X

Logfile created: 15/12/2009 12:31:12
Lavasoft Ad-Aware version: 8.1.2

User performing scan: Mateus Ribeirete
*********************** Definitions database information ***********************
Lavasoft definition file: 149.115
Genotype definition file version: 2009/12/14 07:53:47
******************************** Scan results: *********************************
Scan profile name: Full Scan (ID: full)
Objects scanned: 428339
Objects detected: 14
Type Detected
==========================
Processes.......: 0
Registry entries: 0
Hostfile entries: 0
Files...........: 1
Folders.........: 0
LSPs............: 0
Cookies.........: 13
Browser hijacks.: 0
MRU objects.....: 0
Removed items:
Description: *atdmt* Family Name: Cookies Engine: 1 Clean status: Success Item I
D: 408910 Family ID: 0
Description: *bs.serving-sys* Family Name: Cookies Engine: 1 Clean status: Succe
ss Item ID: 408902 Family ID: 0
Description: *serving-sys* Family Name: Cookies Engine: 1 Clean status: Success
Item ID: 409130 Family ID: 0
Description: *unicast* Family Name: Cookies Engine: 1 Clean status: Success Item
ID: 409281 Family ID: 0
Description: *doubleclick* Family Name: Cookies Engine: 1 Clean status: Success
Description: *bs.serving-sys* Family Name: Cookies Engine: 1 Clean status: Succe
ss Item ID: 408902 Family ID: 0
Description: *unicast* Family Name: Cookies Engine: 1 Clean status: Success Item
ID: 409281 Family ID: 0
Quarantined items:
Description: C:\Users\Mateus Ribeirete\AppData\Local\Temp\HPSUHB3B.A8O\selfupdat
e_5_2_0_13.exe Family Name: Win32.TrojanDownloader.Fraudload Engine: 1 Clean sta
tus: Success Item ID: 2089424 Family ID: 1912 MD5: ad29f0860a498280aaed8e931a122
5c0
Scan and cleaning complete: Finished correctly after 8707 seconds
*********************************** Settings ***********************************
Scan profile:
ID: full, enabled:1, value: Full Scan
ID: folderstoscan, enabled:1, value: C:\,D:\
ID: useantivirus, enabled:0, value: true
ID: sections, enabled:1
ID: scancriticalareas, enabled:1, value: true
ID: scanrunningapps, enabled:1, value: true
ID: scanregistry, enabled:1, value: true
ID: scanlsp, enabled:1, value: true
ID: scanads, enabled:1, value: true
ID: scanhostsfile, enabled:1, value: true
ID: scanmru, enabled:1, value: true
ID: scanbrowserhijacks, enabled:1, value: true
ID: scantrackingcookies, enabled:1, value: true
ID: closebrowsers, enabled:1, value: false
ID: filescanningoptions, enabled:1
ID: archives, enabled:1, value: true
ID: onlyexecutables, enabled:1, value: false
ID: skiplargerthan, enabled:1, value: 20480
ID: scanrootkits, enabled:1, value: true
ID: rootkitlevel, enabled:1, value: mild, domain: medium,mild,strict
ID: usespywareheuristics, enabled:1, value: true
ID: heuristicslevel, enabled:1, value: mild, domain: medium,mild,strict
Scan global:
ID: global, enabled:1
ID: addtocontextmenu, enabled:1, value: true
ID: playsoundoninfection, enabled:1, value: false
ID: soundfile, enabled:0, value: *to be filled in automatically*\alert.wav
Scheduled scan settings:
<Empty>
Update settings:
ID: updates, enabled:1
ID: launchthreatworksafterscan, enabled:1, value: off, domain: normal,off,sile
ntly
ID: softwareupdates, enabled:1, value: downloadandinstall, domain: dontcheck,d
ownloadandinstall
ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,do
wnloadandinstall
ID: schedules, enabled:1, value: true
ID: updatedaily1, enabled:0, value: Daily 1
ID: time, enabled:0, value: Sun Oct 18 03:37:00 2009
ID: frequency, enabled:0, value: daily, domain: daily,monthly,once,systems
tart,weekly
ID: weekdays, enabled:0
ID: monday, enabled:0, value: false
ID: tuesday, enabled:0, value: false
ID: wednesday, enabled:0, value: false
ID: thursday, enabled:0, value: false
ID: friday, enabled:0, value: false
ID: saturday, enabled:0, value: false
ID: sunday, enabled:0, value: false
ID: monthly, enabled:0, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:0, value:
ID: auto_deal_with_infections, enabled:0, value: false
tart,weekly
tart,weekly
tart,weekly
ID: updateweekly1, enabled:1, value: Weekly
ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,system
start,weekly
ID: wednesday, enabled:1, value: true
ID: sunday, enabled:1, value: true
ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,download
andinstall
Appearance settings:
ID: appearance, enabled:1
ID: skin, enabled:1, value: Carbon.eGL, reglocation: HKEY_LOCAL_MACHINE\SOFTWA
RE\Lavasoft\Ad-Aware\Resource
ID: showtrayicon, enabled:1, value: true
ID: language, enabled:1, value: en, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\L
avasoft\Ad-Aware\Language
ID: autoentertainmentmode, enabled:0, value: true
ID: guimode, enabled:1, value: mode_simple, domain: mode_advanced,mode_simple
Realtime protection settings:
ID: realtime, enabled:1
ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify,
onlyimportant
ID: modules, enabled:1
ID: processprotection, enabled:1, value: true
ID: registryprotection, enabled:0, value: true
ID: networkprotection, enabled:0, value: true
ID: layers, enabled:1
ID: useantivirus, enabled:0, value: true
ID: usespywareheuristics, enabled:0, value: true
ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict
****************************** System information ******************************

