segurança Gente me ajuda ae, plz "/

[luccasmp 0]

I ae gente, tudo blz com vcs??

Bom, vou ser direto..

Um dia desses, o meu norton estava estranho, usando um verificador de e-mail e tals..

Dai apareceu q um e-mail q eu tinha enviado pra um cara q eu nem sabia q existia tinha uns bagulho perigoso..

O norton me mostrou o assunto do e-mail e estava escrito "luccas (meu nome) log file" ,,,, Estou achando q pode ser algum tipo de keylogger para roubar alguma conta, tipo msn, orkut, ou entao minha acc do rag..

Mas tipo,, eu nunca pego arquivo q eu acho suspeito..

Bom, se eu estiver mesmo com um keylogger como fa´o para remove-lo???

Poxa gente, preciso mesmo da ajuda de vcs...

Obrigado pela aten´ão...

[luccasmp 0]

Ah, e olhem o scan do HiJackThis

 

 

Logfile of HijackThis v1.99.1

Scan saved at 13:12:45, on 3/8/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16473)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Ahead\InCD\InCDsrv.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccSetMgr.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccEvtMgr.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\SNDSrvc.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\spoolsv.exe

E:\Programas\Norton\Norton GoBack\GBPoll.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\GEARSec.exe

C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

E:\Programas\Norton\Norton AntiVirus\navapsvc.exe

C:\WINDOWS\AGRSMMSG.exe

E:\Programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe

E:\Programas\CyberLink DVD Solution\fwupdate.exe

C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccApp.exe

E:\Programas\Norton\Norton Ghost\Agent\VProSvc.exe

E:\Programas\Norton\Norton Ghost\Agent\GhostTray.exe

C:\Arquivos de programas\Windows Defender\MSASCui.exe

C:\Arquivos de programas\QuickTime\qttask.exe

E:\Programas\Impressora HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\ctfmon.exe

E:\Programas\Gerenciador de Downloads\Free Download Manager\fdm.exe

C:\Arquivos de programas\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\ARQUIV~1\iGv6\sysbrand.exe

C:\Arquivos de programas\MSN Messenger\msnmsgr.exe

E:\Programas\Norton\Norton GoBack\GBTray.exe

E:\Programas\Norton\Norton AntiVirus\IWP\NPFMntor.exe

E:\PROGRA~1\Norton\NORTON~3\NPROTECT.EXE

C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

E:\PROGRA~1\Norton\NORTON~3\SPEEDD~1\NOPDB.EXE

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Oi Internet\discaoi.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\Security Console\NSCSRVCE.EXE

C:\Arquivos de programas\Internet Explorer\iexplore.exe

C:\Downloads\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornecido por Oi Internet

R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Arquivos de programas\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - e:\programas\acrobat reader\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Arquivos de programas\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: &iG - {7EEF1E3D-FD97-4401-BCDB-5827F2D11709} - C:\ARQUIV~1\iGv6\igshop.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - E:\Programas\Norton\Norton AntiVirus\NavShExt.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\arquivos de programas\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Arquivos de programas\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Arquivos de programas\Windows Live Toolbar\msntb.dll

O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - E:\Programas\Gerenciador de Downloads\Free Download Manager\iefdmcks.dll

O2 - BHO: Ask Toolbar BHO - {F4D76F01-7896-458a-890F-E1F05C46069F} - C:\Arquivos de programas\AskPBar\bar\1.bin\ASKPBAR.DLL

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Arquivos de programas\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - E:\Programas\Norton\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Arquivos de programas\AskPBar\bar\1.bin\ASKPBAR.DLL

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\arquivos de programas\google\googletoolbar1.dll

O3 - Toolbar: &iG - {7EEF1E3D-FD97-4401-BCDB-5827F2D11709} - C:\ARQUIV~1\iGv6\igshop.dll

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [RemoteControl] "E:\Programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [LGODDFU] "E:\Programas\CyberLink DVD Solution\fwupdate.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [ccApp] "C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [Norton Ghost 10.0] "E:\Programas\Norton\Norton Ghost\Agent\GhostTray.exe"

O4 - HKLM\..\Run: [Windows Defender] "C:\Arquivos de programas\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [QuickTime Task] "C:\Arquivos de programas\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [HP Software Update] E:\Programas\Impressora HP\HP Software Update\HPWuSchd2.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Free Download Manager] E:\Programas\Gerenciador de Downloads\Free Download Manager\fdm.exe -autorun

