.
DDS (Ver_2011-06-23.01) - NTFSx86 
Internet Explorer: 9.0.8112.16421
Run by [removed] at 12:58:24 on 2011-08-27
Microsoft� Windows Vista� Home Premium   6.0.6002.2.1252.55.1033.18.2046.964 [GMT -3:00]
.
AV: ESET Smart Security 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET Smart Security 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\PROGRA~1\GbPlugin\GbpSv.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
C:\Program Files\Hotspot Shield\bin\hsswd.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Hp\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\CardScan\CardScan\CardScanAgent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_br&c=81&bd=Pavilion&pf=laptop
uInternet Settings,ProxyOverride = *.local
BHO: HP Print Clips: {053f9267-dc04-4294-a72c-58f732d338c0} - c:\program files\hp\smart web printing\hpswp_framework.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.6209.1142\swg.dll
BHO: GbIehObj Class: {c41a1c0e-ea6c-11d4-b1b8-444553540007} - c:\windows\downloaded program files\conflict.3\gbiehabn.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [LightScribe Control Panel] c:\program files\common files\lightscribe\LightScribeControlPanel.exe -hidden
uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background
uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [NokiaOviSuite2] c:\program files\nokia\nokia ovi suite\NokiaOviSuite.exe -tray
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe"
mRun: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
mRun: [OnScreenDisplay] c:\program files\hewlett-packard\hp quicktouch\HPKBDAPP.exe
mRun: [UCam_Menu] "c:\program files\cyberlink\youcam\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\youcam" update "software\cyberlink\youcam\1.0"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [hpWirelessAssistant] c:\program files\hewlett-packard\hp wireless assistant\HPWAMain.exe
mRun: [WAWifiMessage] c:\program files\hewlett-packard\hp wireless assistant\WiFiMsg.exe
mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\9.0\sharedcom\RoxWatchTray9.exe"
mRun: [CardScanAgent] "c:\program files\cardscan\cardscan\CardScanAgent.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [NokiaMServer] c:\program files\common files\nokia\mplatform\NokiaMServer /watchfiles startup
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
StartupFolder: c:\users\sonia\appdata\roaming\micros~1\windows\startm~1\programs\startup\ferram~1.lnk - c:\program files\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {58ECB495-38F0-49cb-A538-10282ABF65E7} - {E763472E-A716-4CD9-89BD-DBDA6122F741} - c:\program files\hp\smart web printing\hpswp_extensions.dll
IE: {700259D7-1666-479a-93B1-3250410481E8} - {A93C41D8-01F8-4F8B-B14C-DE20B117E636} - c:\program files\hp\smart web printing\hpswp_extensions.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
Trusted Zone: rie.com.br\www
Trusted Zone: secureweb.com.br\www
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {4788DE0A-3552-49EA-AC8C-233DA52523B9} - hxxp://www.blackberry.com/devicesoftware/AxLoader.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldpt-br.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {E37CB5F0-51F5-4395-A808-5FA49E399007} - hxxps://wwws.realsecureweb.com.br/mpr/plugin/Cab/GbPluginABN.cab
TCP: DhcpNameServer = [removed] [removed]
TCP: Interfaces\{97A52A2C-17B6-4F4A-B147-974A6442CCE1} : DhcpNameServer = [removed] [removed]
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SEH: GbPluginObj Class: {e37cb5f0-51f5-4395-a808-5fa49e399007} - c:\windows\downloaded program files\conflict.3\gbiehabn.dll
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"
.
============= SERVICES / DRIVERS ===============
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2010-12-21 115008]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952]
R2 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2010-12-21 137144]
R2 ekrn;ESET Service;c:\program files\eset\eset smart security\ekrn.exe [2011-1-12 810144]
R2 epfwwfp;epfwwfp;c:\windows\system32\drivers\epfwwfp.sys [2010-12-21 41336]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 HssWd;Hotspot Shield Monitoring Service;c:\program files\hotspot shield\bin\hsswd.exe -product hss --> c:\program files\hotspot shield\bin\hsswd.exe -product HSS [?]
RUnknown GbpSv;GbpSv; [x]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-11-30 136176]
S3 gupdatem;Servi�o do Google Update (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-11-30 136176]
.
=============== Created Last 30 ================
.
2011-08-26 23:12:28	7152464	----a-w-	c:\programdata\microsoft\windows defender\definition updates\{3e1eba83-c4b9-4115-b8a3-f18320bc8896}\mpengine.dll
2011-08-26 07:32:22	--------	d-----w-	c:\users\sonia\appdata\roaming\ESET
2011-08-26 07:32:22	--------	d-----w-	c:\users\sonia\appdata\local\ESET
2011-08-26 03:03:50	98816	----a-w-	c:\windows\system32\mfps.dll
2011-08-26 03:02:03	369664	----a-w-	c:\windows\system32\WMPhoto.dll
2011-08-26 03:02:03	252928	----a-w-	c:\windows\system32\dxdiag.exe
2011-08-26 03:02:03	195584	----a-w-	c:\windows\system32\dxdiagn.dll
2011-08-26 03:02:02	974848	----a-w-	c:\windows\system32\WindowsCodecs.dll
2011-08-26 03:02:02	519680	----a-w-	c:\windows\system32\d3d11.dll
2011-08-26 03:02:02	321024	----a-w-	c:\windows\system32\PhotoMetadataHandler.dll
2011-08-26 03:02:02	189440	----a-w-	c:\windows\system32\WindowsCodecsExt.dll
2011-08-25 18:57:40	--------	d-----w-	c:\program files\ESET
2011-08-25 18:53:19	404640	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-25 18:41:48	--------	d-----w-	c:\windows\system32\Adobe
2011-08-24 10:11:50	2048	----a-w-	c:\windows\system32\tzres.dll
2011-08-20 12:39:53	--------	d-----w-	C:\$RECYCLE.BIN
2011-08-20 12:21:52	98816	----a-w-	c:\windows\sed.exe
2011-08-20 12:21:52	518144	----a-w-	c:\windows\SWREG.exe
2011-08-20 12:21:52	256000	----a-w-	c:\windows\PEV.exe
2011-08-20 12:21:52	208896	----a-w-	c:\windows\MBR.exe
2011-08-16 19:28:45	--------	d-----w-	C:\temp
2011-08-16 18:09:23	--------	d-----w-	c:\programdata\Trend Micro
2011-08-16 12:19:45	--------	d-----w-	c:\users\sonia\appdata\roaming\Nokia Ovi Suite
2011-08-16 12:19:18	--------	d-----w-	c:\programdata\Nokia
2011-08-16 12:17:44	--------	d-----w-	c:\users\sonia\appdata\local\NokiaAccount
2011-08-16 11:11:40	445008	----a-w-	c:\windows\system32\drivers\Wdf01000.sys
2011-08-16 11:11:40	38480	----a-w-	c:\windows\system32\drivers\WdfLdr.sys
2011-08-16 11:09:26	--------	d-----w-	c:\users\sonia\appdata\local\Nokia
2011-08-16 11:06:56	--------	d-----w-	c:\program files\common files\Nokia
2011-08-16 11:06:17	18816	----a-w-	c:\windows\system32\drivers\pccsmcfd.sys
2011-08-16 11:05:20	--------	d-----w-	c:\program files\PC Connectivity Solution
2011-08-16 11:00:57	75264	----a-w-	c:\windows\system32\nmwcdcls.dll
2011-08-16 10:59:35	--------	d-----w-	c:\programdata\NokiaInstallerCache
2011-08-16 10:59:35	--------	d-----w-	c:\program files\Nokia
2011-08-11 02:52:56	--------	d-----w-	c:\program files\iPod
2011-08-11 02:52:53	--------	d-----w-	c:\program files\iTunes
2011-08-11 02:38:16	159744	----a-w-	c:\program files\internet explorer\plugins\npqtplugin7.dll
2011-08-11 02:38:16	159744	----a-w-	c:\program files\internet explorer\plugins\npqtplugin6.dll
2011-08-11 02:38:16	159744	----a-w-	c:\program files\internet explorer\plugins\npqtplugin5.dll
2011-08-11 02:38:16	159744	----a-w-	c:\program files\internet explorer\plugins\npqtplugin4.dll
2011-08-11 02:38:16	159744	----a-w-	c:\program files\internet explorer\plugins\npqtplugin3.dll
2011-08-11 02:38:16	159744	----a-w-	c:\program files\internet explorer\plugins\npqtplugin2.dll
2011-08-11 02:38:16	159744	----a-w-	c:\program files\internet explorer\plugins\npqtplugin.dll
2011-08-10 20:19:38	375808	----a-w-	c:\windows\system32\winsrv.dll
2011-08-10 20:19:36	508416	----a-w-	c:\windows\system32\drivers\bthport.sys
2011-08-10 20:19:36	30208	----a-w-	c:\windows\system32\drivers\BTHUSB.SYS
2011-08-10 20:19:31	214016	----a-w-	c:\windows\system32\drivers\mrxsmb10.sys
2011-08-10 20:19:27	2043392	----a-w-	c:\windows\system32\win32k.sys
2011-08-10 20:15:20	49152	----a-w-	c:\windows\system32\csrsrv.dll
2011-08-10 20:14:02	3602832	----a-w-	c:\windows\system32\ntkrnlpa.exe
2011-08-10 20:14:02	3550096	----a-w-	c:\windows\system32\ntoskrnl.exe
2011-08-10 20:13:54	913296	----a-w-	c:\windows\system32\drivers\tcpip.sys
2011-08-10 20:13:53	31232	----a-w-	c:\windows\system32\drivers\tcpipreg.sys
.
==================== Find3M  ====================
.
2011-08-26 03:03:50	979456	----a-w-	c:\windows\system32\MFH264Dec.dll
2011-08-26 03:02:04	4096	----a-w-	c:\windows\system32\drivers\en-us\dxgkrnl.sys.mui
2011-07-12 14:20:54	83816	----a-w-	c:\windows\system32\dns-sd.exe
2011-07-12 14:20:54	73064	----a-w-	c:\windows\system32\dnssd.dll
2011-07-05 21:37:00	94208	----a-w-	c:\windows\system32\QuickTimeVR.qtx
2011-07-05 21:37:00	69632	----a-w-	c:\windows\system32\QuickTime.qts
.
============= FINISH: 12:59:42,95 ===============