Publicado em 14 de mai.

[Resolvido] &nbspBarra de Rolagem e teclado anormais

Olá !

Laptop com problemas: teclado nao funciona direito (estou com dificuldades de digitação: é como se a função fn e shift estivessem ligadas o tempo todo) e barra de rolagem nao responde ao comando dado.

segue o log :

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:13:52, on 14/05/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\AVG\AVG2013\avgui.exe

C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\Program Files\Samsung\Easy Display Manager\WifiManager.exe
C:\Program Files\CyberLink\YouCam\YCMMirage.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\CyberLink\Media+Player10\Media+Player10Serv.exe
C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
C:\Program Files\Common Files\microsoft shared\virtualization handler\cvh.exe
C:\Program Files\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe
C:\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://find.localstrike.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://find.localstrike.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://find.localstrike.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://find.localstrike.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://find.localstrike.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://find.localstrike.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Samsung BHO Helper - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [OiVelox] C:\Program Files\Oi\Programmer\OiVeloxCheck.exe
O4 - HKLM\..\Run: [bCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Soraya\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-18\..\RunOnce: [Del249980432] cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del" (User 'SISTEMA')
O4 - HKUS\S-1-5-18\..\RunOnce: [Del428825345] cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del" (User 'SISTEMA')
O4 - HKUS\S-1-5-18\..\RunOnce: [Del530267491] cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del" (User 'SISTEMA')
O4 - HKUS\.DEFAULT\..\RunOnce: [Del249980432] cmd.exe /Q /D /c del "C:\Windows\TEMP\0.del" (User 'Default user')
O4 - Startup: OneNote 2010 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Enviar página para Dispositivo &Bluetooth ... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: Watchdog do AVG (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Samsung UPD Service - Samsung Electronics CO., LTD. - C:\windows\System32\SUPDSvc.exe

--
End of file - 9386 bytes

Me ajude!

Discussão (10)

Entre ou cadastre-se para participar da discussão

Entrar Criar conta

wings· 15 de mai.

Olá Soraya Lourenço

:seta: Este problema começou do nada ou após instalar algum programa?

:seta: Já verificou no Gerenciador de Dispositivos se há algum com problema?

:seta: Este Notebook é novo ou vc o formatou?

Soraya Lourenço· 15 de mai.

Olá, wings!

O problema começou depois que meus irmãos baixaram uns programas de jogo e, acredito também, por eles jogarem on-line em páginas nada confiáveis.

Não verifiquei este gerenciador por conta do problema ter começado após os "espertos" dos meus irmãos fazerem o que citei acima.

Nunca formatei o laptop. E ele não é novo, tem um pouco mais de um ano.

Espero ter ajudado. Ah, e só estou conseguindo digitar com a tecla Fn pressionada.

Lembrei de uma coisa: meu irmão instalou um teclado wireless. Ele pode ser a causa desse problema? Sabendo-se que o problema da barra de rolagem é anterior ao teclado citado.

Abraço

wings· 15 de mai.

:seta: Instale o http://www.malwarebytes.org/mbam-download-exe.php'>MalwareBytes (...de RubbeR DuckY)

*Antes de concluir a instalação, desmarque a opção Ativar trial gratuito do Malwarebytes Anti-Malware PRO

http://imgbox.com/acyiQYaG'>/applications/core/interface/imageproxy/imageproxy.php?img=http://t.imgbox.com/acyiQYaG.jpg&key=9dc6e4e6e95c2bc85db84221a8cea0faaa4340e1a73cd618deb4a6b21a6c3877" alt="acyiQYaG.jpg" />

*Aguarde a atualização e o programa será aberto automaticamente

*Selecione [Verificação Rápida]

http://imgbox.com/advi78kZ'>/applications/core/interface/imageproxy/imageproxy.php?img=http://t.imgbox.com/advi78kZ.jpg&key=d624a8e730debdc77627169d0ed5e133a3fe91b58d7f11bbba35f70ba4781c76" alt="advi78kZ.jpg" />

*Clique[Verificar]

*Ao término, clique [OK] > [Ver Resultados] > [Remover Selecionados]

*Cole o relatório apresentado

:seta: Faça um scan online com o http://eset.com/onlinescan'>NOD32

http://imgbox.com/adkoDRDw

*Ao término cole o relatório criado em C:\Arquivos de programas\EsetOnlineScanner\log

Soraya Lourenço· 16 de mai.