O4 - HKCU\..\Run: [swg] C:\Arquivos de programas\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [sysBrand] "C:\ARQUIV~1\iGv6\sysbrand.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\MSN Messenger\msnmsgr.exe" /background

O4 - Global Startup: Norton GoBack.lnk = E:\Programas\Norton\Norton GoBack\GBTray.exe

O8 - Extra context menu item: &Windows Live Search - res://C:\Arquivos de programas\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: Download all with Free Download Manager - file://E:\Programas\Gerenciador de Downloads\Free Download Manager\dlall.htm

O8 - Extra context menu item: Download selected with Free Download Manager - file://E:\Programas\Gerenciador de Downloads\Free Download Manager\dlselected.htm

O8 - Extra context menu item: Download with Free Download Manager - file://E:\Programas\Gerenciador de Downloads\Free Download Manager\dllink.htm

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - E:\Programas\Norton\Norton Cleanup\WCQuick.lnk

O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - E:\Programas\Norton\Norton Cleanup\WCQuick.lnk

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra button: Barra do iG - {FD1672E0-AE0D-465B-B345-F7B0944A121D} - C:\ARQUIV~1\iGv6\igshop.dll

O11 - Options group: [iNTERNATIONAL] International*

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {33331111-1111-1111-1111-611111193423} -

O16 - DPF: {33331111-1111-1111-1111-611111193429} -

O16 - DPF: {33331111-1111-1111-1111-615111193427} -

O16 - DPF: {33331111-1131-1111-1111-611111193428} -

O17 - HKLM\System\CCS\Services\Tcpip\..\{D6DEDEA3-E7CF-46D3-A9AE-0AA561B92BF4}: NameServer = 200.222.0.34 200.202.193.75

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O20 - Winlogon Notify: wineil32 - wineil32.dll (file missing)

O21 - SSODL: Systemcheck2 - {54645654-2225-4455-44A1-9F4543D34546} - (no file)

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccSetMgr.exe

O23 - Service: GoBack Polling Service (GBPoll) - Symantec Corporation - E:\Programas\Norton\Norton GoBack\GBPoll.exe

O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Arquivos de programas\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Arquivos de programas\Ahead\InCD\InCDsrv.exe

O23 - Service: Servi´o do Auto-Protect do Norton AntiVirus (navapsvc) - Symantec Corporation - E:\Programas\Norton\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton Ghost - Symantec Corporation - E:\Programas\Norton\Norton Ghost\Agent\VProSvc.exe

O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Programas\Norton\Norton AntiVirus\IWP\NPFMntor.exe

O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - E:\PROGRA~1\Norton\NORTON~3\NPROTECT.EXE

O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\Security Console\NSCSRVCE.EXE

O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - E:\Programas\Norton\Norton AntiVirus\SAVScan.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\SNDSrvc.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: SPBBCSvc - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\SPBBC\SPBBCSvc.exe

O23 - Service: Speed Disk service - Symantec Corporation - E:\PROGRA~1\Norton\NORTON~3\SPEEDD~1\NOPDB.EXE

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\CCPD-LC\symlcsvc.exe

[oliveira12 3]

"Baixe o

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

</a>

 

Salve em uma pasta em C:\

 

Sugiro que imprima ou salve os procedimentos abaixo, e não use a internet até terminado o procedimento.

 

Abra o Bloco de Notas, copie estas linhas e salve.

 

C:\Arquivos de programas\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

C:\Arquivos de programas\AskPBar\bar\1.bin\ASKPBAR.DLL

 

Abra o KillBox e marque a fun´ão Delete on Reboot. Abra o Bloco de notas, selecione e copie as linhas salvas. No KillBox, clique em File, depois em Paste from Clipboard, Clique no botão All Files e clique no botão . Depois clique em Não.

 

Abra o Hijackthis, clique em Do scan a system only, marque as entradas abaixo e clique no botão Fix Checked.

 

R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Arquivos de programas\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

 

O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Arquivos de programas\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL

 

O2 - BHO: Ask Toolbar BHO - {F4D76F01-7896-458a-890F-E1F05C46069F} - C:\Arquivos de programas\AskPBar\bar\1.bin\ASKPBAR.DLL

 

O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Arquivos de programas\AskPBar\bar\1.bin\ASKPBAR.DLL

 

Reinicie e poste um novo Log do Hijackthis feito em Modo Normal."

