Publicado em 24 de mai.

[Arquivado] Pc muito lento,o que podemos fazer para melhorar

#topicos-arquivados-seguranca-malwares

Bom galera meu pc de uns dias pra ca ta muito lento,

o que podemos fazer?

Discussão (19)

Entre ou cadastre-se para participar da discussão

Entrar Criar conta

Mário Monteiro· 25 de mai.

post um log conforme regra 2

http://forum.imasters.com.br/index.php?showtopic=165906

Ragde· 25 de mai.

Segue o seguinte log:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:49:10, on 25/5/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

c:\Arquivos de programas\Microsoft Security Essentials\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Arquivos de programas\Ahead\InCD\InCDsrv.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\Java\jre6\bin\jqs.exe

C:\Arquivos de programas\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\FixCamera.exe

C:\WINDOWS\tsnp2std.exe

C:\WINDOWS\vsnp2std.exe

C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe

C:\WINDOWS\system32\wuauclt.exe

C:\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://br.ask.com?o=15383&l=dis

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll

R3 - URLSearchHook: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Arquivos de programas\Messenger_Plus_Live\tbMess.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: Softonic_Brasil Toolbar - {12fc3d37-2a42-4fe3-8489-81296878cba5} - C:\Arquivos de programas\Softonic_Brasil\tbSoft.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Arquivos de programas\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Arquivos de programas\Messenger_Plus_Live\tbMess.dll

O2 - BHO: Messenger Plus Live Portuguese Toolbar - {b46b614e-44c7-4448-ac14-9ab9f7740d64} - C:\Arquivos de programas\Messenger_Plus_Live_Portuguese\tbMess.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: MAX BR Toolbar - {fe379c63-1156-4c8c-8dbb-f823d3ea4b37} - C:\Arquivos de programas\MAX_BR\tbMAX_.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Arquivos de programas\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Messenger Plus Live Toolbar - {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Arquivos de programas\Messenger_Plus_Live\tbMess.dll

O3 - Toolbar: Messenger Plus Live Portuguese Toolbar - {b46b614e-44c7-4448-ac14-9ab9f7740d64} - C:\Arquivos de programas\Messenger_Plus_Live_Portuguese\tbMess.dll

O3 - Toolbar: aTube Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Arquivos de programas\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: Softonic_Brasil Toolbar - {12fc3d37-2a42-4fe3-8489-81296878cba5} - C:\Arquivos de programas\Softonic_Brasil\tbSoft.dll

O3 - Toolbar: MAX BR Toolbar - {fe379c63-1156-4c8c-8dbb-f823d3ea4b37} - C:\Arquivos de programas\MAX_BR\tbMAX_.dll

O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe

O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe

O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\ARQUIV~1\ARQUIV~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MI1933~1\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O12 - Plugin for .spop: C:\Arquivos de programas\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp

O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/pt/uno1/GAME_UNO1.cab

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8942.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{229BCC09-E9B9-4C62-A762-04A24156DA2A}: NameServer = 200.165.132.148 200.165.132.155

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARQUIV~1\ARQUIV~1\Skype\SKYPE4~1.DLL

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Arquivos de programas\Ahead\InCD\InCDsrv.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe

End of file - 7158 bytes

Será que devemos excluir alhuns desses programas?

Desde ja agradeço!

wings· 26 de mai.

Olá Ragde....

*Baixe o AD-Remover e salve-o no desktop

*Duplo clique em AD-R.exe

*Clique em [scan]....aguarde o término

*Cole o relatório criado em C:\Ad-Report-SCAN.log

*Execute novamente o AD-Remover

*Clique em [Clean]...aguarde o término

*Cole o relatório criado em C:\Ad-Report-CLEAN.log

*Baixe o ATF Cleaner e salve-o no desktop

*Duplo clique em ATF-Cleaner.exe

	*Em Main selecione [select all]

	*Clique em [Empty Selected]

	=>Caso use Firefox ou Opera:

	*Em "Firefox" ou em "Opera" clique em [select all]

	*Clique em [No]

	*Clique [Empty Selected]

	*Clique em [No]

	*Clique em [Exit] ou no [X] para sair do programa

Ragde· 26 de mai.

