15 respostas neste tópico

[JBDeanw]

Começou a aparecer uma atualização do Flash Player ao entrar no Facebook e no Google (mas o mesmo está atualizado devidamente). Mas depois de um tempo não apareceu mais isso, mas o navegador (IE9 e/ou Firefox) começou a redirecionar para a pagina dkteleman.com.br

É um Malware que causa isso? Como faço para removê-lo?

Desde já, obrigado.

Editado por JBDeanw, 26 outubro 2012 - 11:18.

[JoseMelo]

Bem-vindo(a) à Linha Defensiva

Meu nome é José Humberto e "nickname" JoseMelo

Para que possamos ter sucesso ao final dos procedimentos, sugiro que siga estritamente o que lhe for proposto e não use qualquer ferramenta ou programa, que não seja os aqui recomendados;
Não desinstale nenhuma ferramenta que esteja sendo usada, até a finalização dos procedimentos;
Caso tenha um tópico em andamento em outro fórum, recomendo que o abandone para que os procedimentos não sejam conflitantes;
Se preferir receber por e-mail um aviso toda vez que houver resposta no seu tópico, clique em no alto da página.
Se tiver mais de um programa, com proteção residente instalado (antivírus, antispyware, firewall), mantenha somente um para evitar conflitos e lentidão ao sistema.

- Por favor, leia as instruções contidas no link abaixo:
http://www.linhadefensiva.org/remocao-de-virus/

- Não crie um novo tópico e cole o log do HijackThis;

- Prossiga com os procedimentos indicados neste tópico até o final e, caso tenha qualquer dúvida, pergunte.

[JBDeanw]

Olá JoseMelo, segue abaixo o Logfile do HijacThis.
Apenas uma observação: havia feito o download ontem quando li as instruções,
mas o logfile é de agora.
Espero que issonão afete o resultado pois fui tentar fazer o download novamente e fui redirecionado para www.linhadefensiva.org.nyude.net/files/mir/HijackThis.exe
o que deu um erro.


Logfile of HijackThis v1.99.1
Scan saved at 09:27:11, on 27/10/2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Users\Jaderson\Desktop\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://br.msn.com/?o...=EIE9HP&PC=UP50
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Auxiliar de Conexão do Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - (no file)
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\Program Files (x86)\GbPlugin\gbieh.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
O4 - Global Startup: msseces - Atalho.lnk = C:\Program Files\Microsoft Security Client\msseces.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://ccfiles.creat...102/CTSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creat...10926/CTPID.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file)
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file)
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - (no file)
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: GbPluginBb - C:\Program Files (x86)\GbPlugin\gbieh.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Gbp Service (GbpSv) - - C:\PROGRA~2\GbPlugin\GbpSv.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10102 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Intel® Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe (file missing)

[JoseMelo]

- Faça o download do Malwarebytes Anti-Malware
http://www.malwarebytes.org/mbam-download.php

• Desative o antivírus;
• Faça a instalação dando um duplo clique em "mbam-setup.exe";
• Marque "Atualizar Malwarebytes Anti-Malware" e "Executar Malwarebytes Anti-Malware", e clique em concluir;
• Marque "Verificação Completa" e depois clique em Verificar;
• Quando o scan terminar, clique em Ok e em "Mostrar Resultados" para ver o log;
• Se algo for detectado, veja se tudo está marcado e clique em "Remover";
• O log é automaticamente gravado e pode ser consultado clicando em "Logs" do menu principal;
• Copie e cole o conteúdo desse log na sua próxima resposta.

- Poste novo log do HijackThis.

[JBDeanw]

Segue o log do Malwarebytes e mais embaixo o novo log do Hijackthis

Malwarebytes Anti-Malware (Trial) 1.65.1.1000
www.malwarebytes.org

Versão da Base de Dados: v2012.10.27.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Jaderson :: JADERSON-PC [administrador]

Proteção: Permitir

27/10/2012 23:51:08
mbam-log-2012-10-27 (23-51-08).txt

Tipo de Verificação: Verificação Completa (C:\|D:\|)
Opções de verificações ativadas: Memória | Inicialização | Registro | Sistema de arquivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM | P2P
Opções de verificação desativadas:
Objetos escaneados: 331008
Tempo decorrido: 42 minuto(s), 6 segundo(s)

Processos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)

Módulos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)

Chaves de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Valores de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Itens de Dados no Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Pastas Detectadas: 0
(Não foram detectados ítens maliciosos)

Arquivos Detectados: 0
(Não foram detectados ítens maliciosos)

(fim)


novo log do Hijackthis


Logfile of HijackThis v1.99.1
Scan saved at 00:37:54, on 28/10/2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)

