Virus de Pendrive acusado pelo Avast

Olá, hoje fui colocar um PEN DRIVE em meu computador e acabei tendo uma dor de cabeça das grandes. Tinha umas músicas nele, que foram transformadas em atalhos (provavelmente por conta do worm). Worm esse que se propaga pelas mídias removíveis. Só que por mais que eu utilize alguns softwares, como; Dr. Web CureIT, Malware Bytes, entre outros. Eu não consigo resolver o problema, meu antivirus AVAST fica acusando isso;

Objeto: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]



Infecção: URL:Mal



C:\Windows\System32\wscript.exe

O Avast, já não é lá grande coisa, tanto é que vou colocar o norton. Tinha o Norton, e não tinha problemas, ai expirou a licença, não renovei, e cai nessa asneira do avast. Bem, alguém pode me ajudar a resolver esse problema, porque estou sentido que vou ter que formatar.


OBS: Eu vacinei as entradas USB com o Panda Vacine. Formatei o Pen Drive, acho que do pen drive saiu, mas do pc não.

1: Faça o download do ((RunScanner)) No link Abaixo e salve no desktop.
Link do Download-->  [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

2: executa-o, e clique em Ok.

3: Em seguida clique no botão ((Scan Computer)) aguarde o termino aparecerá os arquivos listados.

4: Ao termino do scam, clique em ((save. log file)), salve com qualquer nome que você quiser, quando salvar abrirá um log automatico copia ele todo e cole aqui.

Fiz o que pediu.

Ai vai o o ficheiro do log...Desculpe cara, é que eu tentei salvar em txt, mas ele não vai. Vou fazer do modo tradicional.
Runscanner logfile [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* = signed file
- = file not found

General info
------------
Computer name : JARVIS
Creation time : 27/11/2013 00:28:52
Hosts <> 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 9.10.9200.16736
OS : Windows 7 Home Basic
OS Build : 7601
OS SP : Service Pack 1
RunScanner Version : 2.0.0.60
User Language : Português (Brasil)
User rights : Administrator
Windows folder : C:\Windows

Running processes
-----------------
* C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
* C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe (Adobe Systems, Inc.)
* C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe (Adobe Systems, Inc.)
* C:\Windows\System32\wininit.exe (Microsoft Corporation)
* C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
* C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
* C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe (Baidu Inc.)
* C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFasterSvc.exe (Baidu Inc.)
* C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Advanced Micro Devices Inc.)
* C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.)
* C:\Program Files\eMachines\eMachines Power Management\ePowerEvent.exe (Acer Incorporated)
* C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe (Acer Incorporated)
* C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe (Acer Incorporated)
* C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
* C:\Program Files\Elantech\ETDCtrlHelper.exe (ELAN Microelectronics Corp.)
* C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
* C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe (Acer Incorporated)
* C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Hewlett-Packard)
* C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard Co.)
* C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.)
* C:\PROGRA~2\HP\DIGITA~1\bin\hpqtra08.exe (Hewlett-Packard Co.)
* C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard)
* C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
* C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
* C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
* C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
* C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Dritek System Inc.)
* C:\Program Files (x86)\Launch Manager\LMworker.exe (Dritek System Inc.)
* C:\Windows\System32\wscript.exe (Microsoft Corporation)
* C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
* C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
* C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.)
* C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
* C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Symantec Corporation)
* C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
* C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
* C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
* C:\Users\Walter\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe (Gemalto N.V.)
* C:\Program Files (x86)\Scpad\scpVista.exe (Banco Bradesco S.A.)
* C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
* C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccsvchst.exe (Symantec Corporation)
* C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccsvchst.exe (Symantec Corporation)
* C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe (Acer Incorporated)
* C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe (Panda Security)
* C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
* C:\Windows\explorer.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)

