[Resolved] Slow computer and with breaks

Logfile of HijackThis v1.99.1
Scan saved at 10:08:02, on 01-11-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Programas\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Programas\Microsoft IntelliType Pro\type32.exe
C:\Programas\Nero\Nero8\InCD\NBHGui.exe
C:\Programas\Nero\Nero8\InCD\InCD.exe
C:\Programas\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programas\MSN Messenger\MsnMsgr.Exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMBgMonitor.exe
C:\Programas\HP\Digital Imaging\bin\hpqimzone.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Programas\Nero\Nero8\InCD\InCDsrv.exe
C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Programas\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexingService.exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Programas\MSN Messenger\usnsvc.exe
C:\Documents and Settings\epok\Ambiente de trabalho\refreshlock\RefreshLock.exe
C:\Programas\Mozilla Firefox\firefox.exe
C:\Programas\Vidalia Bundle\Tor\tor.exe
C:\Programas\BTuga Revolution\btuga.exe
C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe
C:\Programas\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/pt/ý
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8118
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [AVP] "C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programas\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programas\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CTSysVol] C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [WinampAgent] C:\Programas\Winamp\winampa.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [type32] "C:\Programas\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programas\Ficheiros comuns\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Programas\Nero\Nero8\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Programas\Nero\Nero8\InCD\InCD.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Programas\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [HPHUPD08] C:\Programas\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programas\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "c:\programas\steam\steam.exe" -silent
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Programas\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programas\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Programas\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programas\Ficheiros comuns\Nero\Lib\NMBgMonitor.exe"
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programas\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Inicialização rápida do HP Image Zone.lnk = C:\Programas\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programas\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Privoxy.lnk = C:\Programas\Vidalia Bundle\Privoxy\privoxy.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O17 - HKLM\System\CS1\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O17 - HKLM\System\CS2\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Unknown owner - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programas\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Programas\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe



Since days my computer turned much slower than it was. In all aplications and games i realised that. All things and sugestions that help to solve this problem are welcome. Anything u need to analyse my problem just ask for it, such as program logs and others u need. I'm completely available to give you. But what I want isn't only to solve this problem, but all malware and virus contained in my computer and all other things that makes my system worse, to make my system the better, stable and faster that's possible. Thanks

Logfile of HijackThis v1.99.1
Scan saved at 10:09:48, on 11-11-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Programas\Nero\Nero8\InCD\InCDsrv.exe
C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Programas\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Programas\Analog Devices\Core\smax4pnp.exe
C:\Programas\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe
C:\Programas\Microsoft IntelliType Pro\type32.exe
C:\Programas\Nero\Nero8\InCD\NBHGui.exe
C:\Programas\Nero\Nero8\InCD\InCD.exe
C:\Programas\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programas\MSN Messenger\MsnMsgr.Exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMBgMonitor.exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexingService.exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system\msnmsg.exe
C:\Programas\Messenger\msmsgs.exe
C:\Programas\HP\Digital Imaging\bin\hpqimzone.exe
C:\Programas\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programas\Steam\Steam.exe
C:\Programas\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/pt/ý
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8118
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
O2 - BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programas\Ficheiros comuns\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [AVP] "C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programas\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programas\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CTSysVol] C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [type32] "C:\Programas\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programas\Ficheiros comuns\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Programas\Nero\Nero8\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Programas\Nero\Nero8\InCD\InCD.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Programas\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [HPHUPD08] C:\Programas\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programas\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programas\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programas\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Programas\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programas\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programas\Ficheiros comuns\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsg] C:\WINDOWS\system\msnmsg.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programas\Messenger\msmsgs.exe" /background
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programas\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Inicialização rápida do HP Image Zone.lnk = C:\Programas\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programas\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Privoxy.lnk = C:\Programas\Vidalia Bundle\Privoxy\privoxy.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O17 - HKLM\System\CS1\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O17 - HKLM\System\CS2\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Unknown owner - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programas\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Programas\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


My Computer is still behaving as I described in my first post. Waiting for your help. Thanks

ComboFix 07-11-08.1 - epok 2007-11-11 12:58:39.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.2070.18.1273 [GMT 0:00]
Executando de: C:\Documents and Settings\epok\Ambiente de trabalho\ComboFix.exe
* Criado um novo ponto de restauro
.