Running processes:
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Users\Jaderson\Desktop\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://br.msn.com/?o...=EIE9HP&PC=UP50
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Auxiliar de Conexão do Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - (no file)
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\Program Files (x86)\GbPlugin\gbieh.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - Global Startup: msseces - Atalho.lnk = C:\Program Files\Microsoft Security Client\msseces.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://ccfiles.creat...102/CTSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creat...10926/CTPID.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file)
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file)
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - (no file)
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: GbPluginBb - C:\Program Files (x86)\GbPlugin\gbieh.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Gbp Service (GbpSv) - - C:\PROGRA~2\GbPlugin\GbpSv.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10102 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Intel® Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe (file missing)

[JoseMelo]

Qual DNS está configurado no seu modem/roteador?


- Faça o download do Farbar Service Scanner
http://download.bleepingcomputer.com/farbar/FSS.exe
Execute o FSS e marque:

• Internet Services
• Windows Firewall
• Clique em "Scan"
• Será criado o log (FSS.txt) na pasta onde for executado
• Anexe o log à sua resposta conforme as instruções abaixo:
  http://www.linhadefe...p?showtopic=595

[JBDeanw]

DNS 10.1.1.1
DNSIPv4 10.1.1.2

Arquivo(s) anexado(s)

•  FSS.txt   1,27K   1 Downloads

[JoseMelo]

Baixe MbrScan.exe by Eric_71 > salve no desktop.

Dê um duplo-clique para executar a ferramenta.

* No Windows Vista e Windows 7:

Clique com o direito sobre a ferramenta e selecione

Clique no botão Scan. Ao final do exame clique no botão Report. Abrirá um bloco de notas com o resultado do exame. É salvo no desktop com o nome de MbrScan.log.

Selecione, copie e cole o seu conteúdo na próxima resposta.

[JBDeanw]

MBRScan v1.1.1



OS			 : Windows 7 Service Pack 1 (64 bit)

PROCESSOR	  : Intel64 Family 6 Model 42 Stepping 7, GenuineIntel

BOOT		   : Normal Boot

DATE		   : 2012/10/29 (ISO 8601) at 22:09:26

________________________________________________________________________________



DISK		   : Device\Harddisk0\DR0 __ST1000LM 024 HN-M101M (2AR1)

BUS_TYPE	   : (0x03)  P-ATA

USE_PIO	    : NO

MAX_TRANSFER   : 128 Kb

ALIGNMENT_MASK : word aligned

________________________________________________________________________________



Device\Harddisk0\DR0    931.5 Go  [Fixed] ==> Vista MBR Code .



MBR_MD5   : 4C5D14050E9C411BFF8723F45A5DFCE9

MBR_SHA1  : 2971ED97F431C5D2260D136CEDC6A0AD33DD58D4



Device\Harddisk0\Partition1    39.19 Mo      0xDE Dell Utility

Device\Harddisk0\Partition2    13.25 Go      0x07 NTFS / HPFS __ BOOTABLE __

Device\Harddisk0\Partition3    918.2 Go      0x07 NTFS / HPFS

________________________________________________________________________________



############################### Additional scan ################################



DRIVER  : C:\Windows\system32\hal.dll => Invisible on the disk

ADDRESS : 0x0321C000

SIZE    : 292.0 Ko



DRIVER  : C:\Windows\system32\kdcom.dll => Invisible on the disk

ADDRESS : 0x00BC1000

SIZE    : 40.0 Ko



DRIVER  : C:\Windows\system32\mcupdate_GenuineIntel.dll => Invisible on the disk

ADDRESS : 0x00C26000

SIZE    : 316.0 Ko



DRIVER  : C:\Windows\system32\CLFS.SYS => Invisible on the disk

ADDRESS : 0x00C89000

SIZE    : 376.0 Ko



DRIVER  : C:\Windows\system32\CI.dll => Invisible on the disk

ADDRESS : 0x00CE7000

SIZE    : 768.0 Ko



DRIVER  : C:\Windows\system32\drivers\Wdf01000.sys => Invisible on the disk

ADDRESS : 0x00EDF000

SIZE    : 656.0 Ko



DRIVER  : C:\Windows\system32\drivers\WDFLDR.SYS => Invisible on the disk

ADDRESS : 0x00F83000

SIZE    : 60.0 Ko



DRIVER  : C:\Windows\system32\drivers\ACPI.sys => Invisible on the disk

ADDRESS : 0x00F92000

SIZE    : 348.0 Ko



DRIVER  : C:\Windows\system32\drivers\WMILIB.SYS => Invisible on the disk

ADDRESS : 0x00FE9000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\system32\drivers\msisadrv.sys => Invisible on the disk