Computer name: RIBEIRETE
Processor name: AMD Athlon(tm) 64 X2 Dual Core Processor 3600+
Processor identifier: x86 Family 15 Model 107 Stepping 1
Processor speed: ~1908MHZ
Raw info: processorarchitecture 0, processortype 586, processorlevel 15, process
or revision 27393, number of processors 2, processor features: [MMX,SSE,SSE2,SSE
3,3DNow]
Physical memory available: 816484352 bytes
Physical memory total: 2010918912 bytes
Virtual memory available: 1821061120 bytes
Virtual memory total: 2147352576 bytes
Memory load: 59%
Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 2 (build 6002)
Windows startup mode:
Running processes:
PID: 504 name: C:\Windows\System32\smss.exe owner: SYSTEM domain: AUTORIDADE NT
PID: 580 name: C:\Windows\System32\csrss.exe owner: SYSTEM domain: AUTORIDADE NT
PID: 632 name: C:\Windows\System32\wininit.exe owner: SYSTEM domain: AUTORIDADE
NT
PID: 644 name: C:\Windows\System32\csrss.exe owner: SYSTEM domain: AUTORIDADE NT
PID: 676 name: C:\Windows\System32\services.exe owner: SYSTEM domain: AUTORIDADE
NT
PID: 688 name: C:\Windows\System32\lsass.exe owner: SYSTEM domain: AUTORIDADE NT
PID: 696 name: C:\Windows\System32\lsm.exe owner: SYSTEM domain: AUTORIDADE NT
PID: 812 name: C:\Windows\System32\winlogon.exe owner: SYSTEM domain: AUTORIDADE
NT
PID: 884 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORIDADE
NT
PID: 928 name: C:\Windows\System32\nvvsvc.exe owner: SYSTEM domain: AUTORIDADE N
T
PID: 956 name: C:\Windows\System32\svchost.exe owner: SERVIÇO DE REDE domain: AUTO
RIDADE NT
NT
PID: 1060 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: AUT
ORIDADE NT
NT
NT
NT
PID: 1236 name: C:\Windows\System32\SLsvc.exe owner: SERVIÇO DE REDE domain: AUTOR
IDADE NT
ORIDADE NT
PID: 1464 name: C:\Windows\System32\svchost.exe owner: SERVIÇO DE REDE domain: AUT
ORIDADE NT
PID: 1484 name: C:\Windows\System32\rundll32.exe owner: SYSTEM domain: AUTORIDAD
E NT
PID: 1824 name: C:\Windows\System32\spoolsv.exe owner: SYSTEM domain: AUTORIDADE
NT
ORIDADE NT
PID: 520 name: C:\Windows\System32\taskeng.exe owner: Mateus Ribeirete domain: R
ibeirete
PID: 728 name: C:\Windows\System32\dwm.exe owner: Mateus Ribeirete domain: Ribei
rete
PID: 1428 name: C:\Windows\explorer.exe owner: Mateus Ribeirete domain: Ribeiret
e
PID: 1724 name: C:\Windows\System32\ASTSRV.EXE owner: SYSTEM domain: AUTORIDADE
NT
PID: 752 name: C:\Program Files\Bonjour\mDNSResponder.exe owner: SYSTEM domain:
AUTORIDADE NT
PID: 1292 name: C:\Program Files\Common Files\LightScribe\LSSrvc.exe owner: SYST
EM domain: AUTORIDADE NT
PID: 2152 name: C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582
-4c61-B58F-2F227FCA9A08}\PIFSvc.exe owner: SYSTEM domain: AUTORIDADE NT
PID: 2192 name: C:\Windows\System32\svchost.exe owner: SERVIÇO DE REDE domain: AUT
ORIDADE NT
ORIDADE NT
NT
PID: 2336 name: C:\Windows\System32\SearchIndexer.exe owner: SYSTEM domain: AUTO
RIDADE NT
PID: 2652 name: C:\Windows\System32\WUDFHost.exe owner: LOCAL SERVICE domain: AU
TORIDADE NT
PID: 2696 name: C:\Windows\System32\wbem\WmiPrvSE.exe owner: SYSTEM domain: AUTO
RIDADE NT
