It is currently Tue Oct 20, 2026 1:57 pm


Spyware removal, i can't remove it at all

Is your PC infected? Is it running slow? Just can't figure out what's making it sluggish? Here is the place to get some help.

Moderators: liljim, Gecko

Spyware removal, i can't remove it at all

Postby otakun3000 » Mon Nov 13, 2006 12:44 pm

Hello, is this the first time i post here. I'm not american so, please forget my spelling errors, i'm a brasilian and i have a problem with a spyware. It appears as an faek spyware warning. When i startup the PC, a red ball with an yellow exclamation mark on it, pop up in the system tray, the mark says "your computer may be infected with harmful or unwanted software"; "Click here to learn more". I read some topics and see that this spyware can be removed fixing somethings with hijackthis. So, please take a look at my log. But my log have another problem (for you guys). Because my Windows is portuguese, all my folders are portuguese too....I seach but i don't find anything in Brazilian topics about this spyware, so because of that, i'm trying to solve the problem here. Please helpe me. Thank you. Ah and one more thing, i don't know why, but i can't enter in safe mode with my system, i keep pressing F8 but it oppens a boot up selection, for me to select what hardware will make the boot...
my log.

Logfile of HijackThis v1.99.1
Scan saved at 09:42:24, on 13/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\ARQUIV~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\ARQUIV~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\ARQUIV~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\ARQUIV~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\AGRSMMSG.exe
C:\ARQUIV~1\ASSIST~1\SMARTB~1\MotiveSB.exe
C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe
C:\Arquivos de programas\Java\jre1.5.0_08\bin\jusched.exe
C:\Arquivos de programas\QuickTime\qttask.exe
C:\Arquivos de programas\D-Tools\daemon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe
C:\Arquivos de programas\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Arquivos de programas\Assistente Tecnico Speedy\bin\mpbtn.exe
C:\Arquivos de programas\Mozilla Firefox\firefox.exe
C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Documents and Settings\WinXP\Meus documentos\hijackthis\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\ARQUIV~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {697770F0-C167-DC7B-015E-09301F05387D} - C:\WINDOWS\system32\bpcrahl.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de programas\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\ARQUIV~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Motive SmartBridge] "C:\ARQUIV~1\ASSIST~1\SMARTB~1\MotiveSB.exe" /restart
O4 - HKLM\..\Run: [TkBellExe] "C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Arquivos de programas\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [QuickTime Task] "C:\Arquivos de programas\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Arquivos de programas\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\system32\drvfap.dll,startup
O4 - HKLM\..\Run: [nxkoexd.dll] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nxkoexd.dll,unwygrb
O4 - HKCU\..\Run: [MsnMsgr] "C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Arquivos de programas\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Arquivos de programas\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Adobe Gamma.lnk = C:\Arquivos de programas\Arquivos comuns\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Assistente Tecnico Speedy.lnk = C:\Arquivos de programas\Assistente Tecnico Speedy\bin\matcli.exe
O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O17 - HKLM\System\CCS\Services\Tcpip\..\{2F90B8B0-80FB-4948-AECF-C28A4A592D24}: NameServer = 200.204.0.10 200.204.0.10
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - (no CLSID) - (no file)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Arquivos de programas\Arquivos comuns\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\ARQUIV~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\ARQUIV~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\ARQUIV~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
User avatar
otakun3000
Newbie
Newbie
 
Posts: 3
Joined: Mon Nov 13, 2006 1:00 am

Thanks given:0
Thanks received:0
Top

Postby Gecko » Mon Nov 13, 2006 7:04 pm

Hello otakun3000 and welcome to our forums

Please copy this to Notepad and print it or save it to your desktop. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.

First download AVG Anti-Spyware 7.5 from and save that file to your desktop.
This is a 30 day trial of the program
1. Once you have downloaded AVG Anti-Spyware 7.5, locate the icon on the desktop and double-click it to launch the set up program.
2. Once the setup is complete you will need run AVG Anti-Spyware and update the definition files.
3. On the main screen select the icon "Update" then select the "Update now" link.
Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
4. Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
5. Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
6. Under "Reports"
* Select "Automatically generate report after every scan"
* Un-Select "Only if threats were found"
Close AVG Anti-Spyware, Do Not run a scan just yet, we will shortly.

Next please download
Extract KillBox to your desktop, but do not run it yet.