ADDRESS : 0x00FF2000

SIZE    : 40.0 Ko



DRIVER  : C:\Windows\system32\drivers\pci.sys => Invisible on the disk

ADDRESS : 0x00E00000

SIZE    : 204.0 Ko



DRIVER  : C:\Windows\system32\drivers\vdrvroot.sys => Invisible on the disk

ADDRESS : 0x00E33000

SIZE    : 52.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\16030190.sys => Invisible on the disk

ADDRESS : 0x01012000

SIZE    : 7.37 Mo



DRIVER  : C:\Windows\System32\drivers\partmgr.sys => Invisible on the disk

ADDRESS : 0x01771000

SIZE    : 84.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\compbatt.sys => Invisible on the disk

ADDRESS : 0x01786000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\BATTC.SYS => Invisible on the disk

ADDRESS : 0x0178F000

SIZE    : 48.0 Ko



DRIVER  : C:\Windows\system32\drivers\volmgr.sys => Invisible on the disk

ADDRESS : 0x0179B000

SIZE    : 84.0 Ko



DRIVER  : C:\Windows\System32\drivers\volmgrx.sys => Invisible on the disk

ADDRESS : 0x00E40000

SIZE    : 368.0 Ko



DRIVER  : C:\Windows\System32\drivers\mountmgr.sys => Invisible on the disk

ADDRESS : 0x017B0000

SIZE    : 104.0 Ko



DRIVER  : C:\Windows\system32\drivers\iaStor.sys => Invisible on the disk

ADDRESS : 0x01822000

SIZE    : 1.33 Mo



DRIVER  : C:\Windows\system32\drivers\amdxata.sys => Invisible on the disk

ADDRESS : 0x01976000

SIZE    : 44.0 Ko



DRIVER  : C:\Windows\system32\drivers\fltmgr.sys => Invisible on the disk

ADDRESS : 0x01981000

SIZE    : 304.0 Ko



DRIVER  : C:\Windows\system32\drivers\fileinfo.sys => Invisible on the disk

ADDRESS : 0x019CD000

SIZE    : 80.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\MpFilter.sys => Invisible on the disk

ADDRESS : 0x00E9C000

SIZE    : 224.0 Ko



DRIVER  : C:\Windows\System32\Drivers\PxHlpa64.sys => Invisible on the disk

ADDRESS : 0x019E1000

SIZE    : 52.0 Ko



DRIVER  : C:\Windows\System32\Drivers\Ntfs.sys => Invisible on the disk

ADDRESS : 0x01A40000

SIZE    : 1.64 Mo



DRIVER  : C:\Windows\System32\Drivers\msrpc.sys => Invisible on the disk

ADDRESS : 0x01C44000

SIZE    : 376.0 Ko



DRIVER  : C:\Windows\System32\Drivers\ksecdd.sys => Invisible on the disk

ADDRESS : 0x01CA2000

SIZE    : 108.0 Ko



DRIVER  : C:\Windows\System32\Drivers\cng.sys => Invisible on the disk

ADDRESS : 0x01CBD000

SIZE    : 456.0 Ko



DRIVER  : C:\Windows\System32\drivers\pcw.sys => Invisible on the disk

ADDRESS : 0x01D2F000

SIZE    : 68.0 Ko



DRIVER  : C:\Windows\System32\Drivers\Fs_Rec.sys => Invisible on the disk

ADDRESS : 0x01D40000

SIZE    : 40.0 Ko



DRIVER  : C:\Windows\system32\drivers\ndis.sys => Invisible on the disk

ADDRESS : 0x01EA5000

SIZE    : 968.0 Ko



DRIVER  : C:\Windows\system32\drivers\NETIO.SYS => Invisible on the disk

ADDRESS : 0x01F97000

SIZE    : 384.0 Ko



DRIVER  : C:\Windows\System32\Drivers\ksecpkg.sys => Invisible on the disk

ADDRESS : 0x01E00000

SIZE    : 172.0 Ko



DRIVER  : C:\Windows\System32\drivers\tcpip.sys => Invisible on the disk

ADDRESS : 0x02000000

SIZE    : 2.00 Mo



DRIVER  : C:\Windows\System32\drivers\fwpkclnt.sys => Invisible on the disk

ADDRESS : 0x01E2B000

SIZE    : 296.0 Ko



DRIVER  : C:\Windows\system32\drivers\volsnap.sys => Invisible on the disk

ADDRESS : 0x01D4A000

SIZE    : 304.0 Ko



DRIVER  : C:\Windows\System32\Drivers\spldr.sys => Invisible on the disk

ADDRESS : 0x01E75000

SIZE    : 32.0 Ko



DRIVER  : C:\Windows\System32\drivers\rdyboost.sys => Invisible on the disk

ADDRESS : 0x01D96000

SIZE    : 232.0 Ko



DRIVER  : C:\Windows\System32\Drivers\mup.sys => Invisible on the disk

ADDRESS : 0x01E7D000

SIZE    : 72.0 Ko



DRIVER  : C:\Windows\System32\drivers\hwpolicy.sys => Invisible on the disk

ADDRESS : 0x01E8F000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\System32\DRIVERS\fvevol.sys => Invisible on the disk