PID: 2816 name: C:\Windows\System32\taskeng.exe owner: SYSTEM domain: AUTORIDADE
NT
PID: 3008 name: C:\Program Files\Windows Defender\MSASCui.exe owner: Mateus Ribe
irete domain: Ribeirete
PID: 3036 name: C:\hp\support\hpsysdrv.exe owner: Mateus Ribeirete domain: Ribei
rete
PID: 3048 name: C:\Windows\System32\mobsync.exe owner: Mateus Ribeirete domain:
Ribeirete
PID: 3124 name: C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
owner: Mateus Ribeirete domain: Ribeirete
PID: 3168 name: C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe owner: Mateus Ri
beirete domain: Ribeirete
PID: 3292 name: C:\Windows\RtHDVCpl.exe owner: Mateus Ribeirete domain: Ribeiret
e
PID: 3336 name: C:\Windows\System32\schtasks.exe owner: Mateus Ribeirete domain:
Ribeirete
PID: 3372 name: C:\Windows\System32\rundll32.exe owner: Mateus Ribeirete domain:
Ribeirete
PID: 3420 name: C:\Program Files\HP\HP Software Update\hpwuschd2.exe owner: Mate
us Ribeirete domain: Ribeirete
PID: 3440 name: C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582
-4c61-B58F-2F227FCA9A08}\PIFSvc.exe owner: Mateus Ribeirete domain: Ribeirete
PID: 3448 name: C:\Program Files\Java\jre6\bin\jusched.exe owner: Mateus Ribeire
te domain: Ribeirete
PID: 3456 name: C:\Program Files\Windows Sidebar\sidebar.exe owner: Mateus Ribei
rete domain: Ribeirete
PID: 3464 name: C:\Windows\ehome\ehtray.exe owner: Mateus Ribeirete domain: Ribe
irete
PID: 3796 name: C:\Program Files\Windows Sidebar\sidebar.exe owner: Mateus Ribei
PID: 2180 name: C:\Windows\ehome\ehmsas.exe owner: Mateus Ribeirete domain: Ribe
irete
PID: 1324 name: C:\Program Files\Last.fm\LastFM.exe owner: Mateus Ribeirete doma
in: Ribeirete
PID: 3152 name: C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.ex
e owner: SYSTEM domain: AUTORIDADE NT
PID: 1524 name: C:\hp\KBD\kbd.exe owner: Mateus Ribeirete domain: Ribeirete
PID: 1352 name: C:\Program Files\Mozilla Firefox\firefox.exe owner: Mateus Ribei
PID: 2660 name: C:\Program Files\Windows Live\Messenger\msnmsgr.exe owner: Mateu
s Ribeirete domain: Ribeirete
PID: 2776 name: C:\Program Files\Windows Live\Contacts\wlcomm.exe owner: Mateus
Ribeirete domain: Ribeirete
PID: 4080 name: C:\Windows\System32\notepad.exe owner: Mateus Ribeirete domain:
Ribeirete
PID: 544 name: C:\Program Files\Windows Media Player\wmplayer.exe owner: Mateus
Ribeirete domain: Ribeirete
PID: 3964 name: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM
domain: AUTORIDADE NT
PID: 3648 name: C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe owner: Mateus Ri
beirete domain: Ribeirete
PID: 268 name: C:\Windows\System32\wbem\unsecapp.exe owner: SYSTEM domain: AUTOR
IDADE NT
PID: 4056 name: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe owner: Mateus Rib
eirete domain: Ribeirete
Startup items:
Name: Launcher
imagepath: %WINDIR%\SMINST\launcher.exe
Name: Windows Defender
imagepath: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
Name: hpsysdrv
imagepath: c:\hp\support\hpsysdrv.exe
Name: KBD
imagepath: C:\HP\KBD\KbdStub.EXE
Name: OsdMaestro
imagepath: "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\O