Now reboot in to Safe mode:
Restart Windows after you see the BIOS screen and before Windows starts to load.
Start tapping the F8 key. The Windows Advanced Options Menu appears.
Use the Arrow key to ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.

You should not have any open windows when you are following the procedures below.

Close all other open Windows and have HiJackThis Fix:
O2 - BHO: (no name) - {697770F0-C167-DC7B-015E-09301F05387D} - C:\WINDOWS\system32\bpcrahl.dll (file missing)
O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\system32\drvfap.dll,startup
O4 - HKLM\..\Run: [nxkoexd.dll] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nxkoexd.dll,unwygrb
O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN
O18 - Filter: text/html - (no CLSID) - (no file)
Close Hijackthis.

Run KillBox and paste the below into the text box:
C:\WINDOWS\system32\bpcrahl.dll

Now put a check next to 'Delete on reboot' click on the red X, click yes to delete file on reboot
Click no to reboot now.
Now do the same for each of the following files/folders:
C:\WINDOWS\system32\drvfap.dll
C:\WINDOWS\system32\nxkoexd.dll
Close KillBox

Lauch AVG Anti-Spyware by double-clicking the icon on your desktop.
1. Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
2. AVG Anti-Spyware will now begin the scanning process, be patient this may take a little time.
Once the scan is complete do the following:
3. If you have any infections you will prompted, then select "Apply all actions"
4. Next select the "Reports" icon at the top.
5. Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
6. Close AVG Anti-Spyware and reboot your system back into Normal Mode and post the results of the AVG Anti-Spyware report scan and a freash Hijackthis log in your reply.
User avatar
Gecko
Super Moderator
Super Moderator
 
Posts: 5209
Joined: Thu Oct 25, 2001 1:00 am
Location: Florida, USA

Thanks given:1
Thanks received:23
Top

Postby otakun3000 » Tue Nov 14, 2006 11:16 am

Hello, thank you very much. No signal of the spyware for now.
Because my Anti-SPayware AVG is in portuguese, here some translations:
Limpo: Clean
Limpo com backup: Clean with Backup
Em quarentena: Quarentine

Well here it is my AVG Log.