ADDRESS : 0x01C00000

SIZE    : 232.0 Ko



DRIVER  : C:\Windows\system32\drivers\disk.sys => Invisible on the disk

ADDRESS : 0x01DD0000

SIZE    : 88.0 Ko



DRIVER  : C:\Windows\system32\drivers\CLASSPNP.SYS => Invisible on the disk

ADDRESS : 0x01A00000

SIZE    : 192.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\cdrom.sys => Invisible on the disk

ADDRESS : 0x035A8000

SIZE    : 168.0 Ko



DRIVER  : C:\Windows\System32\Drivers\Null.SYS => Invisible on the disk

ADDRESS : 0x035D2000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\System32\Drivers\Beep.SYS => Invisible on the disk

ADDRESS : 0x035DB000

SIZE    : 28.0 Ko



DRIVER  : C:\Windows\System32\drivers\vga.sys => Invisible on the disk

ADDRESS : 0x035E2000

SIZE    : 56.0 Ko



DRIVER  : C:\Windows\System32\drivers\VIDEOPRT.SYS => Invisible on the disk

ADDRESS : 0x03400000

SIZE    : 148.0 Ko



DRIVER  : C:\Windows\System32\drivers\watchdog.sys => Invisible on the disk

ADDRESS : 0x03425000

SIZE    : 64.0 Ko



DRIVER  : C:\Windows\System32\DRIVERS\RDPCDD.sys => Invisible on the disk

ADDRESS : 0x03435000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\system32\drivers\rdpencdd.sys => Invisible on the disk

ADDRESS : 0x035F0000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\system32\drivers\rdprefmp.sys => Invisible on the disk

ADDRESS : 0x01E98000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\System32\Drivers\Msfs.SYS => Invisible on the disk

ADDRESS : 0x01DF4000

SIZE    : 44.0 Ko



DRIVER  : C:\Windows\System32\Drivers\Npfs.SYS => Invisible on the disk

ADDRESS : 0x01BE3000

SIZE    : 68.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\tdx.sys => Invisible on the disk

ADDRESS : 0x01800000

SIZE    : 136.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\TDI.SYS => Invisible on the disk

ADDRESS : 0x01A30000

SIZE    : 52.0 Ko



DRIVER  : C:\Windows\System32\DRIVERS\netbt.sys => Invisible on the disk

ADDRESS : 0x00DA7000

SIZE    : 276.0 Ko



DRIVER  : C:\Windows\system32\drivers\afd.sys => Invisible on the disk

ADDRESS : 0x04886000

SIZE    : 548.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\wfplwf.sys => Invisible on the disk

ADDRESS : 0x0490F000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\pacer.sys => Invisible on the disk

ADDRESS : 0x04918000

SIZE    : 152.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\vwififlt.sys => Invisible on the disk

ADDRESS : 0x0493E000

SIZE    : 88.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\netbios.sys => Invisible on the disk

ADDRESS : 0x04954000

SIZE    : 60.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\wanarp.sys => Invisible on the disk

ADDRESS : 0x04963000

SIZE    : 108.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\termdd.sys => Invisible on the disk

ADDRESS : 0x0497E000

SIZE    : 80.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\rdbss.sys => Invisible on the disk

ADDRESS : 0x04992000

SIZE    : 324.0 Ko



DRIVER  : C:\Windows\system32\drivers\nsiproxy.sys => Invisible on the disk

ADDRESS : 0x049E3000

SIZE    : 48.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\mssmbios.sys => Invisible on the disk

ADDRESS : 0x049EF000

SIZE    : 44.0 Ko



DRIVER  : C:\Windows\System32\drivers\discache.sys => Invisible on the disk

ADDRESS : 0x04800000

SIZE    : 60.0 Ko



DRIVER  : C:\Windows\System32\Drivers\dfsc.sys => Invisible on the disk

ADDRESS : 0x0480F000

SIZE    : 120.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\blbdrive.sys => Invisible on the disk

ADDRESS : 0x0482D000

SIZE    : 68.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\tunnel.sys => Invisible on the disk

ADDRESS : 0x0483E000

SIZE    : 152.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\igdkmd64.sys => Invisible on the disk

