-
[b]Threat Files
<Trojan.NNol> [Microsoft Corporation] : C:\WINDOWS\system32\jkkIaWPJ.dll[/b]
Aqui está o registro do exame feito pelo [u]Spyware Terminator[/u]
Logfile of Spyware Terminator v2.5.0.567 (db:2.012.005.000)
Scan Time: 11/12/2008 12:37:41 length: 871 s
Platform: WXP (5.1.0.2600)
User: Admin
Boot Mode: Normal
Scan type: Full_Spyware_Scan
Scanned Objects: 55539 (Critical:4)
Filter: No System items, No Safe items, No Invalid items
Running Processes
NBHGui.exe [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\InCD\NBHGui.exe
InCD.exe [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\InCD\InCD.exe
MotiveSB.exe [Motive Communications, Inc.] : C:\Arquivos de programas\Assistente Tecnico Speedy\SmartBridge\MotiveSB.exe
sysbrand.exe : C:\Arquivos de programas\iGv6\sysbrand.exe
cmdagent.exe [COMODO] : C:\Arquivos de programas\COMODO\COMODO Internet Security\cmdagent.exe
InCDsrv.exe [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe
mpbtn.exe : C:\Arquivos de programas\Assistente Tecnico Speedy\bin\mpbtn.exe
nvsvc32.exe [NVIDIA Corporation] : C:\WINDOWS\system32\nvsvc32.exe
RichVideo.exe : C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe
Internet Settings
R - HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60342
R - HKLM\Software\Microsoft\Internet Explorer\Main, SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60342
R - HKLM\Software\Microsoft\Internet Explorer\Main, CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60342
R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60342
R - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60342
R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain =
R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName =
BHO
02 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - [Yahoo! Inc.] : C:\Arquivos de programas\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll
02 - BHO: - {17672D50-52C4-4E5D-8F08-9AD30B9F39A4} - [Microsoft Corporation] : C:\WINDOWS\system32\fcccyxVO.dll
02 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - [RealPlayer] : C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
02 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - : C:\Arquivos de programas\Google\Google Toolbar\GoogleToolbar.dll
Toolbars
03 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - [Yahoo! Inc.] : C:\Arquivos de programas\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll
03 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - : C:\Arquivos de programas\Google\Google Toolbar\GoogleToolbar.dll
StartUps
