 2008 "Skype" VALVE 31 Aug 2008 "Valve" YAHOO! 13 Nov 2008 "Yahoo!" 12 items found: 0 files, 12 directories. Locating all files created in C:\Arquivos de programas\Arquivos comuns\ within the last 90 days. "C:\Arquivos de programas\Arquivos comuns\" HP 28 Aug 2008 "HP" SKYPE 4 Sep 2008 "Skype" 2 items found: 0 files, 2 directories. Locating all files created in C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Web Folders within the last 90 days. No matches found. -------------------------------------------------------------------------- Items in the Windows Directory: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\ within the last 90 days. "C:\WINDOWS\" $N2CCE~1 17 Nov 2008 "$NtUninstallKB914440$" $N2CFA~1 16 Oct 2008 "$NtUninstallKB956390$" $N34B6~1 16 Oct 2008 "$NtUninstallKB954211$" $N3CF2~1 16 Oct 2008 "$NtUninstallKB956391$" $N400F~1 16 Oct 2008 "$NtUninstallKB957095$" $N44DE~1 16 Oct 2008 "$NtUninstallKB956841$" $N4CC0~1 17 Nov 2008 "$NtUninstallKB904942$" $N4CEA~1 10 Sep 2008 "$NtUninstallKB938464$" $N500F~1 12 Nov 2008 "$NtUninstallKB957097$" $N54BE~1 16 Oct 2008 "$NtUninstallKB956803$" $N5CDE~1 24 Oct 2008 "$NtUninstallKB958644$" $N60E6~1 17 Nov 2008 "$NtUninstallKB915865$" $N60EE~1 12 Nov 2008 "$NtUninstallKB955069$" $NTSER~1 17 Nov 2008 "$NtServicePackUninstallNLSDownlevelMapping$" $NTSER~2 17 Nov 2008 "$NtServicePackUninstallIDNMitigationAPIs$" 0.log 20 Nov 2008 0 "0.log" bootstat.dat 20 Nov 2008 2048 "bootstat.dat" comsetup.log 18 Nov 2008 18495 "comsetup.log" confis.txt 14 Oct 2008 22 "confis.txt" confisc.txt 14 Oct 2008 1665 "confisc.txt" cuninst.exe 21 Oct 2008 90112 "Cuninst.exe" ERDNT 16 Nov 2008 "ERDNT" faxsetup.log 18 Nov 2008 55651 "FaxSetup.log" hpoins11.dat 28 Aug 2008 119277 "hpoins11.dat" idnmit~1.log 17 Nov 2008 5685 "IDNMitigationAPIs.log" IE7 17 Nov 2008 "ie7" ie7.log 17 Nov 2008 59064 "ie7.log" IE7UPD~1 17 Nov 2008 "ie7updates" ie7_main.log 17 Nov 2008 66997 "ie7_main.log" iis6.log 18 Nov 2008 60463 "iis6.log" imsins.bak 18 Nov 2008 1393 "imsins.BAK" imsins.log 18 Nov 2008 1393 "imsins.log" kb904942.log 17 Nov 2008 12429 "KB904942.log" kb914440.log 17 Nov 2008 5714 "KB914440.log" kb915865.log 17 Nov 2008 5466 "KB915865.log" kb9381~1.log 18 Nov 2008 11291 "KB938127-IE7.log" kb9381~2.log 18 Nov 2008 6659 "KB938127-v2-IE7.log" kb956391.log 17 Nov 2008 5775 "KB956391.log" kb9563~1.log 17 Nov 2008 75313 "KB956390-IE7.log" medctroc.log 18 Nov 2008 3825 "MedCtrOC.log" modeml~1.txt 20 Nov 2008 7068 "ModemLog_HUAWEI Mobile Connect - 3G Modem.txt" msgsocm.log 18 Nov 2008 2781 "msgsocm.log" msmqinst.log 18 Nov 2008 17646 "msmqinst.log" netfxocm.log 18 Nov 2008 9747 "netfxocm.log" NETWOR~1 17 Nov 2008 "network diagnostic" nlsdow~1.log 17 Nov 2008 5350 "NLSDownlevelMapping.log" ntdtcs~1.log 18 Nov 2008 11161 "ntdtcsetup.log" ocgen.log 18 Nov 2008 26244 "ocgen.log" ocmsn.log 18 Nov 2008 3474 "ocmsn.log" photos~1.ini 13 Oct 2008 151 "PhotoSnapViewer.INI" PREFETCH 13 Nov 2008 "Prefetch" REGIST~2 31 Aug 2008 "RegisteredPackages" schedlgu.txt 20 Nov 2008 32536 "SchedLgU.Txt" setupact.log 17 Nov 2008 0 "setupact.log" setupapi.log 17 Nov 2008 18509 "setupapi.log" setuperr.log 17 Nov 2008 0 "setuperr.log" spupdsvc.log 17 Nov 2008 5947 "spupdsvc.log" system.ini 19 Nov 2008 227 "system.ini" tabletoc.log 18 Nov 2008 2799 "tabletoc.log" TEMP 19 Nov 2008 "temp" tsoc.log 18 Nov 2008 25389 "tsoc.log" updspapi.log 17 Nov 2008 37573 "updspapi.log" WBEM 17 Nov 2008 "WBEM" wiadebug.log 20 Nov 2008 159 "wiadebug.log" wiaservc.log 20 Nov 2008 50 "wiaservc.log" win.ini 28 Aug 2008 922 "win.ini" window~1.log 20 Nov 2008 1433451 "WindowsUpdate.log" 67 items found: 44 files (1 H/S), 23 directories (16 H/S). Total of file sizes: 2.249.921 bytes 2,14 M -------------------------------------------------------------------------- C:\WINDOWS\Downloaded Program Files: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\Downloaded Program Files\ within the last 90 days. No matches found. -------------------------------------------------------------------------- C:\WINDOWS\PCHealth\HelpCtr\Binaries: -------------------------------------------------------------------------- Locating all files in C:\WINDOWS\PCHealth\HelpCtr\Binaries "C:\WINDOWS\pchealth\helpctr\binaries\" brpinfo.dll 31 Dec 2002 21504 "brpinfo.dll" hcappres.dll 31 Dec 2002 7168 "HCAppRes.dll" helpctr.exe 31 Dec 2002 768512 "HelpCtr.exe" helphost.exe 31 Dec 2002 99840 "HelpHost.exe" helpsvc.exe 31 Dec 2002 743936 "HelpSvc.exe" hscsp_w3.cab 31 Dec 2002 324700 "hscsp_w3.cab" hscupd.exe 31 Dec 2002 18944 "HscUpd.exe" msconfig.exe 31 Dec 2002 159744 "msconfig.exe" msinfo.dll 31 Dec 2002 380928 "msinfo.dll" notiflag.exe 31 Dec 2002 35328 "notiflag.exe" pchdt_w3.cab 31 Dec 2002 2768982 "pchdt_w3.cab" pchshell.dll 31 Dec 2002 102400 "pchshell.dll" pchsvc.dll 31 Dec 2002 38912 "pchsvc.dll" 13 items found: 13 files, 0 directories. Total of file sizes: 5.470.898 bytes 5,21 M -------------------------------------------------------------------------- C:\WINDOWS\system: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\system within the last 90 days. No matches found. -------------------------------------------------------------------------- C:\WINDOWS\system32: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\system32 within the last 90 days. "C:\WINDOWS\system32\" advpack.dll 26 Aug 2008 124928 "advpack.dll" CATROO~1 5 Sep 2008 "CatRoot_bak" cdm.dll 16 Oct 2008 92696 "cdm.dll" cf2157.exe 19 Nov 2008 400384 "CF2157.exe" cmdlin~1.dll 31 Aug 2008 98304 "CmdLineExt.dll" d3d8caps.dat 31 Aug 2008 552 "d3d8caps.dat" d3d9caps.dat 18 Nov 2008 664 "d3d9caps.dat" dxtmsft.dll 26 Aug 2008 347136 "dxtmsft.dll" dxtrans.dll 26 Aug 2008 214528 "dxtrans.dll" extmgr.dll 26 Aug 2008 133120 "extmgr.dll" ezsidmv.dat 4 Sep 2008 56 "ezsidmv.dat" fntcache.dat 16 Oct 2008 1419592 "FNTCACHE.DAT" icardie.dll 26 Aug 2008 63488 "icardie.dll" ie4uinit.exe 25 Aug 2008 70656 "ie4uinit.exe" ieakeng.dll 26 Aug 2008 153088 "ieakeng.dll" ieaksie.dll 26 Aug 2008 230400 "ieaksie.dll" ieakui.dll 23 Aug 2008 161792 "ieakui.dll" ieapfltr.dll 26 Aug 2008 383488 "ieapfltr.dll" iedkcs32.dll 26 Aug 2008 384512 "iedkcs32.dll" ieframe.dll 3 Oct 2008 6066176 "ieframe.dll" iernonce.dll 26 Aug 2008 44544 "iernonce.dll" iertutil.dll 26 Aug 2008 267776 "iertutil.dll" ieudinit.exe 25 Aug 2008 13824 "ieudinit.exe" inetcpl.cpl 26 Aug 2008 1831424 "inetcpl.cpl" jsproxy.dll 26 Aug 2008 27648 "jsproxy.dll" mapisvc.inf 3 Oct 2008 12 "mapisvc.inf" mrt.exe 3 Nov 2008 17318336 "MRT.exe" msfeeds.dll 26 Aug 2008 459264 "msfeeds.dll" msfeed~1.dll 26 Aug 2008 52224 "msfeedsbs.dll" mshtml.dll 27 Aug 2008 3593216 "mshtml.dll" mshtmled.dll 26 Aug 2008 477696 "mshtmled.dll" msrating.dll 26 Aug 2008 193024 "msrating.dll" mstime.dll 26 Aug 2008 671232 "mstime.dll" msxml3.dll 4 Sep 2008 1106944 "msxml3.dll" msxml4.dll 30 Sep 2008 1286152 "msxml4.dll" mucltui.dll 16 Oct 2008 268648 "mucltui.dll" mucltu~1.mui 16 Oct 2008 27496 "mucltui.dll.mui" muweb.dll 16 Oct 2008 208744 "muweb.dll" netapi32.dll 15 Oct 2008 332800 "netapi32.dll" occache.dll 26 Aug 2008 102912 "occache.dll" perfc009.dat 12 Oct 2008 67464 "perfc009.dat" perfc016.dat 12 Oct 2008 76100 "perfc016.dat" perfh009.dat 12 Oct 2008 415390 "perfh009.dat" perfh016.dat 12 Oct 2008 448166 "perfh016.dat" perfst~1.ini 12 Oct 2008 1020222 "PerfStringBackup.INI" pngfilt.dll 26 Aug 2008 44544 "pngfilt.dll" PT-BR 17 Nov 2008 "pt-br" url.dll 26 Aug 2008 105984 "url.dll" urlmon.dll 26 Aug 2008 1159680 "urlmon.dll" webcheck.dll 26 Aug 2008 233472 "webcheck.dll" win32k.sys 15 Sep 2008 1846144 "win32k.sys" wininet.dll 26 Aug 2008 826368 "wininet.dll" wpa.dbl 28 Oct 2008 2206 "wpa.dbl" wuapi.dll 16 Oct 2008 561688 "wuapi.dll" wuapid~1.mui 16 Oct 2008 27672 "wuapi.dll.mui" wuauclt.exe 16 Oct 2008 51224 "wuauclt.exe" wuaucpl.cpl 16 Oct 2008 213528 "wuaucpl.cpl" wuaucp~1.mui 16 Oct 2008 27672 "wuaucpl.cpl.mui" wuaueng.dll 16 Oct 2008 1809944 "wuaueng.dll" wuauen~1.mui 16 Oct 2008 18968 "wuaueng.dll.mui" wucltui.dll 16 Oct 2008 323608 "wucltui.dll" wucltu~1.mui 16 Oct 2008 31768 "wucltui.dll.mui" wups.dll 16 Oct 2008 34328 "wups.dll" wups2.dll 16 Oct 2008 43544 "wups2.dll" wuweb.dll 16 Oct 2008 202776 "wuweb.dll" 65 items found: 63 files (1 H/S), 2 directories. Total of file sizes: 48.221.936 bytes 45,98 M -------------------------------------------------------------------------- C:\WINDOWS\system32\com: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\system32\com within the last 90 days. No matches found. -------------------------------------------------------------------------- C:\WINDOWS\system32\components: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\system32\components within the last 90 days. No matches found. -------------------------------------------------------------------------- C:\WINDOWS\system32\drivers: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\system32\drivers within the last 90 days. "C:\WINDOWS\system32\drivers\" avipbb.sys 13 Nov 2008 75072 "avipbb.sys" mbam.sys 22 Oct 2008 15504 "mbam.sys" mbamsw~1.sys 22 Oct 2008 38496 "mbamswissarmy.sys" mrxsmb.sys 24 Oct 2008 453632 "mrxsmb.sys" srv.sys 28 Aug 2008 333056 "srv.sys" 5 items found: 5 files, 0 directories. Total of file sizes: 915.760 bytes 894,30 K -------------------------------------------------------------------------- C:\WINDOWS\system32\drivers\etc: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\system32\drivers\etc within the last 90 days. "C:\WINDOWS\system32\drivers\etc\" hosts 24 Sep 2008 774 "hosts" hosts.msn 24 Sep 2008 774 "hosts.msn" 2 items found: 2 files, 0 directories. Total of file sizes: 1.548 bytes 1,51 K -------------------------------------------------------------------------- C:\WINDOWS\TEMP: -------------------------------------------------------------------------- Locating all files created in C:\WINDOWS\TEMP within the last 90 days. No matches found. ************************************************************************************ Checking for .COM files to Delete. They will only print if deleted! Locating .COM files in the C:\WINDOWS\System32 folder "C:\WINDOWS\system32\" chcp.com 31 Dec 2002 7680 "chcp.com" command.com 31 Dec 2002 52472 "command.com" diskcomp.com 31 Dec 2002 9216 "diskcomp.com" diskcopy.com 31 Dec 2002 7168 "diskcopy.com" edit.com 31 Dec 2002 70750 "edit.com" format.com 31 Dec 2002 25600 "format.com" graftabl.com 31 Dec 2002 26112 "graftabl.com" graphics.com 31 Dec 2002 19918 "graphics.com" kb16.com 31 Dec 2002 14950 "kb16.com" loadfix.com 31 Dec 2002 1153 "loadfix.com" locate.com 14 Jan 2005 11254 "locate.com" mode.com 31 Dec 2002 19456 "mode.com" more.com 31 Dec 2002 15872 "more.com" tree.com 31 Dec 2002 11264 "tree.com" win.com 31 Dec 2002 18432 "win.com" 15 items found: 15 files, 0 directories. Total of file sizes: 311.297 bytes 304,00 K ************************************************************************************ Miscellaneous Malware Detections: ------------------------------------------------------------------------------------ **** Delfin Media {31EE3286-D785-4E3F-95FC-51D00FDABC01} NOT FOUND by this tool! **** **** SmitFraud {0BC9BC01-54D4-4CCE-2B7D-955164314CD4} NOT FOUND by this tool! **** **** SpywareStrike {C1A2FDA2-1A5B-2A8F-F3A2-B22DA1A3C41D} NOT FOUND by this tool! **** **** SpywareStrike {C1A2FDA2-2A5B-2C8A-F2A2-BA2DB3A2C31C} NOT FOUND by this tool! **** **** SpywareStrike {D81E2FC4-B0A2-11D3-21AC-07C04C21A18A} NOT FOUND by this tool! **** **** SpyAxe {A1D9D3F0-8C2A-9A1D-A376-2CACFB10AB72} NOT FOUND by this tool! **** **** SpyAxe {A2D9D3F0-8C2A-2A1D-A376-1BECFB10AB72} NOT FOUND by this tool! **** **** SpyAxe {A2D9D3F0-8C2A-2A1D-A376-1BECFB10AB72} NOT FOUND by this tool! **** **** SpyAxe {A2D9D3F0-8C2A-2A1D-A376-1BECFB10AB72} NOT FOUND by this tool! **** **** SpyAxe {A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F} NOT FOUND by this tool! **** **** SpyFalcon {A2C8F6B1-7C2A-3D1C-A3C6-A1FDA113B43F} NOT FOUND by this tool! **** **** SpyFalcon {C9FA1DC9-1FB3-C2A8-2F1A-DC1A33E7AF9D} NOT FOUND by this tool! **** **** SpyFalcon {CA14EE13-ED15-C4A2-17FF-DA4D15C1BC5E} NOT FOUND by this tool! **** **** SpyFalcon {35a88e51-b53d-43e9-b8a7-75d4c31b4676} NOT FOUND by this tool! **** **** SpyFalcon {64ba30a2-811a-4597-b0af-d551128be340} NOT FOUND by this tool! **** **** SpyFalcon {89aef01d-d237-49c7-84dc-4e1904c1fd31} NOT FOUND by this tool! **** **** SpyFalcon {e04408db-4812-4478-8d4d-e46edcffd3b6} NOT FOUND by this tool! **** **** SpyFalcon {336ec37f-54bf-4f13-8237-03f64fa591e7} NOT FOUND by this tool! **** **** SpyFalcon {5bc82bdb-bc03-4671-9a78-3ef2b68449de} NOT FOUND by this tool! **** **** SpyFalcon {24c60b9b-26b5-4201-9f7a-fb9219356ae9} NOT FOUND by this tool! **** **** SpyFalcon {a0c51615-738a-4542-801a-5af61614e182} NOT FOUND by this tool! **** **** SpyFalcon {70fbd528-2d3c-4a00-9b8c-bbf441e534be} NOT FOUND by this tool! **** **** SpyFalcon {a566f298-05a6-4b3d-b672-da7c27316430} NOT FOUND by this tool! **** **** SpyFalcon {f5947202-e9cb-4a72-88e7-22f2cbd2b124} NOT FOUND by this tool! **** **** SpyFalcon {5aaf6542-f4ba-4df4-873d-4902ecbe794c} NOT FOUND by this tool! **** **** SpyFalcon {3e4155b8-5a4a-4e95-83b2-ab032da9acbc} NOT FOUND by this tool! **** **** SpyFalcon {9952355f-fefb-4764-bcd7-a993d03dd7e2} NOT FOUND by this tool! **** **** SpyFalcon {55059d4f-a1ac-4837-ae07-4859101f598d} NOT FOUND by this tool! **** **** SpyFalcon {c3786a8d-6426-4c29-a23f-f36e47b31e0c} NOT FOUND by this tool! **** **** SpyLocked {25b7d2fd-4f71-46d1-801a-7de323e4ec82} NOT FOUND by this tool! **** **** SpyLocked {4233AC08-A2C4-4742-A0B4-83719613D62C} NOT FOUND by this tool! **** **** SpyLocked {716002DB-288C-4BF0-80CD-A467E78D8B55} NOT FOUND by this tool! **** **** SpyLocked {735E980D-45D2-4777-AF82-9923D3C8D3AE} NOT FOUND by this tool! **** **** SpyLocked {B23DC537-3E13-44C7-BF67-D8405EB377F7} NOT FOUND by this tool! **** **** SpyLocked {B292EC9F-A074-4115-8342-1F459702D8D2} NOT FOUND by this tool! **** **** SpyLocked {CECA6F2B-247B-4ECE-9B7A-D0135C8036FC} NOT FOUND by this tool! **** **** SpyLocked {DA3B49F6-8C54-4429-A275-21A86DCCA413} NOT FOUND by this tool! **** **** SpyLocked {EDE8BED5-92CF-4482-8F51-A01CD9B3EA37} NOT FOUND by this tool! **** **** SpyLocked {FA4FBF53-C766-4622-8011-A87A805EEBF0} NOT FOUND by this tool! **** **** SpywareLocked {0E4E5110-A772-4C4A-A7DC-137FE10ABD6E} NOT FOUND by this tool! **** **** SpywareLocked {07A582E8-BAE3-457D-9D29-2048DE45A369} NOT FOUND by this tool! **** **** SpywareLocked {3BAA1AD8-EE49-4772-BF0B-F55083E0F7AA} NOT FOUND by this tool! **** **** SpywareLocked {9D6FAC42-A7BE-4702-87EF-75D8DC14249E} NOT FOUND by this tool! **** **** SpywareLocked {ABEF791F-947E-4CDF-83C3-E72A240AFB67} NOT FOUND by this tool! **** **** SpywareLocked {BD0FC212-0A36-4232-83CC-2063FB9282E0} NOT FOUND by this tool! **** **** SpywareLocked {B0DED443-5E68-4001-A81B-0A0001621AB8} NOT FOUND by this tool! **** **** SpywareLocked {F38B1B2B-4976-46DD-9FE5-60FDE72F0B4D} NOT FOUND by this tool! **** **** SpywareQuake {0c7416f0-dd23-420f-97f5-aae352ea2bf1} NOT FOUND by this tool! **** **** SpywareQuake {E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D} NOT FOUND by this tool! **** **** SpywareQuake {AC1B4DA2-12FA-31F2-1A7D-CD2B14E6AD4E} NOT FOUND by this tool! **** **** SpywareQuake {CD5E2AC9-25CE-A1C5-D1E2-DC6B28A6ED5A} NOT FOUND by this tool! **** **** SpywareQuake {EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2E} NOT FOUND by this tool! **** **** SpywareQuake {e5b1e382-817e-4b74-8a96-ec78751e6acf} NOT FOUND by this tool! **** **** SpywareQuake {a0aa3e4b-31cb-4ea2-9049-22b7f5b65edb} NOT FOUND by this tool! **** **** SpywareQuake {cbb430e6-5b1b-474a-9d7e-160d4fe74bea} NOT FOUND by this tool! **** **** SpywareQuake {62eb0924-19d2-4226-b4b9-8ad1f70904c1} NOT FOUND by this tool! **** **** SpywareQuake {6c69e319-0d03-47da-997a-36586cbc53b3} NOT FOUND by this tool! **** **** SpywareQuake {aea3d2df-2b2c-4d7b-81a0-d975c6dc088e} NOT FOUND by this tool! **** **** SpywareSheriff {1C3B31AE-FD16-D2CE-43FF-DC4CD5C1BC5E} NOT FOUND by this tool! **** **** VirusBurster {9d635a36-6b3c-4146-8625-f3aaf507bbf8} NOT FOUND by this tool! **** **** TrustCleaner {24E27EA9-FCF3-444F-BD80-20543BA5D946} NOT FOUND by