ADDRESS : 0x05036000

SIZE    : 11.70 Mo



DRIVER  : C:\Windows\System32\drivers\dxgkrnl.sys => Invisible on the disk

ADDRESS : 0x0AA2C000

SIZE    : 976.0 Ko



DRIVER  : C:\Windows\System32\drivers\dxgmms1.sys => Invisible on the disk

ADDRESS : 0x0AB20000

SIZE    : 280.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\HECIx64.sys => Invisible on the disk

ADDRESS : 0x0AB66000

SIZE    : 68.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\usbehci.sys => Invisible on the disk

ADDRESS : 0x0AB77000

SIZE    : 68.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\USBPORT.SYS => Invisible on the disk

ADDRESS : 0x0AB88000

SIZE    : 344.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\HDAudBus.sys => Invisible on the disk

ADDRESS : 0x0AA00000

SIZE    : 144.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\Rt64win7.sys => Invisible on the disk

ADDRESS : 0x04CD8000

SIZE    : 532.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\athrx.sys => Invisible on the disk

ADDRESS : 0x05EDB000

SIZE    : 2.63 Mo



DRIVER  : C:\Windows\system32\DRIVERS\vwifibus.sys => Invisible on the disk

ADDRESS : 0x0617B000

SIZE    : 52.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\i8042prt.sys => Invisible on the disk

ADDRESS : 0x06188000

SIZE    : 120.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\Apfiltr.sys => Invisible on the disk

ADDRESS : 0x05E00000

SIZE    : 368.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\mouclass.sys => Invisible on the disk

ADDRESS : 0x05E5C000

SIZE    : 60.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\kbdclass.sys => Invisible on the disk

ADDRESS : 0x05E6B000

SIZE    : 60.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\intelppm.sys => Invisible on the disk

ADDRESS : 0x05E7A000

SIZE    : 88.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\CmBatt.sys => Invisible on the disk

ADDRESS : 0x05E90000

SIZE    : 20.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\wmiacpi.sys => Invisible on the disk

ADDRESS : 0x05E95000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\CompositeBus.sys => Invisible on the disk

ADDRESS : 0x05E9E000

SIZE    : 64.0 Ko



DRIVER  : C:\Windows\System32\Drivers\RootMdm.sys => Invisible on the disk

ADDRESS : 0x05EAE000

SIZE    : 32.0 Ko



DRIVER  : C:\Windows\system32\drivers\modem.sys => Invisible on the disk

ADDRESS : 0x05EB6000

SIZE    : 60.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\AgileVpn.sys => Invisible on the disk

ADDRESS : 0x05EC5000

SIZE    : 88.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\rasl2tp.sys => Invisible on the disk

ADDRESS : 0x061A6000

SIZE    : 144.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\ndistapi.sys => Invisible on the disk

ADDRESS : 0x061CA000

SIZE    : 48.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\ndiswan.sys => Invisible on the disk

ADDRESS : 0x04D5D000

SIZE    : 188.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\raspppoe.sys => Invisible on the disk

ADDRESS : 0x061D6000

SIZE    : 108.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\raspptp.sys => Invisible on the disk

ADDRESS : 0x04D8C000

SIZE    : 132.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\rassstp.sys => Invisible on the disk

ADDRESS : 0x04DAD000

SIZE    : 104.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys => Invisible on the disk

ADDRESS : 0x04DC7000

SIZE    : 72.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\swenum.sys => Invisible on the disk

ADDRESS : 0x061F1000

SIZE    : 8.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\ks.sys => Invisible on the disk

ADDRESS : 0x04C00000

SIZE    : 268.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\btath_bus.sys => Invisible on the disk

ADDRESS : 0x061F3000

SIZE    : 44.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\umbus.sys => Invisible on the disk

ADDRESS : 0x04C43000

SIZE    : 72.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\usbhub.sys => Invisible on the disk

ADDRESS : 0x04C55000

SIZE    : 360.0 Ko



DRIVER  : C:\Windows\System32\Drivers\NDProxy.SYS => Invisible on the disk

ADDRESS : 0x04CAF000

SIZE    : 84.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\stwrt64.sys => Invisible on the disk

ADDRESS : 0x04A74000

SIZE    : 532.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\portcls.sys => Invisible on the disk

ADDRESS : 0x04AF9000

SIZE    : 244.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\drmk.sys => Invisible on the disk

ADDRESS : 0x04B36000

SIZE    : 136.0 Ko



DRIVER  : C:\Windows\system32\drivers\ksthunk.sys => Invisible on the disk

ADDRESS : 0x04B58000

SIZE    : 24.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\IntcDAud.sys => Invisible on the disk