 

BY CIRO-MOTA

 

 

Amigo vc tentou infectar alguem com keylogger?

digite alt+0153

se sair um ♥ vc tem um KL no pc se sair um â„¢ vc n tem um KL

Seja feliz =D

[luccasmp 0]

Po cara, o link ta errado,, ta dando a pag nao pode ser exibida..

E tbm,, eu to com keylogger sim =/ Ta saindo o cora´ão

[luccasmp 0]

Nunca tentei infectar alguem com keylogger...

[luccasmp 0]

Aweeeee, funfo direitinho,,, to sem o keylogger..

Ae cara, eu consegui descobrir pelo norton o endere´o do e-mail do cara =0

[email protected]<<<< e-mail dele aew

[luccasmp 0]

Bom, ja q vc pediu um novo post do scan do hijackthis la vai...

 

Logfile of HijackThis v1.99.1

Scan saved at 16:14:31, on 3/8/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16473)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Ahead\InCD\InCDsrv.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccSetMgr.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccEvtMgr.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\SNDSrvc.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\SPBBC\SPBBCSvc.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\WINDOWS\system32\spoolsv.exe

E:\Programas\Norton\Norton GoBack\GBPoll.exe

C:\WINDOWS\System32\GEARSec.exe

C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE

E:\Programas\Norton\Norton AntiVirus\navapsvc.exe

E:\Programas\Norton\Norton Ghost\Agent\VProSvc.exe

E:\Programas\Norton\Norton AntiVirus\IWP\NPFMntor.exe

E:\PROGRA~1\Norton\NORTON~3\NPROTECT.EXE

C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

E:\PROGRA~1\Norton\NORTON~3\SPEEDD~1\NOPDB.EXE

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\AGRSMMSG.exe

E:\Programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe

E:\Programas\CyberLink DVD Solution\fwupdate.exe

C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccApp.exe

E:\Programas\Norton\Norton Ghost\Agent\GhostTray.exe

C:\Arquivos de programas\Windows Defender\MSASCui.exe

C:\Arquivos de programas\QuickTime\qttask.exe

E:\Programas\Impressora HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\ctfmon.exe

E:\Programas\Gerenciador de Downloads\Free Download Manager\fdm.exe

C:\Arquivos de programas\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\ARQUIV~1\iGv6\sysbrand.exe

C:\Arquivos de programas\MSN Messenger\msnmsgr.exe

E:\Programas\Norton\Norton GoBack\GBTray.exe

C:\Arquivos de programas\Arquivos comuns\Symantec Shared\Security Console\NSCSRVCE.EXE

C:\Arquivos de programas\Oi Internet\discaoi.exe

C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE

C:\Arquivos de programas\Messenger\msmsgs.exe

C:\Downloads\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornecido por Oi Internet

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - e:\programas\acrobat reader\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: &iG - {7EEF1E3D-FD97-4401-BCDB-5827F2D11709} - C:\ARQUIV~1\iGv6\igshop.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - E:\Programas\Norton\Norton AntiVirus\NavShExt.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\arquivos de programas\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Arquivos de programas\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Arquivos de programas\Windows Live Toolbar\msntb.dll

O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - E:\Programas\Gerenciador de Downloads\Free Download Manager\iefdmcks.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Arquivos de programas\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - E:\Programas\Norton\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\arquivos de programas\google\googletoolbar1.dll

O3 - Toolbar: &iG - {7EEF1E3D-FD97-4401-BCDB-5827F2D11709} - C:\ARQUIV~1\iGv6\igshop.dll

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [RemoteControl] "E:\Programas\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [LGODDFU] "E:\Programas\CyberLink DVD Solution\fwupdate.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [ccApp] "C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [Norton Ghost 10.0] "E:\Programas\Norton\Norton Ghost\Agent\GhostTray.exe"

O4 - HKLM\..\Run: [Windows Defender] "C:\Arquivos de programas\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [QuickTime Task] "C:\Arquivos de programas\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [HP Software Update] E:\Programas\Impressora HP\HP Software Update\HPWuSchd2.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Free Download Manager] E:\Programas\Gerenciador de Downloads\Free Download Manager\fdm.exe -autorun