((((((((((((((((((((((((((((((((((((( Outras Exclusões )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\iexplorer.exe
C:\WINDOWS\system\msnmsg.exe

.
((((((((((((((((((((((( Ficheiros criados de 2007-10-11 to 2007-11-11 ))))))))))))))))))))))))))))))))
.

2007-11-11 12:57 51,200 –a—— C:\WINDOWS\NirCmd.exe
2007-11-10 19:46 59 –a—— C:\WINDOWS\syst.dat
2007-11-10 14:54 d——– C:\Programas\The All-Seeing Eye
2007-11-10 12:51 d——– C:\Documents and Settings\epok\Application Data\Apple Computer
2007-11-10 12:49 d——– C:\Programas\QuickTime
2007-11-10 12:49 d——– C:\Programas\Apple Software Update
2007-11-10 12:49 d——– C:\Documents and Settings\All Users\Application Data\Apple Computer
2007-11-10 12:49 d——– C:\Documents and Settings\All Users\Application Data\Apple
2007-11-04 10:32 d——– C:\Programas\Ficheiros comuns\Adobe
2007-11-03 14:52 d——– C:\Programas\Beach Volleyball
2007-10-30 20:54 d——– C:\Documents and Settings\epok\Application Data\teamspeak2
2007-10-30 20:53 d——– C:\Programas\Teamspeak2_RC2
2007-10-29 12:47 d——– C:\Fashion - Brigitte Bui Brigitta Bulgari
2007-10-28 12:36 d——– C:\Documents and Settings\epok\Application Data\tor
2007-10-28 12:35 d——– C:\Programas\Vidalia Bundle
2007-10-28 12:35 d——– C:\Documents and Settings\epok\Application Data\Vidalia
2007-10-25 20:13 d——– C:\Documents and Settings\All Users\Application Data\HP
2007-10-25 20:12 d——– C:\Programas\Ficheiros comuns\Sonic Shared
2007-10-25 20:12 d——– C:\Documents and Settings\All Users\Application Data\Sonic
2007-10-25 20:11 d——– C:\Programas\Ficheiros comuns\HP
2007-10-25 20:09 d——– C:\Programas\Hewlett-Packard
2007-10-25 20:07 d——– C:\Program Files
2007-10-25 20:07 306,688 –a—— C:\WINDOWS\IsUninst.exe
2007-10-25 20:07 278,584 –a—— C:\WINDOWS\system32\HPZidr12.dll
2007-10-25 20:07 204,800 –a—— C:\WINDOWS\system32\HPZipr12.dll
2007-10-25 20:07 94,208 –a—— C:\WINDOWS\system32\HPZipt12.dll
2007-10-25 20:07 69,632 –a—— C:\WINDOWS\system32\HPZipm12.exe
2007-10-25 20:07 61,440 –a—— C:\WINDOWS\system32\HPZinw12.exe
2007-10-25 20:07 57,344 –a—— C:\WINDOWS\system32\HPZisn12.dll
2007-10-25 20:04 d——– C:\Programas\HP
2007-10-25 19:55 80,545 –a—— C:\WINDOWS\HPHins08.dat
2007-10-25 19:55 4,011 ——— C:\WINDOWS\hphmdl08.dat
2007-10-24 18:26 241,664 –a—— C:\WINDOWS\system32\UCLiveSocket.dll
2007-10-24 18:26 159,744 –a—— C:\WINDOWS\system32\UCLiveCore.dll
2007-10-24 18:26 153,088 –a—— C:\UNWISE.EXE
2007-10-24 18:22 d——– C:\Programas\TVAnts
2007-10-24 18:13 d——– C:\Programas\SopCast
2007-10-24 18:13 d——– C:\Documents and Settings\epok\Application Data\SopCast
2007-10-22 15:34 d——– C:\Programas\MSXML 4.0
2007-10-21 19:05 d——– C:\Documents and Settings\epok\Application Data\Nero
2007-10-21 19:03 d——– C:\Programas\Nero
2007-10-21 19:03 d——– C:\Programas\Ficheiros comuns\Nero
2007-10-21 19:03 d——– C:\Documents and Settings\All Users\Application Data\Nero
2007-10-21 16:12 d——– C:\WINDOWS\ShellNew
2007-10-21 16:10 d——– C:\Documents and Settings\epok\Application Data\Microsoft Web Folders
2007-10-21 13:31 d——– C:\Programas\ratDVD
2007-10-21 13:15 d——– C:\Programas\CyberLink
2007-10-21 13:15 d——– C:\Documents and Settings\All Users\Application Data\CyberLink