ADDRESS : 0x04B5E000

SIZE    : 332.0 Ko



DRIVER  : C:\Windows\System32\win32k.sys => Invisible on the disk

ADDRESS : 0x000A0000

SIZE    : 3.08 Mo



DRIVER  : C:\Windows\System32\drivers\Dxapi.sys => Invisible on the disk

ADDRESS : 0x04BB1000

SIZE    : 48.0 Ko



DRIVER  : C:\Windows\System32\Drivers\crashdmp.sys => Invisible on the disk

ADDRESS : 0x04BBD000

SIZE    : 56.0 Ko



DRIVER  : C:\Windows\System32\Drivers\dump_iaStor.sys => Invisible on the disk

ADDRESS : 0x0343E000

SIZE    : 1.33 Mo



DRIVER  : C:\Windows\System32\Drivers\dump_dumpfve.sys => Invisible on the disk

ADDRESS : 0x04BCB000

SIZE    : 76.0 Ko



DRIVER  : C:\Windows\System32\Drivers\USBD.SYS => Invisible on the disk

ADDRESS : 0x04A40000

SIZE    : 8.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\usbccgp.sys => Invisible on the disk

ADDRESS : 0x04A42000

SIZE    : 116.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\hidusb.sys => Invisible on the disk

ADDRESS : 0x04A5F000

SIZE    : 56.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\HIDCLASS.SYS => Invisible on the disk

ADDRESS : 0x04BDE000

SIZE    : 100.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\HIDPARSE.SYS => Invisible on the disk

ADDRESS : 0x04BF7000

SIZE    : 36.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\kbdhid.sys => Invisible on the disk

ADDRESS : 0x04CC4000

SIZE    : 56.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\mouhid.sys => Invisible on the disk

ADDRESS : 0x04DD9000

SIZE    : 52.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\monitor.sys => Invisible on the disk

ADDRESS : 0x04A00000

SIZE    : 56.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\btfilter.sys => Invisible on the disk

ADDRESS : 0x02A31000

SIZE    : 292.0 Ko



DRIVER  : C:\Windows\System32\Drivers\BTHUSB.sys => Invisible on the disk

ADDRESS : 0x02A7A000

SIZE    : 96.0 Ko



DRIVER  : C:\Windows\System32\Drivers\bthport.sys => Invisible on the disk

ADDRESS : 0x02A92000

SIZE    : 560.0 Ko



DRIVER  : C:\Windows\System32\Drivers\usbvideo.sys => Invisible on the disk

ADDRESS : 0x02B1E000

SIZE    : 184.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\CtClsFlt.sys => Invisible on the disk

ADDRESS : 0x02B4C000

SIZE    : 172.0 Ko



DRIVER  : C:\Windows\System32\TSDDD.dll => Invisible on the disk

ADDRESS : 0x00410000

SIZE    : 40.0 Ko



DRIVER  : C:\Windows\System32\cdd.dll => Invisible on the disk

ADDRESS : 0x00690000

SIZE    : 156.0 Ko



DRIVER  : C:\Windows\system32\drivers\luafv.sys => Invisible on the disk

ADDRESS : 0x02B77000

SIZE    : 140.0 Ko



DRIVER  : C:\Windows\system32\drivers\mbam.sys => Invisible on the disk

ADDRESS : 0x02B9A000

SIZE    : 40.0 Ko



DRIVER  : C:\Windows\system32\drivers\WudfPf.sys => Invisible on the disk

ADDRESS : 0x02BA4000

SIZE    : 132.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\rfcomm.sys => Invisible on the disk

ADDRESS : 0x02BC5000

SIZE    : 176.0 Ko



DRIVER  : C:\Windows\system32\drivers\BthEnum.sys => Invisible on the disk

ADDRESS : 0x02A00000

SIZE    : 64.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\bthpan.sys => Invisible on the disk

ADDRESS : 0x02A10000

SIZE    : 128.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\btath_rcp.sys => Invisible on the disk

ADDRESS : 0x04A0E000

SIZE    : 148.0 Ko



DRIVER  : C:\Windows\system32\drivers\btath_a2dp.sys => Invisible on the disk

ADDRESS : 0x02E91000

SIZE    : 412.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\btath_hcrp.sys => Invisible on the disk

ADDRESS : 0x02EF8000

SIZE    : 396.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\btath_flt.sys => Invisible on the disk

ADDRESS : 0x02F5B000

SIZE    : 60.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\btath_lwflt.sys => Invisible on the disk

ADDRESS : 0x02F6A000

SIZE    : 76.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\lltdio.sys => Invisible on the disk

ADDRESS : 0x02F7D000

SIZE    : 84.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\nwifi.sys => Invisible on the disk

ADDRESS : 0x02F92000

SIZE    : 332.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\ndisuio.sys => Invisible on the disk

