google não abre!!!

Question

Bom dia amios!
A p&aacute;gina do google n&atilde;o est&aacute; abrindo, o que pode estar acontecendo, eu consigo abrir todas as outras p&aacute;ginas, ser&aacute; que o problema est&aacute; no XP?

Answer

Pode ser problema na data e hora do PC.

Answer

[quote=fisica eletrica, post: 5868085]Bom dia amios!
A p&aacute;gina do google n&atilde;o est&aacute; abrindo, o que pode estar acontecendo, eu consigo abrir todas as outras p&aacute;ginas, ser&aacute; que o problema est&aacute; no XP?[/QUOTE]

-Tenta com outro Navegador - Opera...Safari...:legal:

-Tudo OK Google aqui :piscadela:

Answer

n&atilde;o abre como? alguma mensagem? limpou cache do navegador?

Answer

a mensagem que aparece &eacute;

Servidor n&atilde;o encontrado        
        
          O Firefox n&atilde;o conseguiu localizar www.google.com.br.       
            
  Verifique se h&aacute; erro de digita&ccedil;&atilde;o no endere&ccedil;o. Como
    ww.example.com em vez de
    www.example.com
  Se voc&ecirc; n&atilde;o consegue abrir nenhuma p&aacute;gina, verifique a conex&atilde;o de rede do seu computador.
  Se o seu computador ou rede forem protegidos por um firewall ou proxy, certifique-se de que o Firefox esteja autorizado a acessar a web.

Answer

[quote=fisica eletrica, post: 5868983]a mensagem que aparece &eacute;

Servidor n&atilde;o encontrado        
        
          O Firefox n&atilde;o conseguiu localizar www.google.com.br.       
            
  Verifique se h&aacute; erro de digita&ccedil;&atilde;o no endere&ccedil;o. Como
    ww.example.com em vez de
    www.example.com
  Se voc&ecirc; n&atilde;o consegue abrir nenhuma p&aacute;gina, verifique a conex&atilde;o de rede do seu computador.
  Se o seu computador ou rede forem protegidos por um firewall ou proxy, certifique-se de que o Firefox esteja autorizado a acessar a web.[/quote]
Pode ser alguma coisa no arquivo HOSTS:

[CENTER]Limpeza do arquivo HOSTS:

[/CENTER]
 Fa&ccedil;a o download do HostsXpert:
http://www.funkytoad.com/download/HostsXpert.zip
Extraia o arquivo
Execute-o
Clique em Restore Ms Hosts e em Make Read-Only.

Answer

Quando executo aparece o seguinte:
your HOSTS file is marked as a system file and can NOT be manipulated press OK to remove the system file attribute, CANCEL to quit.

***HostsXpert will NOT reset these attributes.***

OK cancel

Quando presiono OK e depois Restore MS Hosts FIle

aparece outra janela e depois :
ERROR: Cannot create file C:WINDOWS/system32/drivers/ETC/hosts

Answer

[quote=fisica eletrica, post: 5869015]Quando executo aparece o seguinte:
your HOSTS file is marked as a system file and can NOT be manipulated press OK to remove the system file attribute, CANCEL to quit.

***HostsXpert will NOT reset these attributes.***

OK cancel

Quando presiono OK e depois Restore MS Hosts FIle

aparece outra janela e depois :
ERROR: Cannot create file C:WINDOWS/system32/drivers/ETC/hosts[/quote]
Iniciar->Executar->Digite:
attrib -a -s -h %windir%\system32\drivers\etc\hosts
E clique em OK. Ap&oacute;s, tente fazer de novo os procedimentos do HostsXpert.

Answer

Continua do mesmo modo!!!!!!

Answer

Baixe o [COLOR=#0000FF]ERUNT[/COLOR]
 Crie uma pasta em C:\ chamada ERUNT e extraia nela
 Execute o arquivo C:\ERUNT\ERUNT.exe
 Clique OK-> OK-> Sim->OK[COLOR=Red]Aten&ccedil;&atilde;o: Desative temporariamente seu antiv&iacute;rus[/COLOR]

Baixe o [COLOR=#0000FF]ComboFix[/COLOR] e [COLOR=DarkOrchid]salve-o na &aacute;rea de trabalho[/COLOR]
 Execute-o e aceite o contrato
 [COLOR=Blue]*****: Se o Console de Recupera&ccedil;&atilde;o do Microsoft Windows for solicitado, e o mesmo n&atilde;o estiver instalado, aceite a instala&ccedil;&atilde;o do mesmo[/COLOR]
 Ap&oacute;s o Console ser instaldo, clique [Sim] e aguarde a conclus&atilde;o das etapas                                                 [COLOR=#FF0000][COLOR=DarkRed]Aten&ccedil;&atilde;o:[/COLOR]
[/COLOR]
[COLOR=#FF0000]N&atilde;o use o mouse nem o teclado durante as etapas!![/COLOR]
[COLOR=#FF0000] Para interromper o scan, tecle N[/COLOR]                                
 Cole o relat&oacute;rio apresentado

Answer

O navegador que vc est&aacute; usando por acaso &eacute; o IE?