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SysBrand : : C:\Arquivos de programas\iGv6\sysbrand.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, LanguageShortcut : : C:\Arquivos de programas\CYBERLINK\POWERDVD\LANGUAGE\LANGUAGE.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NeroFilterCheck : [Nero AG] : C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, SecurDisc : [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\InCD\NBHGui.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, InCD : [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\InCD\InCD.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Motive SmartBridge : [Motive Communications, Inc.] : C:\Arquivos de programas\Assistente Tecnico Speedy\SmartBridge\MotiveSB.exe
04 - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, AppInit_DLLs : [COMODO] : C:\WINDOWS\system32\guard32.dll
04 - Startup: %STARTUP%\Recorte de tela e Iniciador do OneNote 2007.lnk [Microsoft Corporation] : C:\Arquivos de programas\Microsoft Office\Office12\ONENOTEM.EXE
04 - Startup: %STARTUPALL%\Assistente Tecnico Speedy.lnk [Motive Communications, Inc.] : C:\Arquivos de programas\Assistente Tecnico Speedy\bin\matcli.exe
Shell Extensions
Desktop Explorer - {1CDB2949-8F65-4355-8456-263E7C208A5D} - [NVIDIA Corporation] : C:\WINDOWS\system32\nvshell.dll
- {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - [NVIDIA Corporation] : C:\WINDOWS\system32\nvshell.dll
nView Desktop Context Menu - {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - [NVIDIA Corporation] : C:\WINDOWS\system32\nvshell.dll
Minhas Pastas de Compartilhamento - {FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D} - [Microsoft Corporation] : C:\Arquivos de programas\Windows Live\Messenger\fsshext.8.5.1302.1018.dll
Microsoft Office OneNote Namespace Extension for Windows Desktop Search - {5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} - [Microsoft Corporation] : C:\Arquivos de programas\Microsoft Office\Office12\ONFILTER.DLL
InCDShellExt Class - {CAE3251E-9B15-4810-B268-852AD9792A59} - [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\InCD\incdshx.dll
NeroCoverEdLiveIcons Class - {97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2} - [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll
InCDUdfPerm Class - {B3D9AEDE-B2C3-406d-A254-6BE07767B08B} - [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\InCD\InCDUP.dll
WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} - [Alexander Roshal] : C:\Arquivos de programas\WinRAR\rarext.dll
RealOne Player Context Menu Class - {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - [RealNetworks, Inc.] : C:\Program Files\Real\RealPlayer\rpshell.dll
Comodo AntiVirus - {4255A182-CAD9-4214-A19B-7BA7FB633BBD} - : C:\Arquivos de programas\COMODO\COMODO Internet Security\cavshell.dll
Shell Extecute Hooks
- {{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}} - [Microsoft Corporation] : C:\WINDOWS\system32\jkkIaWPJ.dll
Protocol Handler
- {828030A1-22C1-4009-854F-8E305202313F} - [Microsoft Corporation] : C:\Arquivos de programas\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
- {828030A1-22C1-4009-854F-8E305202313F} - [Microsoft Corporation] : C:\Arquivos de programas\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