2007-10-20 15:18 21,504 –a—— C:\WINDOWS\system32\hidserv.dll
2007-10-20 15:18 21,504 –a–c— C:\WINDOWS\system32\dllcache\hidserv.dll
2007-10-20 15:18 14,848 –a—— C:\WINDOWS\system32\drivers\kbdhid.sys
2007-10-20 15:18 14,848 –a–c— C:\WINDOWS\system32\dllcache\kbdhid.sys
2007-10-20 14:23 d——– C:\Programas\Microsoft IntelliType Pro
2007-10-20 10:37 d——– C:\Programas\Real
2007-10-20 10:37 d——– C:\Programas\Ficheiros comuns\xing shared
2007-10-20 10:37 d——– C:\Programas\Ficheiros comuns\Real
2007-10-20 10:09 d——– C:\Documents and Settings\epok\Application Data\Media Player Classic
2007-10-20 10:08 d——– C:\Programas\K-Lite Codec Pack
2007-10-19 11:22 d——– C:\Programas\eMule
2007-10-17 20:19 d——– C:\Documents and Settings\epok\Application Data\Sports Interactive
2007-10-17 20:13 dr-h—– C:\Documents and Settings\epok\Application Data\SecuROM
2007-10-17 20:13 107,888 –a—— C:\WINDOWS\system32\CmdLineExt.dll
2007-10-17 20:09 d–h—– C:\Programas\Zero G Registry
2007-10-17 20:09 d——– C:\Programas\Football Manager 2008
2007-10-17 20:08 d–h—– C:\Documents and Settings\epok\InstallAnywhere
2007-10-17 20:04 d——– C:\Programas\DAEMON Tools
2007-10-17 20:01 685,816 –a—— C:\WINDOWS\system32\drivers\sptd.sys
2007-10-17 19:59 d——– C:\Programas\DVD Decrypter
2007-10-14 12:00 d——– C:\Programas\KONAMI
2007-10-13 22:22 d——– C:\Documents and Settings\epok\Application Data\InstallShield Installation Information
2007-10-13 22:21 d——– C:\Programas\Unreal Tournament 3 Demo
2007-10-13 22:20 3,727,720 –a—— C:\WINDOWS\system32\d3dx9_35.dll
2007-10-13 22:20 3,497,832 –a—— C:\WINDOWS\system32\d3dx9_34.dll
2007-10-13 22:20 1,358,192 –a—— C:\WINDOWS\system32\D3DCompiler_35.dll
2007-10-13 22:20 1,124,720 –a—— C:\WINDOWS\system32\D3DCompiler_34.dll
2007-10-13 22:20 1,123,696 –a—— C:\WINDOWS\system32\D3DCompiler_33.dll
2007-10-13 22:20 444,776 –a—— C:\WINDOWS\system32\d3dx10_35.dll
2007-10-13 22:20 443,752 –a—— C:\WINDOWS\system32\d3dx10_34.dll
2007-10-13 22:20 443,752 –a—— C:\WINDOWS\system32\d3dx10_33.dll
2007-10-13 22:20 81,768 –a—— C:\WINDOWS\system32\xinput1_3.dll
2007-10-13 22:19 d——– C:\WINDOWS\system32\AGEIA
2007-10-13 22:19 d——– C:\Programas\Ficheiros comuns\Wise Installation Wizard
2007-10-13 22:19 d——– C:\Programas\AGEIA Technologies
2007-10-13 22:19 3,495,784 –a—— C:\WINDOWS\system32\d3dx9_33.dll
2007-10-13 22:19 3,426,072 –a—— C:\WINDOWS\system32\d3dx9_32.dll
2007-10-13 22:19 2,414,360 –a—— C:\WINDOWS\system32\d3dx9_31.dll
2007-10-13 22:19 62,744 –a—— C:\WINDOWS\system32\xinput1_2.dll
2007-10-13 20:24 d——– C:\Programas\Winamp
2007-10-13 20:24 d——– C:\Documents and Settings\epok\Application Data\Winamp
2007-10-13 19:59 d——– C:\Programas\mIRC
2007-10-13 19:50 d——– C:\Documents and Settings\epok\Application Data\.BTuga
2007-10-13 19:49 d——– C:\Programas\BTuga Revolution
2007-10-13 19:48 1,140 –a—— C:\WINDOWS\mozver.dat
2007-10-13 19:33 d——– C:\Documents and Settings\epok\Application Data\Talkback
2007-10-13 19:32 0 –a—— C:\WINDOWS\nsreg.dat
2007-10-13 17:52 41,984 ——— C:\WINDOWS\Ctregrun.exe
2007-10-13 17:51 90,112 ——— C:\WINDOWS\Updreg.EXE
2007-10-13 17:50 d——– C:\WINDOWS\system32\Data
2007-10-13 17:50 11,264 –a—— C:\WINDOWS\INRES.DLL
2007-10-13 17:47 d——– C:\Programas\Creative

