[Resolvido] &nbspComputador muito lento e programas travando

[magmagmag 0]

Eu tenho um laptop Samsung com Windows 8 que comprei há menos de um ano. Recentemente, ele tem travado com frequência... Fica impossível de usar, e ele não consegue abrir nenhum programa mais pesado: aparece aquela tela azul dizendo que ocorreu o erro MEMORY_MANAGEMENT e ele reinicia. Eu uso o Avast como antivírus, e ele não encontrou nada. Tentei escanear com o Malwarebytes, ele encontrou dois trojans e teoricamente removeu, mas o problema continua. Meu amigo sugeriu que eu usasse o Advanced System Care, mas também não funcionou. Eu também segui os passos nessa página: http://www.tomshardware.com/faq/id-1...s-windows.html, e o resultado foi que o sistema encontrou arquivos corrompidos mas não conseguiu corrigi-los (e o problema persiste). Minha sobrinha gosta muito de jogos online, então achei que a resposta mais provável seria algum vírus, mas me disseram que isso pode ser problema de hardware (apesar de ele estar funcionando perfeitamente antes)... Decidi postar a pergunta aqui mesmo, se não for pertinente, por favor, me avisem.

 

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:18:10, on 05/11/2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Samsung\Settings\sSettings.exe
C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Users\Angélica\Desktop\hijack\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [bDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ContentTransferWMDetector.exe] C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [skyDrive] "C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Angélica\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Enviar para o Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Enviar para o Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU)
O9 - Extra 'Tools' menuitem: Enviar para o Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll
O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Security Service (BTHSSecurityMgr) - Intel® Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: CyberLink Product - 2013/06/13 23:44:09 (CLKMSVC10_38F51D56) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Easy Launcher - Samsung Electronics CO., LTD. - C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: HP LaserJet Professional M1210 MFP Series Receive Fax Service (HPM1210RcvFaxSrvc) - HP - C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: IntelliMemory - Condusiv Technologies - C:\Program Files\Condusiv Technologies\IntelliMemory\IntelliMem.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics CO., LTD. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 13575 bytes

Obrigada por qualquer ajuda! :)

[DigRam 144]

Boa Tarde! magmagmag

|- Desinstale: C:\Program Files (x86)\IObit\Advanced SystemCare 6 <<

-/-

|- Baixe: < ZHPDiag2.exe > < > ( ... de Nicolas Coolman )
|- Salve-o no disco local! ( C ou D )
|- Execute o ícone do pergaminho. ( ZHPDiag )



|- Clique: "CONFIGURE"



|- Clique: "Options" >> "All" >> OK



|- Clique: "CONFIGURE" >> "Full Analysis"
|- Aguarde a conclusão!
|- Caso ocorra travamentos e não possa obter o log,aborte a verificação completa e faça a customizada.
|- Volte a janela principal da ferramenta.



|- Clique "SEARCH" e aguarde a conclusão!
|- Ou clique "Options" >> "None".



|- Marque,apenas,a opção "Additional Scan (O88)".

~ Unselected Option:

O1,039,O40,O41,O42,O43,O44,O45,O46,O47,
O48,O49,O50,O51,O52,O53,O54,O55,O56,O57,
O58,O59,O60,O61,O62,O63,O64,O65,O66,O67,
O68,O69,O80,O81,O82,O83,O84,O85,O86,O87,
O89,O90,O91,O92
####

|- Desta forma,estas opções serão desabilitadas!



|- Clique OK e,ao concluir,poste o relatório! ( ZHPDiag.txt )
|- Ps: Se o log for extenso,envie-o à Pjjoint.malekal.

|- Ou acesse: < >

|- Maiores informações: < |Link| >

A+

[magmagmag 0]

Muito obrigada por responder tão rápido! :)

Um novo log foi criado a cada passo indicado... Como eu não tinha certeza de qual postar, aqui estão os três:

http://pjjoint.malekal.com/files.php?id=20131105_k6t11t10z7w9

(esse é o que foi criado depois de "full analysis")

http://pjjoint.malekal.com/files.php?id=20131106_v15m8o12l14r15

(esse é o de depois de "search")

http://pjjoint.malekal.com/files.php?id=20131106_c14p15c10x10u11

(esse é o último, depois de "aditional scan")

 

Não sei se esse programa deveria ter surtido algum efeito, ou se é uma ferramenta de diagnóstico, mas o problema persiste :(

Tem mais alguma coisa que você possa me sugerir?

Abraços

[DigRam 144]

Boa Noite! magmagmag

|- Execute este script na ferramenta ZHPFix.
|- Copie estas informações que estão em vermelho,para o Bloco de Notas.
|- Com o Bloco de Notas aberto,faça: ctrl+a >> ctrl+c
|- À seguir,minimize o Bloco de Notas.

