Travamento...estranho no pc [Log hijack] [Tit.Edit.]

Question

pessoal, tenho um AMD 4400 x2, 2GB e meu pc anda estranho, ele fica travando quando fasso coisas simples, exemplo: Quando navego na internet e ou&ccedil;o musicas no WMP e ele trava, trava d a musica parar de tocar, por alguns segundos e depois volta ao normal e continua travando frequentemente, o mais estranho e q nao acontece isso quando executo jogos , quando rodo algum jogo ele fica normal, sem problemas, ou so quando fasso apenas uma coisa, quando tendo fazer outras coisas simples simultaneamente ele trava, nao acho q seja por temperatura, rodo jogos normal, ja formatei e nada, alguem tem alguma solu&ccedil;ao?

Answer

Suspeita de v&iacute;rus?
Se quiser postar um log do hijack...

Passe o CCLEANER, tanto para limpeza quanto para repara&ccedil;&atilde;o de entradas de registro.

Limpe as mem&oacute;rias com uma borracha branca e macia.

poste o resultado aqui.
blz.

Answer

resultado:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 00:34:31, on 7/11/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Arquivos de programas\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\Arquivos de programas\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Windows\System32\cmd.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Arquivos de programas\CDBurnerXP\NMSAccessU.exe
C:\Arquivos de programas\VMware\VMware Workstation\vmware-authd.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Arquivos de programas\Common Files\VMware\USB\vmware-usbarbitrator.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Arquivos de programas\Arquivos comuns\Java\Java Update\jusched.exe
C:\Arquivos de programas\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Arquivos de programas\DAP\DAP.EXE
C:\Arquivos de programas\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Arquivos de programas\Windows Media Player\wmplayer.exe
C:\Arquivos de programas\RelevantKnowledge\rlvknlg.exe
C:\Arquivos de programas\Mozilla Firefox\firefox.exe
C:\Arquivos de programas\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Administrador\Meus documentos\Downloads\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://baixaki.com.br/
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Arquivos de programas\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\ARQUIV~1\DAP\DAPIEL~1.DLL
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [XboxStat] C:\Arquivos de programas\Microsoft Xbox 360 Accessories\XboxStat.exe silentrun
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Arquivos de programas\Arquivos comuns\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Arquivos de programas\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DownloadAccelerator] C:\Arquivos de programas\DAP\DAP.EXE /STARTUP
O4 - HKCU\..\Run: [Mega Manager] C:\Arquivos de programas\Megaupload\Mega Manager\MegaManager.exe
O4 - HKCU\..\Run: [Windows Update] C:\Documents and Settings\Administrador\Modelos\Server.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_01] cmd.exe /c md %USERPROFILE%\Configura&ccedil;&otilde;es locais\Temp (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlpo_03] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlpo_01] cmd.exe /c md %USERPROFILE%\Configura&ccedil;&otilde;es locais\Temp (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Arquivos de programas\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Clean Traces - C:\Arquivos de programas\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Arquivos de programas\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Arquivos de programas\DAP\dapextie2.htm
O8 - Extra context menu item: Google Sidewiki... - res://C:\Arquivos de programas\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\arquivos de programas\vmware\vmware workstation\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\arquivos de programas\vmware\vmware workstation\vsocklib.dll
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O20 - Winlogon Notify: RelevantKnowledge - C:\Arquivos de programas\RelevantKnowledge\rlls.dll
O22 - SharedTaskScheduler: Pr&eacute;-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon de cache de categorias de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Arquivos de programas\Arquivos comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccess - Unknown owner - C:\Arquivos de programas\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Arquivos de programas\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Arquivos de programas\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Arquivos de programas\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe

--
End of file - 7299 bytes

Answer

Movido da sala de GNU-Linux, FreeBSD e Software Livre   	> Suporte a hardware, m&oacute;dulos e drivers

Answer

Fa&ccedil;a o seguinte:

Execute o hijackthis.
Clique em Do a scan system only.
Marque as seguintes entradas:

C:\Arquivos de programas\RelevantKnowledge\rlvknlg.exe

O10 - Unknown file in Winsock LSP: c:\arquivos de programas\vmware\vmware workstation\vsocklib.dll

O20 - Winlogon Notify: RelevantKnowledge - C:\Arquivos de programas\RelevantKnowledge\rlls.dll

Clique em Fix Checked.

/////////////////////////////////////////////////////////////////////////////////////

Baixe o Malwarebytes
Fa&ccedil;a uma analise completa
Se algo for encontrado selecione tudo e delete.
Possivelmente ir&aacute; pedir para  reiniciar, fa&ccedil;a-o.
Abra novamente, v&aacute; em quarentena e apague tudo.
Poste o log aqui.

Answer

Fa&ccedil;a o download do wise registry cleaner:
[COLOR=blue]http://www.baixaki.com.br/download/w...ry-cleaner.htm[/COLOR][FONT=&quot]

[/FONT]* Instale o aplicativo.(N&atilde;o instale a Ask Toolbar)
* Ao execut&aacute;-lo selecione todas as op&ccedil;&otilde;es a esquerda e clique em verificar.
* Encontrando erros selecione todos(sem excess&atilde;o) e clique em corrigir.

Fa&ccedil;a o download do advanced system care:
[COLOR=blue]http://www.baixaki.com.br/download/a...systemcare.htm[/COLOR][FONT=&quot]

[/FONT]Instale o aplicativo e efetue uma limpeza e otimiza&ccedil;&atilde;o no sistema.

Desfragmente o disco, faz a limpeza do disco, use os programas Ccleaner, MV RegClean, MalwareBytes' anti-malware, superantispyware e um antiv&iacute;rus.[FONT=&quot]

[/FONT]Diret&oacute;rio at&eacute; Desfragmenta&ccedil;&atilde;o de disco e Limpeza do disco.

Iniciar > Todos os Programas > Acess&oacute;rios > Ferramentas do Sistema > Desfragmenta&ccedil;&atilde;o do Disco e Limpeza do Disco.

Ferramentas

Mover Tópico