Services
23 - [COMODO] : C:\Arquivos de programas\COMODO\COMODO Internet Security\cmdagent.exe
23 - [COMODO] : C:\WINDOWS\system32\DRIVERS\cmdguard.sys
23 - [COMODO] : C:\WINDOWS\system32\DRIVERS\cmdhlp.sys
23 - [Nero AG] : C:\WINDOWS\system32\drivers\InCDFs.sys
23 - [Nero AG] : C:\WINDOWS\system32\drivers\InCDPass.sys
23 - [Nero AG] : C:\WINDOWS\system32\drivers\InCDRm.sys
23 - [Nero AG] : C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe
23 - [COMODO] : C:\WINDOWS\system32\DRIVERS\inspect.sys
23 - [Realtek Semiconductor Corp.] : C:\WINDOWS\system32\drivers\RtkHDAud.sys
23 - [NVIDIA Corporation] : C:\WINDOWS\system32\nvsvc32.exe
23 - : C:\Arquivos de programas\CyberLink\Shared Files\RichVideo.exe
23 - [Crawler.com] : C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
Winlogon Notify
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jkkIaWPJ, DLLName : [Microsoft Corporation] : C:\WINDOWS\system32\jkkIaWPJ.dll
Threat Files
<Trojan.NNol> [Microsoft Corporation] : C:\WINDOWS\system32\jkkIaWPJ.dll
Advanced Files Report
%SYSDIR%\bqkhjb.dll MD5=06367FF53FCB0563353B3EB99867148C SIZE=124416
%SYSDIR%\hkcumi.dll MD5=7EF2F495EE8B086E283C28FF00E79EE9 SIZE=123904
%SYSDIR%\modwlp.dll MD5=A78FF1DE2A89B7A25367AE374154C7FA SIZE=124416
%PROGRAMFILES%\Google\Google Desktop Search\GoogleDesktopDeskbar2.dll [Google] [Google Desktop] MD5=118ED6B0BAEC2CE8B5A341E7E81DC694 SIZE=173568
%PROGRAMFILES%\Google\Google Desktop Search\GoogleDesktopResources_pt_br.dll [Google] [Google Desktop] MD5=18DA2D57B45C7A5F9E57B0F61DEA9648 SIZE=573440
%PROGRAMFILES%\Google\Google Desktop Search\GoogleDesktopCommon.dll [Google] [Google Desktop] MD5=31419DDE1B864DA75E071CE840026521 SIZE=273408
%PROGRAMFILES%\Google\Google Desktop Search\GoogleDesktopHyper.dll [Google] [Google Desktop] MD5=A518777EDE6EFC2687C8FEBB3A4FD1D3 SIZE=141312
%PROGRAMFILES%\Assistente Tecnico Speedy\SmartBridge\SBHook.dll [Motive Communications, Inc.] [Motive System] MD5=4963E3A8EAAAF44B1773257A64934E86 SIZE=122880
%SYSDIR%\Eplpmx02.DLL [MK Systems CO.,LTD.] [MONITOR by MKS] MD5=F5A622DF8848B470F4DA84D828E040D6 SIZE=79872
%SYSDIR%\Eplplx02.dll [MK Systems CO.,LTD.] [MONITOR by MKS] MD5=35062CC42845666804AFA2C17FB7FCDE SIZE=32768
%SYSDIR%\EBPMON2.DLL [SEIKO EPSON CORPORATION] [EPSON Bidirectional Printer] MD5=6A21323BD6705D5FE9F44731C9C3154E SIZE=73676
%SYSDIR%\nvapi.dll [NVIDIA Corporation] [NVIDIA Windows drivers] MD5=431A10EAA0F99058375F33421E09A5B9 SIZE=413696
%SYSDIR%\NVRSPTB.DLL [NVIDIA Corporation] [NVIDIA Compatible Windows 2000 Display driver, Version 174.74] MD5=EE808A80B3BCBFB39CE219715BF5CEC9 SIZE=266240
%PROGRAMFILES%\CyberLink\PowerDVD\CLRCEngine3.dll [CyberLink Corp.] [Cyberlink PowerCinema] MD5=D01F0643525B29C6B49FD1EA6E84A788 SIZE=75312
%PROGRAMFILES%\Nero\Nero 7\InCD\NBHStr.dll [Nero AG] [Nero SecurDisc client] MD5=BF087C7145BD5F4950E60DEB5187C281 SIZE=552744
