erro de nsis no download

Question

Antes eu fazia download normal.S&oacute; que h&aacute; alguns dias vem dando esse erro chato .Toda vez que baixo um arquivo,seja pelo IE 8 ou gerenciador(FDM).J&aacute; tentei at&eacute; o tal de /NCRC na linha de cmd no prompt e nada,continua dando arquivo corrompido.J&aacute; dei uma busca com antivirus e passei o windows defender e n&atilde;o deu nada.Como resolvo isso?

Answer

Fa&ccedil;a o download do Hijackthis:
http://go.trendmicro.com/free-tools/hijackthis/HijackThis.exe

 Execute o aplicativo e escolha a op&ccedil;&atilde;o Do a system scan and save log file.
 Copie e Cole o log em sua resposta.

* caso ocorra erro., tente efetuar o download via firefox ou google chrome.

Answer

Eu baixei o arquivo,mas deu o seguinte erro do windows:O HijackThis encontrou um problema e precisa ser fechado.No prompt a mesma coisa.E quanto aos outros navegadores,pode esquecer,eu baixo e d&aacute; o erro.At&eacute; videos que eu baixo parecem estar com problemas.Eles passam mas ficam tipo pixelados.

Answer

[quote=wolf09, post: 4863877]Fa&ccedil;a o download do Hijackthis:
http://go.trendmicro.com/free-tools/hijackthis/HijackThis.exe
 
Execute o aplicativo e escolha a op&ccedil;&atilde;o Do a system scan and save log file.
Copie e Cole o log em sua resposta.
 
* caso ocorra erro., tente efetuar o download via firefox ou google chrome.[/quote]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:55:27, on 21/3/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\ARQUIV~1\GbPlugin\GbpSv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Arquivos de programas\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\ARQUIV~1\MediaKey\MMKeybd.EXE
C:\ARQUIV~1\MediaKey\KPDrv4XP.EXE
C:\Arquivos de programas\Arquivos comuns\Real\Update_OBealsched.exe
C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
C:\Arquivos de programas\Oi Internet\DiscaOi.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE
C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\Usuario\CONFIG~1\Temp\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O1 - Hosts: 189.49.206.179 #2008-02-07 23:10:52
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Arquivos de programas\Orbitdownloader\orbitcth.dll
O2 - BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - (no file)
O2 - BHO: XBTB00078 - {5251A003-B61F-448e-8C4D-3AC1323323C4} - (no file)
O2 - BHO: (no name) - {6EF05952-B48D-4944-AA91-57A6A1A48EF8} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de programas\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Arquivos de programas\GbPlugin\gbiehCef.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Arquivos de programas\Free Download Manager\iefdm2.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Arquivos de programas\Orbitdownloader\GrabPro.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MediaKey] C:\ARQUIV~1\MediaKey\MMKeybd.EXE
O4 - HKLM\..\Run: [KPDrv4XP] C:\ARQUIV~1\MediaKey\KPDrv4XP.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] C:\Arquivos de programas\Arquivos comuns\Real\Update_OBealsched.exe  -osboot
O4 - HKLM\..\Run: [avgnt] C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150595.exe -Update -1150595 -Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; FDM; AskTB5.4) -http://www.necromanthus.com/Games/ShockWave/MortalKombat.html
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Download by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Baixar com o Free Download Manager - file://C:\Arquivos de programas\Free Download Manager\dllink.htm
O8 - Extra context menu item: Baixar v&iacute;deo com o Free Download Manager - file://C:\Arquivos de programas\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Download selecionado pelo Free Download Manager - file://C:\Arquivos de programas\Free Download Manager\dlselected.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O16 - DPF: {201B9B37-848F-40BD-90EA-7B8F0AA89D6A} - http://us2-scripts.dlv4.com/binaries/egaccess4/egaccess4_1071_em_XP.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {AA59202C-5E41-48FC-AF7D-324F5FD6A9F1} - http://us2-scripts.dlv4.com/binaries/egaccess4/egaccess4_1070_em_XP.cab
O16 - DPF: {C044CD87-DFB0-4130-A5E4-49361106FBC8} (HanSetupCtrl1010 Class) - http://cdn.hangame.com/hangame/hansetup/HanSetup1010.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E2067699-61C0-42DF-84A1-5D6A322A67D7}: NameServer = 200.202.193.75 200.222.0.34
O20 - Winlogon Notify:  GbPluginCef - C:\Arquivos de programas\GbPlugin\gbiehCef.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Gbp Service (GbpSv) -   - C:\ARQUIV~1\GbPlugin\GbpSv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Arquivos de programas\PC Connectivity Solution\ServiceLayer.exe
--
End of file - 8400 bytes

Answer

fa&ccedil;a o download do toolbarsd:
http://eric.71.mespages.googlepages.com/ToolBarSD.exe

Execute o ToolBarSd.exe
Na primeira tela vai aparecer a op&ccedil;&atilde;o de idiomas, escolha Portugu&ecirc;s digitando P e depois tecle  Enter.
Na pr&oacute;xima tela vai ser solicitado uma a&ccedil;&atilde;o, escolha Remo&ccedil;&atilde;o digitando 2 e depois tecle Enter.
Terminado o processo vai aparecer o relat&oacute;rio, Salve-o e apresente o conte&uacute;do dele em sua 	pr&oacute;xima resposta.Caso n&atilde;o o ache... ele est&aacute; localizado em C:\

* fa&ccedil;a o download do HostsXpert: 
http://www.funkytoad.com/download/HostsXpert.zip

* Extraia o arquivo.
* Execute-o. Clique na op&ccedil;&atilde;o Restore Ms Hosts e em seguida clique na op&ccedil;&atilde;o Make Hosts Read-only.

Execute o hijackthis  e escolha a op&ccedil;&atilde;o do a system scan only. Selecine os itens:

O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - (no file)

O2 - BHO: XBTB00078 - {5251A003-B61F-448e-8C4D-3AC1323323C4} - (no file)

O2 - BHO: (no name) - {6EF05952-B48D-4944-AA91-57A6A1A48EF8} - (no file)

O16 - DPF: {201B9B37-848F-40BD-90EA-7B8F0AA89D6A} - http://us2-scripts.dlv4.com/binaries...1071_em_XP.cab

O16 - DPF: {AA59202C-5E41-48FC-AF7D-324F5FD6A9F1} - http://us2-scripts.dlv4.com/binaries...1070_em_XP.cab

O16 - DPF: {C044CD87-DFB0-4130-A5E4-49361106FBC8} (HanSetupCtrl1010 Class) - http://cdn.hangame.com/hangame/hanse...nSetup1010.cab

clique em fix checked.

*finalizados os procedimentos acima., envie tamb&eacute;m um novo log do hijackthis

Answer

ToolBar S&D

-----------\  ToolBar S&D 1.2.9   XP/Vista
   Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 2600+ )
   BIOS : BIOS Date: 09/08/05 09:26:43 Ver: 08.00.10
   USER : Usuario ( Administrator )
   BOOT : Normal boot
   Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:74 Go (Free:16 Go)
   D:\ (CD or DVD)
   E:\ (CD or DVD)
   C:\ToolBar SD ( MAJ : 22-08-2009|18:42 )
   Option : [2] ( dom 21/03/2010|23:35 )
   C:\WINDOWS\iun6002.exe
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sa3D.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sa5E.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
saB.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb1C.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb20.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb5.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb7.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb8.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc1D.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc1E.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc28.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc48.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc78.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
scB.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sd5.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sd7.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
se28.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
se2E.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
se40.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
seB.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
seD.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf11.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf68.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf74.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf7.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf9.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sfC.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sg20.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sg33.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sg6E.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sg7.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sgA.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sh2.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sh7.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
si33.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
si35.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
si9.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
siA.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
siF.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj18.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj19.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj22.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj2.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj4.tmp
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj54.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj76.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sk33.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sk4.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sk5.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sk6.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
skB.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sl39.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sl4A.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sl7.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sl8.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sm18.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
smA.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
smD.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sn33.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sn37.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sn66.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
snD.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
so2B.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
so33.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
so58.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
so5.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
so6.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp10.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp1C.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp27.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp2.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp4.tmp
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp62.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp7.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp9.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
spB.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sq11.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sq30.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sq36.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sq70.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sqB.tmp
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sqF.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr1C.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr1F.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr2.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr4C.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr52.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr54.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr56.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr9.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss18.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss27.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss30.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss5A.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss60.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
st10.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
st35.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
st3.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
st5.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
stD.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
su16.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
su1C.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sv6.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sv8.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sw47.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sw5.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sw7.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx16.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx1A.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx1E.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx6C.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx9.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sy23.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sy64.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sy8B.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sy9.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz14.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz18.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz25.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz32.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz3D.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz6A.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz72.tmp(null)
   C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz9.tmp(null)
   -----------\ REMOVIDOS
   Deletado! - C:\WINDOWS\iun6002.exe
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sa3D.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sa5E.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
saB.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb1C.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb20.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb5.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb7.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sb8.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc1D.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc1E.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc28.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc48.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sc78.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
scB.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sd5.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sd7.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
se28.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
se2E.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
se40.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
seB.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
seD.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf11.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf68.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf74.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf7.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sf9.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sfC.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sg20.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sg33.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sg6E.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sg7.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sgA.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sh2.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sh7.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
si33.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
si35.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
si9.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
siA.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
siF.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj18.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj19.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj22.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj2.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj4.tmp
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj54.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sj76.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sk33.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sk4.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sk5.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sk6.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
skB.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sl39.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sl4A.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sl7.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sl8.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sm18.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
smA.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
smD.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sn33.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sn37.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sn66.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
snD.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
so2B.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
so33.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
so58.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
so5.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
so6.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp10.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp1C.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp27.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp2.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp4.tmp
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp62.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp7.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sp9.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
spB.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sq11.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sq30.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sq36.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sq70.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sqB.tmp
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sqF.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr1C.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr1F.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr2.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr4C.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr52.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr54.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr56.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sr9.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss18.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss27.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss30.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss5A.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
ss60.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
st10.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
st35.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
st3.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
st5.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
stD.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
su16.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
su1C.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sv6.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sv8.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sw47.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sw5.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sw7.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx16.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx1A.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx1E.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx6C.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sx9.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sy23.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sy64.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sy8B.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sy9.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz14.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz18.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz25.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz32.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz3D.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz6A.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz72.tmp(null)
   Deletado! - C:\DOCUME~1\Usuario\CONFIG~1\Temp
sz9.tmp(null)
   -----------\  Procura por Arquivos / Ficheiros ...

-----------\  [..\Internet Explorer\Main]
   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   Start Page=http://www.google.com.br/
   Search Page=http://www.google.com
   Search Bar=http://www.google.com/ie
   Local Page=C:\WINDOWS\system32\blank.htm
   Url=http://go.microsoft.com/fwlink/?LinkID=68928
   Url=http://go.microsoft.com/fwlink/?LinkID=68929
   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   Default_Page_URL=http://go.microsoft.com/fwlink/?LinkId=69157
   Default_Search_URL=http://go.microsoft.com/fwlink/?LinkId=54896
   Search Page=http://go.microsoft.com/fwlink/?LinkId=54896
   Local Page=C:\WINDOWS\system32\blank.htm
   Start Page=http://www.msn.com/

--------------------\  Procurando por outras infec&ccedil;&otilde;es
 
   C:\WINDOWS\System32\kuywth.dat
   C:\WINDOWS\System32\kuywth_nav.dat
   C:\WINDOWS\System32\kuywth_navps.dat
   ==> EGDACCESS

Answer

O problema ainda continua!

Answer

Execute o hijackthis e escolha a op&ccedil;&atilde;o do a system scan only. Selecione os itens:

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll

clique em fix checked.

Fa&ccedil;a o download do Malwarebytes:
http://www.baixaki.com.br/download/malwarebytes-anti-malware.htm

  1) Instale o aplicativo, atualiza-o e efetue uma verifica&ccedil;&atilde;o completa.

  2) Quando terminar o scan., se algum malware foi detectado., clique em (Exibir resultado), e depois clique em (remover selecionados). 
 Abrir&aacute; um Relat&oacute;rio automatico, Copia e cole aqui.

 3) as infec&ccedil;&otilde;es ser&atilde;o enviadas para quarentena., e alguns tipos poder&atilde;o exigir a reinicializa&ccedil;&atilde;o do sistema.

Answer

[quote=wolf09, post: 4870515]Execute o hijackthis e escolha a op&ccedil;&atilde;o do a system scan only. Selecione os itens:
 
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll
 
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll
 
clique em fix checked.
 
Fa&ccedil;a o download do Malwarebytes:
http://www.baixaki.com.br/download/malwarebytes-anti-malware.htm
 
1) Instale o aplicativo, atualiza-o e efetue uma verifica&ccedil;&atilde;o completa.
 
2) Quando terminar o scan., se algum malware foi detectado., clique em (Exibir resultado), e depois clique em (remover selecionados). 
Abrir&aacute; um Relat&oacute;rio automatico, Copia e cole aqui.
 
3) as infec&ccedil;&otilde;es ser&atilde;o enviadas para quarentena., e alguns tipos poder&atilde;o exigir a reinicializa&ccedil;&atilde;o do sistema.[/quote]

O primeiro passo eu fiz.Agora n&atilde;o t&aacute; dando pra baixar o Malwarebytes.Tentei tr&ecirc;s vezes e deu erro de arquivo corrompido.Alguma outra id&eacute;ia?

Answer

up!!!!!!!!!!!!!!!!!!!!!

Answer

Acesse o site descrito abaixo e efetue uma verifica&ccedil;&atilde;o online:
http://www.eset.com/online-scanner

** http://dicasetutoriaisparapc.blogspot.com/2008/09/tutorial-do-antivirus-nod32-online.html **

Answer

[quote=wolf09, post: 4877417]Acesse o site descrito abaixo e efetue uma verifica&ccedil;&atilde;o online:
http://www.eset.com/online-scanner
 
** http://dicasetutoriaisparapc.blogspot.com/2008/09/tutorial-do-antivirus-nod32-online.html **[/quote]

Entrei no site e n&atilde;o deu nada.Mais cedo fiz uma verifica&ccedil;&atilde;o completa com antivirus e achei alguns trojans mas o problema continua.
Alguns arquivos baixam com muito custo outros n&atilde;o.Tentei usar o msn como navegador tbm n&atilde;o adiantou.
Talvez possa ser alguma coisa no HD.N&atilde;o sei mais o que fazer.J&aacute; reinstalei o IE.J&aacute; tentei restaurar o sistema e nada.

Answer

*Baixe o ComboFix e salve-o no desktop:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
*Desative temporariamente o seu Antivirus.
* Execute-o - Aceite o contrato.

* Caso o console de recupera&ccedil;&atilde;o j&aacute; esteja instalado o ComboFix ir&aacute; continuar o processo 	automaticamente.
* Caso n&atilde;o esteja, uma janela, ser&aacute; exibida solicitando a instala&ccedil;&atilde;o. Clique em [SIM] para aceit&aacute;-la.

&ndash; Importante: enquanto o ComboFix estiver em execu&ccedil;&atilde;o, n&atilde;o use o mouse nem o teclado!!..... Para interromper o procedimento tecle N ou 2 e depois ENTER.

&ndash; O programa ser&aacute; fechado automaticamente. --

* Cole o relat&oacute;rio criado em C:\combofix.txt juntamente com um novo Log do hijackthis.

Answer

[quote=wolf09, post: 4877846]*Baixe o ComboFix e salve-o no desktop:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
*Desative temporariamente o seu Antivirus.
* Execute-o - Aceite o contrato.
 
* Caso o console de recupera&ccedil;&atilde;o j&aacute; esteja instalado o ComboFix ir&aacute; continuar o processo     automaticamente.
* Caso n&atilde;o esteja, uma janela, ser&aacute; exibida solicitando a instala&ccedil;&atilde;o. Clique em [SIM] para aceit&aacute;-la.
 
&ndash; Importante: enquanto o ComboFix estiver em execu&ccedil;&atilde;o, n&atilde;o use o mouse nem o teclado!!..... Para interromper o procedimento tecle N ou 2 e depois ENTER.
 
&ndash; O programa ser&aacute; fechado automaticamente. --
 
* Cole o relat&oacute;rio criado em C:\combofix.txt juntamente com um novo Log do hijackthis.[/quote]
 
N&atilde;o d&aacute; pra baixar.Tentei 5 vezes.D&aacute; erro de arquivo corrompido.
Ser&aacute; que &eacute; algum arquivo .dll corrompido do windows que use esse nsis?Talvez baixando a .dll o problema acaba.

HijackThis:
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:11:42, on 28/3/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\ARQUIV~1\GbPlugin\GbpSv.exe
C:\WINDOWS\system32\svchost.exe
C:\Arquivos de programas\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe
C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\ARQUIV~1\MediaKey\MMKeybd.EXE
C:\ARQUIV~1\MediaKey\KPDrv4XP.EXE
C:\Arquivos de programas\Arquivos comuns\Real\Update_OBealsched.exe
C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe
C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Arquivos de programas\Oi Internet\DiscaOi.exe
C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE
C:\Arquivos de programas\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Usuario\Desktop\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R3 - Default URLSearchHook is missing
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Arquivos de programas\Orbitdownloader\orbitcth.dll
O2 - BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Arquivos de programas\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Arquivos de programas\GbPlugin\gbiehCef.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Arquivos de programas\Free Download Manager\iefdm2.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Arquivos de programas\Orbitdownloader\GrabPro.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MediaKey] C:\ARQUIV~1\MediaKey\MMKeybd.EXE
O4 - HKLM\..\Run: [KPDrv4XP] C:\ARQUIV~1\MediaKey\KPDrv4XP.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] C:\Arquivos de programas\Arquivos comuns\Real\Update_OBealsched.exe  -osboot
O4 - HKLM\..\Run: [avgnt] C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] C:\Arquivos de programas\Arquivos comuns\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150595.exe -Update -1150595 -Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; FDM; AskTB5.4) -http://www.necromanthus.com/Games/ShockWave/MortalKombat.html
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Download by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Baixar com o Free Download Manager - file://C:\Arquivos de programas\Free Download Manager\dllink.htm
O8 - Extra context menu item: Baixar tudo com o Free Download Manager - file://C:\Arquivos de programas\Free Download Manager\dlall.htm
O8 - Extra context menu item: Baixar v&iacute;deo com o Free Download Manager - file://C:\Arquivos de programas\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Arquivos de programas\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Download selecionado pelo Free Download Manager - file://C:\Arquivos de programas\Free Download Manager\dlselected.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Arquivos de programas\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E2067699-61C0-42DF-84A1-5D6A322A67D7}: NameServer = 200.202.193.75 200.222.0.34
O20 - Winlogon Notify:  GbPluginCef - C:\Arquivos de programas\GbPlugin\gbiehCef.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Gbp Service (GbpSv) -   - C:\ARQUIV~1\GbPlugin\GbpSv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Arquivos de programas\PC Connectivity Solution\ServiceLayer.exe
--
End of file - 7500 bytes

Answer

O Log do hijackthis est&aacute; limpo.... mas como afirmas que ainda permanece o problema.... efetue o download do combofix no link abaixo:

http://www.megaupload.com/?d=6DRBGMZ7

* execute conforme j&aacute; orientado.

Ferramentas

Mover Tópico