Answer

Ol&aacute; YTSCMD o google n&atilde;o abre eem nenhum navegador.

e Meyer! o log est&aacute; a&iacute;:

ComboFix 12-03-20.02 - Junior 20/03/2012  22:38:13.1.2 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.55.1046.18.3005.2430 [GMT -3:00]
Executando de: c:\documents and settings\Junior\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
 ADS - system32: deleted 2 bytes in 1 streams. 
 ADS - drivers: deleted 208 bytes in 1 streams. 
.
(((((((((((((((((((((((((((((((((((((   Outras Exclus&otilde;es   )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\arquivos de programas\office2007-kb972854-fullfile-x86-pt-br.exe
c:\arquivos de programas\officelp2007sp2-kb953195-fullfile-pt-br.exe
c:\arquivos de programas\setup-2.9.4389.exe
c:\documents and settings\Default User\vga120.tmp
c:\documents and settings\Default User\vga121.tmp
c:\documents and settings\Junior\vga120.tmp
c:\documents and settings\Junior\vga121.tmp
c:\documents and settings\Junior\WINDOWS
c:\documents and settings\Rose\vga120.tmp
c:\documents and settings\Rose\vga121.tmp
c:\windows\IsUn0416.exe
c:\windows\system32\config\systemprofile\vga120.tmp
c:\windows\system32\config\systemprofile\vga121.tmp
.
.
((((((((((((((((   Arquivos/Ficheiros criados de 2012-02-21 to 2012-03-21  ))))))))))))))))))))))))))))
.
.
2012-03-21 01:22 . 2012-03-21 01:22    --------    d-----w-    C:\ERUNT
2012-03-19 00:14 . 2012-03-19 00:14    --------    d-----r-    C:\MSOCache
2012-03-14 22:17 . 2012-03-14 22:18    --------    d-----w-    C:\Doutor Digi
.
.
.
(((((((((((((((((((((((((((((((((((((   Relat&oacute;rio Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-13 04:38 . 2012-03-14 19:06    97208    ----a-w-    c:\arquivos de programas\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((   Pontos de Carregamento do Registro   )))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vazias e leg&iacute;timas por padr&atilde;o n&atilde;o s&atilde;o apresentadas. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2012-03-19 02:34    1811296    ----a-w-    c:\arquivos de programas\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{95B7759C-8C7F-4BF1-B163-73684A933233}= c:\arquivos de programas\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll [2012-03-19 1811296]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Akamai NetSession Interface=c:\documents and settings\Junior\Configura&ccedil;&otilde;es locais\Dados de aplicativos\Akamai
etsession_win.exe [2012-02-02 3329824]
DriverMax=c:\arquivos de programas\Innovative Solutions\DriverMax\drivermax.exe [2012-03-12 8557464]
DriverMax_RESTART=c:\arquivos de programas\Innovative Solutions\DriverMax\drivermax.exe [2012-03-12 8557464]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
RTHDCPL=RTHDCPL.EXE [2008-04-10 16861184]
avgnt=c:\arquivos de programas\Avira\AntiVir Desktop\avgnt.exe [2010-12-13 281768]
DoroServer=c:\arquivos de programas\DoroPDFWriter\DoroServer.exe [2011-05-12 167936]
SynTPStart=c:\arquivos de programas\Synaptics\SynTP\SynTPStart.exe [2007-08-17 102400]
BisonHK=c:\windows\BisonCam\BisonHK.exe [2008-03-25 77824]
Adobe Reader Speed Launcher=c:\arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
WindowsTranslator=c:\arquiv~1\MICROP~1\DELTAT~1.0\DWinTrsl.exe [2003-06-26 407040]
HP Software Update=c:\arquivos de programas\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
GrooveMonitor=c:\arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
vProt=c:\arquivos de programas\AVG Secure Search\vprot.exe [2012-03-19 939872]
SunJavaUpdateSched=c:\arquivos de programas\Arquivos comuns\Java\Java Update\jusched.exe [2012-01-18 254696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
CTFMON.EXE=c:\windows\system32\CTFMON.EXE [2008-04-13 15360]
.
c:\documents and settings\All Users\Menu Iniciar\Programas\Inicializar\
HP Digital Imaging Monitor.lnk - c:\arquivos de programas\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\ GbPluginBb]
2012-03-09 11:25    1310280    ------w-    c:\arquivos de programas\GbPlugin\gbieh.dll
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
%windir%\Network Diagnostic\xpnetdiag.exe=
%windir%\system32\sessmgr.exe=
c:\Documents and Settings\Junior\Configura&ccedil;&otilde;es locais\Dados de aplicativos\Akamai\netsession_win.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpqtra08.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpqste08.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hposid01.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpqkygrp.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpfcCopy.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpoews01.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpiscnapp.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpqgplgtupl.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpqgpc01.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpqusgm.exe=
c:\Arquivos de programas\HP\Digital Imaging\bin\hpqusgh.exe=
c:\Arquivos de programas\HP\HP Software Update\HPWUCli.exe=
c:\Arquivos de programas\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe=
c:\Arquivos de programas\Microsoft Office\Office12\OUTLOOK.EXE=