Unrated items
-------------
002 * C:\Program Files\AVAST Software\Avast\setup\emupdate\4b6580f4-0242-4aa1-8945-8b82daf7fe58.exe (AVAST Software)
002 * C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
002 * C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
002 * C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe (Baidu Inc.)
002 * C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
002 * C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
003 * C:\Users\Walter\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe (Gemalto N.V.)
004   C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft.vbe
007   C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft.vbe
010 * C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Acrobat Update Service)
010 * C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe® Flash® Player Update Service 11.9 r900)
010 * C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Service)
010 * C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFasterSvc.exe (Baidu PC Faster Service)
010 * C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek WMI Service)
010 * C:\Program Files\iPod\bin\iPodService.exe (iPodService Module (64-bit))
010 * C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (maintenanceservice.exe)
010 * C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (MobileDeviceService)
010 * C:\Program Files (x86)\Scpad\scpVista.exe (scpVista)
010 * C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Updater Service)
010   C:\Windows\system32\srvany.exe (srvany.exe)
010 * C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe (Symantec Service Framework)
031 * C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}
041 * C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
041 * C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll (Symantec Corporation) {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
042   GUID / CLSID not found {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}
042   GUID / CLSID not found {0000036B-C524-4050-81A0-243669A86B9F}
042   GUID / CLSID not found {219C3416-8CB2-491a-A3C7-D9FCDDC9D600}
042   GUID / CLSID not found {2670000A-7350-4f3c-8081-5663EE0C6C49}
042   GUID / CLSID not found {DDE87865-83C5-48c4-8357-2F5B1AA84522}
042 * C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars) {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF}
045 * C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll (Symantec Corporation) {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
052   GUID / CLSID not found {02478D38-C3F9-4efb-9B51-7695ECA05670}
052   GUID / CLSID not found {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
052   GUID / CLSID not found {DBC80044-A445-435b-BC74-9C25C1C588A9}
052 * C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
052 * C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll (Symantec Corporation) {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}
052 * C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\IPS\IPSBHO.DLL (Symantec Corporation) {6D53EC84-6AAE-4787-AEEE-F4628F01010C}
052 * C:\Program Files (x86)\Scpad\scpsssh2.dll (Banco Bradesco S.A.) {2E3C3651-B19C-4DD9-A979-901EC3E930AF}
060   GUID / CLSID not found {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
061 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
061   C:\Program Files (x86)\K-Lite Codec Pack\Icaros\IcarosThumbnailProvider.dll (Tabibito Technology) {c5aec3ec-e812-4677-a9a7-4fee1f9aa000}
061   C:\Program Files (x86)\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
062 * C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (Adobe Systems, Inc.) {F9DB5320-233E-11D1-9F84-707F02C10627}
073   Adobe Flash Player Updater.job : C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
100   Default_Page_URL HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100   ProxyOverride HKCU : local;*.local
100   SearchAssistant HKLM : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100   Start Page HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100   Start Page HKLM : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
105   &Enviar para o OneNote : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
105   E&xportar para o Microsoft Excel : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
170   {350838bd-2f4d-11e1-a4c9-9439e5f54a25} : E:\autorun.exe
170   {350838fa-2f4d-11e1-a4c9-9439e5f54a25} : E:\autorun.exe
170   {6153e59d-4c45-11e1-b7ad-00235a769a47} : E:\LaunchU3.exe -a
170   E : E:\autorun.exe
173   GUID / CLSID not found {9486A9B2-D787-4eca-A25C-4A0086BB4154}
173   GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
173   GUID / CLSID not found {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}
173 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
173   C:\Program Files (x86)\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
221   GUID / CLSID not found {9486A9B2-D787-4eca-A25C-4A0086BB4154}
221   GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
221   GUID / CLSID not found {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}
221 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
221   C:\Program Files (x86)\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
223   GUID / CLSID not found {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
223 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
225   GUID / CLSID not found {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
225   GUID / CLSID not found {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
225   GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
225   GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
225   GUID / CLSID not found {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}
225   GUID / CLSID not found {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}
225 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
225 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
225   C:\Program Files (x86)\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225   C:\Program Files (x86)\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
227   GUID / CLSID not found {9486A9B2-D787-4eca-A25C-4A0086BB4154}
227   GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
227   C:\Program Files (x86)\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
229   GUID / CLSID not found {5E2121EE-0300-11D4-8D3B-444553540000}
231 * C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (Adobe Systems, Inc.) PDF Column Info
251   GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
251   C:\Program Files (x86)\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
001 C:\Windows\System32\atieclxx.exe
001 C:\Windows\System32\atiesrxx.exe
001 C:\Windows\System32\winlogon.exe
001 C:\Windows\System32\services.exe
001 C:\Windows\System32\spoolsv.exe
001 audiodg.exe
001 C:\Windows\System32\CxAudMsg64.exe
001 C:\Windows\System32\dwm.exe
001 C:\Windows\System32\smss.exe
001 C:\Windows\System32\lsass.exe
001 C:\Windows\System32\taskhost.exe
001 C:\Windows\System32\csrss.exe
001 C:\Windows\System32\csrss.exe
001 C:\Windows\System32\lsm.exe
001 C:\Windows\System32\wbem\unsecapp.exe