C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP15\A0001852.exe -> Adware.Altnet : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP15\A0001860.dll -> Adware.Altnet : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP15\A0001861.dll -> Adware.Altnet : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP15\A0001862.exe -> Adware.Altnet : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP15\A0001864.dll -> Adware.Altnet : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP15\A0001865.dll -> Adware.Altnet : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP15\A0001866.dll -> Adware.Altnet : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP51\A0019815.DLL -> Adware.IESearch : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP13\A0000782.cpl -> Adware.P2PNet : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP68\A0027349.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP68\A0027526.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP68\A0027541.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP68\A0027554.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027680.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027692.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027699.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027712.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027718.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027727.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027732.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027733.exe -> Downloader.Zlob.avj : Limpo com backup (em quarentena).
C:\Arquivos de Instalação\Winrar 3.61+crack\winrar.3.xx.generic.patch.exe -> Not-A-Virus.Hacktool.Crack : Limpo com backup (em quarentena).
:mozilla.296:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.2o7 : Limpo.
:mozilla.518:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.2o7 : Limpo.
C:\Documents and Settings\WinXP\Cookies\winxp@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Limpo.
:mozilla.191:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adbrite : Limpo.
:mozilla.192:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adbrite : Limpo.
:mozilla.57:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adbrite : Limpo.
:mozilla.58:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adbrite : Limpo.
:mozilla.59:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adbrite : Limpo.
:mozilla.60:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adbrite : Limpo.
:mozilla.355:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adrevolver : Limpo.
:mozilla.356:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adrevolver : Limpo.
:mozilla.690:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adrevolver : Limpo.
:mozilla.691:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adrevolver : Limpo.
:mozilla.692:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adrevolver : Limpo.
:mozilla.693:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adrevolver : Limpo.
:mozilla.361:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adtech : Limpo.
:mozilla.362:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Adtech : Limpo.
:mozilla.366:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Advertising : Limpo.
:mozilla.367:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Advertising : Limpo.
:mozilla.368:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Advertising : Limpo.
:mozilla.13:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Atdmt : Limpo.
C:\Documents and Settings\WinXP\Cookies\winxp@atdmt[2].txt -> TrackingCookie.Atdmt : Limpo.
:mozilla.174:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Burstnet : Limpo.
:mozilla.178:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Burstnet : Limpo.
:mozilla.179:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Burstnet : Limpo.
:mozilla.145:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Casalemedia : Limpo.
:mozilla.146:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Casalemedia : Limpo.
:mozilla.147:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Casalemedia : Limpo.
:mozilla.148:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Casalemedia : Limpo.
:mozilla.149:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Casalemedia : Limpo.
:mozilla.648:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Clickhype : Limpo.
:mozilla.416:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Clickzs : Limpo.
:mozilla.417:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Clickzs : Limpo.
:mozilla.235:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Com : Limpo.
:mozilla.199:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Cqcounter : Limpo.
:mozilla.661:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Cqcounter : Limpo.
:mozilla.717:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Cqcounter : Limpo.
:mozilla.116:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Doubleclick : Limpo.
C:\Documents and Settings\WinXP\Cookies\winxp@doubleclick[1].txt -> TrackingCookie.Doubleclick : Limpo.
:mozilla.62:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Falkag : Limpo.
:mozilla.63:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Falkag : Limpo.
:mozilla.64:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Falkag : Limpo.
:mozilla.65:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Falkag : Limpo.
:mozilla.34:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Fastclick : Limpo.
:mozilla.35:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Fastclick : Limpo.
:mozilla.36:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Fastclick : Limpo.
:mozilla.37:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Fastclick : Limpo.
:mozilla.38:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Fastclick : Limpo.
:mozilla.39:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Fastclick : Limpo.
:mozilla.764:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Googleadservices : Limpo.
:mozilla.328:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Hitbox : Limpo.
:mozilla.329:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Hitbox : Limpo.
:mozilla.330:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Hitbox : Limpo.
:mozilla.442:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Hitbox : Limpo.
:mozilla.443:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Hitbox : Limpo.
:mozilla.444:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Hitbox : Limpo.
:mozilla.470:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Hotlog : Limpo.
:mozilla.508:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Linkbuddies : Limpo.
:mozilla.683:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Masterstats : Limpo.
:mozilla.233:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Mediaplex : Limpo.
:mozilla.280:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Onestat : Limpo.
:mozilla.281:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Onestat : Limpo.
:mozilla.282:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Onestat : Limpo.
:mozilla.539:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Overture : Limpo.
:mozilla.542:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Paycounter : Limpo.
:mozilla.357:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Pointroll : Limpo.
:mozilla.358:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Pointroll : Limpo.
:mozilla.359:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Pointroll : Limpo.
:mozilla.360:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Pointroll : Limpo.
C:\Documents and Settings\WinXP\Cookies\winxp@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Limpo.
:mozilla.322:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Questionmarket : Limpo.
:mozilla.323:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Questionmarket : Limpo.
:mozilla.558:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Revenue : Limpo.
:mozilla.438:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Ru4 : Limpo.
:mozilla.439:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Ru4 : Limpo.
:mozilla.440:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Ru4 : Limpo.
:mozilla.441:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Ru4 : Limpo.
:mozilla.569:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Serving-sys : Limpo.
:mozilla.570:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Serving-sys : Limpo.
:mozilla.571:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Serving-sys : Limpo.
:mozilla.572:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Serving-sys : Limpo.
:mozilla.573:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Serving-sys : Limpo.
:mozilla.410:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Sexcounter : Limpo.
:mozilla.411:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Sexcounter : Limpo.
:mozilla.412:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Sexcounter : Limpo.
:mozilla.413:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Sexcounter : Limpo.
:mozilla.52:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Sexlist : Limpo.
:mozilla.53:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Sexlist : Limpo.
:mozilla.54:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Sexlist : Limpo.
:mozilla.56:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Sexlist : Limpo.
:mozilla.100:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.101:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.102:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.103:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.104:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.105:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.106:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.107:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.108:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.109:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.110:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.111:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.112:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.113:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.114:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.87:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.88:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.91:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.92:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.93:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.94:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.95:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.96:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.97:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.98:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.99:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Statcounter : Limpo.
:mozilla.175:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Tacoda : Limpo.
:mozilla.176:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Tacoda : Limpo.
:mozilla.177:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Tacoda : Limpo.
:mozilla.131:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Tribalfusion : Limpo.
:mozilla.635:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Yadro : Limpo.
:mozilla.257:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Yieldmanager : Limpo.
:mozilla.258:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Yieldmanager : Limpo.
:mozilla.259:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Yieldmanager : Limpo.
:mozilla.638:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Zedo : Limpo.
:mozilla.639:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Zedo : Limpo.
:mozilla.640:C:\Documents and Settings\WinXP\Dados de aplicativos\Mozilla\Firefox\Profiles\c9p6s71w.default\cookies.txt -> TrackingCookie.Zedo : Limpo.
C:\Documents and Settings\WinXP\Configurações locais\Temp\mst10.tmp -> Trojan.Agent.vg : Limpo com backup (em quarentena).
C:\Documents and Settings\WinXP\Configurações locais\Temp\mst3.tmp -> Trojan.Agent.vg : Limpo com backup (em quarentena).
C:\System Volume Information\_restore{7E1E0A7E-D1EA-426E-9966-A096641913D2}\RP69\A0027746.dll -> Trojan.Agent.vg : Limpo com backup (em quarentena).
C:\VundoFix Backups\winmqx32.dll.bad -> Trojan.Agent.vg : Limpo com backup (em quarentena).