c:\Arquivos de programas\Microsoft Office\Office12\GROOVE.EXE=
c:\Arquivos de programas\Microsoft Office\Office12\ONENOTE.EXE=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
1189:TCP= 1189:TCP:Akamai NetSession Interface
5000:UDP= 5000:UDP:Akamai NetSession Interface
.
R0 GbpKm;Gbp KernelMode;c:\windows\system32\drivers\gbpkm.sys [20/3/2012 08:46 46152]
R0 SISRAID4;SISRAID4;c:\windows\system32\drivers\sisraid4.sys [17/7/2008 10:33 68864]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\arquivos de programas\Avira\AntiVir Desktop\sched.exe [14/3/2012 16:03 136360]
R2 GbpSv;Gbp Service;c:\arquiv~1\GbPlugin\GbpSv.exe [20/3/2012 08:46 202824]
R2 vToolbarUpdater;vToolbarUpdater;c:\arquivos de programas\Arquivos comuns\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe [18/3/2012 23:34 909152]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [19/3/2012 18:15 13192]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [22/1/2008 23:07 77968]
R3 NdisrdMP;NdisrdMP;c:\windows\system32\drivers\GbpNdisrd.sys [20/3/2012 08:47 28880]
S2 ALIEHCD;ULi PCI to USB Enhanced Host Controller;c:\windows\system32\drivers\AliEhci.sys [19/3/2012 20:49 32768]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [19/3/2012 18:15 8456]
S3 Ndisrd;GAS Tecnologia Service;c:\windows\system32\drivers\GbpNdisrd.sys [20/3/2012 08:47 28880]
S3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8187B.sys [14/3/2012 12:30 342784]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12    REG_MULTI_SZ       Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt    REG_MULTI_SZ       hpqcxs08 hpqddsvc
.
Conte&uacute;do da pasta 'Tarefas Agendadas'
.
2012-03-21 c:\windows\Tasks\SmartDefrag.job
- c:\arquivos de programas\IObit\IObit SmartDefrag\IObit SmartDefrag.exe [2012-03-21 19:22]
.
.
------- Scan Suplementar -------
.
uStart Page = hxxp://isearch.avg.com/?cid={885D0A9B-717F-4CDF-A40B-893A8FA5B7EF}&mid=e8958420a02247d08919d15ce90ede4f-0&lang=pt-br&ds=is015&pr=sa&d=2012-03-18%2023:34&v=10.0.0.7&sap=hp
IE: E&xportar para o Microsoft Excel - c:\arquiv~1\MICROS~4\Office12\EXCEL.EXE/3000
Trusted Zone: com.br\www.bancobrasil
Trusted Zone: com.br\www.bb
Trusted Zone: com.br\www14.bancobrasil
Trusted Zone: com.br\www2.bancobrasil
TCP: DhcpNameServer = 8.8.8.8 8.8.4.4
TCP: Interfaces\{56EAD738-18AA-4850-98D4-B29379FB17E8}: NameServer = 192.168.1.254 8.8.8.8
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\arquivos de programas\Arquivos comuns\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll
FF - ProfilePath - c:\documents and settings\Junior\Dados de aplicativos\Mozilla\Firefox\Profiles\5m50lyvh.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.terra.com.br/
FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7B57a197b7-564d-46f4-8247-c8c98897a624%7D&mid=e8958420a02247d08919d15ce90ede4f-0&ds=is015&v=10.0.0.7&lang=pt-br&pr=sa&d=2012-03-18%2023%3A34%3A18&sap=ku&q=
FF - prefs.js: network.proxy.type - 0
.
.
------- Associa&ccedil;&atilde;o de arquivos/ficheiros -------
.
.txt=WinEdt.txt
.
- - - - ORF&Atilde;OS REMOVIDOS - - - -
.
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
AddRemove-MicroPower Delta Translator30 - c:\windows\IsUn0416.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-20 22:41
Windows 5.1.2600 Service Pack 3 NTFS
.
Procurando processos ocultos ... 
.
Procurando entradas auto inicializ&aacute;veis ocultas ... 
.
Procurando ficheiros/arquivos ocultos ... 
.
Varredura completada com sucesso
arquivos/ficheiros ocultos: 0
.
**************************************************************************
.
--------------------- CHAVES DO REGISTRO BLOQUEADAS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\1363E86FDE860794D8778BF18EA36A1A\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
108=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\1A03010DEC748E449A44CB7CF38B5031\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=Microsoft's Silverlight Installation [1]
100=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\1B13DEACFE1F3DC4EA2985AF9336ADD3\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
104=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\23C66990D43C4FF4C8E7499A36D0ED8F\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
100=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\2BD48EBD497144248995B927C08AB9D4\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
107=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\396BD52F2FA593742BA0BEE8500E7FD2\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
108=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\3E71AA4E850D3B84D8B39EF62C9C3567\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
106=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\3F4AD01F3E5D8F644B30FEDB44399622\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
107=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\52CE121365979F2449539816E7B8C192\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=Microsoft's Silverlight Installation [1]
101=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\6073E3C7DBF896147962A074BF9F3DA2\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