%PROGRAMFILES%\Nero\Nero 7\InCD\NBHApi.dll [Nero AG] [Nero SecurDisc client] MD5=CEC036DA3B3A07785F4B794E96239D0C SIZE=83240
%PROGRAMFILES%\Nero\Nero 7\InCD\InCDgui.dll [Nero AG] [Nero AG InCD] MD5=592E13A95B932724202186CE1731640A SIZE=2296616
%COMMONFILES%\Ahead\Lib\AdvrCntr2.dll [Nero AG] [AdvrCntr Module] MD5=3F1A7E8A588097071BB0FC9FB3CB39AD SIZE=3077416
%COMMONFILES%\Ahead\Lib\ShellManager.dll [Nero AG] [ShellManager.dll] MD5=8E581ADC7AAFCFEFB90F9BC7D7221676 SIZE=1000744
%PROGRAMFILES%\Nero\Nero 7\InCD\InCDAPI2.dll [Nero AG] [Nero AG InCDapi2] MD5=CC2DF46909212F7B108008017AB8B2F9 SIZE=1491752
%PROGRAMFILES%\Assistente Tecnico Speedy\SmartBridge\httpclient52.dll [Motive Communications, Inc.] [Motive System] MD5=983E94C8B911427FF154939B11C882D1 SIZE=159744
%PROGRAMFILES%\Assistente Tecnico Speedy\SmartBridge\clientutil52.dll [Motive Communications, Inc.] [Motive System] MD5=853FDCFCF26949712045B2268C5A3244 SIZE=282624
%PROGRAMFILES%\Assistente Tecnico Speedy\SmartBridge\SBRes.dll [Motive Communications, Inc.] [Motive System] MD5=2F321E244B07101F773606A97F746FA8 SIZE=53248
%PROGRAMFILES%\Assistente Tecnico Speedy\SmartBridge\alertfilter.dll [Motive Communications, Inc.] [Motive System] MD5=78ADB815C1335F1ED2786E1A57606FA9 SIZE=217088
%WINDIR%\HKNTDLL.dll MD5=9D711D318BE62AC3245AFD4A7D555FBF SIZE=24576
%PROGRAMFILES%\McAfee\MSC\mclocres.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=472A35E85AA205399393178471716509 SIZE=68528
%PROGRAMFILES%\McAfee\MSC\oem\153\Mccobres.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=A876FC1BE9AD61E72FF29048ED300C73 SIZE=562496
%PROGRAMFILES%\McAfee\MSC\mcsubmgr\8,1,133,0\mcsubmgr.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=52B6E1BA4DCC3F22842C0AEE499F4A22 SIZE=492880
%PROGRAMFILES%\McAfee\MSC\mcregobj\8,0,226,0\mcregobj.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=E8B7A11BBB7E1E47B58BA5BC69D73556 SIZE=300368
%PROGRAMFILES%\Google\Google Desktop Search\GoogleServices.DLL [Google] [Google Desktop] MD5=55A5E1C099CA6AE9E67C78E4924548A8 SIZE=2067968
%PROGRAMFILES%\Google\Google Desktop Search\GoogleDesktopAPI2.dll [Google] [Google Desktop] MD5=EFD354FD87556C4F82FD7BA61538B9C3 SIZE=512512
%PROGRAMFILES%\Google\Google Desktop Search\GoogleDesktopMail.dll [Google] [Google Desktop] MD5=7DFD91C4A7CCE1E11EABBA2BD9B9E746 SIZE=113152
%PROGRAMFILES%\Telefonica\Speedy\dialer\amhdialu.dll [Telefónica I+D] [AMH Repository] MD5=AEE4A5BF894342E14AC4DB3C5EE427A3 SIZE=655433
%PROGRAMFILES%\COMODO\COMODO Internet Security\cmdagent.exe [COMODO] [COMODO Internet Security] MD5=D550401FA5A63A8AD61464655D3B4B59 SIZE=618232
%PROGRAMFILES%\Google\Google Desktop Search\GoogleUIEngine.dll [Google] [Google Desktop] MD5=6DB4F5BF3667A4B08C50A52BFDA068A1 SIZE=632832
%PROGRAMFILES%\Google\Google Desktop Search\GoogleDesktopSSD.dll [Google] [Google Desktop] MD5=B7DD73F5C421D8943279B301193D4310 SIZE=151040