SD.exe"
Name: SMSERIAL
imagepath: C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
Name: RtHDVCpl
imagepath: RtHDVCpl.exe
Name: HP Health Check Scheduler
imagepath: c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Sched
uler.exe
Name: SunJavaUpdateReg
imagepath: "C:\Windows\system32\jureg.exe"
Name:
Name: ISUSPM
imagepath: "C:\Program Files\Common Files\InstallShield\UpdateService\
ISUSPM.exe" -scheduler
Name: NvCplDaemon
imagepath: RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
Name: NvMediaCenter
imagepath: RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
Name: amd_dc_opt
imagepath: C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
Name: Adobe Reader Speed Launcher
imagepath: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
Name: AdobeCS4ServiceManager
imagepath: "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4S
erviceManager.exe" -launchedbylogin
Name: Ad-Watch
imagepath: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
Name: HP Software Update
imagepath: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
Name: Adobe ARM
imagepath: "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
Name: WebCheck
imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
Name: {8C7461EF-2B13-11d2-BE35-3078302C2030}
imagepath: Component Categories cache daemon
Name:
imagepath: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startu
p\desktop.ini
Bootexecute items:
Name:
imagepath: autocheck autochk *
Name:
imagepath: lsdelete
Running services:
Name: AeLookupSvc
displayname: Experiência com Aplicativo
Name: Appinfo
displayname: Informações sobre Aplicativos
Name: astcc
displayname: AST Service
Name: AudioEndpointBuilder
displayname: Construtor de Pontos de Extremidade de Áudio do Windows
Name: Audiosrv
displayname: Áudio do Windows
Name: BFE
displayname: Mecanismo de Filtragem Básica
Name: BITS
displayname: Serviço de transferência inteligente de plano de fundo
Name: Bonjour Service
displayname: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##
Name: Browser
displayname: Pesquisador de Computadores
Name: CryptSvc
displayname: Serviços de criptografia
Name: DcomLaunch
displayname: Inicializador de Processo de Servidor DCOM
Name: Dhcp
displayname: Cliente DHCP
Name: Dnscache
displayname: Cliente DNS
Name: DPS
displayname: Serviço de Diretiva de Diagnóstico
Name: EapHost
displayname: Protocolo de Autenticação Extensível
Name: EMDMgmt
displayname: ReadyBoost
Name: Eventlog
displayname: Log de Eventos do Windows
Name: EventSystem
displayname: COM+ evento do sistema
Name: FDResPub
displayname: Publicação de Recursos de Descoberta de Função
Name: gpsvc
displayname: Cliente da Diretiva de Grupo
Name: hidserv
displayname: Acesso a Dispositivo de Interface Humana
Name: HP Health Check Service
displayname: HP Health Check Service
Name: IKEEXT
displayname: Módulos de Criação de Chaves IKE e AuthIP do IPSec
Name: iphlpsvc
displayname: Auxiliar de IP
Name: KeyIso
displayname: Isolamento de Chave CNG
Name: KtmRm
displayname: KtmRm para Coordenador de Transações Distribuídas
