notebook lento

[vegeta77]

salve a tutti sto impazzendo perché non riesco a capire il problema del mio notebook acer...forse magari voi potete aiutarmi a risolverlo....
Allora il mio pc va clamorasamente lento e nel task manager mi dice che quando questo avvenimento si verifica la mia cpu è al 100%....mi succede ogni volta indipendentemente da che applicazione apro...a volte mi va al 100% iexpolrer a volte un altra applicazione di nome burraco che è un gioco on line...altre volte mentre guardo un video....ce devo fare..per favore aiutatemi....grazie

[crazy.cat]

Fai una scansione con combofix e postane il log, ormai combofix è diventato il risolutore per molti problemi.

[vegeta77]

come faccio a fare questa scansione scusa la mia ignoranza

[vegeta77]

ci sono riuscito adesso posto il log di combofix....mi dici cosa noti di strano...grazie sei molto gentile

ComboFix 09-05-07.01 - portatile 07/05/2009 19.16.10.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.511.269 [GMT 2:00]
Eseguito da: c:\documents and settings\portatile\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated)
.

((((((((((((((((((((((((( Files Creati Da 2009-04-07 al 2009-05-07 )))))))))))))))))))))))))))))))))))
.

2009-05-06 22:40 . 2009-05-06 22:40 -------- d-----w C:\Documenti
2009-05-05 06:07 . 2009-05-05 06:07 -------- d-sh--w C:\FOUND.000
2009-04-29 22:41 . 2009-04-29 22:41 -------- d-----w c:\windows\SxsCaPendDel
2009-04-27 11:36 . 2009-04-27 11:42 55640 ----a-w c:\windows\system32\drivers\avgntflt.sys
2009-04-27 11:36 . 2009-04-27 11:36 -------- d-----w c:\programmi\Avira
2009-04-27 11:23 . 2009-04-27 11:23 -------- d-----w c:\documents and settings\All Users\Dati applicazioni\Avira
2009-04-16 20:49 . 2009-02-06 10:10 227840 ------w c:\windows\system32\dllcache\wmiprvse.exe
2009-04-16 20:48 . 2009-03-06 14:19 286208 ------w c:\windows\system32\dllcache\pdh.dll
2009-04-16 20:48 . 2009-02-09 11:22 111104 ------w c:\windows\system32\dllcache\services.exe
2009-04-16 20:48 . 2009-02-09 10:51 401408 ------w c:\windows\system32\dllcache\rpcss.dll
2009-04-16 20:48 . 2009-02-09 10:51 473600 ------w c:\windows\system32\dllcache\fastprox.dll
2009-04-16 20:48 . 2009-02-09 10:51 683520 ------w c:\windows\system32\dllcache\advapi32.dll
2009-04-16 20:48 . 2009-02-09 10:51 734720 ------w c:\windows\system32\dllcache\lsasrv.dll
2009-04-16 20:48 . 2009-02-09 10:51 453120 ------w c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-16 20:48 . 2009-02-09 10:51 736256 ------w c:\windows\system32\dllcache\ntdll.dll
2009-04-16 20:48 . 2008-04-21 21:14 219136 ------w c:\windows\system32\dllcache\wordpad.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-17 17:09 . 1979-12-31 22:00 70704 ----a-w c:\windows\system32\perfc010.dat
2009-04-17 17:09 . 1979-12-31 22:00 439132 ----a-w c:\windows\system32\perfh010.dat
2009-04-05 09:54 . 2009-04-05 09:54 -------- d-----w c:\programmi\Burraconline
2009-03-06 14:19 . 2005-03-26 19:09 286208 ----a-w c:\windows\system32\pdh.dll
2009-03-03 00:03 . 2005-03-26 19:09 826368 ----a-w c:\windows\system32\wininet.dll
2009-02-20 17:08 . 2005-05-03 15:33 78336 ----a-w c:\windows\system32\ieencode.dll
2009-02-10 17:02 . 2005-03-26 19:09 2069760 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-02-09 13:04 . 2005-03-26 19:09 1846784 ----a-w c:\windows\system32\win32k.sys
2009-02-09 11:23 . 2005-03-26 19:09 2192768 ----a-w c:\windows\system32\ntoskrnl.exe
2009-02-09 11:22 . 2005-03-26 19:09 111104 ----a-w c:\windows\system32\services.exe
2009-02-09 10:51 . 2005-03-26 19:09 734720 ----a-w c:\windows\system32\lsasrv.dll
2009-02-09 10:51 . 2005-03-26 19:09 401408 ----a-w c:\windows\system32\rpcss.dll
2009-02-09 10:51 . 2005-03-26 19:09 683520 ----a-w c:\windows\system32\advapi32.dll
2009-02-09 10:51 . 2005-03-26 19:09 736256 ----a-w c:\windows\system32\ntdll.dll
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"PCMService"="c:\programmi\Aspire Arcade\PCMService.exe" [2004-03-25 81920]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"LManager"="c:\progra~1\LAUNCH~1\CPLFL32.EXE" [2004-04-23 454656]
"IgfxTray"="c:\windows\System32\igfxtray.exe" [2003-10-02 155648]
"HotKeysCmds"="c:\windows\System32\hkcmd.exe" [2003-10-02 118784]
"ATIPTA"="c:\programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-22 335872]
"HP Software Update"="c:\programmi\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792]
"avgnt"="c:\programmi\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2004-02-09 65024]
"ATIModeChange"="Ati2mdxx.exe" - c:\windows\system32\Ati2mdxx.exe [2001-09-04 28672]
"AGRSMMSG"="AGRSMMSG.exe" - c:\windows\AGRSMMSG.exe [2003-11-19 88363]
"AdslTaskBar"="stmctrl.dll" - c:\windows\system32\stmctrl.dll [2003-01-22 151552]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Ricerca rapida.lnk - c:\programmi\Microsoft Office\Office\FINDFAST.EXE [1997-9-1 111376]
BTTray.lnk - c:\programmi\WIDCOMM\Bluetooth Software\BTTray.exe [2003-8-14 499773]
HP Digital Imaging Monitor.lnk - c:\programmi\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
Microsoft Office.lnk - c:\programmi\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dPCVPvùõš/‚²ÆßfÏNC:
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dPCVPvùõš/‚²ÆßfÏNC:\Programmi
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dPCVPvùõš/‚²ÆßfÏNc:\programmi\ISTsvc