script zhpfix
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Chave orfã
O4 - HKUS\S-1-5-21-3040202017-829934666-1125082906-1002\..\Run: [AdobeBridge] Chave orfã
O4 - GS\Desktop [Public]: Help Desk.lnk . (...) -- C:\Program Files (x86)\Samsung\Help Desk\HelpDesk.exe (.not file.)
O4 - GS\Desktop [Public]: Support Center.lnk . (...) -- C:\Program Files (x86)\Samsung\Support Center\GuaranaMain.exe (.not file.)
O43 - CFD: 03/01/2013 - 19:30:16 - [0,040] ----D C:\ProgramData\boost_interprocess
O45 - LFCP:[MD5.EE36DFC8B8B6061DE9560B1B8CC894EC] - 04/11/2013 - 22:18:39 ---A- - C:\Windows\Prefetch\AUTOSWEEP.EXE-82DAB64F.pf
O45 - LFCP:[MD5.126F08D73D992026224E2D6CA9EF2A7D] - 04/11/2013 - 22:19:11 ---A- - C:\Windows\Prefetch\PDVD10SERV.EXE-99C8A7B5.pf
O45 - LFCP:[MD5.3FA93BD302493CD8FCD145EA7BA40006] - 04/11/2013 - 22:19:12 ---A- - C:\Windows\Prefetch\VIRTUALDRIVE.EXE-018D4C1C.pf
O45 - LFCP:[MD5.1AB90504465DDE7A36FA9C49E9DF1523] - 04/11/2013 - 22:19:15 ---A- - C:\Windows\Prefetch\BRS.EXE-CF01349B.pf
O45 - LFCP:[MD5.DC036117EB08D70A4B447034C0A15424] - 04/11/2013 - 22:19:28 ---A- - C:\Windows\Prefetch\REMINDER.EXE-AB01D1AC.pf
O45 - LFCP:[MD5.E93F044CDBEB61B93DF51F53908ADAD4] - 04/11/2013 - 22:20:37 ---A- - C:\Windows\Prefetch\QUICKSETTINGS.EXE-7D11B60C.pf
O45 - LFCP:[MD5.3DD633E263FC4D69A7A55A4F151F1370] - 04/11/2013 - 22:22:51 ---A- - C:\Windows\Prefetch\DYNAMICLINKMEDIASERVER.EXE-53CA87A1.pf
O45 - LFCP:[MD5.A1EA80F41D80BC14CF43913AA5652DA2] - 04/11/2013 - 22:24:07 ---A- - C:\Windows\Prefetch\GUARANAMAIN.EXE-336B2644.pf
O45 - LFCP:[MD5.49DBF898705F5ADD93B45FFCFCF68C1B] - 04/11/2013 - 22:25:23 ---A- - C:\Windows\Prefetch\ASCTRAY.EXE-B3847CD1.pf
O45 - LFCP:[MD5.56EB36317C4A2FE84EDE27B13CC24E3A] - 04/11/2013 - 22:41:07 ---A- - C:\Windows\Prefetch\INTEGRATEDOFFICE.EXE-DFB67DA0.pf
O45 - LFCP:[MD5.1FA02ABF9180348B943627FA43EB5527] - 04/11/2013 - 23:04:55 ---A- - C:\Windows\Prefetch\DISKSCAN.EXE-0088FE26.pf
O45 - LFCP:[MD5.BA39B597777615EB1EBEA7841C198077] - 04/11/2013 - 23:16:27 ---A- - C:\Windows\Prefetch\SWMFILEDOWNLOADUTIL.EXE-6AFFBA74.pf
O45 - LFCP:[MD5.7DFD344E298624C53A1C99F20A666837] - 05/11/2013 - 11:51:52 ---A- - C:\Windows\Prefetch\dynreservedpri.db
O45 - LFCP:[MD5.F085BA62D0132981717AB303F3F36C9E] - 05/11/2013 - 12:07:37 ---A- - C:\Windows\Prefetch\EASYSETTINGSCMDSERVER.EXE-1B8CA773.pf
O45 - LFCP:[MD5.7A2306E10CB7AB4EC7850C8948D029A2] - 05/11/2013 - 12:08:39 ---A- - C:\Windows\Prefetch\MOBILEAPSET.EXE-2C67F0CE.pf
O45 - LFCP:[MD5.0C9945DC71E0B7956394C207561232F2] - 05/11/2013 - 12:08:57 ---A- - C:\Windows\Prefetch\CONTENTTRANSFERWMDETECTOR.EXE-B9153ED2.pf
O45 - LFCP:[MD5.411D8210C0BB653B38BE9365D5257BB3] - 05/11/2013 - 12:21:59 ---A- - C:\Windows\Prefetch\APPVLP.EXE-69CCA9BE.pf
O45 - LFCP:[MD5.F7573823FCA99DACF105DE9C8BA119AF] - 05/11/2013 - 12:31:59 ---A- - C:\Windows\Prefetch\MAVINJECT32.EXE-A39D6437.pf
O45 - LFCP:[MD5.4DAAF63E7262B56467699F52C7232E29] - 05/11/2013 - 13:54:31 ---A- - C:\Windows\Prefetch\SETTOUCHPADCONTROL64.EXE-CAF017E2.pf
O45 - LFCP:[MD5.03674258F517806747B774D96DE990C0] - 05/11/2013 - 18:28:39 ---A- - C:\Windows\Prefetch\UNINSTALLPROMOTE.EXE-B655A93B.pf
O45 - LFCP:[MD5.D9DA5A202EF68FCAE54E49B398EFB2C9] - 05/11/2013 - 18:28:44 ---A- - C:\Windows\Prefetch\ASCINIT.EXE-41581A9D.pf
O45 - LFCP:[MD5.9B855887D60400F449DB491A952329BE] - 05/11/2013 - 18:28:45 ---A- - C:\Windows\Prefetch\_IU14D2N.TMP-0C8E3BDC.pf
O45 - LFCP:[MD5.06F484612225BE23F7D54D0471645EEC] - 05/11/2013 - 19:15:15 ---A- - C:\Windows\Prefetch\VENDORAPIRUN64.EXE-358606D0.pf
O45 - LFCP:[MD5.E4039FCC6478347F6008499C55CC558E] - 06/10/2013 - 23:37:41 ---A- - C:\Windows\Prefetch\BUSH-WHACKER-2-FREE-TO-PLAY_S-08E6E26B.pf
O45 - LFCP:[MD5.4A6A8D52CA74DC28DB8624DD9C4261B3] - 07/10/2013 - 02:19:48 ---A- - C:\Windows\Prefetch\ROYALRIDDLES.EXE-5BC3BB9F.pf
O45 - LFCP:[MD5.03483C8AB30B4D8487C3B7567CECBECF] - 07/10/2013 - 13:12:06 ---A- - C:\Windows\Prefetch\SETUP_GF7664T1L1_D2172737910_-8129E7D0.pf
O45 - LFCP:[MD5.92D8B67951F32D86E0362C5D5226CD0C] - 07/10/2013 - 18:11:01 ---A- - C:\Windows\Prefetch\SETUP_GF8074T1L1_D2172811296_-E9466FA0.pf
O45 - LFCP:[MD5.FAE1CB55AEB41C284BEADF1BD50FBE81] - 09/10/2013 - 08:28:25 ---A- - C:\Windows\Prefetch\THETINYTALEEN.EXE-C3055993.pf