Name: LanmanServer
displayname: Server
Name: LanmanWorkstation
displayname: Estação de trabalho
Name: Lavasoft Ad-Aware Service
displayname: Lavasoft Ad-Aware Service
Name: LightScribeService
displayname: LightScribeService Direct Disc Labeling Service
Name: LiveUpdate Notice Service
displayname: LiveUpdate Notice Service
Name: lmhosts
displayname: Auxiliar NetBIOS TCP/IP
Name: MMCSS
displayname: Agendador de Classes de Multimídia
Name: MpsSvc
displayname: Firewall do Windows
Name: Netman
displayname: Conexões de Rede
Name: netprofm
displayname: Serviço da Lista de Redes
Name: NlaSvc
displayname: Reconhecimento de Locais de Rede
Name: nsi
displayname: Serviço de Interface de Armazenamento de Rede
Name: nvsvc
displayname: NVIDIA Display Driver Service
Name: PcaSvc
displayname: Serviço Auxiliar de Compatibilidade de Programas
Name: PlugPlay
displayname: Plug and Play
Name: PolicyAgent
displayname: Agente de Diretiva IPsec
Name: ProfSvc
displayname: Serviço de Perfil de Usuário
Name: RasMan
displayname: Gerenciador de conexão de acesso remoto
Name: RpcSs
displayname: Chamada de procedimento remoto (RPC)
Name: SamSs
displayname: Gerente de Contas de Segurança
Name: Schedule
displayname: Agendador de tarefas
Name: seclogon
displayname: Logon secundário
Name: SENS
displayname: Serviço de Notificação de Eventos do Sistema
Name: ShellHWDetection
displayname: Detecção do hardware do shell
Name: slsvc
displayname: Licenciamento de Software
Name: Spooler
displayname: Spooler de Impressão
Name: SSDPSRV
displayname: Descoberta SSDP
Name: SstpSvc
displayname: Serviço SSTP
Name: stisvc
displayname: Assistente de aquisição de imagens do Windows (WIA)
Name: SysMain
displayname: Superfetch
Name: TabletInputService
displayname: Serviço de Entrada de Tablet PC
Name: TapiSrv
displayname: Telefonia
Name: TermService
displayname: Serviços de terminal
Name: Themes
displayname: Temas
Name: TrkWks
displayname: Cliente de rastreamento de link distribuído
Name: upnphost
displayname: Host de dispositivo UPnP
Name: UxSms
displayname: Gerenciador de Sessão do Gerenciador de Janelas da Área de Tr
abalho
Name: W32Time
displayname: Horário do Windows
Name: WdiSystemHost
displayname: Host do Sistema de Diagnósticos
Name: WebClient
displayname: Cliente da Web
Name: WerSvc
displayname: Serviço de Relatórios de Erro do Windows
Name: WinDefend
displayname: Windows Defender
Name: Winmgmt
displayname: Testador de instrumentação de gerenciam. do Windows
Name: Wlansvc
displayname: Configuração Automática de WLAN
Name: WPDBusEnum
displayname: Serviço Enumerador de Dispositivos Portáteis
Name: wscsvc
displayname: Central de Segurança
Name: WSearch
displayname: Windows Search
Name: wuauserv
displayname: Windows Update
Name: wudfsvc
displayname: Windows Driver Foundation - Estrutura do Driver de Modo d
e Usuário

X

Caricato da

Informazioni sul documento

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

X

Caricato da

Copyright:

Formati disponibili

Logfile created: 15/12/2009 12:31:12

Lavasoft Ad-Aware version: 8.1.2

System information

Potrebbero piacerti anche