Ir ao conteúdo
  • Cadastre-se
Jht

PC fica lento

Recommended Posts

De uns tempos para ca o pc esta ficando lento sem motivo.

DDS:

DDS (Version 1.0) - NTFSx86

Run by gustavo at 23:30:01,04 on qui 04/12/2008

Microsoft Windows XP Home Edition 5.1.2600.2.1252.55.1046.18.767.507 [GMT -3:00]

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Arquivos de programas\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Arquivos de programas\Java\jre1.6.0_07\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\DAEMON Tools\daemon.exe

C:\WINDOWS\system32\devldr32.exe

C:\Arquivos de programas\a-squared Free\a2service.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\WINDOWS\system32\wuauclt.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Documents and Settings\gustavo\Desktop\dds.scr

============== Pseudo HJT Report ===============

uInternet Connection Wizard,ShellNext = iexplore

BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\arquivos de programas\adobe\acrobat 5.0\reader\activex\AcroIEHelper.ocx

BHO: {6EF05952-B48D-4944-AA91-57A6A1A48EF8} - c:\arquivos de programas\puxa rápido\IEBHO.DLL

BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\arquivos de programas\java\jre1.6.0_07\bin\ssv.dll

uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe

uRun: [DAEMON Tools] "c:\arquivos de programas\daemon tools\daemon.exe" -lang 1033

mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

mRun: [Atualizador - Puxa Rápido] c:\arquivos de programas\puxa rápido\Atualiza.exe

mRun: [GameXL]

mRun: [nwiz] nwiz.exe /install

mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit

mRun: [sunJavaUpdateSched] "c:\arquivos de programas\java\jre1.6.0_07\bin\jusched.exe"

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

uPolicies-explorer: MemCheckBoxInRunDlg = 0 (0x0)

uPolicies-explorer: NoStrCmpLogical = 0 (0x0)

mPolicies-explorer: NoChangeAnimation = 0 (0x0)

mPolicies-explorer: NoStrCmpLogical = 0 (0x0)

mPolicies-system: RunStartupScriptSync = 1 (0x1)

IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A}

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\arquivos de programas\messenger\msmsgs.exe

IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\arquivos de programas\java\jre1.6.0_07\bin\ssv.dll

IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} -

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\arquivos de programas\messenger\msmsgs.exe

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R2 a2free;a-squared Free Service;"c:\arquivos de programas\a-squared free\a2service.exe" [2008-2-29 380536]

R2 aawservice;Lavasoft Ad-Aware Service;"c:\arquivos de programas\lavasoft\ad-aware\aawservice.exe" [2008-7-7 611664]

S2 sbbotdi;sbbotdi; []

S2 VideoAcceleratorService;VideoAcceleratorService; []

=============== Created Last 30 ================

2008-12-01 21:38 <DIR> --d----- c:\arquivos de programas\Max Payne Demo

2008-12-01 19:22 <DIR> --d----- c:\arquivos de programas\Vietcong SP Demo

2008-12-01 19:20 <DIR> --d----- c:\arquivos de programas\Firefly Studios

2008-11-11 15:50 <DIR> --d----- c:\windows\Logs

2008-11-11 15:50 <DIR> --d-h--- c:\windows\msdownld.tmp

2008-11-09 22:08 <DIR> --d----- c:\arquivos de programas\WinAVI Video Converter

2008-11-09 22:03 <DIR> --d----- c:\arquivos de programas\RadLight LLC

2008-11-09 21:49 43,698 a------- c:\windows\system32\xvid-uninstall.exe

2008-11-09 21:49 <DIR> --d----- c:\arquivos de programas\AviSynth 2.5

2008-11-09 20:49 <DIR> --d----- c:\arquivos de programas\K-Lite Codec Pack

==================== Find3M ====================

2008-12-04 23:29 <DIR> --d----- c:\docume~1\gustavo\dadosd~1\SiteAdvisor

2008-12-04 17:28 <DIR> --d----- c:\docume~1\gustavo\dadosd~1\BrOffice.org2

2008-11-26 21:27 <DIR> --d----- c:\arquivos de programas\SystemRequirementsLab

2008-11-11 13:05 <DIR> --d----- c:\arquivos de programas\Game Accelerator

2008-11-11 13:04 <DIR> --d----- c:\arquivos de programas\VSO

2008-11-11 12:45 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\Spybot - Search & Destroy

2008-11-03 14:31 <DIR> --d----- c:\arquivos de programas\Valve

2008-11-03 14:26 <DIR> --d----- c:\arquivos de programas\sXe Injected

2008-10-27 10:04 514,384 a------- c:\windows\system32\XAudio2_3.dll

2008-10-27 10:04 235,856 a------- c:\windows\system32\xactengine3_3.dll

2008-10-27 10:04 23,376 a------- c:\windows\system32\X3DAudio1_5.dll

2008-10-27 10:04 70,992 a------- c:\windows\system32\XAPOFX1_2.dll

2008-10-25 01:31 <DIR> --d----- c:\docume~1\gustavo\dadosd~1\The Chosen demo

2008-10-25 01:30 <DIR> --d----- c:\docume~1\gustavo\dadosd~1\Frater

2008-10-23 18:37 52,736 a------- c:\windows\ipuninst.exe

2008-10-16 18:36 425,426 a------- c:\windows\system32\perfh016.dat

2008-10-16 18:36 67,450 a------- c:\windows\system32\perfc016.dat

2008-10-10 04:52 4,379,984 a------- c:\windows\system32\D3DX9_40.dll

2008-10-10 04:52 2,036,576 a------- c:\windows\system32\D3DCompiler_40.dll

2008-10-10 04:52 452,440 a------- c:\windows\system32\d3dx10_40.dll

2008-10-06 18:38 <DIR> --d----- c:\arquivos de programas\UltraISO

2008-10-06 18:38 <DIR> --d----- c:\arquivos de programas\arquivos comuns\EZB Systems

2008-09-27 23:17 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\NexonUS

2008-09-15 21:14 3,596,288 a------- c:\windows\system32\qt-dx331.dll

2008-09-15 21:12 81,920 a------- c:\windows\system32\dpl100.dll

2008-09-15 21:11 683,520 a------- c:\windows\system32\divx.dll

2008-09-15 12:40 1,846,144 a------- c:\windows\system32\win32k.sys

2008-08-13 22:54 <DIR> --d----- c:\docume~1\gustavo\dadosd~1\Subversion

2008-02-06 01:40 <DIR> --d----- c:\docume~1\gustavo\dadosd~1\Sports Interactive

2008-02-02 00:51 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\Trymedia

2008-01-10 20:59 <DIR> --d----- c:\docume~1\alluse~1\dadosd~1\Kaspersky Lab

2007-11-10 15:31 <DIR> --d----- c:\docume~1\gustavo\dadosd~1\.BitTornado

============= FINISH: 23:30:28,85 ===============

GMER:

GMER 1.0.14.14536 - http://www.gmer.net

Rootkit scan 2008-12-05 00:14:03

Windows 5.1.2600 Service Pack 2

---- System - GMER 1.0.14 ----

SSDT sptd.sys ZwCreateKey [0xF746F0D0]

SSDT sptd.sys ZwEnumerateKey [0xF7474FB2]

SSDT sptd.sys ZwEnumerateValueKey [0xF7475340]

SSDT sptd.sys ZwOpenKey [0xF746F0B0]

SSDT sptd.sys ZwQueryKey [0xF7475418]

SSDT sptd.sys ZwQueryValueKey [0xF7475298]

SSDT sptd.sys ZwSetValueKey [0xF74754AA]

---- Kernel code sections - GMER 1.0.14 ----

? C:\WINDOWS\system32\drivers\sptd.sys O arquivo já está sendo usado por outro processo.

.text USBPORT.SYS!DllUnload F6EB162C 5 Bytes JMP 82D114F8

? System32\Drivers\a8oje0an.SYS O sistema não pode encontrar o arquivo especificado. !

? C:\WINDOWS\system32\Drivers\PROCEXP111.SYS O sistema não pode encontrar o arquivo especificado. !

---- Kernel IAT/EAT - GMER 1.0.14 ----

IAT \WINDOWS\System32\Drivers\SCSIPORT.SYS[ntoskrnl.exe!IoConnectInterrupt] [F748606C] sptd.sys

IAT pci.sys[ntoskrnl.exe!IoDetachDevice] [F7486018] sptd.sys

IAT pci.sys[ntoskrnl.exe!IoAttachDeviceToDeviceStack] [F74A89AE] sptd.sys

IAT atapi.sys[ntoskrnl.exe!IoConnectInterrupt] [F748606C] sptd.sys

IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F746FAD4] sptd.sys

IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F746FC1A] sptd.sys

IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F746FB9C] sptd.sys

IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F7470748] sptd.sys

IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F747061E] sptd.sys

IAT \SystemRoot\System32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [F748529A] sptd.sys

---- Devices - GMER 1.0.14 ----

Device \FileSystem\Ntfs \Ntfs 82FD51E8

Device \FileSystem\Fastfat \FatCdrom 82C36790

Device \Driver\PCI_NTPNP8504 \Device\00000042 sptd.sys

Device \Driver\usbuhci \Device\USBPDO-0 82D981E8

Device \Driver\usbuhci \Device\USBPDO-1 82D981E8

Device \Driver\usbuhci \Device\USBPDO-2 82D981E8

Device \Driver\Ftdisk \Device\HarddiskVolume1 82F691E8

Device \Driver\Cdrom \Device\CdRom0 82D831E8

Device \Driver\Cdrom \Device\CdRom1 82D831E8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 82FD61E8

Device \Driver\atapi \Device\Ide\IdePort0 82FD61E8

Device \Driver\atapi \Device\Ide\IdePort1 82FD61E8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e 82FD61E8

Device \Driver\Cdrom \Device\CdRom2 82D831E8

Device \Driver\Cdrom \Device\CdRom3 82D831E8

Device \Driver\Cdrom \Device\CdRom4 82D831E8

Device \Driver\NetBT \Device\NetBt_Wins_Export 829A61E8

Device \Driver\NetBT \Device\NetbiosSmb 829A61E8

Device \Driver\usbuhci \Device\USBFDO-0 82D981E8

Device \Driver\usbuhci \Device\USBFDO-1 82D981E8

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 829881E8

Device \Driver\usbuhci \Device\USBFDO-2 82D981E8

Device \FileSystem\MRxSmb \Device\LanmanRedirector 829881E8

Device \Driver\Ftdisk \Device\FtControl 82F691E8

Device \Driver\a8oje0an \Device\Scsi\a8oje0an1Port2Path0Target1Lun0 82D821E8

Device \Driver\a8oje0an \Device\Scsi\a8oje0an1 82D821E8

Device \Driver\a8oje0an \Device\Scsi\a8oje0an1Port2Path0Target3Lun0 82D821E8

Device \Driver\a8oje0an \Device\Scsi\a8oje0an1Port2Path0Target0Lun0 82D821E8

Device \Driver\a8oje0an \Device\Scsi\a8oje0an1Port2Path0Target2Lun0 82D821E8

Device \FileSystem\Fastfat \Fat 82C36790

Device \FileSystem\Cdfs \Cdfs 82CB6790

---- Registry - GMER 1.0.14 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Arquivos de programas\DAEMON Tools\

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xA6 0xCB 0xF9 0x44 ...

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x9F 0x70 0xA9 0x6F ...

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x33 0x5E 0xC4 0x88 ...

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x06 0xB0 0xAE 0x24 ...

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42@khjeh 0xE0 0x2D 0xDF 0x69 ...

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43@khjeh 0x9F 0xAA 0xC0 0x23 ...

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Arquivos de programas\DAEMON Tools\

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x1D 0x53 0x2B 0xB8 ...

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x72 0xEC 0xE7 0x7E ...

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40

Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xCA 0x68 0xD4 0xAE ...

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Arquivos de programas\DAEMON Tools\

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xA6 0xCB 0xF9 0x44 ...

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x9F 0x70 0xA9 0x6F ...

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x33 0x5E 0xC4 0x88 ...

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x06 0xB0 0xAE 0x24 ...

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42@khjeh 0xE0 0x2D 0xDF 0x69 ...

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43

Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43@khjeh 0x9F 0xAA 0xC0 0x23 ...

---- EOF - GMER 1.0.14 ----

Editado por Jht

Compartilhar este post


Link para o post
Compartilhar em outros sites

Poste um novo log do DDS, por gentileza.

Compartilhar este post


Link para o post
Compartilhar em outros sites





Sobre o Clube do Hardware

No ar desde 1996, o Clube do Hardware é uma das maiores, mais antigas e mais respeitadas publicações sobre tecnologia do Brasil. Leia mais

Direitos autorais

Não permitimos a cópia ou reprodução do conteúdo do nosso site, fórum, newsletters e redes sociais, mesmo citando-se a fonte. Leia mais

×