Missing files
-------------
010 C:\Windows\system32\atiesrxx.exe
010 C:\Windows\system32\spoolsv.exe
010 C:\Windows\system32\trkwks.dll
010 C:\Windows\system32\ipnathlp.dll
010 C:\Windows\system32\CxAudMsg64.exe
010 C:\Windows\system32\ui0detect.exe
010 C:\Windows\system32\pnrpauto.dll
010 C:\Windows\system32\seclogon.dll
010 C:\Windows\system32\srvsvc.dll
010 C:\Windows\system32\browser.dll
010 C:\Windows\system32\pnrpsvc.dll
010 C:\Windows\system32\pnrpsvc.dll
010 C:\Windows\system32\lmhsvc.dll
010 C:\Windows\system32\IPBusEnum.dll
010 C:\Windows\System32\wlansvc.dll
010 C:\Windows\system32\wkssvc.dll
010 C:\Windows\System32\themeservice.dll
010 C:\Windows\system32\ssdpsrv.dll
010 C:\Windows\system32\samsrv.dll
010 C:\Windows\system32\wpdbusenum.dll
010 C:\Windows\system32\wbengine.exe
010 C:\Windows\system32\ikeext.dll
010 C:\Windows\system32\rasmans.dll
010 C:\Windows\system32\netman.dll
010 C:\Windows\System32\termsrv.dll
010 C:\Windows\system32\rasauto.dll
010 C:\Windows\system32\dwm.exe
010 C:\Windows\system32\sysmain.dll
010 C:\Windows\system32\snmptrap.exe
010 C:\Windows\system32\Locator.exe
010 C:\Windows\system32\RpcEpMap.dll
010 C:\Windows\system32\bfe.dll
010 C:\Windows\system32\defragsvc.dll
010 C:\Program Files (x86)\Windows Defender\MsMpRes.dll
010 C:\Windows\system32\sstpsvc.dll
010 C:\Windows\system32\profsvc.dll
010 C:\Windows\System32\swprv.dll
010 C:\Windows\System32\nlasvc.dll
010 C:\Windows\system32\lltdres.dll
010 regsvc.dll
010 C:\Windows\System32\wercplsupport.dll
010 C:\Windows\system32\mmcss.dll
010 C:\Windows\system32\mmcss.dll
010 C:\Windows\system32\schedsvc.dll
010 C:\Windows\system32\pcasvc.dll
010 C:\Windows\system32\bdesvc.dll
010 C:\Windows\System32\wscsvc.dll
010 C:\Windows\system32\wecsvc.dll
010 C:\Windows\system32\sppsvc.exe
010 C:\Windows\System32\audiosrv.dll
010 C:\Windows\System32\audiosrv.dll
010 C:\Windows\system32\sdrsvc.dll
010 C:\Windows\system32\wbiosrvc.dll
010 C:\Windows\system32\FntCache.dll
010 C:\Windows\system32\dot3svc.dll
010 C:\Windows\System32\wwansvc.dll
010 C:\Windows\system32\vssvc.exe
010 C:\Windows\system32\dps.dll
010 C:\Windows\system32\vds.exe
010 C:\Windows\system32\umpo.dll
010 C:\Windows\system32\TabSvc.dll
010 C:\Windows\system32\aelupsvc.dll
010 C:\Windows\system32\kmsvc.dll
010 C:\Windows\system32\vaultsvc.dll
010 C:\Windows\system32\fdPHost.dll
010 C:\Windows\system32\appidsvc.dll
010 C:\Windows\system32\appinfo.dll
010 C:\Windows\system32\wevtsvc.dll
010 C:\Windows\System32\sensrsvc.dll
010 C:\Windows\system32\sppuinotify.dll
010 C:\Windows\System32\certprop.dll
010 C:\Windows\System32\certprop.dll
010 C:\Windows\system32\fdrespub.dll
010 C:\Windows\System32\wersvc.dll
010 C:\Windows\System32\bthserv.dll
010 C:\Windows\system32\w32time.dll
010 C:\Windows\system32\qmgr.dll
010 C:\Windows\system32\wiaservc.dll
010 C:\Windows\system32\efssvc.dll
010 C:\Windows\system32\Alg.exe
010 C:\Windows\system32\AxInstSV.dll
010 C:\Windows\system32\eapsvc.dll
010 C:\Windows\system32\umpnpmgr.dll
