O Windows encontrou um problema e precisa ser fechado

Faça o download do Hijackthis:
http://www.trendsecure.com/portal/en-US/_download/HiJackThis.zip

Extraia o arquivo para uma pasta em c:\ (Exemplo: c:\Hijackthis)
Execute o aplicativo e escolha a opção Do a system scan and save log file.
Crie um novo tópico em: Segurança: Vírus, spywares e malwares.
Copie e Cole o seu log em sua resposta.

* Divulgue a Luz., Cultive a Paz !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:15:10, on 21/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\egui.exe
C:\Arquivos de programas\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Arquivos de programas\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ASUS\Asus Probe\AsusProb.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
C:\Arquivos de programas\IObit\Advanced SystemCare 3\AWC.exe
C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe
C:\Arquivos de programas\Windows Live\Contacts\wlcomm.exe
C:\Arquivos de programas\Internet Explorer\iexplore.exe
C:\Arquivos de programas\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\explorer.exe
C:\DOCUME~1\VITORH~1\CONFIG~1\Temp\Diretório temporário 1 para HiJackThis.zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://br.rd.yahoo.com/customize/ycomp/defaults/sb/*http://br.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://br.rd.yahoo.com/customize/ycomp/defaults/sp/*http://br.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://br.rd.yahoo.com/customize/ycomp/defaults/su/*http://br.yahoo.com
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [egui] "C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Arquivos de programas\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Arquivos de programas\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Asus Probe\AsusProb.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Arquivos de programas\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1245369783953
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe
--
End of file - 5011 bytes

urple">Eae blz!!!
urple">Faz assim entra no modo de segurança e da um scan com o antivirus.
urple">Na maioria das vezes isso é causado por virus.

Rode o ComboFix e cole aqui o relatorio,abaixo o tutorial de como usar o ComboFix:
http://www.bleepingcomputer.com/combofix/pt/como-usar-o-combofix