104=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\739B462DB79FF4C4AAA6C713CF90CAB4\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
105=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\7A0DC8558450022488EF10CC4177FD16\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
102=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\806CBD91B2DAC4F4EA2E1CD9CA524280\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
102=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\80F86D540A652144BBF04829EB79A87C\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
101=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\884F71F3679C5ED4681F66DC7B8DD9AA\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
103=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\A2886ABF9828FAD48A1DDA95F19DFDA3\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
109=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\A5B00D41EA4628D47815CEF184D62929\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
101=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\CCA0F521CF3DB204D869726F4ED6005D\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
100=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\DEC4EC3C0B64E7047A30A738AA0EA263\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
106=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\DF36C10937666A74B9F51BE3E3FB4A07\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
105=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Patches\E44F9CA57C603E144A467371A79B01D5\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
103=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\17400AB28230347339DBAF1833357A38\Patches]
@DACL=(02 0000)
A2886ABF9828FAD48A1DDA95F19DFDA3=:T1ToU1;:#T1ToU1
396BD52F2FA593742BA0BEE8500E7FD2=:T1ToU1;:#T1ToU1
3F4AD01F3E5D8F644B30FEDB44399622=:T1ToU1;:#T1ToU1
3E71AA4E850D3B84D8B39EF62C9C3567=:T1ToU1;:#T1ToU1
739B462DB79FF4C4AAA6C713CF90CAB4=:T1ToU1;:#T1ToU1
1B13DEACFE1F3DC4EA2985AF9336ADD3=:T1ToU1;:#T1ToU1
884F71F3679C5ED4681F66DC7B8DD9AA=:T1ToU1;:#T1ToU1
806CBD91B2DAC4F4EA2E1CD9CA524280=:T1ToU1;:#T1ToU1
A5B00D41EA4628D47815CEF184D62929=:T1ToU1;:#T1ToU1
23C66990D43C4FF4C8E7499A36D0ED8F=:T1ToU1;:#T1ToU1
Patches=multi:23C66990D43C4FF4C8E7499A36D0ED8F\00A5B00D41EA4628D47815CEF184D62929\00806CBD91B2DAC4F4EA2E1CD9CA524280\00884F71F3679C5ED4681F66DC7B8DD9AA\001B13DEACFE1F3DC4EA2985AF9336ADD3\00739B462DB79FF4C4AAA6C713CF90CAB4\003E71AA4E850D3B84D8B39EF62C9C3567\003F4AD01F3E5D8F644B30FEDB44399622\00396BD52F2FA593742BA0BEE8500E7FD2\00A2886ABF9828FAD48A1DDA95F19DFDA3\00\00
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\17400AB28230347339DBAF1833357A38\SourceList\Media]
@DACL=(02 0000)
MediaPackage=\Msi\
DiskPrompt=[1]
1=;
100=;
101=;
102=;
103=;
104=;
105=;
106=;
107=;
108=;
109=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\1AB6481D8116FDE3C875E6A140467683\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
1=;1
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\1F3B805BA42A0C233B0158879691FE82\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
1=;
100=;
101=;
102=;
103=;
104=;
105=;
106=;
107=;
108=;
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\513A0C4BBF709F9358DCC82EC0103905\SourceList\Media]
@DACL=(02 0000)
1=;1
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\5DEBCF703C4949F49B3D63F02AC7B760\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=Microsoft Vista Client Tools for VS Express
1=WinSDK;1
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\68AB67CA7DA76401B7449A0000000010\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
1=READER9;[1]
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\C7FAF248FE053644B9F826221E83D4D7\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=Microsoft Windows Headers and Libraries
1=WinSDK;1
2=WinSDK;1
3=WinSDK;1
4=WinSDK;1
5=WinSDK;1
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\CFD2C1F142D260E3CB8B271543DA9F98\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=[1]
1=;1
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\D7314F9862C648A4DB8BE2A5B47BE100\SourceList\Media]
@DACL=(02 0000)
DiskPrompt=Microsoft's Silverlight Installation [1]
1=;1
.
[HKEY_LOCAL_MACHINE\software\Classes\Installer\Products\DB990CF2B9CABE3308C93D231E2BC704\SourceList\Media]
@DACL=(02 0000)
1=;1
.
--------------------- DLLs Carregadas Sob os Processos em Execu&ccedil;&atilde;o ---------------------
.
- - - - - - - > 'winlogon.exe'(964)
c:\arquivos de programas\GbPlugin\gbieh.dll
.
Tempo para conclus&atilde;o: 2012-03-20  22:43:56
ComboFix-quarantined-files.txt  2012-03-21 01:43
.
Pr&eacute;-execu&ccedil;&atilde;o: 7 pasta(s) 13.228.298.240 bytes dispon&iacute;veis
P&oacute;s execu&ccedil;&atilde;o: 10 pasta(s) 13.427.003.392 bytes dispon&iacute;veis
.
WindowsXP-KB310994-SP2-Pro-BootDisk-PTG.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT=Microsoft Windows Recovery Console /cmdcons
UnsupportedDebug=do not select this /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS=Microsoft Windows XP Professional /noexecute=optin /fastdetect
.
- - End Of File - - F5586B0417A685C637F5884403D57E66