010 C:\Windows\system32\iphlpsvc.dll
010 C:\Windows\system32\tbssvc.dll
010 C:\Windows\system32\p2psvc.dll
010 C:\Windows\System32\SCardSvr.dll
010 C:\Windows\system32\nsisvc.dll
010 C:\Windows\system32\qagentrt.dll
010 C:\Windows\system32\wudfsvc.dll
010 C:\Windows\System32\ListSvc.dll
010 C:\Windows\system32\wuaueng.dll
010 C:\Windows\system32\wbem\wmisvc.dll
010 C:\Windows\system32\wbem\wmiapsrv.exe
010 C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
011 c:\windows\system32\drivers\1394ohci.sys
011 c:\windows\system32\drivers\ohci1394.sys
011 c:\windows\system32\drivers\CHDRT64.sys
011 c:\windows\system32\drivers\ACPI.sys
011 c:\windows\system32\drivers\acpipmi.sys
011 c:\windows\system32\drivers\adp94xx.sys
011 c:\windows\system32\drivers\adpahci.sys
011 c:\windows\system32\drivers\adpu320.sys
011 C:\Windows\System32\drivers\pacer.sys
011 c:\windows\system32\drivers\aliide.sys
011 c:\windows\system32\DRIVERS\usbfilter.sys
011 c:\windows\system32\drivers\amdide.sys
011 c:\windows\system32\DRIVERS\atikmdag.sys
011 c:\windows\system32\DRIVERS\atikmpag.sys
011 c:\windows\system32\drivers\amdsata.sys
011 c:\windows\system32\drivers\amdsbs.sys
011 c:\windows\system32\drivers\amdxata.sys
011 C:\Windows\system32\drivers\afd.sys
011 c:\windows\system32\drivers\arc.sys
011 c:\windows\system32\drivers\arcsas.sys
011 C:\Windows\system32\drivers\aswRvrt.sys
011 C:\Windows\system32\drivers\aswVmm.sys
011 c:\windows\system32\drivers\atapi.sys
011 c:\windows\system32\DRIVERS\athrx.sys
011 c:\windows\system32\DRIVERS\L1C62x64.sys
011 C:\Windows\system32\drivers\aswFsBlk.sys
011 C:\Windows\system32\drivers\aswMonFlt.sys
011 C:\Windows\system32\drivers\aswSP.sys
011 C:\Windows\system32\drivers\aswTdi.sys
011 C:\Windows\system32\drivers\aswSnx.sys
011 c:\windows\System32\Drivers\aswrdr2.sys
011 C:\Windows\System32\drivers\BprotectEx.sys
011 C:\Windows\System32\drivers\Bfilter.sys
011 C:\Windows\System32\drivers\Bprotect.sys
011 C:\Windows\System32\drivers\Bfmon.sys
011 C:\Windows\system32\drivers\Beep.sys
011 C:\Windows\system32\drivers\fvevol.sys
011 c:\windows\system32\drivers\blbdrive.sys
011 c:\windows\system32\drivers\bthmodem.sys
011 c:\windows\system32\DRIVERS\b57nd60a.sys
011 c:\windows\system32\drivers\evbda.sys
011 c:\windows\system32\drivers\bxvbda.sys
011 c:\windows\System32\Drivers\BrSerWdm.sys
011 c:\windows\System32\Drivers\Brserid.sys
011 c:\windows\System32\Drivers\BrUsbMdm.sys
011 c:\windows\System32\Drivers\BrUsbSer.sys
011 c:\windows\system32\DRIVERS\GEARAspiWDM.sys
011 c:\windows\system32\DRIVERS\cdfs.sys
011 c:\windows\system32\drivers\cmdide.sys
011 System32\Drivers\cng.sys
011 c:\windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys
011 C:\Windows\system32\clfs.sys
011 c:\windows\system32\drivers\compbatt.sys
011 c:\windows\system32\drivers\circlass.sys
011 c:\windows\system32\drivers\CmBatt.sys
011 c:\windows\system32\DRIVERS\usbhub.sys
011 C:\Windows\system32\drivers\dfsc.sys
011 c:\windows\System32\drivers\dxgkrnl.sys
