rendered paste bodyComboFix 07-12-02.7 - Bliind 2007-12-04 2.34.13.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1046.18.144 [GMT -2:00]
Executando de: C:\Documents and Settings\Bliind\Meus documentos\My Completed Downloads\ComboFix.exe
* Criado um novo ponto de restauro
.
((((((((((((((((((((((((((((((((((((( Outras Excluses )))))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\N039_jpg.zip
.
((((((((((((((((((((((( Ficheiros criados de 2007-11-04 to 2007-12-04 ))))))))))))))))))))))))))))))))
.
2007-12-04 02:30 . 2007-12-04 02:31 <DIR> d-------- C:\LinhaDefensiva
2007-12-03 01:43 . 2007-12-03 01:43 <DIR> d-------- C:\Documents and Settings\All Users\Dados de aplicativos\Avira
2007-12-03 01:43 . 2007-12-03 01:43 <DIR> d-------- C:\Arquivos de programas\Avira
2007-12-03 00:15 . 2007-12-03 00:15 <DIR> d-------- C:\WINDOWS\Downloads
2007-12-02 22:16 . 2007-12-04 02:30 59 --a------ C:\WINDOWS\syst.dat
2007-12-02 22:16 . 2007-12-02 22:16 22 --a------ C:\WINDOWS\msmmesagem.dll
2007-12-02 22:16 . 2007-12-02 22:16 3 --a------ C:\WINDOWS\atualmenteo.dll
2007-12-02 22:16 . 2007-12-02 22:16 3 --a------ C:\WINDOWS\atualmente.dll
2007-11-12 23:21 . 2007-11-12 23:21 <DIR> d-------- C:\Arquivos de programas\Any Video Converter
2007-11-08 17:28 . 2004-08-04 01:45 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-11-08 17:28 . 2007-11-08 17:47 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb
2007-11-08 17:28 . 2007-11-08 17:47 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb
2007-11-05 00:38 . 2007-11-05 00:38 <DIR> d-------- C:\Arquivos de programas\CCleaner
.
((((((((((((((((((((((((((((((((((((( Relatrio Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-04 04:25 --------- d---a-w C:\Documents and Settings\All Users\Dados de aplicativos\TEMP
2007-11-27 18:09 --------- d-----w C:\Documents and Settings\Bliind\Dados de aplicativos\LimeWire
2007-11-08 19:44 --------- d-----w C:\Arquivos de programas\Windows Media Connect 2
2007-11-06 22:16 --------- d-----w C:\Arquivos de programas\MessengerDiscovery
2007-11-05 02:46 --------- d--h--w C:\Arquivos de programas\Arquivos comuns\Carlson
2007-10-31 18:21 --------- d-----w C:\Arquivos de programas\Windows Live Toolbar
2007-10-29 17:29 --------- d-----w C:\Arquivos de programas\sXe Injected
2007-10-29 17:00 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\DVD Shrink
2007-10-29 16:58 --------- d-----w C:\Arquivos de programas\DVD Shrink
2007-10-26 22:40 --------- d-----w C:\Arquivos de programas\Windows Live
2007-10-26 22:24 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\WLInstaller
2007-10-26 16:21 --------- d-----w C:\Arquivos de programas\iTunes
2007-10-26 16:21 --------- d-----w C:\Arquivos de programas\iPod
2007-10-26 16:19 --------- d-----w C:\Arquivos de programas\Central de Jogos
2007-10-19 18:26 --------- d-----w C:\Arquivos de programas\DVDFab HD Decrypter 3
2007-10-08 16:02 --------- d-----w C:\Documents and Settings\Bliind\Dados de aplicativos\Apple Computer
2007-10-06 08:20 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\Apple Computer
2007-10-06 08:19 --------- d-----w C:\Arquivos de programas\QuickTime
2007-10-06 08:18 --------- d-----w C:\Documents and Settings\All Users\Dados de aplicativos\Apple
2007-10-06 08:18 --------- d-----w C:\Arquivos de programas\Arquivos comuns\Apple
2007-10-06 08:18 --------- d-----w C:\Arquivos de programas\Apple Software Update
2007-10-05 04:48 6,728,192 ----a-w C:\WINDOWS\system32\logonuiX.exe
2007-10-05 04:43 --------- d-----w C:\Arquivos de programas\WinCustomize
2007-10-05 04:02 --------- d-----w C:\Documents and Settings\Bliind\Dados de aplicativos\Joost
2007-10-04 22:34 --------- d-----w C:\Arquivos de programas\LimeWire
2007-10-04 12:03 --------- d-----w C:\Arquivos de programas\Java
2007-10-02 01:33 45,056 ----a-w C:\WINDOWS\system32\ftp.exe
2007-10-02 01:33 17,408 ----a-w C:\WINDOWS\system32\tftp.exe
2007-09-26 17:48 2,887,680 ----a-w C:\WINDOWS\system32\VagalumePluginWMP.dll
2007-09-23 06:41 50,688 ----a-w C:\WINDOWS\system32\wbhelp2.dll
2001-11-23 04:08 712,704 ----a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL
.
