This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed]Google Advise

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hello, I'm having some problems to run google search.
When I access google site it appears the following message:

"Desculpe…
… mas não é possível executar essa ação no momento. Estamos recebendo pedidos automatizados de conexão gerados por um vírus ou spyware, e aparentemente seu computador ou rede foram infectados.

Tente acessar essa página novamente dentro de alguns instantes. Ela voltará ao normal assim que possível. Neste ínterim, sugerimos que você use um aplicativo antivírus ou de detecção de spyware para checar se seu computador está livre de vírus e outros softwares predatórios.

Lamentamos o inconveniente. Esperamos sua que você volte ao Google em breve!"

I understand maybe my computer is infected.

So I ran the hijackThis program.

I hopesomeone can help me. the log file is below:

C:\Arquivos de programas\Logitech\ImageStudio\LogiTray.exe
C:\WINNT\system32\internat.exe
C:\Arquivos de programas\NavNT\VPC32.EXE
C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE
C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE
C:\Arquivos de programas\PowerArchiver\POWERARC.EXE
C:\DOCUME~1\ADMINI~1\CONFIG~1\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.compaq.com/1Q00CDT/0416/bl8.asp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &http://home.microsoft.com/intl/br/access/allinone.asp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ciaer.intraer/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = &http://home.microsoft.com/intl/br/access/allinone.asp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = &http://home.microsoft.com/intl/br/access/allinone.asp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxiesccabr.intraer:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 10.*;*.intraer;
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\WINNT\Downloaded Program Files\gbieh.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Smapp] C:\Arquivos de programas\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [cpqek] C:\Arquivos de programas\Compaq\Compaq EAB Software\cpqek.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\ARQUIV~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [Promon.exe] Promon.exe
O4 - HKLM\..\Run: [ChkAdmin] C:\ARQUIV~1\Compaq\COMPAQ~2\CHKADMIN.EXE
O4 - HKLM\..\Run: [vptray] C:\Arquivos de programas\NavNT\vptray.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Arquivos de programas\Arquivos comuns\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Arquivos de programas\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Arquivos de programas\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\RunServices: [CPQDFWAG] C:\WINNT\Cpqdiag\CpqDfwAg.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [updateMgr] C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Arquivos de programas\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O16 - DPF: JavaConnect - http://sametime.grude.ufmg.br/sametime/jav…JavaConnect.cab
O16 - DPF: {1EEDA174-3132-4AFC-9EEC-55BE29C87476} (STAutoAway Control) - http://sametime.grude.ufmg.br/sametime/jav…oAwayLoader.cab
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://carretel.grude.ufmg.br/iNotes6.cab
O16 - DPF: {D4B5D9AB-D565-4DAF-BF5C-4D07F1CAA6EE} (STURLConnection Control) - http://sametime.grude.ufmg.br/sametime/jav…rlConLoader.cab
O16 - DPF: {DB6BF2CD-4F59-4F1C-AA9C-D08C0B61A931} (GbpDistObj Class) - https://www14.bancobrasil.com.br/plugin/GbpDist.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F28EE718-C1E8-4254-8B31-F4F0A0D7DA02}: NameServer = 10.228.64.1,10.228.64.2,10.52.56.2
O20 - Winlogon Notify: NavLogon - C:\WINNT\System32\NavLogon.dll
O23 - Service: Serviço de Cliente Altiris (AClient) - Altiris, Inc. - C:\COMPAQ\ACLIENT\ACLIENT.exe
O23 - Service: Compaq Local Alerter (CPQALERT) - Compaq Computer Corporation - C:\Arquivos de programas\Compaq\Compaq Management Agents\cpqalert.exe
O23 - Service: Compaq Remote Diagnostics Enabling Agent (CpqDfwWebAgent) - Compaq Computer Corporation - C:\WINNT\Cpqdiag\Cpqdfwag.exe
O23 - Service: cpqdmi - Compaq Computer Corporation - C:\ARQUIV~1\Compaq\COMPAQ~2\cpqdmi.exe
O23 - Service: Compaq DMI Web Agent (cpqWebDmi) - Compaq Computer Corporation - C:\ARQUIV~1\Compaq\COMPAQ~2\CPQWEB~1\WebDmi.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Arquivos de programas\NavNT\defwatch.exe
O23 - Service: Serviço administrativo do gerenciador de disco lógico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia LTDA - C:\Arquivos de programas\GbPlugin\GbpSv.exe
O23 - Service: Insight Manager LC Remote Management (LCRMS) - Compaq Computer Corporation - C:\Arquivos de programas\Compaq\LCRMS\LCRMS.EXE
O23 - Service: NMS Service (NMSSvc) - Intel Corporation - C:\WINNT\System32\NMSSvc.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Arquivos de programas\NavNT\rtvscan.exe
O23 - Service: Win32Sl (WIN32SL) - Intel - C:\Arquivos de programas\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe

Thanks
Hello and welcome to the forum. :wavey:

I'm sorry we could not get to you sooner but things are very busy here.

First, you should know that you need to put HijackThis into its own folder. HJT makes backups of every log and needs a spot to put them, just in case we would need to revert.

So, go to a blank spot on your desktop and right-click your mouse.

Then, scroll down to New and select Folder.

Name the folder whatever you like. Then grab HJT and drop it into the folder.


Now, you need to run HJT again and create a new log. Make certain that you copy and paste the entire log. The one you posted earlier had its heading as well as a few processes cut off. Run in Normal Mode.

Thanks very much.

B)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI