Guigo
26-12-06, 16:31
Salve, colegas....
Deu alguma merda aqui no notebook, que sumiram todos os meus arquivos da pós-graduação que estou fazendo...
De repente, fui abrir um deles no word e toda a pasta onde eles estavam salvos sumiu!!!
Encontrei uns arquivos suspeitos que nunca tinha reparado antes:
Um escrito "spider.sav" ...e o outro uma pasta com nome "fc29ff52b3b5d22a5a1999842c" e com o conteúdo +/- esse:
=== Verbose logging started: 11/18/2006 13:21:15 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI (c) (88:DC) [13:21:15:296]: Resetting cached policy values
MSI (c) (88:DC) [13:21:15:296]: Machine policy value 'Debug' is 0
MSI (c) (88:DC) [13:21:15:296]: ******* RunEngine:
******* Product: c:\fc29ff52b3b5d22a5a1999842c\msxml.msi
******* Action:
******* CommandLine: **********
MSI (c) (88:DC) [13:21:15:296]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (88:DC) [13:21:15:296]: Grabbed execution mutex.
MSI (c) (88:DC) [13:21:15:406]: Cloaking enabled.
MSI (c) (88:DC) [13:21:15:406]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (88:DC) [13:21:15:406]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (74:5C) [13:21:15:406]: Grabbed execution mutex.
MSI (s) (74:64) [13:21:15:406]: Resetting cached policy values
MSI (s) (74:64) [13:21:15:406]: Machine policy value 'Debug' is 0
MSI (s) (74:64) [13:21:15:406]: ******* RunEngine:
******* Product: c:\fc29ff52b3b5d22a5a1999842c\msxml.msi
******* Action:
******* CommandLine: **********
MSI (s) (74:64) [13:21:15:453]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (74:64) [13:21:15:671]: File will have security applied from OpCode.
MSI (s) (74:64) [13:21:15:718]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'c:\fc29ff52b3b5d22a5a1999842c\msxml.msi' against software restriction policy
MSI (s) (74:64) [13:21:15:718]: SOFTWARE RESTRICTION POLICY: c:\fc29ff52b3b5d22a5a1999842c\msxml.msi has a digital signature
MSI (s) (74:64) [13:21:17:296]: SOFTWARE RESTRICTION POLICY: c:\fc29ff52b3b5d22a5a1999842c\msxml.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (74:64) [13:21:17:296]: End dialog not enabled
MSI (s) (74:64) [13:21:17:312]: Original package ==> c:\fc29ff52b3b5d22a5a1999842c\msxml.msi
MSI (s) (74:64) [13:21:17:312]: Package we're running from ==> c:\WINDOWS\Installer\689d6e.msi
MSI (s) (74:64) [13:21:17:343]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (74:64) [13:21:17:359]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (74:64) [13:21:17:375]: MSCOREE not loaded loading copy from system32
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'TransformsSecure' is 0
MSI (s) (74:64) [13:21:17:453]: User policy value 'TransformsAtSource' is 0
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'DisablePatch' is 0
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (74:64) [13:21:17:453]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
E por aí vai...
Passei o antivirus (avast), mas ele não acusou nada....
E aí??
É virus ou eu fiz alguma merda??
Detalhe: Eu tinha acabado de deletar o PowerDVD da máquina (pq estou usando outro) e o meu Oficce é de teste por 60 dias (que já expiraram, mas ele continua funcionando bem)...
Ahhh....as pastas sumiram e não só os arquivos que estavam dentro dela....
Qq ajuda é bem-vinda...
Abs...
Deu alguma merda aqui no notebook, que sumiram todos os meus arquivos da pós-graduação que estou fazendo...
De repente, fui abrir um deles no word e toda a pasta onde eles estavam salvos sumiu!!!
Encontrei uns arquivos suspeitos que nunca tinha reparado antes:
Um escrito "spider.sav" ...e o outro uma pasta com nome "fc29ff52b3b5d22a5a1999842c" e com o conteúdo +/- esse:
=== Verbose logging started: 11/18/2006 13:21:15 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI (c) (88:DC) [13:21:15:296]: Resetting cached policy values
MSI (c) (88:DC) [13:21:15:296]: Machine policy value 'Debug' is 0
MSI (c) (88:DC) [13:21:15:296]: ******* RunEngine:
******* Product: c:\fc29ff52b3b5d22a5a1999842c\msxml.msi
******* Action:
******* CommandLine: **********
MSI (c) (88:DC) [13:21:15:296]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (88:DC) [13:21:15:296]: Grabbed execution mutex.
MSI (c) (88:DC) [13:21:15:406]: Cloaking enabled.
MSI (c) (88:DC) [13:21:15:406]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (88:DC) [13:21:15:406]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (74:5C) [13:21:15:406]: Grabbed execution mutex.
MSI (s) (74:64) [13:21:15:406]: Resetting cached policy values
MSI (s) (74:64) [13:21:15:406]: Machine policy value 'Debug' is 0
MSI (s) (74:64) [13:21:15:406]: ******* RunEngine:
******* Product: c:\fc29ff52b3b5d22a5a1999842c\msxml.msi
******* Action:
******* CommandLine: **********
MSI (s) (74:64) [13:21:15:453]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (74:64) [13:21:15:671]: File will have security applied from OpCode.
MSI (s) (74:64) [13:21:15:718]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'c:\fc29ff52b3b5d22a5a1999842c\msxml.msi' against software restriction policy
MSI (s) (74:64) [13:21:15:718]: SOFTWARE RESTRICTION POLICY: c:\fc29ff52b3b5d22a5a1999842c\msxml.msi has a digital signature
MSI (s) (74:64) [13:21:17:296]: SOFTWARE RESTRICTION POLICY: c:\fc29ff52b3b5d22a5a1999842c\msxml.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (74:64) [13:21:17:296]: End dialog not enabled
MSI (s) (74:64) [13:21:17:312]: Original package ==> c:\fc29ff52b3b5d22a5a1999842c\msxml.msi
MSI (s) (74:64) [13:21:17:312]: Package we're running from ==> c:\WINDOWS\Installer\689d6e.msi
MSI (s) (74:64) [13:21:17:343]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (74:64) [13:21:17:359]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (74:64) [13:21:17:375]: MSCOREE not loaded loading copy from system32
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'TransformsSecure' is 0
MSI (s) (74:64) [13:21:17:453]: User policy value 'TransformsAtSource' is 0
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'DisablePatch' is 0
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (74:64) [13:21:17:453]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (74:64) [13:21:17:453]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
E por aí vai...
Passei o antivirus (avast), mas ele não acusou nada....
E aí??
É virus ou eu fiz alguma merda??
Detalhe: Eu tinha acabado de deletar o PowerDVD da máquina (pq estou usando outro) e o meu Oficce é de teste por 60 dias (que já expiraram, mas ele continua funcionando bem)...
Ahhh....as pastas sumiram e não só os arquivos que estavam dentro dela....
Qq ajuda é bem-vinda...
Abs...