(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* entradas vazias & legtimas por defeito no so mostradas.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="C:\Arquivos de programas\Valve\Steam\Steam.exe" [2007-11-30 10:08]
"MsnMsgr"="C:\Arquivos de programas\Windows Live\Messenger\MsnMsgr.exe" [2007-08-16 17:19]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"tspuf"="C:\Arquivos de programas\Telefonica\Speedy\SATUF.exe" [2004-03-23 13:17]
"SunJavaUpdateSched"="C:\Arquivos de programas\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11]
"TkBellExe"="C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" [2007-09-18 01:36]
"Adobe Reader Speed Launcher"="C:\Arquivos de programas\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 04:06]
"DownloadAccelerator"="C:\Arquivos de programas\DAP\DAP.exe" [2007-09-23 04:41]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-04 01:45 C:\WINDOWS\system32\rundll32.exe]
"QuickTime Task"="C:\Arquivos de programas\QuickTime\qttask.exe" [2007-06-29 07:24]
"iTunesHelper"="C:\Arquivos de programas\iTunes\iTunesHelper.exe" [2007-09-26 15:42]
"avgnt"="C:\Arquivos de programas\Avira\AntiVir Workstation\avgnt.exe" [2007-08-31 12:25]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="C:\\WINDOWS\\system32\\logonuiX.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!]
C:\ARQUIV~1\ALWILS~1\Avast4\ashDisp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2007-06-27 20:03 152872 --a------ C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMBgMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio]
RunDll32 cmicnfg.cpl,CMICtrlWnd
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dark]
C:\WINDOWS\krn2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 16:57 153136 --a------ C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RunDll.exe]
C:\Documents and Settings\Bliind\Meus documentos\My Completed Downloads\imagens.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\usnsvc.exe]
C:\WINDOWS\usnsvc.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WMPNetworkSvc"=3 (0x3)
"usnjsvc"=3 (0x3)
"NMIndexingService"=3 (0x3)
"NBService"=3 (0x3)
"FLEXnet Licensing Service"=3 (0x3)
"Bonjour Service"=2 (0x2)
R2 AVEService;AntiVir Windows Workstation MailGuard helper service;"C:\Arquivos de programas\Avira\AntiVir Workstation\avesvc.exe"
R2 sbbotdi;sbbotdi;\??\C:\ARQUIV~1\SPEEDB~1\sbbotdi.sys
S2 AntiVirMailService;AntiVir Windows Workstation MailGuard;"C:\Arquivos de programas\Avira\AntiVir Workstation\avmailc.exe"
*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
.
Contedo da pasta 'Tarefas Agendadas'
"2007-11-27 12:19:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Arquivos de programas\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************
catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-04 02:36:15
Windows 5.1.2600 Service Pack 2 NTFS
Procurando processos ocultos ...
Procurando entradas auto inicializveis ocultas ...
Procurando ficheiros ocultos ...
Varredura completada com sucesso
Ficheiros ocultos: 0
**************************************************************************
.
Tempo para concluso: 2007-12-04 2.36.59
.
--- E O F ---