this tool! **** **** Troj/Small-ER {4F141CBA-1457-6CCA-03A7-7AA21B61EA0F} NOT FOUND by this tool! **** **** Troj/Spabot-E {429F4BB8-7BF7-4152-8011-3C6F9EB7E892} NOT FOUND by this tool! **** **** Troj/Dloader-OF {203B1C4D9-BC71-8916-38AD-9DEA5D213614} NOT FOUND by this tool! **** **** Troj/Crafted-A {0BC9BC01-54D4-4CCE-2B7D-955164314CD4} NOT FOUND by this tool! **** **** Troj/Agent-FG {2C1CD3D7-86AC-4068-93BC-A02304BB8C34} NOT FOUND by this tool! **** **** TX 4 BrowserAd adware {8e99f990-b75a-4568-b3c8-24cbc8cbbfc1} NOT FOUND by this tool! **** **** Trojan-Proxy.Win32.Small {87A3E824-A726-4CF4-8A66-6314B11BDA0C} NOT FOUND by this tool! **** **** Trojan-Downloader.Win32.Delf.ks {786C369D-409A-456f-A13C-971EADA850C6} NOT FOUND by this tool! **** **** W32/Almanahe.a Worm NOT FOUND by this tool! **** **** msctl32.dll SpamBot NOT FOUND by this tool! **** **** KeyLogger NOT FOUND by this tool! **** -------------------------------------------------------------------------- CHECKING FOR BOT-TYPE WORMS: -------------------------------------------------------------------------- **** W32/Sdbot Worm NOT FOUND by this tool! **** -------------------------------------------------------------------------- CHECKING FOR KNOWN ROOTKIT STEALTHING AGENTS: -------------------------------------------------------------------------- **** i386p.* Stealthing Agent NOT FOUND by this tool! **** **** ErrorSafe erssdd.* Stealthing Agent NOT FOUND by this tool! **** **** VUNDO DP.* Stealthing Agent NOT FOUND by this tool! **** **** Troj/NTRootK-BP main.* Stealthing Agent NOT FOUND by this tool! **** **** W32/Almanahe.sys RioDrvrs.* Stealthing Agent NOT FOUND by this tool! **** **** W32/Almanahe.sys DKIS6.* Stealthing Agent NOT FOUND by this tool! **** -------------------------------------------------------------------------- CHECKING FOR VISIBLE ROOTKIT-TYPE REGISTRY KEYS: -------------------------------------------------------------------------- **** Rustock.B trojan, PE386 rootkit NOT FOUND by this tool! **** **** Rustock.B trojan, huy32 rootkit NOT FOUND by this tool! **** **** Rustock.B trojan, lzx32 rootkit NOT FOUND by this tool! **** **** Rustock.B trojan, msguard rootkit NOT FOUND by this tool! **** **** Rustock.B trojan, xpdt.sy_ rootkit NOT FOUND by this tool! **** **** Rustock.B trojan, xpdt.sys rootkit NOT FOUND by this tool! **** **** CmdService adware NOT FOUND by this tool! **** **** Network_Monitor adware NOT FOUND by this tool! **** **** Trojan.Peacomm NOT FOUND by this tool! **** **** Trojan.Peacomm windev NOT FOUND by this tool! **** **** AVPE Haxdoor NOT FOUND by this tool! **** **** MEMLOW Haxdoor NOT FOUND by this tool! **** **** VDMT Haxdoor NOT FOUND by this tool! **** **** YCSVGA Haxdoor NOT FOUND by this tool! **** **** PPTP Haxdoor FOUND by this tool! **** CAREFULL HERE THIS WILL ALSO FIND WinLanMiniport DisplayName REG_SZ Miniporta de rede remota (PPTP) Description REG_SZ Miniporta de rede remota (PPTP) DisplayName REG_SZ Miniporta de rede remota (PPTP) Description REG_SZ Miniporta de rede remota (PPTP) DisplayName REG_SZ Miniporta de rede remota (PPTP) Description REG_SZ Miniporta de rede remota (PPTP) **** DVB Haxdoor NOT FOUND by this tool! **** **** YVBB Haxdoor NOT FOUND by this tool! **** **** YVPP Haxdoor NOT FOUND by this tool! **** **** NKGFS Haxdoor NOT FOUND by this tool! **** **** XMSK Haxdoor NOT FOUND by this tool! **** **** AVPX Haxdoor NOT FOUND by this tool! **** **** MMXF Haxdoor NOT FOUND by this tool! **** **** DP1112 Vundo Rootkit NOT FOUND by this tool! **** **** SYSBUS32 Rootkit Driver NOT FOUND by this tool! **** **** I386P Rootkit Driver NOT FOUND by this tool! **** **** ERSSDD Rootkit NOT FOUND by this tool! **** **** GencTurK RootKit NOT FOUND by this tool! **** **** Troj/NTRootK-BP RootKit NOT FOUND by this tool! **** **** W32/Almanahe.sys NOT FOUND by this tool! **** ************************************************************************************ Dumping HKLM Uninstall Programs list #DisplayName REG_SZ Nero Digital #DisplayName REG_SZ Nero Media