O45 - LFCP:[MD5.067A3A1ED465D659AD52C4716185A0DE] - 09/10/2013 - 13:05:40 ---A- - C:\Windows\Prefetch\ROYAL_ENVOY3-CAMPAIGN_FOR_THE-D2313AFC.pf
O45 - LFCP:[MD5.430DF62AB2FE2F5B339A1BF2C1DB1499] - 09/10/2013 - 13:10:22 ---A- - C:\Windows\Prefetch\CALIBRE-PARALLEL.EXE-60AF643B.pf
O45 - LFCP:[MD5.0C4FCAEA2F6720ED1A0133E91F5247BB] - 12/10/2013 - 02:01:26 ---A- - C:\Windows\Prefetch\EVERLONG_FULL_V3.25.EXE-9A957966.pf
O45 - LFCP:[MD5.EAC593523DD2D30CDDA7178CE47E9F92] - 12/10/2013 - 06:35:01 ---A- - C:\Windows\Prefetch\RPG_RT.EXE-B820FAAB.pf
O45 - LFCP:[MD5.99DE4A1119AE22A284DA1E93BCA1F7BB] - 12/10/2013 - 22:54:07 ---A- - C:\Windows\Prefetch\INST.EXE-C817D7CE.pf
O45 - LFCP:[MD5.A0B60919DFFF1D514937B1057DFDD554] - 14/10/2013 - 05:32:23 ---A- - C:\Windows\Prefetch\SETUP_GF7962T1L1_D2176911563_-4245F914.pf
O45 - LFCP:[MD5.470C00E48ACE23E1F838D759F8A39600] - 14/10/2013 - 11:28:36 ---A- - C:\Windows\Prefetch\FARMUP.EXE-2FDADD21.pf
O45 - LFCP:[MD5.9D0D27C4D3713D9825413576CDAB6A0B] - 18/10/2013 - 21:38:35 ---A- - C:\Windows\Prefetch\UNINSTAL.EXE-11DDCEA3.pf
O45 - LFCP:[MD5.991D66EDC47FF071C0C42A8793C2F01B] - 19/10/2013 - 09:21:03 ---A- - C:\Windows\Prefetch\FAIRWAY SOLITAIRE TEE TO PLAY-164823B0.pf
O45 - LFCP:[MD5.5A6AE9A01CFB3DF5F283E3A1DF58A813] - 21/10/2013 - 15:34:54 ---A- - C:\Windows\Prefetch\TOOLBARACCEPTRATE.EXE-CDB8DC65.pf
O45 - LFCP:[MD5.CDD8B9238733BE978D9EEEDE2583CB99] - 21/10/2013 - 15:36:37 ---A- - C:\Windows\Prefetch\UNINSTALLPROMOTE.EXE-F6225016.pf
O45 - LFCP:[MD5.CBE2D22F180611D603C52CFF9B4FE69A] - 21/10/2013 - 15:37:32 ---A- - C:\Windows\Prefetch\NEWYEAR.EXE-FC09357D.pf
O45 - LFCP:[MD5.5FAF8DAE4D179096FA6ED2CD32B133FA] - 21/10/2013 - 19:22:50 ---A- - C:\Windows\Prefetch\AVCFREE.EXE-D8E19FB3.pf
O45 - LFCP:[MD5.FB4EF6CB1BF85014546625A41D47EBC2] - 21/10/2013 - 20:03:08 ---A- - C:\Windows\Prefetch\ASCTOOLTIPS.EXE-363D37F7.pf
O45 - LFCP:[MD5.CE9CF7CBB07164AA00E6FCFC6D492121] - 21/10/2013 - 20:14:46 ---A- - C:\Windows\Prefetch\SUR11_SHORTCUTFIXER.EXE-522B3247.pf
O45 - LFCP:[MD5.7DF908878001A4247EF601F7EA563E16] - 22/10/2013 - 17:21:28 ---A- - C:\Windows\Prefetch\SMANAGER.EXE-DCDBB0BC.pf
O45 - LFCP:[MD5.0E107AAFF1B1DD46B3C2FBBFE8002584] - 22/10/2013 - 23:54:56 ---A- - C:\Windows\Prefetch\MANAGER1.EXE-AAA339E9.pf
O45 - LFCP:[MD5.33C28B105FB5FA5D98BFE529F9E4F939] - 22/10/2013 - 23:58:20 ---A- - C:\Windows\Prefetch\SSERVICE.EXE-754488AD.pf
O45 - LFCP:[MD5.B7369B4EF5F55A4C213EEE62DDEA13CB] - 26/10/2013 - 00:56:42 ---A- - C:\Windows\Prefetch\PEV.DAT-B297A642.pf
O45 - LFCP:[MD5.C80C8A8BFD3955007A435C4B1B6B86C8] - 26/10/2013 - 00:56:48 ---A- - C:\Windows\Prefetch\DDS.SCR-3AD3B716.pf
O45 - LFCP:[MD5.15B142B7A89CFE41D7B05578E63801EF] - 26/10/2013 - 00:56:57 ---A- - C:\Windows\Prefetch\SED.DAT-D98F3687.pf
O45 - LFCP:[MD5.FE021CFEC508BC055A2D7ECFC8B61D79] - 26/10/2013 - 00:56:58 ---A- - C:\Windows\Prefetch\FIND.EXE-7A0E8197.pf
O45 - LFCP:[MD5.71D323E6B26E8B316D58DC7FFB0B0E75] - 26/10/2013 - 00:57:09 ---A- - C:\Windows\Prefetch\SORT.EXE-318FF9A2.pf
O45 - LFCP:[MD5.70186CE0C6CC1B7F71EB8C0B7E764B64] - 26/10/2013 - 01:07:19 ---A- - C:\Windows\Prefetch\CLMLSVC_P2G8.EXE-B2D16FDB.pf
O45 - LFCP:[MD5.47E152CA174B62E9642D8D562168882E] - 26/10/2013 - 01:54:04 ---A- - C:\Windows\Prefetch\VZ1LL9MV.EXE-D8FBBACF.pf
O87 - FAEL: "{906B19DF-D9A5-4AD2-9456-3BFC58009146}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Angélica\AppData\Local\Temp\7zSCCF4.tmp\SymNRT.exe (.not file.)
O87 - FAEL: "{F47D1EE4-506B-4691-A51A-F2FC7612B3B9}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Angélica\AppData\Local\Temp\7zSCCF4.tmp\SymNRT.exe (.not file.)
O87 - FAEL: "{6C997FB4-DCA5-4609-858F-FB6E1C2657C2}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Angélica\AppData\Local\Temp\7zS8C8E.tmp\EasyInst64.exe (.not file.)
O87 - FAEL: "{F0CB9DC6-C4A7-4A2F-B518-8E89E5A5A41C}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Angélica\AppData\Local\Temp\7zS8C8E.tmp\EasyInst64.exe (.not file.)
O87 - FAEL: "{9D1BA873-CC16-42B4-A9EB-D9DA0E98F2A8}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Angélica\AppData\Local\Temp\7zS4C5F.tmp\EasyInst64.exe (.not file.)
O87 - FAEL: "{E39DA6E7-D30B-4C60-9F74-8B6F763ED831}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Angélica\AppData\Local\Temp\7zS4C5F.tmp\EasyInst64.exe (.not file.)