011 c:\windows\system32\drivers\crcdisk.sys
011 C:\Windows\system32\srvsvc.dll
011 C:\Windows\system32\srvsvc.dll
011 C:\Windows\system32\browser.dll
011 C:\Windows\system32\wkssvc.dll
011 C:\Windows\system32\wkssvc.dll
011 C:\Windows\system32\wkssvc.dll
011 C:\Windows\system32\wkssvc.dll
011 c:\windows\system32\DRIVERS\nwifi.sys
011 C:\Windows\system32\drivers\RDPWD.sys
011 c:\windows\system32\DRIVERS\vwifibus.sys
011 c:\windows\system32\drivers\kbdclass.sys
011 c:\windows\system32\drivers\mouclass.sys
011 c:\windows\system32\drivers\volsnap.sys
011 c:\windows\system32\drivers\modem.sys
011 c:\windows\system32\DRIVERS\ndisuio.sys
011 C:\Windows\system32\drivers\volmgrx.sys
011 C:\Windows\System32\drivers\scfilter.sys
011 c:\windows\system32\DRIVERS\dot4usb.sys
011 c:\windows\system32\DRIVERS\tunnel.sys
011 c:\windows\system32\drivers\hidbth.sys
011 c:\windows\system32\drivers\sermouse.sys
011 c:\windows\system32\drivers\i8042prt.sys
011 c:\windows\system32\drivers\parport.sys
011 C:\Windows\system32\drivers\qwavedrv.sys
011 C:\Windows\system32\drivers\luafv.sys
011 C:\Windows\system32\drivers\Ntfs.sys
011 c:\windows\system32\drivers\MTConfig.sys
011 C:\Windows\system32\drivers\ndis.sys
011 c:\windows\system32\DRIVERS\tcpip.sys
011 c:\windows\system32\DRIVERS\usbehci.sys
011 c:\windows\system32\drivers\elxstor.sys
011 c:\windows\system32\drivers\pci.sys
011 c:\windows\system32\drivers\vdrvroot.sys
011 c:\windows\system32\drivers\errdev.sys
011 c:\windows\system32\DRIVERS\ETD.sys
011 c:\windows\system32\DRIVERS\fssfltr.sys
011 C:\Windows\system32\drivers\fastfat.sys
011 C:\Windows\system32\drivers\fsdepends.sys
011 C:\Windows\system32\drivers\filetrace.sys
011 C:\Windows\system32\drivers\fileinfo.sys
011 c:\windows\system32\drivers\agp440.sys
011 c:\windows\system32\drivers\gagp30kx.sys
011 c:\windows\system32\drivers\uliagpkx.sys
011 c:\windows\system32\drivers\uagp35.sys
011 c:\windows\system32\drivers\nv_agp.sys
011 c:\windows\system32\drivers\fdc.sys
011 c:\windows\system32\drivers\flpydisk.sys
011 c:\windows\system32\drivers\umpass.sys
011 C:\Windows\system32\drivers\fltmgr.sys
011 C:\Windows\system32\drivers\mountmgr.sys
011 C:\Windows\system32\drivers\hwpolicy.sys
011 c:\windows\system32\drivers\hcw85cir.sys
011 c:\windows\system32\drivers\HidBatt.sys
011 c:\windows\system32\drivers\kbdhid.sys
011 c:\windows\system32\drivers\mouhid.sys
011 c:\windows\system32\drivers\HDAudBus.sys
011 c:\windows\system32\drivers\HdAudio.sys
011 c:\windows\system32\drivers\HpSAMD.sys
011 c:\windows\system32\drivers\iaStorV.sys
011 c:\windows\system32\DRIVERS\Dot4Prt.sys
011 c:\windows\system32\DRIVERS\Dot4.sys
011 c:\windows\system32\drivers\iirsp.sys
011 C:\Windows\system32\drivers\irenum.sys
011 c:\windows\system32\drivers\hidir.sys
011 c:\windows\system32\drivers\intelide.sys
011 c:\windows\system32\drivers\IPMIDrv.sys
011 System32\drivers\ipnat.sys
011 c:\windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS
011 c:\windows\system32\drivers\isapnp.sys