Esse foi o log:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Versão da Base de Dados: v2013.05.16.07

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16540
Soraya :: LOURENÇO-PC [administrador]

16/05/2013 14:56:45
mbam-log-2013-05-16 (14-56-45).txt

Processos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)

Módulos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)

Chaves de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Valores de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Itens de Dados no Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Pastas Detectadas: 0
(Não foram detectados ítens maliciosos)

Arquivos Detectados: 0
(Não foram detectados ítens maliciosos)

(fim)

wings· 16 de mai.

Olá....:)

Aguardando o relatório do NOD32.

Soraya Lourenço· 17 de mai.

Bom, houve um probleminha.

O laptop estava sendo escaneado, havia encontrado 7 arquivos infectados.

Até que ... Um amigo fechou o programa na metade do scan. Estavamos em reunião apresentando um projeto e o bendito detonou o meu scan. Estou escaneando de novo. Perdi o log inicial. Assim que terminar o scan posto o novo log mas sem as informações do outro scan.

Acho que esse era o log anterior:

ESETSmartInstaller@High as downloader log:
all ok

version=8

OnlineScannerApp.exe=1.0.0.1

OnlineScanner.ocx=1.0.0.6920

api_version=3.0.2

EOSSerial=4a6ac15cd103c04fae3f5ebee0af8368

engine=13847

end=finished

remove_checked=true

archives_checked=true

unwanted_checked=true

unsafe_checked=true

antistealth_checked=true

utc_time=2013-05-17 12:45:11

local_time=2013-05-16 09:45:11 (-0300, Hora oficial do Brasil)

country="United States"

lang=1033

osver=6.1.7601 NT Service Pack 1

compatibility_mode=1039 16777213 100 99 0 54956695 0 0

compatibility_mode=5893 16776574 100 94 19569225 120299902 0 0

scanned=150662

found=12

cleaned=12

scan_time=15348

sh=5F58AB4DC5FBBD478D8239A5ED8A2B2EB57C7D9F ft=1 fh=bd1e81cf9a2fadb3 vn="a variant of Win32/Toolbar.Babylon.E application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Soraya\AppData\Local\temp\gQ5rClkO.exe.part"
sh=71A1A23BE57A36D777BD9C7F1B351A7E8DC57B2F ft=1 fh=40e9f66b69963e48 vn="a variant of Win32/Hao123.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Soraya\AppData\Local\temp\LWHPbr6S.exe.part"
sh=627932C19416BBF60D77C87F09712EAB540E63F9 ft=1 fh=d4152cd280be3e0c vn="a variant of Win32/InstallBrain.Y application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Soraya\AppData\Local\temp\rjOYClbF.exe.part"
sh=5F58AB4DC5FBBD478D8239A5ED8A2B2EB57C7D9F ft=1 fh=bd1e81cf9a2fadb3 vn="a variant of Win32/Toolbar.Babylon.E application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Soraya\AppData\Local\temp\zlpyCTx4.exe.part"
sh=5F58AB4DC5FBBD478D8239A5ED8A2B2EB57C7D9F ft=1 fh=bd1e81cf9a2fadb3 vn="a variant of Win32/Toolbar.Babylon.E application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Soraya\AppData\Local\temp\ZoRl6swr.exe.part"
sh=5F58AB4DC5FBBD478D8239A5ED8A2B2EB57C7D9F ft=1 fh=bd1e81cf9a2fadb3 vn="a variant of Win32/Toolbar.Babylon.E application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Soraya\AppData\Local\temp\ZryBx_U0.exe.part"
sh=897FD37A4F97BA9BBC92108AA1FB16C970EACBF0 ft=1 fh=58662848aaacab1c vn="Win32/OpenCandy application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Soraya\Downloads\FreeYouTubeDownload.exe"
sh=69A35E782A90296DC01CD4184D2775CE1A35C4B2 ft=1 fh=7f4a4e7ae8724a95 vn="Win32/DealPly.B application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\System32\config\systemprofile\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe"
sh=E05928E43621CADE0DCBDE0C2ED410537AAFABAC ft=1 fh=e6a0b61a7cb076b2 vn="Win32/DealPly.B application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\temp\LatestDealPlySetup5556.exe"
sh=D2FE7D82F3A2715C0862DD4D8849F32E30E91F65 ft=1 fh=771b457a709af52a vn="Win32/DealPly.B application (cleaned by deleting - quarantined)" ac=C fn="C:\Windows\temp\nsi2687.tmp.exe"
sh=A9B5267B21AEF0B9EDA8957B5CE0EE40CDDB4051 ft=1 fh=0731f66f30875db6 vn="a variant of Win32/SoftonicDownloader.E application (cleaned by deleting - quarantined)" ac=C fn="D:\DL\Aquivos\SoftonicDownloader_para_as-simple-as-photoshop.exe"
sh=41F703E1B85D7C35F3C5CC67368AFD6FC19A7FFA ft=1 fh=322870806ff3e3d1 vn="a variant of Win32/SoftonicDownloader.E application (cleaned by deleting - quarantined)" ac=C fn="D:\DL\Aquivos\SoftonicDownloader_para_autocad.exe"
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internet