Answer

Abra o VirusTotal
Clique em Choose file
Em Nome voc&ecirc; coloca:

c:\windows\system32\drivers\epmntdrv.sys
E clique em Scan it!
Se aparecer uma mensagem, clique em Reanalyze, e poste o link aqui.
_____________________________________________________________

Abra o VirusTotal
Clique em Choose file
Em Nome voc&ecirc; coloca:

c:\windows\system32\drivers\EuGdiDrv.sys
E clique em Scan it!
Se aparecer uma mensagem, clique em Reanalyze, e poste o link aqui.
______________________________________________________________

Baixe o [COLOR=#800080]AdwCleaner[/COLOR] e salve-o na &aacute;rea de trabalho
 Clique em [COLOR=#FF0000][Search][/COLOR]
 Cole o relat&oacute;rio apresentado

Answer

https://www.virustotal.com/file/fb06406ad9ccd946155c4e8ca769e0430589a4e4bbbda2c90a67c84e0d2f8ee0/analysis/1332340878/

# AdwCleaner v1.502 - Logfile created 03/21/2012 at 11:47:14
# Updated 17/03/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Junior - RECIFE
# Running from : C:\Documents and Settings\Junior\Desktop\adwcleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

Folder Found : C:\Documents and Settings\Junior\Dados de aplicativos\OpenCandy
File Found : C:\Documents and Settings\Junior\Dados de aplicativos\Mozilla\Firefox\Profiles\5m50lyvh.default\searchplugins\Askcom.xml

***** [H. Navipromo] *****

***** [Registry] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}

***** [Internet Browsers] *****

-\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\ Mozilla Firefox v11.0 (pt-BR)

Profile : 5m50lyvh.default
File : C:\Documents and Settings\Junior\Dados de aplicativos\Mozilla\Firefox\Profiles\5m50lyvh.default\prefs.js

Found : user_pref(browser.search.defaultengine, Ask.com);
Found : user_pref(browser.search.order.1, Ask.com);

*************************

AdwCleaner[R1].txt - [1164 octets] - [21/03/2012 11:47:14]

########## EOF - C:\AdwCleaner[R1].txt - [1292 octets] ##########

Answer

Abra o AdwCleaner
Clique em Delete
Poste o log.

Ferramentas

Mover Tópico