O4 - HKCU\..\Run: [swg] C:\Arquivos de programas\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [sysBrand] "C:\ARQUIV~1\iGv6\sysbrand.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\MSN Messenger\msnmsgr.exe" /background

O4 - Global Startup: Norton GoBack.lnk = E:\Programas\Norton\Norton GoBack\GBTray.exe

O8 - Extra context menu item: &Windows Live Search - res://C:\Arquivos de programas\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: Download all with Free Download Manager - file://E:\Programas\Gerenciador de Downloads\Free Download Manager\dlall.htm

O8 - Extra context menu item: Download selected with Free Download Manager - file://E:\Programas\Gerenciador de Downloads\Free Download Manager\dlselected.htm

O8 - Extra context menu item: Download with Free Download Manager - file://E:\Programas\Gerenciador de Downloads\Free Download Manager\dllink.htm

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - E:\Programas\Norton\Norton Cleanup\WCQuick.lnk

O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - E:\Programas\Norton\Norton Cleanup\WCQuick.lnk

O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra button: Barra do iG - {FD1672E0-AE0D-465B-B345-F7B0944A121D} - C:\ARQUIV~1\iGv6\igshop.dll

O11 - Options group: [iNTERNATIONAL] International*

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {33331111-1111-1111-1111-611111193423} -

O16 - DPF: {33331111-1111-1111-1111-611111193429} -

O16 - DPF: {33331111-1111-1111-1111-615111193427} -

O16 - DPF: {33331111-1131-1111-1111-611111193428} -

O17 - HKLM\System\CCS\Services\Tcpip\..\{D6DEDEA3-E7CF-46D3-A9AE-0AA561B92BF4}: NameServer = 200.222.0.34 200.202.193.75

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

O20 - Winlogon Notify: wineil32 - wineil32.dll (file missing)

O21 - SSODL: Systemcheck2 - {54645654-2225-4455-44A1-9F4543D34546} - (no file)

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccSetMgr.exe

O23 - Service: GoBack Polling Service (GBPoll) - Symantec Corporation - E:\Programas\Norton\Norton GoBack\GBPoll.exe

O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Arquivos de programas\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Arquivos de programas\Ahead\InCD\InCDsrv.exe

O23 - Service: Servi´o do Auto-Protect do Norton AntiVirus (navapsvc) - Symantec Corporation - E:\Programas\Norton\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton Ghost - Symantec Corporation - E:\Programas\Norton\Norton Ghost\Agent\VProSvc.exe

O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Programas\Norton\Norton AntiVirus\IWP\NPFMntor.exe

O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - E:\PROGRA~1\Norton\NORTON~3\NPROTECT.EXE

O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\Security Console\NSCSRVCE.EXE

O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - E:\Programas\Norton\Norton AntiVirus\SAVScan.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\SNDSrvc.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: SPBBCSvc - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\SPBBC\SPBBCSvc.exe

O23 - Service: Speed Disk service - Symantec Corporation - E:\PROGRA~1\Norton\NORTON~3\SPEEDD~1\NOPDB.EXE

O23 - Service: Symantec Core LC - Symantec Corporation - C:\Arquivos de programas\Arquivos comuns\Symantec Shared\CCPD-LC\symlcsvc.exe

 

 

 

Obrigado por tudo, e espero q nao tenha mais nada =)

[oliveira12 3]

Poxa amigo desculpa

É necessário se cadastrar para acessar o conteúdo.

• Entre
• ou
• Cadastre-se

O link correto tah ae...

Desculpa vo ter q te dah warn por flood tah?

Faca uma resposta soh dah proxima vez ok?

[luccasmp 0]

Oks, num tem problema nao...

Mas tipu,, baxei esse programa ai, executei e pus desallow e reinicie.

Agora quando aperto alt+ 0153 nao sai mais cora´ãozinho, sai um tm

Isso eh sinal q deu certo?

 

PS: desculpa pelo flood, nao fa´o mais isso, ok?

Vlws pela paciência e compreensão =D

[oliveira12 3]

Sim sim =D

Olha soh eu n sei ler mt log do hijack this mais tudo indica que ele tah limpo... com meus meros conhecimentos...

Pensei melhor vo te perdoar dessa vez mais cuidado ok? na proxima vow dah warn

Duvida esclarecida? Closed~~

Admirou meu trabalho? A fanbar ae embaixo te aguarda

Oliveira~~

Despedida? Adeus~~

AlWaYs WiTh StYlE