wings· 17 de mai.

O PC não apresenta sinais de contaminações significativas.

Caso o problema persista...

:seta: Clique Iniciar > Todos os Programas > Acessórios

*Clique com o botão direito do mouse no Prompt de Comando e selecione Executar como administrador

*Digite: sfc /verifyonly

*Informe se foram encontradas violações de integridade

Soraya Lourenço· 17 de mai.

Este é o log completo:

ESETSmartInstaller@High as downloader log:
all ok

version=8

OnlineScannerApp.exe=1.0.0.1

OnlineScanner.ocx=1.0.0.6920

api_version=3.0.2

EOSSerial=4a6ac15cd103c04fae3f5ebee0af8368

engine=13847

end=finished

remove_checked=true

archives_checked=true

unwanted_checked=true

unsafe_checked=true

antistealth_checked=true

utc_time=2013-05-17 12:45:11

local_time=2013-05-16 09:45:11 (-0300, Hora oficial do Brasil)

country="United States"

lang=1033

osver=6.1.7601 NT Service Pack 1

compatibility_mode=1039 16777213 100 99 0 54956695 0 0

compatibility_mode=5893 16776574 100 94 19569225 120299902 0 0

scanned=150662

found=12

cleaned=12

scan_time=15348

OnlineScannerApp.exe=1.0.0.1

OnlineScanner.ocx=1.0.0.6920

api_version=3.0.2

EOSSerial=4a6ac15cd103c04fae3f5ebee0af8368

engine=13851

end=finished

remove_checked=false

archives_checked=true

unwanted_checked=true

unsafe_checked=true

antistealth_checked=true

utc_time=2013-05-17 04:05:42

local_time=2013-05-17 01:05:42 (-0300, Hora oficial do Brasil)

country="United States"

lang=1033

osver=6.1.7601 NT Service Pack 1

compatibility_mode=1039 16777213 100 99 0 55011926 0 0

compatibility_mode=5893 16776574 100 94 19624456 120355133 0 0

scanned=150459

found=0

cleaned=0

scan_time=8824

Não foi achada nenhuma violação.

wings· 17 de mai.

Seu problema não está relacionado com contaminação.

Em relação ao teclado, pode ser problema físico (uma tecla presa, por exemplo).

Sugiro que crie um tópico na sala abaixo:

http://forum.imasters.com.br/forum/43-servidores-windows-e-windows-azure/

Um abraço...:bye:

wings· 22 de mai.

PROBLEMA RESOLVIDO

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.