%PROGRAMFILES%\Nero\Nero 7\InCD\InCDsrv.exe [Nero AG] [Nero AG incdsrv] MD5=067020BB8ABF1F6B80361051B2806C90 SIZE=1554728
%COMMONFILES%\Ahead\Lib\DriveLocker.dll [Nero AG] [Nero AG DriveLocker] MD5=DC725FBAABE9180371D9183575A8ABDA SIZE=255272
%PROGRAMFILES%\Nero\Nero 7\InCD\incdshx.dll [Nero AG] [Nero AG InCD] MD5=C07ED3B5D5D5C2FAEC8D167F0FE0AE2D SIZE=96552
%COMMONFILES%\McAfee\MSC\mcutil\8,1,114,0\mcutil.dll [McAfee, Inc.] [McAfee SecurityCenter] MD5=CA0732D2F2D582E669C9A408C4E2DCF9 SIZE=128368
%PROGRAMFILES%\McAfee\MSC\McNmcLoR.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=EE0A7F8CC9D237C0DFCB5C02A675FB0E SIZE=17616
%PROGRAMFILES%\McAfee\MSC\McNmcCoR.dll [McAfee, Inc.] [McAfee Integrated Security Platform] MD5=2FC7848C47E23A782C2864B449CFF3D3 SIZE=15032
%PROGRAMFILES%\Assistente Tecnico Speedy\bin\mpbtn.exe MD5=EE8BDDFB7C1D995C96EF92AB97B031AC SIZE=192512
%PROGRAMFILES%\Assistente Tecnico Speedy\bin\clientutil52.dll [Motive Communications, Inc.] [Motive System] MD5=853FDCFCF26949712045B2268C5A3244 SIZE=282624
%PROGRAMFILES%\Assistente Tecnico Speedy\bin\AsstCatalog.dll MD5=1B703DCCB38E2A1756D8198073B8F6C8 SIZE=40960
%PROGRAMFILES%\Assistente Tecnico Speedy\bin\resource.dll [Motive Communications, Inc.] [Motive System] MD5=3EE4BB49CCA6CDF17ACA7D62B3100F49 SIZE=40960
%PROGRAMFILES%\McAfee\VirusScan\esplgres.dll [McAfee, Inc.] [McAfee VirusScan API] MD5=7779E62F8198E5F3E90764C8960BE59E SIZE=14624
%SYSDIR%\nvsvc32.exe [NVIDIA Corporation] [NVIDIA Driver Helper Service, Version 174.74] MD5=DFD4EEEE83EDAF7FFE6C26D8B8F566C2 SIZE=155716
%PROGRAMFILES%\CyberLink\Shared Files\RichVideo.exe [RichVideo Module] MD5=06A49B7BDC36CFBF97DD90804F833369 SIZE=272024
%DESKTOP%\jogos\Emulador\NO$GBA.EXE [No$gba] MD5=A36A4CC10D320B4194855E9F63B1DEA1 SIZE=167465
%PROGRAMFILES%\Microsoft Office\Office12\ONENOTEM.EXE [Microsoft Corporation] [Microsoft Office OneNote] MD5=9D0EEBDA40D5C33BC63FB8BB984F7681 SIZE=101440
%PROGRAMFILES%\Assistente Tecnico Speedy\bin\matcli.exe [Motive Communications, Inc.] [Motive System] MD5=3D52890C5D19DA4A6898477C42E2F840 SIZE=217088
%PROGRAMFILES%\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_1.dll [Yahoo! Inc.] [Yahoo! Toolbar 5.6 for Internet Explorer] MD5=165E677CE08D2AE0A8680D0A7803970E SIZE=327748
%PROGRAMFILES%\Google\Google Toolbar\GoogleToolbar.dll MD5=70D5911E1E7FBEC4DA123509DA91E6D7 SIZE=251504
%SYSDIR%\qoMeEUOH.dll
deskpan.dll
%SYSDIR%\nvshell.dll [NVIDIA Corporation] [NVIDIA Desktop Explorer, Version 111.63] MD5=33F114AF3358E617CD65A1208212C8BD SIZE=466944
%PROGRAMFILES%\Windows Live\Messenger\fsshext.8.5.1302.1018.dll [Microsoft Corporation] [Messenger] MD5=8BDE1F61DFBAAE7A2916170E8B75FE0F SIZE=329240
%PROGRAMFILES%\Microsoft Office\Office12\ONFILTER.DLL [Microsoft Corporation] [Microsoft Office OneNote] MD5=23CD837C3E94BAF99C0B327C660D1DA6 SIZE=74800