ComboFix 09-06-20.04 - Vitor Hugo 21/06/2009 11:18.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.55.1046.18.511.353 [GMT -3:00]
Executando de: d:\meus aplicativos\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
((((((((((((((((((((((((((((((((((((( Outras Exclusões )))))))))))))))))))))))))))))))))))))))))))))))))))
.
D:\desktop.ini
A cópia de c:\windows\system32\ntkrnlpa.exe foi encontrada e desinfectada
Cópia restaurada de - c:\windows\system32\dllcache\ntkrnlpa.exe
.
(((((((((((((((( Arquivos/Ficheiros criados de 2009-05-21 to 2009-06-21 ))))))))))))))))))))))))))))
.
2009-06-20 17:29 . 2009-06-20 17:29 -------- d-sh--w- c:\documents and settings\Vitor Hugo\IECompatCache
2009-06-20 17:28 . 2009-06-20 17:28 -------- d-sh--w- c:\documents and settings\Vitor Hugo\PrivacIE
2009-06-20 17:25 . 2009-06-20 17:25 -------- d-sh--w- c:\documents and settings\Vitor Hugo\IETldCache
2009-06-20 17:18 . 2009-06-20 17:18 -------- d-----w- c:\windows\ie8updates
2009-06-20 17:17 . 2009-06-20 17:18 -------- d-----w- c:\windows\system32\pt-BR
2009-06-20 17:17 . 2009-06-20 17:17 -------- dc-h--w- c:\windows\ie8
2009-06-20 17:16 . 2009-05-12 05:11 102912 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-06-20 16:26 . 2008-10-16 17:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-06-19 03:29 . 2009-06-19 03:29 -------- d-----w- c:\documents and settings\Vitor Hugo\Dados de aplicativos\Malwarebytes
2009-06-19 03:29 . 2009-06-17 14:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-19 03:29 . 2009-06-19 03:29 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\Malwarebytes
2009-06-19 03:29 . 2009-06-19 03:29 -------- d-----w- c:\arquivos de programas\Malwarebytes' Anti-Malware
2009-06-19 03:29 . 2009-06-17 14:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-19 03:08 . 2009-06-19 03:08 -------- d-----w- c:\documents and settings\Vitor Hugo\Dados de aplicativos\IObit
2009-06-19 03:08 . 2009-06-19 03:08 -------- d-----w- c:\arquivos de programas\IObit
2009-06-19 02:05 . 2009-06-19 02:05 -------- d-----w- c:\arquivos de programas\Ares
2009-06-18 23:44 . 2009-06-21 14:21 -------- d-----w- c:\documents and settings\Vitor Hugo\Tracing
2009-06-18 23:40 . 2009-06-18 23:40 -------- d-----w- c:\arquivos de programas\Microsoft
2009-06-18 23:40 . 2009-06-18 23:43 -------- d-----w- c:\arquivos de programas\Windows Live
2009-06-18 23:40 . 2009-06-18 23:40 -------- d-----w- c:\arquivos de programas\Windows Live SkyDrive
2009-06-18 23:38 . 2009-06-18 23:38 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Windows Live
2009-06-18 23:23 . 2009-06-18 23:25 -------- d-----w- c:\windows\nview
2009-06-18 23:23 . 2006-01-17 02:24 176128 ----a-w- c:\windows\system32\nvudisp.exe
2009-06-18 23:12 . 2009-06-18 23:12 194560 ----a-w- c:\windows\ASUS_Ai_Proactive_Screensaver (E).scr
2009-06-18 23:12 . 2009-06-18 23:12 -------- d-----w- c:\windows\ASUS_Ai_Proactive_Screensaver (E) dir
2009-06-18 23:12 . 2009-06-18 23:12 606848 ----a-w- c:\windows\flashax.exe
2009-06-18 23:12 . 2009-06-18 23:12 12288 ----a-w- c:\windows\impborl.dll
2009-06-18 23:12 . 2009-06-18 23:12 -------- d-----w- c:\arquivos de programas\ASUS
2009-06-18 23:12 . 1998-10-29 19:45 306688 ----a-w- c:\windows\IsUninst.exe
2009-06-18 23:11 . 2004-06-24 14:00 6656 ----a-w- c:\windows\system32\drivers\AsProbe.sys
2009-06-18 23:11 . 1998-05-18 13:52 458752 ----a-w- c:\windows\system\COMCTL32.DLL
2009-06-18 23:11 . 1998-02-08 22:00 996872 ----a-w- c:\windows\system\CP3240MT.DLL
2009-06-18 23:11 . 1998-02-08 22:00 29952 ----a-w- c:\windows\system\BORLNDMM.DLL
2009-06-18 23:09 . 2009-02-09 11:50 2061952 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2009-06-18 23:09 . 2009-02-09 11:50 2184704 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-06-18 23:09 . 2009-02-09 11:50 2140160 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-06-18 23:09 . 2009-06-18 23:09 -------- d-----w- C:\Program Files
2009-06-18 23:09 . 1997-04-22 13:16 6272 ----a-w- c:\windows\system32\drivers\ASLM75.SYS
2009-06-18 23:09 . 1996-11-05 19:13 299008 ----a-w- c:\windows\uninst.exe
2009-06-18 23:09 . 2009-06-18 23:09 -------- d-----w- c:\documents and settings\Vitor Hugo\WINDOWS
2009-06-18 23:04 . 2005-01-20 16:18 6912 ----a-w- c:\windows\system32\drivers\vulfnth.sys
2009-06-18 23:04 . 2003-08-04 19:56 45056 ----a-w- c:\windows\system32\vusetup.dll
2009-06-18 23:04 . 2005-01-20 16:18 11392 ----a-w- c:\windows\system32\drivers\vulfntr.sys
2009-06-18 23:04 . 1998-11-13 16:18 308224 ----a-w- c:\windows\IsUn0416.exe
2009-06-18 23:03 . 2004-07-23 01:17 42496 ----a-w- c:\windows\system32\drivers\fetnd5b.sys
2009-06-18 23:03 . 2004-07-23 01:28 57344 ----a-w- c:\windows\system32\vuins32.dll
2009-06-18 23:03 . 2003-07-18 00:10 7040 ----a-r- c:\windows\system32\ntsim.sys
2009-06-18 23:02 . 2002-09-21 10:53 235100 ----a-w- c:\windows\system32\drivers\MidiSyn.sys
2009-06-18 22:55 . 2005-04-27 11:22 60928 ----a-r- c:\windows\system32\drivers\viamraid.sys
2009-06-18 22:48 . 2009-06-18 22:56 -------- d-----w- c:\arquivos de programas\VIA
2009-06-18 22:47 . 2009-06-18 23:01 -------- d-----w- c:\arquivos de programas\Arquivos comuns\InstallShield
2009-06-18 22:47 . 2009-06-18 23:13 -------- d-sh--w- c:\documents and settings\Vitor Hugo\UserData