011 c:\windows\system32\drivers\ksthunk.sys
011 System32\Drivers\ksecdd.sys
011 System32\Drivers\ksecpkg.sys
011 c:\windows\system32\DRIVERS\lltdio.sys
011 c:\windows\system32\DRIVERS\rspndr.sys
011 C:\Windows\system32\drivers\spldr.sys
011 c:\windows\system32\drivers\lsi_fc.sys
011 c:\windows\system32\drivers\lsi_sas.sys
011 c:\windows\system32\drivers\lsi_sas2.sys
011 c:\windows\system32\drivers\lsi_scsi.sys
011 C:\Windows\system32\drivers\secdrv.sys
011 C:\Windows\system32\drivers\netbt.sys
011 c:\windows\system32\drivers\megasas.sys
011 c:\windows\system32\drivers\MegaSR.sys
011 C:\Windows\system32\drivers\exfat.sys
011 c:\windows\system32\drivers\msiscsi.sys
011 c:\windows\system32\drivers\rdpbus.sys
011 c:\windows\system32\drivers\drmkaud.sys
011 c:\windows\system32\DRIVERS\monitor.sys
011 c:\windows\system32\drivers\mpio.sys
011 c:\windows\system32\drivers\MSKSSRV.sys
011 c:\windows\system32\drivers\MSPCLOCK.sys
011 c:\windows\system32\drivers\MSPQM.sys
011 c:\windows\system32\drivers\msahci.sys
011 c:\windows\system32\drivers\msdsm.sys
011 C:\Windows\system32\drivers\Msfs.sys
011 c:\windows\system32\drivers\msisadrv.sys
011 C:\Windows\system32\drivers\MsRPC.sys
011 C:\Windows\system32\drivers\mup.sys
011 c:\windows\system32\drivers\CompositeBus.sys
011 c:\windows\system32\drivers\tdpipe.sys
011 c:\windows\system32\DRIVERS\ndiscap.sys
011 C:\Windows\system32\drivers\NDProxy.sys
011 c:\windows\system32\DRIVERS\netbios.sys
011 c:\windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS
011 c:\windows\system32\drivers\nfrd960.sys
011 C:\Windows\system32\drivers\Npfs.sys
011 C:\Windows\system32\drivers\nsiproxy.sys
011 C:\Windows\system32\drivers\UBHelper.sys
011 C:\Windows\system32\drivers\NTIDrvr.sys
011 C:\Windows\system32\drivers\Null.sys
011 c:\windows\system32\drivers\nvraid.sys
011 c:\windows\system32\drivers\nvstor.sys
011 C:\Windows\system32\sstpsvc.dll
011 c:\windows\system32\DRIVERS\usbohci.sys
011 C:\Windows\system32\drivers\papycpu.sys
011 C:\Windows\system32\drivers\partmgr.sys
011 C:\Windows\system32\drivers\mshidkmdf.sys
011 c:\windows\system32\drivers\pciide.sys
011 c:\windows\system32\drivers\pcmcia.sys
011 System32\Drivers\pcouffin.sys
011 System32\drivers\pcw.sys
011 C:\Windows\system32\drivers\http.sys
011 c:\windows\system32\drivers\swenum.sys
011 c:\windows\system32\drivers\disk.sys
011 c:\windows\system32\drivers\amdk8.sys
011 c:\windows\system32\DRIVERS\amdppm.sys
011 c:\windows\system32\drivers\intelppm.sys
011 c:\windows\system32\drivers\processr.sys
011 c:\windows\system32\drivers\peauth.sys
011 c:\windows\system32\drivers\ql2300.sys
011 c:\windows\system32\drivers\ql40xx.sys
011 c:\windows\system32\DRIVERS\AgileVpn.sys
011 System32\DRIVERS\rasacd.sys
011 C:\Windows\system32\drivers\RDPENCDD.sys
011 C:\Windows\system32\DRIVERS\RDPCDD.sys
011 C:\Windows\system32\drivers\RdpRefMp.sys
011 System32\drivers\rdpvideominiport.sys
011 System32\drivers\rdyboost.sys
011 c:\windows\system32\drivers\TsUsbGD.sys