.
((((((((((((((((((((((((((((((((((((( Relatório Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-11 13:09 6,868,768 –sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2007-11-11 13:08 390,432 –sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2007-11-11 09:40 ——— d—–w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2007-11-10 18:40 88,292 –sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2007-11-10 18:40 39,164 –sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2007-11-03 14:52 ——— d–h–w C:\Programas\InstallShield Installation Information
2007-10-21 16:12 ——— d—–w C:\Programas\microsoft frontpage
2007-10-13 20:20 ——— d—–w C:\Documents and Settings\epok\Application Data\.BTuga
2007-10-13 13:52 ——— d—–w C:\Programas\NVIDIA Corporation
2007-10-13 13:52 ——— d—–w C:\Programas\Ficheiros comuns\InstallShield
2007-10-13 13:48 ——— d—–w C:\Programas\Ficheiros comuns\SpeechEngines
2007-10-13 13:48 ——— d—–w C:\Programas\Ficheiros comuns\ODBC
2007-10-13 13:35 ——— d—–w C:\Programas\Analog Devices
2007-10-13 13:33 82,061 —-a-w C:\WINDOWS\system32\drivers\klick.dat
2007-10-13 13:33 81,549 —-a-w C:\WINDOWS\system32\drivers\klin.dat
2007-10-13 13:29 ——— d—–w C:\Programas\Intel
2007-10-13 13:05 ——— d—–w C:\Programas\Kaspersky Lab
2007-10-13 13:04 ——— d—–w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2007-10-13 12:56 ——— d—–w C:\Programas\Serviços online
2007-10-13 12:55 ——— d—–w C:\Programas\Ficheiros comuns\MSSoap
2007-09-28 17:07 3,596,288 —-a-w C:\WINDOWS\system32\qt-dx331.dll
2007-09-28 17:05 81,920 —-a-w C:\WINDOWS\system32\dpl100.dll
2007-09-28 17:05 739,840 —-a-w C:\WINDOWS\system32\divx.dll
2007-09-24 08:05 132,904 —-a-w C:\WINDOWS\system32\drivers\imagesrv.sys
2007-09-24 08:05 11,304 —-a-w C:\WINDOWS\system32\drivers\imagedrv.sys
2007-09-20 09:36 40,488 —-a-w C:\WINDOWS\system32\drivers\InCDRm.sys
2007-09-20 09:36 38,952 —-a-w C:\WINDOWS\system32\drivers\InCDPass.sys
2007-09-20 09:36 238,888 —-a-w C:\WINDOWS\NuNInst.exe
2007-09-20 09:36 17,448 —-a-w C:\WINDOWS\system32\drivers\InCDrec.sys
2007-09-20 09:36 125,864 —-a-w C:\WINDOWS\system32\drivers\InCDfs.sys
2007-09-20 08:59 972,072 —-a-w C:\WINDOWS\UNRecode.exe
2007-09-20 08:55 972,072 —-a-w C:\WINDOWS\UNNeroMediaHome.exe
2007-09-20 08:55 95,600 —-a-w C:\WINDOWS\system32\NeroCo.dll
2007-09-17 01:10 356,352 —-a-w C:\WINDOWS\system32\NVUNINST.EXE
2007-09-17 00:07 81,920 —-a-w C:\WINDOWS\system32\nvwddi.dll
2007-09-17 00:07 81,920 —-a-w C:\WINDOWS\system32\nvmctray.dll
2007-09-17 00:07 8,491,008 —-a-w C:\WINDOWS\system32\nvcpl.dll
2007-09-17 00:07 753,664 —-a-w C:\WINDOWS\system32\nvcplui.exe
2007-09-17 00:07 6,853,088 —-a-w C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-09-17 00:07 6,746,112 —-a-w C:\WINDOWS\system32\nvoglnt.dll
2007-09-17 00:07 6,344,704 —-a-w C:\WINDOWS\system32\nvdisps.dll
2007-09-17 00:07 5,783,040 —-a-w C:\WINDOWS\system32\nv4_disp.dll
2007-09-17 00:07 5,509,120 —-a-w C:\WINDOWS\system32\nvdispsr.dll
2007-09-17 00:07 466,944 —-a-w C:\WINDOWS\system32\nvshell.dll
2007-09-17 00:07 458,752 —-a-w C:\WINDOWS\system32\nvmccssr.dll
2007-09-17 00:07 45,056 —-a-w C:\WINDOWS\system32\nvmccsrs.dll
2007-09-17 00:07 442,368 —-a-w C:\WINDOWS\system32\nvappbar.exe
2007-09-17 00:07 425,984 —-a-w C:\WINDOWS\system32\keystone.exe