C:\ProgramData\boost_interprocess
C:\Users\Angélica\Programas Úteis\Sony Vegas Pro 9 + Crack and KeyGen\vegaspro90_32bit.exe
C:\Users\Angélica\Programas Úteis\Sony Vegas Pro 9 + Crack and KeyGen\vegaspro90_32bit.exe
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\Softonic] =>Toolbar.Conduit

firewallraz
emptytemp
emptyflash
emptyclsid

|- Abra a ferramenta ZHPFix.
|- Clique IMPORTAÇÃO >> OK >> Acione o atalho "ctrl+v".
|- Clique "GO".
|- Poste o relatório!

A+

[magmagmag 0]

Obrigada mais uma vez!

Aqui está o relatório:

 

 

Rapport de ZHPFix 2013.11.4.1 par Nicolas Coolman, Update du 03/11/2013
Fichier d'export Registre :
Run by Angélica at 06/11/2013 00:11:47
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit (Build 9200)

Reciclagem vazia (27mn 57s)

========== Processo memória ==========
ELIMINÉ: Memory Process: C:\Users\Angélica\Programas Úteis\Sony Vegas Pro 9 + Crack and KeyGen\vegaspro90_32bit.exe

========== Chaves do Registo ==========
ELIMINÉ: [HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
ELIMINÉ: HKCU\Software\Softonic

========== Valores do Registo ==========
ELIMINÉ: Toolbar: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
ELIMINÉ RunValue: AdobeBridge
ELIMINÉ: {906B19DF-D9A5-4AD2-9456-3BFC58009146}
ELIMINÉ: {F47D1EE4-506B-4691-A51A-F2FC7612B3B9}
ELIMINÉ: {6C997FB4-DCA5-4609-858F-FB6E1C2657C2}
ELIMINÉ: {F0CB9DC6-C4A7-4A2F-B518-8E89E5A5A41C}
ELIMINÉ: {9D1BA873-CC16-42B4-A9EB-D9DA0E98F2A8}
ELIMINÉ: {E39DA6E7-D30B-4C60-9F74-8B6F763ED831}
Ausente Valor Perfil Padrão: FirewallRaz :
Ausente Valor Perfil Domínio FirewallRaz :
ELIMINÉ: FirewallRaz (Domain) : {808F1451-4108-46FD-ADBB-F17324B5F0BD}
ELIMINÉ: FirewallRaz (Domain) : {E7985E1D-C36F-4787-80A8-6350D07E9266}
ELIMINÉ: FirewallRaz (Domain) : NetPres-In-TCP-NoScope
ELIMINÉ: FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
ELIMINÉ: FirewallRaz (None) : NetPres-WSD-In-UDP
ELIMINÉ: FirewallRaz (None) : NetPres-WSD-Out-UDP
ELIMINÉ: FirewallRaz (Public) : NetPres-In-TCP
ELIMINÉ: FirewallRaz (Public) : NetPres-Out-TCP
ELIMINÉ: FirewallRaz (None) : MCX-Prov-Out-TCP
ELIMINÉ: FirewallRaz (None) : MCX-McrMgr-Out-TCP
ELIMINÉ: FirewallRaz (Private) : TCP Query User{4454795A-3DFB-44AD-8073-126F95BDF793}C:\program files (x86)\symantec\norton online backup\nobuclient.exe
ELIMINÉ: FirewallRaz (Private) : UDP Query User{E2C22E58-EA2D-4ACB-A9C5-E331C721C227}C:\program files (x86)\symantec\norton online backup\nobuclient.exe
ELIMINÉ: FirewallRaz (Public) : TCP Query User{7B2F9B46-389F-4423-BE67-9EECB9CA58A2}C:\users\angélica\appdata\roaming\dropbox\bin\dropbox.exe
ELIMINÉ: FirewallRaz (Public) : UDP Query User{20F3D85A-43D9-4114-AF21-1C3358169390}C:\users\angélica\appdata\roaming\dropbox\bin\dropbox.exe