011 c:\windows\system32\drivers\termdd.sys
011 C:\Windows\system32\drivers\tsusbflt.sys
011 System32\Drivers\RtsUStor.sys
011 c:\windows\system32\drivers\sbp2port.sys
011 c:\windows\system32\DRIVERS\cdrom.sys
011 c:\windows\system32\drivers\sfloppy.sys
011 c:\windows\system32\drivers\serial.sys
011 c:\windows\system32\drivers\serenum.sys
011 C:\Windows\system32\appidsvc.dll
011 c:\windows\system32\drivers\SiSRaid2.sys
011 c:\windows\system32\drivers\sisraid4.sys
011 c:\windows\system32\drivers\sffdisk.sys
011 c:\windows\system32\drivers\sffp_mmc.sys
011 c:\windows\system32\drivers\sffp_sd.sys
011 System32\DRIVERS\srvnet.sys
011 c:\windows\system32\drivers\stexstor.sys
011 c:\windows\System32\Drivers\NISx64\1309010.00E\SRTSP64.SYS
011 c:\windows\system32\drivers\NISx64\1309010.00E\SRTSPX64.SYS
011 c:\windows\system32\drivers\NISx64\1309010.00E\SYMDS64.SYS
011 c:\windows\system32\drivers\NISx64\1309010.00E\SYMEFA64.SYS
011 C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
011 C:\Windows\system32\drivers\discache.sys
011 c:\windows\system32\drivers\mssmbios.sys
011 c:\windows\system32\drivers\tdtcp.sys
011 System32\drivers\tcpipreg.sys
011 c:\windows\system32\drivers\Wdf01000.sys
011 C:\Windows\System32\DRIVERS\tssecsrv.sys
011 c:\windows\system32\DRIVERS\udfs.sys
011 c:\windows\system32\drivers\usbuhci.sys
011 c:\windows\system32\DRIVERS\usbccgp.sys
011 c:\windows\system32\drivers\usbcir.sys
011 c:\windows\system32\DRIVERS\USBSTOR.SYS
011 c:\windows\system32\drivers\hidusb.sys
011 c:\windows\system32\DRIVERS\ZTEusbser6k.sys
011 c:\windows\system32\DRIVERS\3GDatausbser64.sys
011 c:\windows\system32\DRIVERS\ZTEusbmdm6k.sys
011 c:\windows\system32\DRIVERS\ZTEusbnmea.sys
011 c:\windows\system32\DRIVERS\usbprint.sys
011 c:\windows\system32\DRIVERS\usbscan.sys
011 c:\windows\System32\Drivers\usbvideo.sys
011 c:\windows\system32\DRIVERS\umbus.sys
011 c:\windows\system32\DRIVERS\vgapnp.sys
011 c:\windows\System32\drivers\vga.sys
011 c:\windows\system32\drivers\vhdmp.sys
011 c:\windows\system32\drivers\viaide.sys
011 c:\windows\system32\DRIVERS\vwififlt.sys
011 c:\windows\system32\DRIVERS\vwifimp.sys
011 c:\windows\system32\drivers\volmgr.sys
011 c:\windows\system32\drivers\vsmraid.sys
011 c:\windows\system32\drivers\wacompen.sys
011 c:\windows\system32\drivers\wd.sys
011 c:\windows\system32\drivers\MSTEE.sys
011 c:\windows\system32\DRIVERS\wfplwf.sys
011 c:\windows\system32\drivers\WudfPf.sys
011 c:\windows\system32\drivers\wmiacpi.sys
011 c:\windows\system32\drivers\BrFiltLo.sys
011 c:\windows\system32\drivers\BrFiltUp.sys
011 c:\windows\system32\DRIVERS\WinUsb.sys
011 C:\Windows\System32\drivers\ws2ifsl.sys
011 c:\windows\system32\DRIVERS\WUDFRd.sys
011 C:\Windows\SysWOW64\Drivers\X6va011
013 C:\Windows\System32\mctadmin.exe
013 C:\Windows\System32\mctadmin.exe
032 rdpclip
069 hpf3l083.dll
069 localspl.dll
069 FXSMON.DLL
069 hpf3lw73.dll
069 tcpmon.dll
069 usbmon.dll
069 WSDMon.dll
145 kbdclass.sys
210 C:\Windows\system32\sdclt.exe