2007-09-17 00:07 364,544 —-a-w C:\WINDOWS\system32\nvapi.dll
2007-09-17 00:07 36,864 —-a-w C:\WINDOWS\system32\nvcodins.dll
2007-09-17 00:07 36,864 —-a-w C:\WINDOWS\system32\nvcod.dll
2007-09-17 00:07 356,352 —-a-w C:\WINDOWS\system32\nvudisp.exe
2007-09-17 00:07 335,872 —-a-w C:\WINDOWS\system32\nvwrses.dll
2007-09-17 00:07 335,872 —-a-w C:\WINDOWS\system32\nvwrsel.dll
2007-09-17 00:07 327,680 —-a-w C:\WINDOWS\system32\nvwrsfr.dll
2007-09-17 00:07 327,680 —-a-w C:\WINDOWS\system32\nvwrsesm.dll
2007-09-17 00:07 327,680 —-a-w C:\WINDOWS\system32\nvrshe.dll
2007-09-17 00:07 327,680 —-a-w C:\WINDOWS\system32\nvrsar.dll
2007-09-17 00:07 323,584 —-a-w C:\WINDOWS\system32\nvwrspt.dll
2007-09-17 00:07 323,584 —-a-w C:\WINDOWS\system32\nvwrsit.dll
2007-09-17 00:07 319,488 —-a-w C:\WINDOWS\system32\nvwrsptb.dll
2007-09-17 00:07 319,488 —-a-w C:\WINDOWS\system32\nvwrsnl.dll
2007-09-17 00:07 315,392 —-a-w C:\WINDOWS\system32\nvwrsru.dll
2007-09-17 00:07 315,392 —-a-w C:\WINDOWS\system32\nvwrshu.dll
2007-09-17 00:07 311,296 —-a-w C:\WINDOWS\system32\nvwrsde.dll
2007-09-17 00:07 307,200 —-a-w C:\WINDOWS\system32\nvexpbar.dll
2007-09-17 00:07 303,104 —-a-w C:\WINDOWS\system32\nvwrstr.dll
2007-09-17 00:07 303,104 —-a-w C:\WINDOWS\system32\nvwrssl.dll
2007-09-17 00:07 303,104 —-a-w C:\WINDOWS\system32\nvwrsfi.dll
2007-09-17 00:07 3,629,056 —-a-w C:\WINDOWS\system32\nvvitvsr.dll
2007-09-17 00:07 3,551,232 —-a-w C:\WINDOWS\system32\nvvitvs.dll
2007-09-17 00:07 3,334,144 —-a-w C:\WINDOWS\system32\nvgames.dll
2007-09-17 00:07 3,166,208 —-a-w C:\WINDOWS\system32\nvgamesr.dll
2007-09-17 00:07 299,008 —-a-w C:\WINDOWS\system32\nvwrssk.dll
2007-09-17 00:07 299,008 —-a-w C:\WINDOWS\system32\nvwrsno.dll
2007-09-17 00:07 294,912 —-a-w C:\WINDOWS\system32\nvwrssv.dll
2007-09-17 00:07 294,912 —-a-w C:\WINDOWS\system32\nvwrspl.dll
2007-09-17 00:07 294,912 —-a-w C:\WINDOWS\system32\nvwrsda.dll
2007-09-17 00:07 290,816 —-a-w C:\WINDOWS\system32\nvwrsth.dll
2007-09-17 00:07 286,720 —-a-w C:\WINDOWS\system32\nvwrseng.dll
2007-09-17 00:07 286,720 —-a-w C:\WINDOWS\system32\nvwrscs.dll
2007-09-17 00:07 286,720 —-a-w C:\WINDOWS\system32\nvnt4cpl.dll
2007-09-17 00:07 282,624 —-a-w C:\WINDOWS\system32\nvwrsar.dll
2007-09-17 00:07 282,624 —-a-w C:\WINDOWS\system32\nvrsfr.dll
2007-09-17 00:07 282,624 —-a-w C:\WINDOWS\system32\nvrses.dll
2007-09-17 00:07 282,624 —-a-w C:\WINDOWS\system32\nvrsel.dll
2007-09-17 00:07 278,528 —-a-w C:\WINDOWS\system32\nvwrshe.dll
2007-09-17 00:07 278,528 —-a-w C:\WINDOWS\system32\nvrsit.dll
2007-09-17 00:07 278,528 —-a-w C:\WINDOWS\system32\nvrsde.dll
2007-09-17 00:07 274,432 —-a-w C:\WINDOWS\system32\nvrspt.dll
2007-09-17 00:07 274,432 —-a-w C:\WINDOWS\system32\nvrsnl.dll
2007-09-17 00:07 274,432 —-a-w C:\WINDOWS\system32\nvrsesm.dll
2007-09-17 00:07 270,336 —-a-w C:\WINDOWS\system32\nvrsru.dll
2007-09-17 00:07 266,240 —-a-w C:\WINDOWS\system32\nvrsptb.dll
2007-09-17 00:07 266,240 —-a-w C:\WINDOWS\system32\nvrsja.dll
2007-09-17 00:07 258,048 —-a-w C:\WINDOWS\system32\nvrstr.dll
2007-09-17 00:07 258,048 —-a-w C:\WINDOWS\system32\nvrssl.dll
2007-09-17 00:07 258,048 —-a-w C:\WINDOWS\system32\nvrssk.dll
2007-09-17 00:07 258,048 —-a-w C:\WINDOWS\system32\nvrsko.dll
2007-09-17 00:07 258,048 —-a-w C:\WINDOWS\system32\nvrshu.dll
.