%PROGRAMFILES%\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll [Nero AG] [Cover Designer] MD5=CC057F3EB4F9CFF12B2E61A48C518D00 SIZE=1967400
%PROGRAMFILES%\Nero\Nero 7\InCD\InCDUP.dll [Nero AG] [Nero AG InCD] MD5=CAC7CB9170BA918C2A99883DACEAD015 SIZE=77608
%PROGRAMFILES%\WinRAR\rarext.dll [Alexander Roshal] [WinRAR] MD5=8A5382FFE12FF67993F0CE32DAE72EC2 SIZE=132608
%SystemDiskRoot%\Program Files\Real\RealPlayer\rpshell.dll [RealNetworks, Inc.] [RealPlayer] MD5=E56ADA1922D173913EF98470FC4788DF SIZE=63016
%PROGRAMFILES%\COMODO\COMODO Internet Security\cavshell.dll MD5=81BADAF814CE8CC14761EF6A0A93A91A SIZE=274168
F:\OTHERF~1\TROJAN~1\Trshlex.dll
%SYSDIR%\svchost.exe -k netsvcs
%SYSDIR%\DRIVERS\cmdguard.sys [COMODO] [COMODO Internet Security Sandbox Driver] MD5=932D8DF2277BE80ADCCE71E2359F7CEB SIZE=101776
%SYSDIR%\DRIVERS\cmdhlp.sys [COMODO] [COMODO Internet Security Helper Driver] MD5=A8ADD6DEE129953763F19FE90A29A929 SIZE=31504
%SYSDIR%\svchost -k DcomLaunch
%SYSDIR%\svchost.exe -k NetworkService
%SYSDIR%\drivers\InCDFs.sys [Nero AG] [InCD] MD5=B02A8A25192EE1C5E653628637AB6AAA SIZE=118952
%SYSDIR%\drivers\InCDPass.sys [Nero AG] [InCD] MD5=B49BD5B663E1AF9BF3233B782B70D865 SIZE=36776
%SYSDIR%\drivers\InCDRm.sys [Nero AG] [InCD Reader] MD5=FC04E827133D54AB79CA254708F76CD0 SIZE=38440
%SYSDIR%\DRIVERS\inspect.sys [COMODO] [COMODO Internet Security Firewall Driver] MD5=FDCA8008BFC7CA72B08151698CD24236 SIZE=79504
%SYSDIR%\drivers\RtkHDAud.sys [Realtek Semiconductor Corp.] [Realtek(r) High Definition Audio Function Driver (HRTF data Copyright 1994 by MIT Media Lab)] MD5=08BAF30F6DE95814F58AF9CE7BBC5614 SIZE=4676096
%SYSDIR%\svchost.exe -k LocalService
%SYSDIR%\svchost -k rpcss
%SYSDIR%\drivers\sp_rsdrv2.sys [Crawler.com] [Spyware Terminator] MD5=8831252BCF05FCFB5ABD116A22E552D8 SIZE=142592
%PROGRAMFILES%\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll [Microsoft Corporation] [Messenger] MD5=56319E6B4D190A2DEB4463A9CE4D4F74 SIZE=66072
%WINDIR%\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll [Microsoft Corporation] [Microsoft® Visual Studio® 2005] MD5=CB23B162AC655F24C6711A5F5DF348C6 SIZE=61440
%WINDIR%\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll [Microsoft Corporation] [Microsoft® Visual Studio® 2005] MD5=1B7524806D0270B81360C63A2FA047CB SIZE=1101824
%COMMONFILES%\Microsoft Shared\GRPHFLT\CGMIMP32.FLT [Microsoft Corporation] [2007 Microsoft Office system] MD5=24D97CCF0CC953880C69A7E3F4187021 SIZE=290688
%COMMONFILES%\Microsoft Shared\MODI\12.0\BINDER.DLL [ScanSoft, Inc.] [ScanSoft API] MD5=623BFFC21F6258855673B751CC81E2DA SIZE=22936
%COMMONFILES%\Microsoft Shared\MODI\12.0\FORM.DLL [Tsinghua/Wintone and ScanSoft, Inc.] [Asian OCR for ScanSoft API] MD5=51B3711D0BC33C6BD9AD3461DC7551C4 SIZE=78728
%COMMONFILES%\Microsoft Shared\MODI\12.0\MSPVIEW.EXE [Microsoft Corporation] [2007 Microsoft Office system] MD5=39B69FD4C4176ABE3FA4CCE629E395C8 SIZE=437056