Segue o seguintes logs

1°log Ad-Report-SCAN

======= LOGFILE OF AD-REMOVER 2.0.0.0,D | ONLY XP/VISTA/7 =======

Updated by C_XX on 19/05/10 à 19:20

Contact: AdRemover.contact@gmail.com

Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

Started: 15:21:31 le 26/05/2010 | Normal boot | Option: SCAN

Executed from: C:\Ad-Remover\ADR.exe

OS: Microsoft Windows XP Professional (Service Pack 3 - X86)

Computer name: CASA-77512E3B81

Current user: edgar

============== FOUND ELEMENTS ==============

C:\Arquivos de programas\Ask.com

C:\Documents and Settings\edgar\Configurações locais\Dados de aplicativos\AskToolbar

C:\Documents and Settings\edgar\Dados de aplicativos\Mozilla\FireFox\Profiles\82rp15fq.default\extensions\toolbar@ask.com

C:\Documents and Settings\edgar\Dados de aplicativos\Mozilla\FireFox\Profiles\82rp15fq.default\searchplugins\askcom.xml

C:\Documents and Settings\oscar\Configurações locais\Dados de aplicativos\AskToolbar

C:\Documents and Settings\ramom\Configurações locais\Dados de aplicativos\AskToolbar

C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

.

HKCU\Software\AppDataLow\AskToolbarInfo

HKCU\Software\Ask.com

HKCU\Software\AskToolbar

HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}

HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}

HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

HKLM\Software\Classes\AppID\GenericAskToolbar.DLL

HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}

HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd

HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1

HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF

HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}

HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}

HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}

HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}

HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}

============== ADDITIONNAL SCAN ==============

Mozilla FireFox Version 3.6.3 (pt-BR)

C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\ramom\\Meus documentos\\Galeria

C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - browser.search.defaultenginename: Ask.com

C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - browser.search.defaulturl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2124320&SearchSource=3&q={searchTerms}

C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - browser.search.selectedEngine: Google

C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - browser.startup.homepage: hxxp://br.ask.com?o=15383&l=dis

C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2.3

C:\Documents and Settings\oscar\Dados de aplicativos\Mozilla\Firefox\Profiles\kouwjd3j.default\prefs.js - browser.search.defaulturl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2284000&SearchSource=3&q={searchTerms}

C:\Documents and Settings\oscar\Dados de aplicativos\Mozilla\Firefox\Profiles\kouwjd3j.default\prefs.js - browser.search.selectedEngine: MAX BR Customized Web Search

C:\Documents and Settings\oscar\Dados de aplicativos\Mozilla\Firefox\Profiles\kouwjd3j.default\prefs.js - browser.startup.homepage: hxxp://search.conduit.com/?ctid=CT2284000&SearchSource=13

C:\Documents and Settings\oscar\Dados de aplicativos\Mozilla\Firefox\Profiles\kouwjd3j.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2.3

C:\Documents and Settings\ramom\Dados de aplicativos\Mozilla\Firefox\Profiles\22ef7qo1.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.7

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("browser.search.defaultengine", "Ask.com");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("browser.search.defaultenginename", "Ask.com");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("browser.search.order.1", "Ask.com");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("browser.startup.homepage", "hxxp://br.ask.com?o=15383&l=dis");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.cbid", "UJ");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.default-channel-url-mask", "hxxp://br.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.first-launch-url", "hxxp://g.msn.com/5mept_br/11");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.fresh-install", false);

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.l", "dis");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.last-config-req", "1274807863367");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.locale", "pt_BR");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.o", "15380");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.options-lang", "pt");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.options-locale", "UK");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.overlay-reloaded-using-restart", true);

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.qsrc", "2871");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.asktb.r", "2");

FOUND: C:\Documents and Settings\edgar\Dados de aplicativos\mozilla\firefox\profiles\82rp15fq.default\prefs.js - user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18,{9b339f6e-ddcd-401b-8764-230adbd01761}:2.5.6.0,toolbar@ask.com:3.6.6.117,{AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.3");

.

Internet Explorer Version 8.0.6001.18702

[HKCU\Software\Microsoft\Internet Explorer\Main]

Do404Search: 0x01000000

Enable Browser Extensions: yes

Local Page: C:\WINDOWS\system32\blank.htm

Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Show_ToolBar: yes

Start Page: hxxp://br.ask.com?o=15383&l=dis

Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main]

Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157

Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896

Delete_Temp_Files_On_Exit: yes

Local Page: C:\WINDOWS\system32\blank.htm

Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896

Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

Blank: res://mshtml.dll/blank.htm

========================================

C:\Ad-Remover\Quarantine: 0 Files

C:\Ad-Remover\Backup: 1 Files

C:\Ad-Report-SCAN[1].txt - 9630 Byte(s)

End at: 15:34:24, 26/05/2010

============== E.O.F - SCAN[1] ==============

2°log Ad-Report-CLEAN