Cevert escreveu:Fiz o que pediu.

Ai vai o o ficheiro do log.

Aonde ele está ??.., eu não estou vendo..

Aguardo o relatório..

...

Ok, vamos lá!!

Copie os comandos abaixo  em Azul:

Attrib -s -h "C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft.vbe"
move "C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft.vbe" Microsoft.vbe.vi
move "C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft.vbe" Microsoft.vbe.vi
shutdown -r -t 00


*Abra o Bloco de Notas e cole o conteúdo, e salve no desktop com o nome -> Fix.bat

*Execute o arquivo Fix.bat em seu desktop.., o PC sera reiniciado!

Reiniciou o sistema tudo certinho!

OK, veja se encontra um arquivo chamado -> Microsoft.vbe.vi em seu desktop caso encontre-o delete..

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

1)
Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de Farbar) e salve-o no Desktop

2)
Duplo clique em FRST.exe..., Caso seja Windows 7, Clique com o botão direito do mouse no FRST e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

3)
Aceite o contrato, desmarque a opção Addition.txt, clique [Scan] e ao término clique [OK]

*Cole ou anexe o relatório FRST.txt criado no Desktop

OK! Todos os procedimentos realizados. Tentarei anexa, caso não consiga eu colo.

Baixe o arquivo em anexo Fixlist.txt e salve no desktop aonde se localiza o programa FRST.exe

Execute o programa FRST.exe Clique em Fix, copie e cole o relatório, aqui em seu tópico!

Cara, quando executar o FRST, é para desmarcar aquela opção do addition.txt? Eu desmarquei! Além disso, surgiu um arquivo estranho, de origem oriental, pelo fato de está com ideogramas.

Olá Cevert

Darei um empurrão no caso. O Brando lee está off.

Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de El desaparecido) e salve-o no Desktop (Área de Trabalho)

*Conecte o pen drive no PC

*Clique com o botão direito do mouse no UsbFix e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Execute-o, clique [Pesquisa] e cole ou anexe o relatório apresentado (C:\UsbFix[Scan 1].txt)

Ai, eu cheguei a limpar o Pen Drive, com o usb panda vaccine. E baixei esse que você mandou. Mas parece que as mensagens de alerta que o avast acionava pararam. Parece que o Brando Lee resolveu o problema. Se voltar eu abrirei um noto tópico. Você acha que o worm se escondeu?

Execute o UsbFix, clique [Uninstall] > [OK] e delete a pasta C:\UsbFix

Um abraço...

CASO RESOLVIDO

Caso o(a) autor(a) do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.