2009-06-18 22:47 . 2004-04-28 23:26 5824 ----a-w- c:\windows\system32\drivers\ASUSHWIO.SYS
2009-06-18 22:46 . 2009-06-21 14:04 -------- d-----w- c:\windows\system32\CatRoot_bak
2009-06-18 22:42 . 2008-06-14 17:59 272384 -c----w- c:\windows\system32\dllcache\bthport.sys
2009-06-18 22:42 . 2008-06-14 17:59 272384 ------w- c:\windows\system32\drivers\bthport.sys
2009-06-18 22:38 . 2008-10-24 11:10 453632 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-06-18 22:34 . 2009-01-07 21:21 26144 ----a-w- c:\windows\system32\spupdsvc.exe
2009-06-18 22:34 . 2009-06-20 17:18 -------- d--h--w- c:\windows\$hf_mig$
2009-06-18 22:29 . 2009-06-18 22:29 -------- d-----w- c:\documents and settings\All Users\Dados de aplicativos\ESET
2009-06-18 22:29 . 2009-06-18 22:29 -------- d-----w- c:\arquivos de programas\ESET
2009-06-18 22:21 . 2009-06-18 22:22 -------- d-----w- c:\windows\system32\Adobe
.
((((((((((((((((((((((((((((((((((((( Relatório Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-19 22:35 . 2009-06-18 21:27 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-19 01:56 . 2001-10-28 15:07 62078 ----a-w- c:\windows\system32\perfc016.dat
2009-06-19 01:56 . 2001-10-28 15:07 386984 ----a-w- c:\windows\system32\perfh016.dat
2009-06-18 23:01 . 2009-06-18 23:01 -------- d-----w- c:\arquivos de programas\Analog Devices
2009-06-18 23:01 . 2009-06-18 22:59 -------- d--h--w- c:\arquivos de programas\InstallShield Installation Information
2009-06-18 21:40 . 2009-06-18 21:23 21844 ----a-w- c:\windows\system32\emptyregdb.dat
2009-06-18 21:28 . 2009-06-18 21:28 -------- d-----w- c:\arquivos de programas\microsoft frontpage
2009-06-18 21:27 . 2009-06-18 21:27 -------- d-----w- c:\arquivos de programas\Serviços on-line
2009-06-18 21:24 . 2009-06-18 21:24 -------- d-----w- c:\arquivos de programas\Arquivos comuns\Serviços
2009-06-04 11:37 . 2009-06-04 11:37 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-06-04 11:37 . 2009-06-04 11:37 499712 ----a-w- c:\windows\system32\msvcp71.dll
2009-05-14 18:49 . 2009-05-14 18:49 94360 ----a-w- c:\windows\system32\drivers\epfwtdir.sys
2009-05-14 18:47 . 2009-05-14 18:47 107256 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-05-14 18:41 . 2009-05-14 18:41 114472 ----a-w- c:\windows\system32\drivers\eamon.sys
2009-05-07 15:43 . 2004-08-04 03:45 345600 ----a-w- c:\windows\system32\localspl.dll
2009-04-19 20:10 . 2004-08-04 03:38 1846784 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 15:17 . 2004-08-04 03:45 584192 ----a-w- c:\windows\system32\rpcrt4.dll
.
(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vazias e legítimas por defeito não são mostradas.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"msnmsgr"="c:\arquivos de programas\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"Advanced SystemCare 3"="c:\arquivos de programas\IObit\Advanced SystemCare 3\AWC.exe" [2009-05-01 2329936]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\arquivos de programas\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]
"SoundMAXPnP"="c:\arquivos de programas\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-04-01 1368064]
"ASUS Probe"="c:\program files\ASUS\Asus Probe\AsusProb.exe" [2002-12-06 617984]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-01-17 5898240]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-01-17 86016]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-01-17 1519616]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Arquivos de programas\\Messenger\\msmsgs.exe"=
"c:\\Arquivos de programas\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Arquivos de programas\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Arquivos de programas\\Ares\\Ares.exe"=
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14/5/2009 15:47 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [14/5/2009 15:49 94360]
R2 ekrn;ESET Service;c:\arquivos de programas\ESET\ESET NOD32 Antivirus\ekrn.exe [14/5/2009 15:47 731840]
S3 PciCon;PciCon;\??\f:\pcicon.sys --> f:\PciCon.sys [?]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Scan Suplementar -------
.
uSearchURL,(Default) = hxxp://br.rd.yahoo.com/customize/ycomp/defaults/su/*http://br.yahoo.com
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-21 11:21
Windows 5.1.2600 Service Pack 2 NTFS
Procurando processos ocultos ...
Procurando entradas auto inicializáveis ocultas ...
Procurando ficheiros/arquivos ocultos ...
Varredura completada com sucesso
arquivos/ficheiros ocultos: 0
**************************************************************************
.
--------------------- DLLs Carregadas Sob os Processos em Execução ---------------------
- - - - - - - > 'explorer.exe'(3312)
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
------------------------ Outros Processos em Execução ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\dumprep.exe
.
**************************************************************************
.
Tempo para conclusão: 2009-06-21 11:22 - Máquina reiniciou
ComboFix-quarantined-files.txt 2009-06-21 14:22
Pré-execução: 5 pasta(s) 100.434.567.168 bytes disponíveis
Pós execução: 5 pasta(s) 100.496.666.624 bytes disponíveis
WindowsXP-KB310994-SP2-Pro-BootDisk-PTG.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
168 --- E O F --- 2009-06-21 14:05

