ComboFix 07-12-02.7 - Bliind 2007-12-04 2.34.13.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1046.18.144 [GMT -2:00] Executando de: C:\Documents and Settings\Bliind\Meus documentos\My Completed Downloads\ComboFix.exe * Criado um novo ponto de restauro . ((((((((((((((((((((((((((((((((((((( Outras Excluses ))))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\N039_jpg.zip . ((((((((((((((((((((((( Ficheiros criados de 2007-11-04 to 2007-12-04 )))))))))))))))))))))))))))))))) . 2007-12-04 02:30 . 2007-12-04 02:31 d-------- C:\LinhaDefensiva 2007-12-03 01:43 . 2007-12-03 01:43 d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Avira 2007-12-03 01:43 . 2007-12-03 01:43 d-------- C:\Arquivos de programas\Avira 2007-12-03 00:15 . 2007-12-03 00:15 d-------- C:\WINDOWS\Downloads 2007-12-02 22:16 . 2007-12-04 02:30 59 --a------ C:\WINDOWS\syst.dat 2007-12-02 22:16 . 2007-12-02 22:16 22 --a------ C:\WINDOWS\msmmesagem.dll 2007-12-02 22:16 . 2007-12-02 22:16 3 --a------ C:\WINDOWS\atualmenteo.dll 2007-12-02 22:16 . 2007-12-02 22:16 3 --a------ C:\WINDOWS\atualmente.dll 2007-11-12 23:21 . 2007-11-12 23:21 d-------- C:\Arquivos de programas\Any Video Converter 2007-11-08 17:28 . 2004-08-04 01:45 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2007-11-08 17:28 . 2007-11-08 17:47 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb 2007-11-08 17:28 . 2007-11-08 17:47 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb 2007-11-05 00:38 . 2007-11-05 00:38 d-------- C:\Arquivos de programas\CCleaner . ((((((((((((((((((((((((((((((((((((( Relatrio Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-04 04:25 --------- d---a-w C:\Documents and Settings\All Users\Dados de aplicativos\TEMP 2007-11-27 18:09 --------- d-----w C:\Documents and Settings\Bliind\Dados de aplicativos\LimeWire 2007-11-08 19:44 --------- d-----w C:\Arquivos de programas\Windows Media Connect 2 2007-11-06 22:16 --------- d-----w C:\Arquivos de programas\MessengerDiscovery 2007-11-05 02:46 --------- d--h--w C:\Arquivos de programas\Arquivos comuns\Carlson 2007-10-31 18:21 --------- d-----w C:\Arquivos de programas\Windows Live Toolbar 2007-10-29 17:29 --------- d-----w C:\Arquivos de programas\sXe Injected 2007-10-29 17:00 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\DVD Shrink 2007-10-29 16:58 --------- d-----w C:\Arquivos de programas\DVD Shrink 2007-10-26 22:40 --------- d-----w C:\Arquivos de programas\Windows Live 2007-10-26 22:24 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\WLInstaller 2007-10-26 16:21 --------- d-----w C:\Arquivos de programas\iTunes 2007-10-26 16:21 --------- d-----w C:\Arquivos de programas\iPod 2007-10-26 16:19 --------- d-----w C:\Arquivos de programas\Central de Jogos 2007-10-19 18:26 --------- d-----w C:\Arquivos de programas\DVDFab HD Decrypter 3 2007-10-08 16:02 --------- d-----w C:\Documents and Settings\Bliind\Dados de aplicativos\Apple Computer 2007-10-06 08:20 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\Apple Computer 2007-10-06 08:19 --------- d-----w C:\Arquivos de programas\QuickTime 2007-10-06 08:18 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\Apple 2007-10-06 08:18 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Apple 2007-10-06 08:18 --------- d-----w C:\Arquivos de programas\Apple Software Update 2007-10-05 04:48 6,728,192 ----a-w C:\WINDOWS\system32\logonuiX.exe 2007-10-05 04:43 --------- d-----w C:\Arquivos de programas\WinCustomize 2007-10-05 04:02 --------- d-----w C:\Documents and Settings\Bliind\Dados de aplicativos\Joost 2007-10-04 22:34 --------- d-----w C:\Arquivos de programas\LimeWire 2007-10-04 12:03 --------- d-----w C:\Arquivos de programas\Java 2007-10-02 01:33 45,056 ----a-w C:\WINDOWS\system32\ftp.exe 2007-10-02 01:33 17,408 ----a-w C:\WINDOWS\system32\tftp.exe 2007-09-26 17:48 2,887,680 ----a-w C:\WINDOWS\system32\VagalumePluginWMP.dll 2007-09-23 06:41 50,688 ----a-w C:\WINDOWS\system32\wbhelp2.dll 2001-11-23 04:08 712,704 ----a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . (((((((((((((((((((((((((( Pontos de Carregamento do Registro ))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Nota* entradas vazias & legtimas por defeito no so mostradas. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Steam"="C:\Arquivos de programas\Valve\Steam\Steam.exe" [2007-11-30 10:08] "MsnMsgr"="C:\Arquivos de programas\Windows Live\Messenger\MsnMsgr.exe" [2007-08-16 17:19] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "tspuf"="C:\Arquivos de programas\Telefonica\Speedy\SATUF.exe" [2004-03-23 13:17] "SunJavaUpdateSched"="C:\Arquivos de programas\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11] "TkBellExe"="C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" [2007-09-18 01:36] "Adobe Reader Speed Launcher"="C:\Arquivos de programas\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 04:06] "DownloadAccelerator"="C:\Arquivos de programas\DAP\DAP.exe" [2007-09-23 04:41] "NvCplDaemon"="RUNDLL32.exe" [2004-08-04 01:45 C:\WINDOWS\system32\rundll32.exe] "QuickTime Task"="C:\Arquivos de programas\QuickTime\qttask.exe" [2007-06-29 07:24] "iTunesHelper"="C:\Arquivos de programas\iTunes\iTunesHelper.exe" [2007-09-26 15:42] "avgnt"="C:\Arquivos de programas\Avira\AntiVir Workstation\avgnt.exe" [2007-08-31 12:25] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="C:\\WINDOWS\\system32\\logonuiX.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!] C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] 2007-06-27 20:03 152872 --a------ C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dark] C:\WINDOWS\krn2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2007-03-01 16:57 153136 --a------ C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RunDll.exe] C:\Documents and Settings\Bliind\Meus documentos\My Completed Downloads\imagens.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\usnsvc.exe] C:\WINDOWS\usnsvc.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "usnjsvc"=3 (0x3) "NMIndexingService"=3 (0x3) "NBService"=3 (0x3) "FLEXnet Licensing Service"=3 (0x3) "Bonjour Service"=2 (0x2) R2 AVEService;AntiVir Windows Workstation MailGuard helper service;"C:\Arquivos de programas\Avira\AntiVir Workstation\avesvc.exe" R2 sbbotdi;sbbotdi;\??\C:\ARQUIV~1\SPEEDB~1\sbbotdi.sys S2 AntiVirMailService;AntiVir Windows Workstation MailGuard;"C:\Arquivos de programas\Avira\AntiVir Workstation\avmailc.exe" *Newly Created Service* - CATCHME *Newly Created Service* - PROCEXP90 . Contedo da pasta 'Tarefas Agendadas' "2007-11-27 12:19:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Arquivos de programas\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-04 02:36:15 Windows 5.1.2600 Service Pack 2 NTFS Procurando processos ocultos ... Procurando entradas auto inicializveis ocultas ... Procurando ficheiros ocultos ... Varredura completada com sucesso Ficheiros ocultos: 0 ************************************************************************** . Tempo para concluso: 2007-12-04 2.36.59 . --- E O F ---