ADDRESS : 0x02FE5000

SIZE    : 76.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\rspndr.sys => Invisible on the disk

ADDRESS : 0x02E00000

SIZE    : 96.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\TurboB.sys => Invisible on the disk

ADDRESS : 0x02E18000

SIZE    : 28.0 Ko



DRIVER  : C:\Windows\system32\drivers\HTTP.sys => Invisible on the disk

ADDRESS : 0x042DE000

SIZE    : 804.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\bowser.sys => Invisible on the disk

ADDRESS : 0x043A7000

SIZE    : 120.0 Ko



DRIVER  : C:\Windows\System32\drivers\mpsdrv.sys => Invisible on the disk

ADDRESS : 0x043C5000

SIZE    : 96.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\mrxsmb.sys => Invisible on the disk

ADDRESS : 0x04200000

SIZE    : 180.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\mrxsmb10.sys => Invisible on the disk

ADDRESS : 0x0422D000

SIZE    : 312.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\mrxsmb20.sys => Invisible on the disk

ADDRESS : 0x0427B000

SIZE    : 144.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\NisDrvWFP.sys => Invisible on the disk

ADDRESS : 0x0429F000

SIZE    : 132.0 Ko



DRIVER  : C:\Windows\system32\drivers\peauth.sys => Invisible on the disk

ADDRESS : 0x06AC4000

SIZE    : 664.0 Ko



DRIVER  : C:\Windows\System32\Drivers\secdrv.SYS => Invisible on the disk

ADDRESS : 0x06B6A000

SIZE    : 44.0 Ko



DRIVER  : C:\Windows\System32\DRIVERS\srvnet.sys => Invisible on the disk

ADDRESS : 0x06B75000

SIZE    : 196.0 Ko



DRIVER  : C:\Windows\System32\drivers\tcpipreg.sys => Invisible on the disk

ADDRESS : 0x06BA6000

SIZE    : 72.0 Ko



DRIVER  : C:\Windows\System32\DRIVERS\srv2.sys => Invisible on the disk

ADDRESS : 0x06A00000

SIZE    : 420.0 Ko



DRIVER  : C:\Windows\System32\DRIVERS\srv.sys => Invisible on the disk

ADDRESS : 0x06C4A000

SIZE    : 608.0 Ko



DRIVER  : C:\Windows\System32\Drivers\fastfat.SYS => Invisible on the disk

ADDRESS : 0x06CE2000

SIZE    : 216.0 Ko



DRIVER  : C:\Windows\system32\DRIVERS\asyncmac.sys => Invisible on the disk

ADDRESS : 0x06D18000

SIZE    : 44.0 Ko



DRIVER  : C:\Windows\system32\drivers\MSPQM.sys => Invisible on the disk

ADDRESS : 0x06DA0000

SIZE    : 8.0 Ko



DRIVER  : C:\Windows\System32\smss.exe => Invisible on the disk

ADDRESS : 0x484C0000

SIZE    : 128.0 Ko



SystemStartOptions :  NOEXECUTE=OPTIN



________________________________________________________________________________



_______MBR   \Device\Harddisk0\DR0  



0x00000000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00   3À.м.|.À.ؾ.|¿.

0x00000010   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00   .¹..üó¤Ph..Ëû¹..

0x00000020   BD BE 07 80 7E 00 00 7C 0B 0F 85 10 01 83 C5 10   ½¾..~..|......Å.

0x00000030   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00   âñÍ..V.UÆF..ÆF..

0x00000040   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09   ´A»ªUÍ.]r..ûUªu.

0x00000050   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74   ÷Á..t.þF.f`.~..t

0x00000060   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00   &fh....f.v.h..h.

0x00000070   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13   |h..h..´B.V..ôÍ.

0x00000080   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00   ..Ä..ë.¸..».|.V.

0x00000090   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1E FE   .v..N..n.Í.fas.þ

0x000000A0   4E 11 0F 85 0C 00 80 7E 00 80 0F 84 8A 00 B2 80   N......~......².

0x000000B0   EB 82 55 32 E4 8A 56 00 CD 13 5D EB 9C 81 3E FE   ë.U2ä.V.Í.]ë..>þ

0x000000C0   7D 55 AA 75 6E FF 76 00 E8 8A 00 0F 85 15 00 B0   }Uªun.v.è......°

0x000000D0   D1 E6 64 E8 7F 00 B0 DF E6 60 E8 78 00 B0 FF E6   Ñædè..°ßæ`èx.°.æ

0x000000E0   64 E8 71 00 B8 00 BB CD 1A 66 23 C0 75 3B 66 81   dèq.¸.»Í.f#Àu;f.

0x000000F0   FB 54 43 50 41 75 32 81 F9 02 01 72 2C 66 68 07   ûTCPAu2.ù..r,fh.

0x00000100   BB 00 00 66 68 00 02 00 00 66 68 08 00 00 00 66   »..fh....fh....f

0x00000110   53 66 53 66 55 66 68 00 00 00 00 66 68 00 7C 00   SfSfUfh....fh.|.

0x00000120   00 66 61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00   .fah...Í.Z2öê.|.

0x00000130   00 CD 18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07   .Í..·.ë..¶.ë..µ.

0x00000140   32 E4 05 00 07 8B F0 AC 3C 00 74 FC BB 07 00 B4   2ä....ð¬<.tü»..´

0x00000150   0E CD 10 EB F2 2B C9 E4 64 EB 00 24 02 E0 F8 24   .Í.ëò+Éädë.$.àø$

0x00000160   02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69 74   .ÃInvalid partit

0x00000170   69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72 20   ion table.Error

0x00000180   6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69 6E   loading operatin

0x00000190   67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E 67   g system.Missing

0x000001A0   20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74 65    operating syste

0x000001B0   6D 00 00 00 00 62 7A 99 97 C8 9D 01 00 00 00 01   m....bz..È......

0x000001C0   01 00 DE 03 3F 04 3F 00 00 00 86 39 01 00 80 19   ..Þ.?.?....9....

0x000001D0   15 05 07 FE FF FF 00 40 01 00 00 F0 A7 01 00 FE   ...þ...@...ð§..þ

0x000001E0   FF FF 07 FE FF FF 00 30 A9 01 00 30 C7 72 00 00   ...þ...0©..0Çr..

0x000001F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA   ..............Uª

[JoseMelo]

O problema ainda ocorre?


Faça o download do Kaspersky Virus Removal Tool de um desses 2 links:
http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/
http://dnl-us6.kaspersky-labs.com/devbuilds/AVPTool/

Salve-o em sua área de trabalho.

- Duplo clique no arquivo "setup" e aguarde a instalação;
- Na próxima tela marque I accept the licence agreement e clique em Start
- Clique no botão e marque:

• Meu computador
• Disco local (C:) (a letra do disco local pode variar)

- Clique em Actions e desmarque os dois quadros:

- Clique na aba Automatic Scan e aguarde o término da verificação.

- Clique no botão , em Detected threats e no botão "Save".
- Copie o conteúdo do arquivo salvo (se houver algo detectado) e poste na sua próxima resposta.

[JBDeanw]

Sim, o problema ainda ocorre.


Status: Vulnerability (events: 5)
30/10/2012 22:05:12 Vulnerability vulnerability http://www.securelis...���C:\Documents and Settings\Jaderson\Documents\Arq. Prog. do PC Antigo\WinRAR\WinRAR.exe Low
30/10/2012 22:26:46 Vulnerability vulnerability http://www.securelis...���C:\Documents and Settings\Jaderson\Meus documentos\Arq. Prog. do PC Antigo\WinRAR\WinRAR.exe Low
30/10/2012 22:47:00 Vulnerability vulnerability http://www.securelis...4����C:\Program Files (x86)\Mozilla Firefox\firefox.exe Low
30/10/2012 23:31:08 Vulnerability vulnerability http://www.securelis....dll����Low����
30/10/2012 23:43:42 Vulnerability vulnerability http://www.securelis...4����c:\Program Files (x86)\Mozilla Firefox\firefox.exe Low

Editado por JBDeanw, 31 outubro 2012 - 01:01.

[JoseMelo]

Sim, o problema ainda ocorre.

Faça o reset do modem/roteador, troque a senha de acesso, atualize o firmware (veja se há atualização no site do fabricante) e veja se o problema ainda ocorre.

[JBDeanw]

Oi, desculpa a demora em responder.

Fiz o reset do modem e troquei a senha.
Também atualizei o firmware.

Aparentemente o problema não ocorre mais.

[JoseMelo]

- Ok, o log está limpo

- Faça o download do CCleaner:

• Clique em Salvar e quando terminado o download, faça a instalação;
• Abra o programa e clique em Executar Limpeza;
• Após isto, clique em Registro > Procurar erros > Corrigir erros selecionados

- Desative e ative novamente a Restauração do Sistema

- Leia o artigo Proteja seu PC para maiores informações sobre como evitar infecções;

- Se não tiver mais problema, clique no botão e diga que o seu caso foi resolvido.

[JBDeanw]

Obrigado! Problema resolvido!

[Astromech]

PROBLEMA RESOLVIDO
 
Caso queira solicitar a reabertura do tópico, utilize o botão Denunciar para entrar em contato com a moderação.

Nota: Somente o autor pode realizar essa solicitação na área Remoção de Malware.