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\users\public\desktop\help desk.lnk
ELIMINÉ: c:\users\public\desktop\support center.lnk
ELIMINÉ: c:\windows\prefetch\autosweep.exe-82dab64f.pf
ELIMINÉ: c:\windows\prefetch\pdvd10serv.exe-99c8a7b5.pf
ELIMINÉ: c:\windows\prefetch\virtualdrive.exe-018d4c1c.pf
ELIMINÉ: c:\windows\prefetch\brs.exe-cf01349b.pf
ELIMINÉ: c:\windows\prefetch\reminder.exe-ab01d1ac.pf
ELIMINÉ: c:\windows\prefetch\quicksettings.exe-7d11b60c.pf
ELIMINÉ: c:\windows\prefetch\dynamiclinkmediaserver.exe-53ca87a1.pf
ELIMINÉ: c:\windows\prefetch\guaranamain.exe-336b2644.pf
ELIMINÉ: c:\windows\prefetch\asctray.exe-b3847cd1.pf
ELIMINÉ: c:\windows\prefetch\integratedoffice.exe-dfb67da0.pf
ELIMINÉ: c:\windows\prefetch\diskscan.exe-0088fe26.pf
ELIMINÉ: c:\windows\prefetch\swmfiledownloadutil.exe-6affba74.pf
ELIMINÉ: c:\windows\prefetch\dynreservedpri.db
ELIMINÉ: c:\windows\prefetch\easysettingscmdserver.exe-1b8ca773.pf
ELIMINÉ: c:\windows\prefetch\mobileapset.exe-2c67f0ce.pf
ELIMINÉ: c:\windows\prefetch\contenttransferwmdetector.exe-b9153ed2.pf
ELIMINÉ: c:\windows\prefetch\appvlp.exe-69cca9be.pf
ELIMINÉ: c:\windows\prefetch\mavinject32.exe-a39d6437.pf
ELIMINÉ: c:\windows\prefetch\settouchpadcontrol64.exe-caf017e2.pf
ELIMINÉ: c:\windows\prefetch\uninstallpromote.exe-b655a93b.pf
ELIMINÉ: c:\windows\prefetch\ascinit.exe-41581a9d.pf
ELIMINÉ: c:\windows\prefetch\_iu14d2n.tmp-0c8e3bdc.pf
ELIMINÉ: c:\windows\prefetch\vendorapirun64.exe-358606d0.pf
ELIMINÉ: c:\windows\prefetch\bush-whacker-2-free-to-play_s-08e6e26b.pf
ELIMINÉ: c:\windows\prefetch\royalriddles.exe-5bc3bb9f.pf
ELIMINÉ: c:\windows\prefetch\setup_gf7664t1l1_d2172737910_-8129e7d0.pf
ELIMINÉ: c:\windows\prefetch\setup_gf8074t1l1_d2172811296_-e9466fa0.pf
ELIMINÉ: c:\windows\prefetch\thetinytaleen.exe-c3055993.pf
ELIMINÉ: c:\windows\prefetch\royal_envoy3-campaign_for_the-d2313afc.pf
ELIMINÉ: c:\windows\prefetch\calibre-parallel.exe-60af643b.pf
ELIMINÉ: c:\windows\prefetch\everlong_full_v3.25.exe-9a957966.pf
ELIMINÉ: c:\windows\prefetch\rpg_rt.exe-b820faab.pf
ELIMINÉ: c:\windows\prefetch\inst.exe-c817d7ce.pf
ELIMINÉ: c:\windows\prefetch\setup_gf7962t1l1_d2176911563_-4245f914.pf
ELIMINÉ: c:\windows\prefetch\farmup.exe-2fdadd21.pf
ELIMINÉ: c:\windows\prefetch\uninstal.exe-11ddcea3.pf
ELIMINÉ: c:\windows\prefetch\fairway solitaire tee to play-164823b0.pf
ELIMINÉ: c:\windows\prefetch\toolbaracceptrate.exe-cdb8dc65.pf
ELIMINÉ: c:\windows\prefetch\uninstallpromote.exe-f6225016.pf
ELIMINÉ: c:\windows\prefetch\newyear.exe-fc09357d.pf
ELIMINÉ: c:\windows\prefetch\avcfree.exe-d8e19fb3.pf
ELIMINÉ: c:\windows\prefetch\asctooltips.exe-363d37f7.pf
ELIMINÉ: c:\windows\prefetch\sur11_shortcutfixer.exe-522b3247.pf
ELIMINÉ: c:\windows\prefetch\smanager.exe-dcdbb0bc.pf
ELIMINÉ: c:\windows\prefetch\manager1.exe-aaa339e9.pf
ELIMINÉ: c:\windows\prefetch\sservice.exe-754488ad.pf
ELIMINÉ: c:\windows\prefetch\pev.dat-b297a642.pf
ELIMINÉ: c:\windows\prefetch\dds.scr-3ad3b716.pf
ELIMINÉ: c:\windows\prefetch\sed.dat-d98f3687.pf
ELIMINÉ: c:\windows\prefetch\find.exe-7a0e8197.pf
ELIMINÉ: c:\windows\prefetch\sort.exe-318ff9a2.pf
ELIMINÉ: c:\windows\prefetch\clmlsvc_p2g8.exe-b2d16fdb.pf
ELIMINÉ: c:\windows\prefetch\vz1ll9mv.exe-d8fbbacf.pf
ELIMINÉ Temporários windows (0) (0 octets)
ELIMINÉ Flash Cookies (0) (0 octets)


========== Recapitulativo ==========
1 : Processo memória
2 : Chaves do Registo
24 : Valores do Registo
1 : Pastas
57 : Ficheiros


End of clean in 29mn 41s

========== Caminho do ficheiro do relatório ==========
C:\Users\Angélica\AppData\Roaming\ZHP\ZHPFix[R1].txt - 06/11/2013 00:39:45 [5900]

 

Infelizmente, o problema ainda continua.

Mais alguma sugestão?

Abraços

[DigRam 144]

Bom Dia! magmagmag

|- Execute estes programas ou ferramentas,na ordem estabelecida ou dispostas.

-/-

|- Baixe: < SFTGC > ( ... de Pierre13 )
|- Salve-o no desktop!
|- Para Windows Vista e 7,execute "SFTGC.exe" como administrador!



|- Execute-o e clique "Go".
|- Aguarde seu término,que é rápido.
|- Poste o relatório! ( SFT.txt )
|- Ps: De acordo com o tamanho do relatório,não poste-o diretamente!
|- Acesse,para essa tarefa! < >

-/-

|- Baixe: < > ( ... by Oleg N. Scherbakov )
|- Salve-o no desktop!
|- Desabilite seu antivírus!
|- Para Windows 7,clique direito em JRT.exe e execute-o ...
|- Aguarde a conclusão e poste o relatório. ( JRT.txt )

-/-

|- Baixe: < zoek > ( ... by Smeenk )

|- Ou aqui! < zoek.exe >

|- Salve-o no desktop!
|- Desabilite seu antivírus!
|- Para Windows 7,execute zoek.exe como administrador.

startupall;
installedprogs;
chromelook;
iedefaults;
autoclean;

|- Copie e cole estas informações,em vermelho,no campo da ferramenta.
|- Clique "Run Script".

Zoek.exe is running now.
Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

|- Surgirão estas informações,pedindo-lhe que aguarde o relatório.



|- Aceite e/ou confirme o reboot!

zoek.hta failed by unknown error.
Restart computer, and try again.

|- Ps: Ao obter algum erro,reinicie o PC e execute,novamente,a ferramenta.
|- Poste o relatório,que estará em C:\zoek-results.txt <<

A+

[magmagmag 0]

Olá! :)

Muito obrigada pela sua atenção até agora!

Aqui estão os relatórios:

http://cjoint.com/?CKhcusY2DHL sftgc.txt

http://cjoint.com/?CKhcvqAC6Ml jrt.txt

http://cjoint.com/?CKhcvPENhFr zoek-results.log

 

Infelizmente, o computador continua muito lento... Chega a levar 3 minutos para abrir uma pasta!