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"btwdins"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"c:\\WINDOWS\\System32\\dpvsetup.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\programmi\Avira\AntiVir Desktop\sched.exe [27/04/2009 13.36.07 108289]
R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [23/03/2005 13.37.04 59338]
S2 Utilità di pianificazione di LiveUpdate automatico;Utilità di pianificazione di LiveUpdate automatico; [x]
S3 SDTHOOK;SDTHOOK;c:\windows\system32\drivers\SDTHOOK.SYS [29/01/2008 12.01.40 44928]
S3 TaurusUsb;ADSL Modem USB Service 1.09a;c:\windows\system32\drivers\torususb.sys [23/03/2005 13.37.04 527980]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d58185c5-efa8-11dd-b7fa-e3f3f576bb4f}]
\Shell\AutoRun\command - E:\setup_vmc_lite.exe /checkApplicationPresence

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eb9da08c-7cbb-11dd-b762-000e3549c138}]
\Shell\AutoRun\command - E:\LaunchU3.exe -a
.
Contenuto della cartella 'Scheduled Tasks'

2009-05-07 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 15:04]

2009-05-05 c:\windows\Tasks\OGADaily.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 15:04]
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

MSConfigStartUp-istsvc - (no file)


.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}
uInternet Connection Wizard,ShellNext = hxxp://global.acer.com/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Send To &Bluetooth - c:\programmi\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
LSP: c:\windows\system32\imon.dll
TCP: {74DBF739-83D5-4465-857F-067E38BDFC46} = 151.99.125.1,151.99.0.100
TCP: {78B1F30E-0757-42F6-950A-391F622E5A7A} = 151.99.125.1,151.99.0.100
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.co.uk/scan_uk/scan8/oscan8.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-07 19:17
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_USERS\S-1-5-21-1694720459-1294642078-4094575798-1004\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\ActiveSync]
"Name"="ActiveSync"
"DisplayName"="Microsoft ActiveSync"
"Param1"="ActiveSync"
"Type"="wellknown"
"Order"=dword:00000001
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1694720459-1294642078-4094575798-1004\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\IESettings]
"Name"="IESettings"
"Type"="IESettings"
"Order"=dword:00000004
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1694720459-1294642078-4094575798-1004\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\MediaFiles]
"Name"="MediaFiles"
"Type"="MediaFiles"
"Order"=dword:00000003
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1694720459-1294642078-4094575798-1004\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\NPW]
"Name"="NPW"
"Param1"="NPW"
"Type"="wellknown"
"Order"=dword:00000002
"State"=dword:0000000b

[HKEY_USERS\S-1-5-21-1694720459-1294642078-4094575798-1004\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\Outlook]
"Name"="Outlook"
"DisplayName"="Microsoft Outlook"
"Param1"="Outlook"
"Type"="wellknown"
"Order"=dword:00000000
"State"=dword:0000000b
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'lsass.exe'(1008)
c:\windows\system32\imon.dll

- - - - - - - > 'explorer.exe'(2112)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Ora fine scansione: 2009-05-07 19.18.41
ComboFix-quarantined-files.txt 2009-05-07 17:18

Pre-Run: 26.034.536.448 byte disponibili
Post-Run: 26.103.578.624 byte disponibili

WindowsXP-KB310994-SP2-Pro-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

191 --- E O F --- 2009-04-16 21:11

{@vegeta ho aggiunto il tag LOG per accorciare la pagina - Al3x}

[vegeta77]

premetto che non mi va nemmeno l'audio da un po' di tempo.....magari se vedi qualcosa di strano pui perfavore dirmelo