%COMMONFILES%\Microsoft Shared\MODI\12.0\REVERSE.DLL [Tsinghua/Wintone and ScanSoft, Inc.] [Asian OCR for ScanSoft API] MD5=4EFF9C4F83DFCC7D902C588AF2CB4349 SIZE=22416
%COMMONFILES%\Microsoft Shared\MODI\12.0\THOCR.PSP [ScanSoft, Inc.] [ScanSoft API] MD5=FDD07C0A5B579645EFECBC304D9DA32B SIZE=190464
%COMMONFILES%\Microsoft Shared\OFFICE12\ACECORE.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=77B7089D98E0CFABBB2EE56B8579CF18 SIZE=1754536
%COMMONFILES%\Microsoft Shared\OFFICE12\ACEES.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=9584476B8082C208B6206D9B5B810538 SIZE=193992
%COMMONFILES%\Microsoft Shared\OFFICE12\ACEODDBS.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=63D501D1AAF0B91BF66CF7DD203AC5D3 SIZE=17800
%COMMONFILES%\Microsoft Shared\OFFICE12\ACEODEXL.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=6014430D5B1406BE794AA8FD6EE756C9 SIZE=17800
%COMMONFILES%\Microsoft Shared\OFFICE12\ACEODTXT.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=E41A3724A30C92353FD9151A8F687DEC SIZE=17800
%COMMONFILES%\Microsoft Shared\OFFICE12\ACEPDE.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=3569A008EF6EA8A713E37C2AE508FFAF SIZE=394688
%COMMONFILES%\Microsoft Shared\OFFICE12\ACER2X.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=C9EA14E222E1193AD172838EE493D601 SIZE=263616
%COMMONFILES%\Microsoft Shared\OFFICE12\ACEREP.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=9C82A5B565FFEB99F98F85370BF13124 SIZE=554440
%COMMONFILES%\Microsoft Shared\OFFICE12\ACEWDAT.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=B574E857BA27BD814D4B1DCD76A8375B SIZE=826232
%COMMONFILES%\Microsoft Shared\OFFICE12\ACEWSS.DLL [Microsoft Corporation] [Microsoft Office System 2007] MD5=FA7748447F93D72F4DC5A0F12AD9C452 SIZE=201664
%COMMONFILES%\Microsoft Shared\OFFICE12\LBGHOST.DLL [Microsoft Corporation] [Microsoft Office Program Recovery] MD5=1634146F136AD3CCA799C1E5137A82AE SIZE=70976
%COMMONFILES%\Microsoft Shared\OFFICE12\MSOMSE.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=7D03DEF7CD3597DAF8EA663DC4F3B463 SIZE=66368
%COMMONFILES%\Microsoft Shared\OFFICE12\MSSH.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=7F8223AE42E47C9EAD7B1EDEE3806DEE SIZE=43832
%COMMONFILES%\Microsoft Shared\OFFICE12\MSSOAP30.DLL [Microsoft Corporation] [Microsoft Office Soap SDK] MD5=8E72F01D9B2C5F120486B3A8C5491D93 SIZE=507768
%COMMONFILES%\Microsoft Shared\OFFICE12\OFFLB.EXE [Microsoft Corporation] [Microsoft Office Program Recovery] MD5=64865C2D27EFA61AF879B665ED676966 SIZE=556424
%COMMONFILES%\Microsoft Shared\OFFICE12\WISC30.DLL [Microsoft Corporation] [Microsoft Office Soap SDK 3.0] MD5=9E8A7DABAF456A67798929A4C4F06218 SIZE=123720
%COMMONFILES%\Microsoft Shared\PROOF\MSHY3ES.DLL [Spanish Hyphenation Engine] MD5=E6B933E95B55D65A64FB8AFF60FD42E9 SIZE=919696
%COMMONFILES%\Microsoft Shared\Smart Tag\FPERSON.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=F1D0AF8645A1B9AB82470F409F42CE6E SIZE=149816