Existe mais alguma coisa que eu possa fazer? Será que não é problema de hardware?

Abraços

[DigRam 144]

Bom Dia! magmagmag

==== Possible Rootkit Infection ======================

C:\windows\installer\{01d57b9a-025f-a67c-2586-a5166cad106b}\L
C:\windows\installer\{01d57b9a-025f-a67c-2586-a5166cad106b}\U

#####
|- Estas detecções da Zoek apontam infecção pelo Zero Access.
|- Sigamos,portanto,essa linha de indicação ao utilizar RogueKiller.

Infelizmente, o computador continua muito lento... Chega a levar 3 minutos para abrir uma pasta!

Existe mais alguma coisa que eu possa fazer? Será que não é problema de hardware?

 

|- Descartando a possível presença ou ação de rootkit,nesse sintoma,existe essa possibilidade.

-/-

 

|- Baixe: < FSS > ( ... by Farbar )
|- Salve-a no desktop!



|- Para Windows Vista ou 7,execute "FSS.exe" como administrador.

|- <1> Internet Services
|- <2> Windows Firewall
|- <3> System Restore
|- <4> Security Center/Action Center
|- <5> Windows Update
|- <6> Windows Defender



|- Marque as seguintes caixas!
|- Clique em "Scan" e aguarde o seu término!
|- Poste o relatório! ( FSS.txt )

-/-

|- Baixe: < RogueKiller > ( ... par tigzy ) ( 32 bits version )

|- Ou: < > ( ... par tigzy ) ( 64 bits version )

|- Salve-o no desktop!
|- Feche aplicativos que estejam abertos!
|- Execute RogueKiller.exe e aceite a Eula.



|- Aguarde a finalização de seu Pre-scan.



|- Dê início ao diagnóstico,clicando no botão "Verificar".
|- Exemplo: Mode: Verificar -- Date: mm/dd/2013 00:52:24
|- Poste o relatório: RKreport[1].txt

A+

[magmagmag 0]

Olá! :)

Aqui estão os relatórios:

http://cjoint.com/?CKhtbyP4bfp FSS

http://cjoint.com/?CKhtbZinTbt RKreport

 

Abraços

[DigRam 144]

Boa Tarde! magmagmag

|- Abra,novamente,a ferramenta RogueKiller.
|- Clique em Verificar.



|- Clique na guia "Registro".

[HJPOL] [HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> ENCONTRADO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> ENCONTRADO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> ENCONTRADO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> ENCONTRADO

|- Marque as checkbox destas entradas!
|- Clique "Deletar" e aguarde a conclusão!
|- Poste o relatório!

 

-/-

 

|- Baixe Farbar Recovery Scan Tool.

|- Baixe: < > ( ... by Farbar )

|- Ou aqui...

< Farbar Recovery Scan Tool 64-Bit >

|- Ou aqui,para sistemas 64bit!
|- Salve-o no desktop! (Área de trabalho ...)
|- Execute a ferramenta! Clique "Yes" >> "Scan".



|- Antes de clicar "Scan",verifique se as caixinhas em "Whitelist" estão assinaladas.
|- Em "Optional Scan",deixe marcada a checkbox "Addition.txt".
|- Poste o relatório! (FRST.txt)
|- Ps: Será gerado,também,o relatório "Addition.txt" que estará disponibilizado na 1ª execução da ferramenta.

A+

[magmagmag 0]

Aqui estão os novos relatórios:

http://cjoint.com/?CKhunl3liXf RKreport

http://cjoint.com/?CKhuogm7SSi FRST

http://cjoint.com/?CKhuoEN8f8G Addition

 

(Eu não estou mais agradecendo pela sua ajuda o tempo todo porque acho que já está ficando repetitivo... Mas continuo muito grata. Espero que o agradecimento fique subentendido :) )

[DigRam 144]

Boa Noite! magmagmag

|- Copie estas informações que estão em vermelho,para o Bloco de Notas.
|- Salve-o no desktop,com o nome fixlist.txt.

start
2013-10-22 22:27 - 2013-10-22 22:27 - 80916480 _____ C:\windows\system32\config\software.iobit
2013-10-22 22:27 - 2013-10-22 22:27 - 00307200 _____ C:\windows\system32\config\default.iobit
2013-10-22 22:27 - 2013-10-22 22:27 - 00069632 _____ C:\windows\system32\config\sam.iobit
2013-10-22 22:27 - 2013-10-22 22:27 - 00028672 _____ C:\windows\system32\config\security.iobit
2013-10-21 21:08 - 2013-04-17 20:20 - 00026432 _____ (IObit) C:\windows\system32\RegistryDefragBootTime.exe
2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 ____D C:\Users\Default\AppData\Roaming\IObit
2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2013-10-21 16:36 - 2013-10-21 16:37 - 00000000 ____D C:\ProgramData\IObit
2013-10-21 16:36 - 2013-10-21 16:36 - 00000000 ____D C:\Users\Angélica\AppData\Roaming\IObit
2013-10-21 16:34 - 2013-10-21 16:34 - 00000000 ____D C:\Program Files (x86)\IObit
2013-11-06 01:40 - 2013-04-15 22:39 - 00000000 ____D C:\Users\Angélica\AppData\Roaming\uTorrent
2013-11-05 15:18 - 2013-11-05 14:54 - 00000000 ____D C:\Users\Angélica\Desktop\hijack
BHO: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
C:\Users\Angélica\AppData\Local\Temp\ntdll_dump.dll
S3 SBIOSIO; \??\C:\Users\Angélica\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [x]
S3 TVICPORT; \??\C:\windows\system32\DRIVERS\TVICPORT.SYS [x]
S3 UCORESYS; \??\C:\MfgDiag\DiagTools\ReadDMI8\UCORESYS.sys [x]
Task: {0CD19565-4A0E-44C0-B81C-C48D98C09B49} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\SymErr.exe
Task: {1E761FE0-9C6F-492A-92DA-08800338F086} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\SymErr.exe
Task: {2327D5A8-BD9D-4D2A-9F02-5AB3EB4B3AC6} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\WSCStub.exe
AlternateDataStreams: C:\ProgramData\Temp:1A45D40E
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F
AlternateDataStreams: C:\ProgramData\Temp:46B52E68
AlternateDataStreams: C:\ProgramData\Temp:6E6A4F42
AlternateDataStreams: C:\ProgramData\Temp:CB959782
AlternateDataStreams: C:\ProgramData\Temp:E326D1D1
end

|- Execute a ferramenta FRST/FRST64 >> Clique "Fix".
|- Aguarde e,à seguir,poste o relatório! (Fixlog.txt)

A+

[magmagmag 0]

Olá!