And here is my HikackThis Log

Logfile of HijackThis v1.99.1
Scan saved at 08:15:30, on 14/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\ARQUIV~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\AGRSMMSG.exe
C:\ARQUIV~1\ASSIST~1\SMARTB~1\MotiveSB.exe
C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe
C:\Arquivos de programas\Java\jre1.5.0_08\bin\jusched.exe
C:\Arquivos de programas\QuickTime\qttask.exe
C:\Arquivos de programas\D-Tools\daemon.exe
C:\Arquivos de programas\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe
C:\Arquivos de programas\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Arquivos de programas\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\ARQUIV~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\ARQUIV~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\ARQUIV~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Arquivos de programas\Assistente Tecnico Speedy\bin\mpbtn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Arquivos de programas\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\WinXP\Meus documentos\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\ARQUIV~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de programas\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\ARQUIV~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Motive SmartBridge] "C:\ARQUIV~1\ASSIST~1\SMARTB~1\MotiveSB.exe" /restart
O4 - HKLM\..\Run: [TkBellExe] "C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Arquivos de programas\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [QuickTime Task] "C:\Arquivos de programas\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Arquivos de programas\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Arquivos de programas\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Arquivos de programas\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Arquivos de programas\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Arquivos de programas\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Adobe Gamma.lnk = C:\Arquivos de programas\Arquivos comuns\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Arquivos de programas\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Assistente Tecnico Speedy.lnk = C:\Arquivos de programas\Assistente Tecnico Speedy\bin\matcli.exe
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O17 - HKLM\System\CCS\Services\Tcpip\..\{2F90B8B0-80FB-4948-AECF-C28A4A592D24}: NameServer = 200.204.0.10 200.204.0.10
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARQUIV~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Arquivos de programas\Arquivos comuns\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Arquivos de programas\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\ARQUIV~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\ARQUIV~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\ARQUIV~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
User avatar
otakun3000
Newbie
Newbie
 
Posts: 3
Joined: Mon Nov 13, 2006 1:00 am

Thanks given:0
Thanks received:0
Top

Postby Gecko » Tue Nov 14, 2006 12:25 pm

Your log is clean :)

You should clear your restore points to make sure there is nothing left of the spyware.
Turn off system restore by right clicking on My Computer and go to Properties > System Restore
and check the box for Turn off System Restore. Click Apply and then OK.
Reboot the system and then turn it back on.
User avatar
Gecko
Super Moderator
Super Moderator
 
Posts: 5209
Joined: Thu Oct 25, 2001 1:00 am
Location: Florida, USA

Thanks given:1
Thanks received:23
Top

Postby otakun3000 » Tue Nov 14, 2006 2:12 pm

Well, that's all. It's all clean!

Well, like we say in portuguese "Muito Obrigado"

Translating: Thank you very much!
User avatar
otakun3000
Newbie
Newbie
 
Posts: 3
Joined: Mon Nov 13, 2006 1:00 am

Thanks given:0
Thanks received:0
Top


Return to Malware Support

Who is online

Users browsing this forum: No registered users and 1 guest

cron