%COMMONFILES%\System\Ole DB\msmgdsrv.dll [Microsoft Corporation] [Microsoft SQL Server Analysis Services] MD5=30982CC1E54A6D33C84010415289007F SIZE=6040432
%PROGRAMFILES%\Microsoft Office\Office12\ACCVDT.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=CCA024C8B032EFEE7E8AC932ED1BA63D SIZE=3135304
%PROGRAMFILES%\Microsoft Office\Office12\CDLMSO.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=BA9EC8513C365E999FA1E9F823D2FA68 SIZE=402784
%PROGRAMFILES%\Microsoft Office\Office12\GREN50.OLB [Microsoft Corporation] [Microsoft Graph] MD5=998732254D8D7E19EB75083657756635 SIZE=57344
%PROGRAMFILES%\Microsoft Office\Office12\MLCFG32.CPL [Microsoft Corporation] [Microsoft Office Outlook] MD5=CD2E930E206F5D6647C12C0BCB614101 SIZE=83264
%PROGRAMFILES%\Microsoft Office\Office12\MSCAL.OCX [Microsoft Corporation] [Microsoft Calendar Control] MD5=35CD68C566D7CDD6E8C92281A21894A7 SIZE=113024
%PROGRAMFILES%\Microsoft Office\Office12\MSODCW.DLL [Microsoft Corporation] [Microsoft Office Disk Cleanup Wizard] MD5=AED71BD7CFE150290A53B8E3B6F3E0D1 SIZE=431456
%PROGRAMFILES%\Microsoft Office\Office12\MSPST32.DLL [Microsoft Corporation] [Microsoft Office Outlook] MD5=4909A838F2BD9C4ED7CF7EFFDF3F1E15 SIZE=1110112
%PROGRAMFILES%\Microsoft Office\Office12\NAME.DLL [Microsoft Corporation] [2007 Microsoft Office system] MD5=1C7A4288196FE72EF9AB885CF047C67C SIZE=68464
%PROGRAMFILES%\Microsoft Office\Office12\OIS.EXE [Microsoft Corporation] [Microsoft Office Picture Manager] MD5=34331352E23FE6219F517C1709E63C61 SIZE=277384
%PROGRAMFILES%\Microsoft Office\Office12\ORGCHART.EXE [Microsoft Corporation] [2007 Microsoft Office system] MD5=9E7570195D2A952161A5335A38CDE658 SIZE=542648
%PROGRAMFILES%\Microsoft Office\Office12\OUTLPH.DLL [Microsoft Corporation] [Microsoft Office Outlook] MD5=F63AD09A21D6FD6E1E14D6666799380D SIZE=180800
%PROGRAMFILES%\Microsoft Office\Office12\RECALL.DLL [Microsoft Corporation] [Microsoft Office Outlook] MD5=4F296FD5CF0F0790E221CFBFCAD800E2 SIZE=39208
%PROGRAMFILES%\Microsoft Office\Office12\WINWORD.EXE [Microsoft Corporation] [2007 Microsoft Office system] MD5=55A949AB657322ED818F8BFD786D8573 SIZE=349720
%PROGRAMFILES%\Microsoft Office\Office12\XLCALL32.DLL [Microsoft Corporation] [Microsoft Office Excel] MD5=F1446D85469492DEEC3D4E91C7028911 SIZE=13368
%PROGRAMFILES%\Microsoft Office\Office12\nlsdata0000.dll [Microsoft Corporation] [Natural Language Components] MD5=4BE858FC7835BEFE6A5A6AB669805016 SIZE=1512304
%PROGRAMFILES%\Microsoft Works\ltkrn13n.dll [LEAD Technologies, Inc.] [LEADTOOLS(r) DLL for Win32] MD5=9F55BFD2C68DDD94F261B4E7A177042B SIZE=468568
%SYSDIR%\SCP32.DLL [Microsoft Corporation] [Microsoft Visual Basic for Applications] MD5=F0283069C1B8E0A65A97F08186BFC9B2 SIZE=39728
End of Report
e não consigo remover o Trojan...Peço ajuda a alguem...
Obrigado pela atenção
By Cymo