Aqui está o novo relatório:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-10-2013
Ran by Angélica at 2013-11-08 11:38:43 Run:1
Running from C:\Users\Angélica\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
2013-10-22 22:27 - 2013-10-22 22:27 - 80916480 _____ C:\windows\system32\config\software.iobit
2013-10-22 22:27 - 2013-10-22 22:27 - 00307200 _____ C:\windows\system32\config\default.iobit
2013-10-22 22:27 - 2013-10-22 22:27 - 00069632 _____ C:\windows\system32\config\sam.iobit
2013-10-22 22:27 - 2013-10-22 22:27 - 00028672 _____ C:\windows\system32\config\security.iobit
2013-10-21 21:08 - 2013-04-17 20:20 - 00026432 _____ (IObit) C:\windows\system32\RegistryDefragBootTime.exe
2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 ____D C:\Users\Default\AppData\Roaming\IObit
2013-10-21 20:09 - 2013-10-21 20:09 - 00000000 ____D C:\Users\Default User\AppData\Roaming\IObit
2013-10-21 16:36 - 2013-10-21 16:37 - 00000000 ____D C:\ProgramData\IObit
2013-10-21 16:36 - 2013-10-21 16:36 - 00000000 ____D C:\Users\Angélica\AppData\Roaming\IObit
2013-10-21 16:34 - 2013-10-21 16:34 - 00000000 ____D C:\Program Files (x86)\IObit
2013-11-06 01:40 - 2013-04-15 22:39 - 00000000 ____D C:\Users\Angélica\AppData\Roaming\uTorrent
2013-11-05 15:18 - 2013-11-05 14:54 - 00000000 ____D C:\Users\Angélica\Desktop\hijack
BHO: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
C:\Users\Angélica\AppData\Local\Temp\ntdll_dump.dll
S3 SBIOSIO; \??\C:\Users\Angélica\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [x]
S3 TVICPORT; \??\C:\windows\system32\DRIVERS\TVICPORT.SYS [x]
S3 UCORESYS; \??\C:\MfgDiag\DiagTools\ReadDMI8\UCORESYS.sys [x]
Task: {0CD19565-4A0E-44C0-B81C-C48D98C09B49} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\SymErr.exe
Task: {1E761FE0-9C6F-492A-92DA-08800338F086} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\SymErr.exe
Task: {2327D5A8-BD9D-4D2A-9F02-5AB3EB4B3AC6} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.3.1.22\WSCStub.exe
AlternateDataStreams: C:\ProgramData\Temp:1A45D40E
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F
AlternateDataStreams: C:\ProgramData\Temp:46B52E68
AlternateDataStreams: C:\ProgramData\Temp:6E6A4F42
AlternateDataStreams: C:\ProgramData\Temp:CB959782
AlternateDataStreams: C:\ProgramData\Temp:E326D1D1
end
*****************

C:\windows\system32\config\software.iobit => Moved successfully.
C:\windows\system32\config\default.iobit => Moved successfully.
C:\windows\system32\config\sam.iobit => Moved successfully.
C:\windows\system32\config\security.iobit => Moved successfully.
C:\windows\system32\RegistryDefragBootTime.exe => Moved successfully.
C:\Users\Default\AppData\Roaming\IObit => Moved successfully.
"C:\Users\Default User\AppData\Roaming\IObit" => File/Directory not found.
C:\ProgramData\IObit => Moved successfully.
C:\Users\Angélica\AppData\Roaming\IObit => Moved successfully.
C:\Program Files (x86)\IObit => Moved successfully.
C:\Users\Angélica\AppData\Roaming\uTorrent => Moved successfully.
C:\Users\Angélica\Desktop\hijack => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Key deleted successfully.
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Key not found.
"C:\Users\Angélica\AppData\Local\Temp\ntdll_dump.dll" => File/Directory not found.
SBIOSIO => Service deleted successfully.
TVICPORT => Service deleted successfully.
UCORESYS => Service deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0CD19565-4A0E-44C0-B81C-C48D98C09B49} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0CD19565-4A0E-44C0-B81C-C48D98C09B49} => Key deleted successfully.
C:\Windows\System32\Tasks\Norton Internet Security\Norton Error Processor => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Internet Security\Norton Error Processor => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1E761FE0-9C6F-492A-92DA-08800338F086} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1E761FE0-9C6F-492A-92DA-08800338F086} => Key deleted successfully.
C:\Windows\System32\Tasks\Norton Internet Security\Norton Error Analyzer => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton Internet Security\Norton Error Analyzer => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2327D5A8-BD9D-4D2A-9F02-5AB3EB4B3AC6} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2327D5A8-BD9D-4D2A-9F02-5AB3EB4B3AC6} => Key deleted successfully.
C:\Windows\System32\Tasks\Norton WSC Integration => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Norton WSC Integration => Key deleted successfully.
C:\ProgramData\Temp => ":1A45D40E" ADS removed successfully.
C:\ProgramData\Temp => ":2CB9631F" ADS removed successfully.
C:\ProgramData\Temp => ":46B52E68" ADS removed successfully.
C:\ProgramData\Temp => ":6E6A4F42" ADS removed successfully.
C:\ProgramData\Temp => ":CB959782" ADS removed successfully.
C:\ProgramData\Temp => ":E326D1D1" ADS removed successfully.

==== End of Fixlog ====

 

Eu não estou usando esse computador, então não tenho como ter certeza se o problema foi resolvido... De acordo com os resultados, existe alguma indicação de mais algum problema? Eu provavelmente só vou poder testar o computador amanhã à noite...

Abraços

[DigRam 144]

Boa Tarde! magmagmag

Eu não estou usando esse computador, então não tenho como ter certeza se o problema foi resolvido... De acordo com os resultados, existe alguma indicação de mais algum problema? Eu provavelmente só vou poder testar o computador amanhã à noite...

|- Até amanhã à noite,executaremos algumas correções que podem ser automáticas ou manuais.

|- Ps: A certeza em todo este trabalho,virá após os testes ao operar o Notebook e da execução de ferramentas corretivas.

-/-

|- Copie estas informações,que estão em vermelho,para o Bloco de Notas.

|- Salve-o no desktop,com o nome fixlist.txt.

|- Ps: Delete o Bloco de Notas,que foi estabelecido no procedimento anterior,antes de clicar "Fix".

start

2013-11-06 23:04 - 2013-02-21 16:59 - 02063240 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe

2013-11-06 23:04 - 2013-01-12 23:51 - 00003004 _____ C:\ProgramData\MakeMarkerFile.xml

2013-10-08 22:24 - 2013-04-24 11:40 - 00003790 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater

C:\Users\Public\Desktop\sample_112013_2124.zip

C:\Users\Angélica\AppData\Roaming\uTorrent

C:\ProgramData\boost_interprocess

C:\ProgramData\MakeMarkerFile.exe

C:\Users\EasySurvey\EasySurvey.exe

end

|- Execute a ferramenta FRST/FRST64 >> Clique "Fix".

|- Aguarde e,à seguir,poste o relatório! (Fixlog.txt)

A+

[magmagmag 0]

Aqui está o novo relatório:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-11-2013 01

Ran by Angélica at 2013-11-11 01:38:02 Run:2

Running from C:\Users\Angélica\Desktop

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

2013-11-06 23:04 - 2013-02-21 16:59 - 02063240 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe

2013-11-06 23:04 - 2013-01-12 23:51 - 00003004 _____ C:\ProgramData\MakeMarkerFile.xml

2013-10-08 22:24 - 2013-04-24 11:40 - 00003790 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater

C:\Users\Public\Desktop\sample_112013_2124.zip

C:\Users\Angélica\AppData\Roaming\uTorrent

C:\ProgramData\boost_interprocess

C:\ProgramData\MakeMarkerFile.exe

C:\Users\EasySurvey\EasySurvey.exe

end

*****************

C:\ProgramData\MakeMarkerFile.exe => Moved successfully.

C:\ProgramData\MakeMarkerFile.xml => Moved successfully.

C:\windows\System32\Tasks\Adobe Flash Player Updater => Moved successfully.

C:\Users\Public\Desktop\sample_112013_2124.zip => Moved successfully.

"C:\Users\Angélica\AppData\Roaming\uTorrent" => File/Directory not found.

"C:\ProgramData\boost_interprocess" => File/Directory not found.

"C:\ProgramData\MakeMarkerFile.exe" => File/Directory not found.

C:\Users\EasySurvey\EasySurvey.exe => Moved successfully.

==== End of Fixlog ====

Eu testei o computador, e o problema continua. :(

Mais alguma sugestão?

[DigRam 144]

Boa Tarde! magmagmag

|- Baixe: |DelFix| ( ... de Xplode )



|- Estando na página,clique na seta verde para o download.
|- Salve-a em um local conveniente! ( desktop! )
|- Feche aplicativos que estejam abertos.



|- Execute-a!
|- Com as 3 checkbox marcadas!
|- Clique "Run".
|- Poste o relatório!

-/-

|- Baixe: < JetClean 1.5.0 > ( ... by BlueSprig.com )

< Maiores informações! > << Leia aqui!

|- Salve-o em Arquivos de programas. ( jetclean-setup.exe )



|- Instale o software e na guia "1-Click",escolha a opção "Registry Clean".
|- Vá em "Scan Now" e escolha: Shut down PC after Repair



|- Ou escolhendo a opção "Scan & Repair",sem o reboot do PC.

< JetBoost >



|- À seguir,tente melhorar a performance com o JetBoost.

-/-

|- Assista a este vídeo que prioriza o comando /SPOTFIX,para a busca de erros no Windows 8.
|- Abra o prompt de comando como admin e agende para o próximo boot a verificação checkdisk,digitando o comando CHKDSK /SPOTFIX. ( Não inclua o ponto final! )
|- Informe se ocorreu alguma melhora.

A+

[magmagmag 0]

Olá!

Eu fiz o que você sugeriu, mas o computador continua muito lento. O relatório do DelFix eu fechei antes de verificar onde o arquivo estava, e agora não consigo encontrar em lugar nenhum :/ (Alguma ideia de onde ele possa estar?)

Tem mais alguma coisa que eu possa fazer?

Abraços

[DigRam 144]

Boa Noite! magmagmag

Eu fiz o que você sugeriu, mas o computador continua muito lento. O relatório do DelFix eu fechei antes de verificar onde o arquivo estava, e agora não consigo encontrar em lugar nenhum :/ (Alguma ideia de onde ele possa estar?)

Tem mais alguma coisa que eu possa fazer?

|- O seu caso é um desafio e a formatação seria mais indicada,para uma pronta solução.

-/-

|- Baixe: < >

|- Ou aqui: < Windows Repair >

|- Descompacte-o para o seu pendrive!
|- Abra a pasta "Tweaking.com - Windows Repair",que foi criada,e execute "Repair_Windows.exe".



|- Ps: Estabeleça 'salvaguardas',antes de executar a ferramenta!
|- Clique: Step 4 -> Create -> Backup. <- Nessa ordem!

Reset Registry Permissions
Reset File Permissions
Register System Files
Repair WMI
Remove Policies Set By Infections
Remove Temp Files
Repair Proxy Settings
Unhide Non System Files
Set Windows Services To Default Startup

|- Clique: < >
|- Marque todas as opções logo àcima.



|- Mantenha estas marcações e Clique Start.
|- Haverá reboot! <- Aguarde!

Abs!

 

[magmagmag 0]

Desculpe a pergunta meio besta, mas... Se eu formatar o computador não vou perder as coisas que tenho nele? Estou mais preocupada com o sistema operacional e o Office, que vieram com o computador quando comprei e eu não sei reinstalar...

[DigRam 144]

Desculpe a pergunta meio besta, mas... Se eu formatar o computador não vou perder as coisas que tenho nele? Estou mais preocupada com o sistema operacional e o Office, que vieram com o computador quando comprei e eu não sei reinstalar...

Boa Noite! magmagmag

 

|- Sim! Infelizmente irá perder seus softwares e a reinstalação do SO,ficará comprometida já que não dispõe do CD do W8 e Office.

 

A+