(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vazias & legítimas por defeito não são mostradas.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVP"="C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [2007-06-28 11:51]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 14:21 C:\WINDOWS\system32\HdAShCut.exe]
"SoundMAXPnP"="C:\Programas\Analog Devices\Core\smax4pnp.exe" [2005-05-20 01:11]
"SoundMAX"="C:\Programas\Analog Devices\SoundMAX\Smax4.exe" [2005-09-07 14:35]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-17 00:07]
"nwiz"="nwiz.exe" [2007-09-17 00:07 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-17 00:07]
"CTSysVol"="C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-02-15 15:10]
"P17Helper"="P17.dll" [2005-05-03 11:38 C:\WINDOWS\system32\P17.dll]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 00:00]
"TkBellExe"="C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe" [2007-10-20 10:37]
"type32"="C:\Programas\Microsoft IntelliType Pro\type32.exe" [2004-03-19 04:30]
"NeroFilterCheck"="C:\Programas\Ficheiros comuns\Nero\Lib\NeroCheck.exe" [2007-03-01 14:57]
"SecurDisc"="C:\Programas\Nero\Nero8\InCD\NBHGui.exe" [2007-09-20 09:36]
"InCD"="C:\Programas\Nero\Nero8\InCD\InCD.exe" [2007-09-20 09:35]
"NBKeyScan"="C:\Programas\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-09-20 08:51]
"HPHUPD08"="C:\Programas\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-01 16:35]
"HP Software Update"="C:\Programas\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 22:12]
"Adobe Reader Speed Launcher"="C:\Programas\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
"QuickTime Task"="C:\Programas\QuickTime\QTTask.exe" [2007-10-19 20:16]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-09-21 11:00]
"NVIDIA nTune"="C:\Programas\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-07-03 11:32]
"MsnMsgr"="C:\Programas\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:54]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programas\Ficheiros comuns\Nero\Lib\NMBgMonitor.exe" [2007-09-20 14:35]
"MSMSGS"="C:\Programas\Messenger\msmsgs.exe" [2004-10-13 16:24]