Player #DisplayName REG_SZ Nero OEM DisplayName REG_SZ Adobe Bridge 1.0 DisplayName REG_SZ Adobe Common File Installer DisplayName REG_SZ Adobe Flash Player 10 ActiveX DisplayName REG_SZ Adobe Flash Player 10 Plugin DisplayName REG_SZ Adobe Help Center 1.0 DisplayName REG_SZ Adobe Photoshop CS2 DisplayName REG_SZ Adobe Photoshop CS2 DisplayName REG_SZ Adobe Stock Photos 1.0 DisplayName REG_SZ AiO_Scan_CDA DisplayName REG_SZ AiOSoftwareNPI DisplayName REG_SZ Arquivo do WinRAR DisplayName REG_SZ Atualizao de Segurana para o Windows Media Player (KB911564) DisplayName REG_SZ Atualizao de Segurana para o Windows Media Player 6.4 (KB925398) DisplayName REG_SZ Atualizao de Segurana para o Windows Media Player 9 (KB936782) DisplayName REG_SZ Atualizao de Segurana para Windows Internet Explorer 7 (KB938127-v2) DisplayName REG_SZ Atualizao de Segurana para Windows Internet Explorer 7 (KB938127) DisplayName REG_SZ Atualizao de Segurana para Windows Internet Explorer 7 (KB956390) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB890046) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB893756) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB896358) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB896423) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB896428) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB899587) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB899591) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB900725) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB901017) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB901214) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB902400) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB905414) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB905749) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB908519) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB911562) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB911927) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB913580) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB914388) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB914389) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB917344) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB918118) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB918439) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB919007) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB920213) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB920670) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB920683) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB920685) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB921503) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB922819) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB923191) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB923414) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB923980) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB924270) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB924496) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB924667) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB925902) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB926255) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB926436) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB927779) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB927802) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB928255) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB928843) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB929123) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB930178) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB931261) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB931784) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB932168) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB933729) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB935839) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB935840) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB936021) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB937894) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB938127) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB938464) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB938829) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB941202) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB941568) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB941569) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB941644) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB941693) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB942615) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB943055) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB943460) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB943485) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB944338) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB944533) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB944653) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB945553) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB946026) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB946648) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB947864) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB948590) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB948881) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB950749) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB950759) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB950760) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB950762) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB950974) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB951066) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB951376-v2) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB951376) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB951698) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB951748) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB952954) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB953838) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB953839) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB954211) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB955069) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB956390) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB956391) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB956803) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB956841) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB957095) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB957097) DisplayName REG_SZ Atualizao de Segurana para Windows XP (KB958644) DisplayName REG_SZ Atualizao para Windows XP (KB894391) DisplayName REG_SZ Atualizao para Windows XP (KB898461) DisplayName REG_SZ Atualizao para Windows XP (KB900485) DisplayName REG_SZ Atualizao para Windows XP (KB904942) DisplayName REG_SZ Atualizao para Windows XP (KB908531) DisplayName REG_SZ Atualizao para Windows XP (KB910437) DisplayName REG_SZ Atualizao para Windows XP (KB911280) DisplayName REG_SZ Atualizao para Windows XP (KB916595) DisplayName REG_SZ Atualizao para Windows XP (KB920872) DisplayName REG_SZ Atualizao para Windows XP (KB922582) DisplayName REG_SZ Atualizao para Windows XP (KB927891) DisplayName REG_SZ Atualizao para Windows XP (KB930916) DisplayName REG_SZ Atualizao para Windows XP (KB936357) DisplayName REG_SZ Atualizao para Windows XP (KB938828) DisplayName REG_SZ Atualizao para Windows XP (KB942763) DisplayName REG_SZ Atualizao para Windows XP (KB942840) DisplayName REG_SZ Atualizao para Windows XP (KB946627) DisplayName REG_SZ Atualizao para Windows XP (KB951072-v2) DisplayName REG_SZ Avira AntiVir Personal - Free Antivirus DisplayName REG_SZ Barra de Ferramentas do Yahoo! com bloqueador de pop-up DisplayName REG_SZ BufferChm DisplayName REG_SZ C-Media WDM Audio Driver DisplayName REG_SZ C3100 DisplayName REG_SZ c3100_Help DisplayName REG_SZ CCleaner (remove only) DisplayName REG_SZ CustomerResearchQFolder DisplayName REG_SZ Destinations DisplayName REG_SZ DeviceManagementQFolder DisplayName REG_SZ DocProc DisplayName REG_SZ DocProcQFolder DisplayName REG_SZ eMule DisplayName REG_SZ eSupportQFolder DisplayName REG_SZ Eusing Free Registry Cleaner DisplayName REG_SZ Fax_CDA DisplayName REG_SZ Free Download Manager 2.5 DisplayName REG_SZ HijackThis 1.99.1 DisplayName REG_SZ Hotfix for Windows XP (KB915865) DisplayName REG_SZ Hotfix para Windows XP (KB914440) DisplayName REG_SZ Hotfix para Windows XP (KB952287) DisplayName REG_SZ HP Customer Participation Program 7.0 DisplayName REG_SZ HP Imaging Device Functions 7.0 DisplayName REG_SZ HP Photosmart Essential DisplayName REG_SZ HP Photosmart, Officejet and Deskjet 7.0.A DisplayName REG_SZ HP Software Update DisplayName REG_SZ HP Solution Center 7.0 DisplayName REG_SZ HPPhotoSmartExpress DisplayName REG_SZ HPProductAssistant DisplayName REG_SZ InstantShareDevicesMFC DisplayName REG_SZ Java(TM) 6 Update 7 DisplayName REG_SZ K-Lite Mega Codec Pack 2.2.9 *BETA2* DisplayName REG_SZ Malwarebytes' Anti-Malware DisplayName REG_SZ MarketResearch DisplayName REG_SZ Messenger Plus! Live DisplayName REG_SZ Microsoft .NET Framework 2.0 Service Pack 1 DisplayName REG_SZ Microsoft Internationalized Domain Names Mitigation APIs DisplayName REG_SZ Microsoft National Language Support Downlevel APIs DisplayName REG_SZ Microsoft Office 2000 Premium DisplayName REG_SZ Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) DisplayName REG_SZ Microsoft Visual C++ 2005 Redistributable DisplayName REG_SZ Mobile Partner DisplayName REG_SZ MSXML 4.0 SP2 (KB936181) DisplayName REG_SZ MSXML 4.0 SP2 (KB954430) DisplayName REG_SZ Multimedia Keyboard Driver DisplayName REG_SZ Multimedia Keyboard Driver DisplayName REG_SZ Nero Suite DisplayName REG_SZ NewCopy_CDA DisplayName REG_SZ OCR Software by I.R.I.S 7.0 DisplayName REG_SZ PanoStandAlone DisplayName REG_SZ PCI SoftV92 Modem DisplayName REG_SZ Picture Package Music Transfer DisplayName REG_SZ ProductContextNPI DisplayName REG_SZ QFolder DisplayName REG_SZ Readme DisplayName REG_SZ RealPlayer DisplayName REG_SZ Realtek AC'97 Audio DisplayName REG_SZ Rhapsody Player Engine DisplayName REG_SZ Scan DisplayName REG_SZ ScannerCopy DisplayName REG_SZ Skype 3.8 DisplayName REG_SZ SolutionCenter DisplayName REG_SZ Sony Media Manager 2.2 DisplayName REG_SZ Sony Picture Utility DisplayName REG_SZ Sony USB Driver DisplayName REG_SZ Status DisplayName REG_SZ Toolbox DisplayName REG_SZ Transiciones Marbuendy DisplayName REG_SZ TrayApp DisplayName REG_SZ Unload DisplayName REG_SZ USB2.0 PC Camera (SN9C201&202) DisplayName REG_SZ WebFldrs XP DisplayName REG_SZ WebReg DisplayName REG_SZ Windows Genuine Advantage Validation Tool (KB892130) DisplayName REG_SZ Windows Genuine Advantage Validation Tool (KB892130) DisplayName REG_SZ Windows Installer 3.1 (KB893803) DisplayName REG_SZ Windows Internet Explorer 7 DisplayName REG_SZ Windows Live Messenger DisplayName REG_SZ Windows Live OneCare safety scanner DisplayName REG_SZ Windows XP Hotfix - KB873339 DisplayName REG_SZ Windows XP Hotfix - KB885626 DisplayName REG_SZ Windows XP Hotfix - KB885836 DisplayName REG_SZ Windows XP Hotfix - KB886185 DisplayName REG_SZ Windows XP Hotfix - KB887472 DisplayName REG_SZ Windows XP Hotfix - KB888302 DisplayName REG_SZ Windows XP Hotfix - KB890859 DisplayName REG_SZ Windows XP Hotfix - KB891781 DisplayName REG_SZ Yahoo! Toolbar ParentDisplayName REG_SZ Windows Internet Explorer 7 - Atualizaes de Software ParentDisplayName REG_SZ Windows Internet Explorer 7 - Atualizaes de Software ParentDisplayName REG_SZ Windows Internet Explorer 7 - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Atualizaes de Software ParentDisplayName REG_SZ Windows XP - Software Updates ShowDisplayName REG_DWORD 0 (0x0) ShowDisplayName REG_DWORD 0 (0x0) ShowDisplayName REG_DWORD 0 (0x0) ##################################################################################################### -- All DONE! :) ~ ShadowPuterDude ~