Execute o hijackthis e escolha a opção do a system scan only, selecione este item:

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

Clique em fix checked


Baixe e execute o Malwarebytes, faça um scan completo:

http://www.baixaki.com.br/download/m...ti-malware.htm

Depois faça uma limpeza no registro com o ccleaner:

http://www.baixaki.com.br/download/ccleaner.htm

Cole aqui um novo log do hijackthis.

Bom, feitas todas as sugestões do Maurício o MALWAREBYTS não encontrou erros, já o CCleaner encontrou algumas falhas no registro que mandei corrigir.

Segue relátorio do HiJackThis feita após os procedimentos acima.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:03:49, on 21/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\egui.exe
C:\Arquivos de programas\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\ASUS\Asus Probe\AsusProb.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
C:\Arquivos de programas\IObit\Advanced SystemCare 3\AWC.exe
C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe
C:\DOCUME~1\VITORH~1\CONFIG~1\Temp\Diretório temporário 3 para HiJackThis.zip\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://br.rd.yahoo.com/customize/ycomp/defaults/su/*http://br.yahoo.com
O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [egui] "C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Arquivos de programas\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Asus Probe\AsusProb.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Arquivos de programas\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1245369783953
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Arquivos de programas\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Arquivos de programas\Analog Devices\SoundMAX\SMAgent.exe
--
End of file - 4015 bytes

Como o assunto virou remoção de vírus estou movendo para a sala adequada...


Movido da sala Windows...

A principo os seus logs estao OK.Voce ja pensou na probabilidade de ser um problema de hardware?
Faça um teste dos seus pentes de memoria com o memtes:
https://www.hardware.com.br/artigos/usando-memtest/

Aureoh,

Não consigo rodar este programa.
Baixei ele do site, extrai os arquivos para o disquete, reinicio o pc e dou o boot pelo disquete.
Aparece uma msg pedindo pra eu retirar o disco e apertar uma tecla para reiniciar o pc.

Você tem um tutorial fazer pra criar o disquete "bootavel"?

aureoh disse: A principo os seus logs estao OK.Voce ja pensou na probabilidade de ser um problema de hardware?
Faça um teste dos seus pentes de memoria com o memtes:
https://www.hardware.com.br/artigos/usando-memtest/


Aureoh,

Consegui fazer um disquete "bootável" e executei o memtest86+ e em 04 horas de análise foram encontrados mais de 4 milhões de erros. Todos eles encontrados no test 5.
Encerrei a análise no PASS 9, com 04 horas de análise.

O que faço?
É isto mesmo? 4 Milhões de erros?

vitorhugolanzoni disse: Aureoh,

Consegui fazer um disquete "bootável" e executei o memtest86+ e em 04 horas de análise foram encontrados mais de 4 milhões de erros. Todos eles encontrados no test 5.
Encerrei a análise no PASS 9, com 04 horas de análise.

O que faço?
É isto mesmo? 4 Milhões de erros?

Seu pente de memoria esta com defeito,voce vai ter que substituir.

Aureoh,

Mas li em outros tópicos sobre o memotest que se aparecerem muitos erros (milhões) é um bug.

Deve-se proceder o teste de outra forma, testando um pente por vez, fazendo atualização da BIOS, etc.
Você sabe algo sobre isso?!