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Arranque\
HP Digital Imaging Monitor.lnk - C:\Programas\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26]
Inicializa‡Æo r pida do HP Image Zone.lnk - C:\Programas\HP\Digital Imaging\bin\hpqthb08.exe [2005-05-11 23:49:24]
Microsoft Office.lnk - C:\Programas\Microsoft Office\Office\OSA9.EXE [1999-02-17 19:05:56]
Privoxy.lnk - C:\Programas\Vidalia Bundle\Privoxy\privoxy.exe [2006-11-20 14:30:54]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll

R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3;C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe
R3 AEAudioService;AEAudio Service;C:\WINDOWS\system32\drivers\AEAudio.sys
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys
R3 P17;Sound Blaster Audigy;C:\WINDOWS\system32\drivers\P17.sys

*Newly Created Service* - CATCHME
.
Conteúdo da pasta 'Tarefas Agendadas'
"2007-11-10 12:49:07 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-11 13:09:12
Windows 5.1.2600 Service Pack 2 NTFS

Procurando processos ocultos …

Procurando entradas auto inicializáveis ocultas …

Procurando ficheiros ocultos …

Varredura completada com sucesso
Ficheiros ocultos: 0

**************************************************************************
.
Tempo para conclusão: 2007-11-11 13:10:26
.
— E O F —



Logfile of HijackThis v1.99.1
Scan saved at 13:12:53, on 11-11-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Programas\Nero\Nero8\InCD\InCDsrv.exe
C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Programas\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Programas\Analog Devices\Core\smax4pnp.exe
C:\Programas\Analog Devices\SoundMAX\Smax4.exe
C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe
C:\Programas\Microsoft IntelliType Pro\type32.exe
C:\Programas\Nero\Nero8\InCD\NBHGui.exe
C:\Programas\Nero\Nero8\InCD\InCD.exe
C:\Programas\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMBgMonitor.exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexingService.exe
C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexStoreSvr.exe
C:\Programas\HP\Digital Imaging\bin\hpqimzone.exe
C:\Programas\Steam\Steam.exe
C:\Programas\MSN Messenger\usnsvc.exe
C:\Programas\MSN Messenger\msnmsgr.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Programas\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Programas\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/pt/ý
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8118
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
O2 - BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programas\Ficheiros comuns\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [AVP] "C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programas\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programas\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CTSysVol] C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [type32] "C:\Programas\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programas\Ficheiros comuns\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Programas\Nero\Nero8\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Programas\Nero\Nero8\InCD\InCD.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Programas\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [HPHUPD08] C:\Programas\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programas\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programas\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programas\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Programas\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programas\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programas\Ficheiros comuns\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Programas\Messenger\msmsgs.exe" /background
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programas\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Inicialização rápida do HP Image Zone.lnk = C:\Programas\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programas\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Privoxy.lnk = C:\Programas\Vidalia Bundle\Privoxy\privoxy.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O17 - HKLM\System\CS1\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O17 - HKLM\System\CS2\Services\Tcpip\..\{8039A27B-5F7D-42EC-AB17-64616433E01F}: NameServer = 194.79.69.222,195.23.129.126
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Unknown owner - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programas\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Programas\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe