Não consigo desinstalar o Baidu!

Boa noite!

há um tempo está aparecendo no meu pc uma caixa do Baidu, depois de fechá-la não leva 1 minuto para ela voltar a aparecer!
já tentei desinstalar mas ele não aparece no painel de controle, já tentei deletar sua pasta, mas não consigo!

 Olá Leandro! Seja bem-vindo ao Fórum PC Brasil.

Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Extraia para o Desktop (Área de Trabalho)

*Execute-o e informe se consegue ver o ícone do Baidu

Se ele aparecer na lista, você pode desinstalá-lo usando o próprio Revo Uninstaller.
_______________________________

Caso o Revo Uninstaller não encontre o Baidu, faça o seguinte:

Baixe o Zoek (...de Smeenk) [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e salve-o no Desktop (Área de Trabalho).

Ao acessar o link indicado acima, clique na opção de baixar a sua versão com a extensão ZIP, como mostra esta imagem:


Depois de baixá-lo extraia o seu conteúdo. Para isto basta clicar sobre o arquivo compactado que você acabou de baixar com o botão direito do mouse e escolher a opção Extrair aqui, como mostra esta imagem:


*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Cole as linhas em marrom no espaço

autoclean;
emptyclsid;
emptytemp;
startupall;
Baidu;z
Baidu;a
hijackthis;
process;
uninstall-list;

*Clique [Run Script]

*Durante o scan a mensagem abaixo será apresentada. Aguarde o término...pode demorar!

Zoek.exe is running now.
Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

*Caso a reinicialização do PC seja solicitada, clique [OK]

Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Zoek.exe Version 4.0.0.5 Updated 24-November-2013
Tool run by neilianddro on 30/11/2013 at 19:06:43,59.
Microsoft Windows 7 Ultimate  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: F:\zoek\zoek.exe [Script inserted]

==== System Restore Info ======================

30/11/2013 19:07:49 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully
HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517} deleted successfully
HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{56570665-9ACA-49EC-8A66-CA9F4A3152FF} deleted successfully
HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} deleted successfully
HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5} deleted successfully

==== Running Processes ======================

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\vmsnap3.exe
C:\Windows\Domino.exe
C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
F:\zoek\zoek.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Program Files (x86)\Nuance\PaperPort\NuanceWDS.exe

==== Deleting Services ======================


==== FireFox Fix ======================

ProfilePath: C:\Users\neilianddro\AppData\Roaming\Mozilla\Firefox\Profiles\kfq92o76.default

---- Lines Lyric modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST So
---- FireFox user.js and prefs.js backups ----

user_112013_1912_.backup
prefs_112013_1912_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\GUMCD9C.tmp deleted
C:\PROGRA~2\Iminent deleted
C:\PROGRA~2\LyricsOn deleted
C:\PROGRA~2\LyricsPod deleted
C:\PROGRA~2\Web Cake deleted
C:\found.000 deleted
C:\Users\neilianddro\AppData\Roaming\Baidu deleted
C:\Users\neilianddro\AppData\Roaming\Betcat deleted
C:\Users\neilianddro\AppData\Roaming\Web Cake deleted
C:\ProgramData\\user.tmp deleted
C:\ProgramData\\Tarma Installer deleted
C:\Users\neilianddro\AppData\Local\Lollipop deleted
C:\Users\neilianddro\Downloads\DownloadManager.exe deleted
C:\Users\neilianddro\Downloads\DownloadManager.exe.part deleted
C:\Users\neilianddro\AppData\LocalLow\Toolbar4 deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Toolbar4 deleted
"C:\ProgramData\0" deleted
"C:\ProgramData\97" deleted
"C:\ProgramData\98" deleted

==== Folders Found ======================

2013-06-29 08:00:02 2013-06-29 08:00:06 -------- d-----w- C:\Program Files (x86)\Baidu Security
2013-06-29 08:00:18 2013-06-29 08:00:18 -------- d-----w- C:\ProgramData\Baidu
2013-06-29 08:00:38 2013-08-31 17:18:52 -------- d-----w- C:\ProgramData\Baidu Security
2013-06-29 08:00:18 2013-06-29 08:00:18 -------- d-----w- C:\Users\All Users\Baidu
2013-06-29 08:00:38 2013-08-31 17:18:52 -------- d-----w- C:\Users\All Users\Baidu Security
2013-06-29 07:36:53 2013-06-29 07:36:53 -------- d-----w- C:\Users\neilianddro\AppData\Roaming\Baidu Security
2013-06-29 08:15:10 2013-06-29 08:15:10 -------- d-----w- C:\Users\neilianddro\AppData\Roaming\Baidu Security\PC Faster\3.4.0.17\Uninstall\Baidu PC Faster Uninstall
2013-06-29 08:15:10 2013-06-29 08:15:10 -------- d-----w- C:\Users\neilianddro\AppData\Roaming\Baidu Security\PC Faster\3.4.0.17\Uninstall\Baidu PC Faster Uninstall HK
2013-08-31 17:18:55 2013-08-31 17:18:55 -------- d-----w- C:\Users\Public\Documents\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
1601-01-01 00:00:00 1601-01-01 00:00:00 -------- d-----w- C:\Windows.old\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-04-28 00:36:34 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\AppData\Roaming\baidu
2013-06-21 15:47:28 2013-06-21 15:47:28 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\AppData\Roaming\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:19:02 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\AppData\Roaming\baidu\Baidu Antivirus
2013-06-21 16:18:58 2013-06-21 16:18:58 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\AppData\Roaming\Baidu Security\PC Faster\3.2.0.25\Uninstall\Baidu PC Faster Uninstall
2013-06-21 16:18:58 2013-06-21 16:18:58 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\AppData\Roaming\Baidu Security\PC Faster\3.2.0.25\Uninstall\Baidu PC Faster Uninstall HK
2013-04-28 00:36:34 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\Application Data\baidu
2013-06-21 15:47:28 2013-06-21 15:47:28 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:19:02 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\Application Data\baidu\Baidu Antivirus
2013-06-21 16:18:58 2013-06-21 16:18:58 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\Application Data\Baidu Security\PC Faster\3.2.0.25\Uninstall\Baidu PC Faster Uninstall
2013-06-21 16:18:58 2013-06-21 16:18:58 -------- d-----w- C:\Windows.old\Documents and Settings\neiliandro\Application Data\Baidu Security\PC Faster\3.2.0.25\Uninstall\Baidu PC Faster Uninstall HK
2013-06-21 15:47:29 2013-06-21 16:16:30 -------- d-----w- C:\Windows.old\Program Files (x86)\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
1601-01-01 00:00:00 1601-01-01 00:00:00 -------- d-----w- C:\Windows.old\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
2013-06-21 15:48:04 2013-06-21 15:48:04 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu
1601-01-01 00:00:00 1601-01-01 00:00:00 -------- d-----w- C:\Windows.old\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Baidu Security
2013-04-28 00:36:34 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\neiliandro\AppData\Roaming\baidu
2013-06-21 15:47:28 2013-06-21 15:47:28 -------- d-----w- C:\Windows.old\Users\neiliandro\AppData\Roaming\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:19:02 -------- d-----w- C:\Windows.old\Users\neiliandro\AppData\Roaming\baidu\Baidu Antivirus
2013-06-21 16:18:58 2013-06-21 16:18:58 -------- d-----w- C:\Windows.old\Users\neiliandro\AppData\Roaming\Baidu Security\PC Faster\3.2.0.25\Uninstall\Baidu PC Faster Uninstall
2013-06-21 16:18:58 2013-06-21 16:18:58 -------- d-----w- C:\Windows.old\Users\neiliandro\AppData\Roaming\Baidu Security\PC Faster\3.2.0.25\Uninstall\Baidu PC Faster Uninstall HK
2013-04-28 00:36:34 2013-06-21 16:16:36 -------- d-----w- C:\Windows.old\Users\neiliandro\Application Data\baidu
2013-06-21 15:47:28 2013-06-21 15:47:28 -------- d-----w- C:\Windows.old\Users\neiliandro\Application Data\Baidu Security
2013-06-21 16:16:36 2013-06-21 16:19:02 -------- d-----w- C:\Windows.old\Users\neiliandro\Application Data\baidu\Baidu Antivirus
2013-06-21 16:18:58 2013-06-21 16:18:58 -------- d-----w- C:\Windows.old\Users\neiliandro\Application Data\Baidu Security\PC Faster\3.2.0.25\Uninstall\Baidu PC Faster Uninstall
2013-06-21 16:18:58 2013-06-21 16:18:58 -------- d-----w- C:\Windows.old\Users\neiliandro\Application Data\Baidu Security\PC Faster\3.2.0.25\Uninstall\Baidu PC Faster Uninstall HK
2013-11-30 21:12:58 2013-11-30 21:12:59 -------- d---a-w- C:\zoek_backup\C_Users_neilianddro_AppData_Roaming_Baidu
2013-11-30 21:12:59 2013-11-30 21:12:59 -------- d---a-w- C:\zoek_backup\C_Users_neilianddro_AppData_Roaming_Baidu\Baidu Antivirus

==== Files Found ======================


--- C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\BaiduStore.dll ---
Company: Baidu Inc.
File Description: PC Faster Interface Plugin Manager
File Version: 3,7,1,39149
Product Name: Baidu PC Faster
Copyright: Copyright (C) 2012 Baidu, Inc. All rights reserved.
Original Filename:
File type: ----a-w-
File size: 1269096
Created time: 2013-08-12 08:55:44
Modified time: 2013-08-12 08:55:44
MD5: D199DCDC04A0E87CAF21DC92B32BA171
SHA1: 29DC5991B2414F179A12A70AE040D6E77FA731FE


--- C:\Users\neilianddro\AppData\Roaming\Microsoft\Windows\Recent\janela  do baidu.lnk ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 366
Created time: 2013-11-30 20:24:00
Modified time: 2013-11-30 20:24:00
MD5: 7BE5C14FBBA5FCA4E101DF7115E5F739
SHA1: 85B6691160402F25F95C18A402B50892769F1B58


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---

Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\AppData\Local\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Documents and Settings\neiliandro\Local Settings\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\AppData\Local\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------

Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Application Data\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Microsoft\Internet Explorer\DOMStore\UX4PSNJV\pcfaster.baidu[1].xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 13
Created time: 2013-06-21 16:19:14
Modified time: 2013-06-21 16:19:14
MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966


--- C:\Windows.old\Users\neiliandro\Local Settings\Microsoft\Windows\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


--- C:\Windows.old\Users\neiliandro\Local Settings\Temporary Internet Files\Content.IE5\1213Y0E5\muted_baidu_br[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 54687
Created time: 2013-04-28 00:35:12
Modified time: 2013-04-28 00:35:12
MD5: D5D49A84F39FDB800A8CC93DD68F6DFF
SHA1: 2F4EFEFEDFD17AE03D4E3F4656715068DA6D6012


==== Registry Search Results for "Baidu" ======================


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Baidu PC Faster 3.7.0.0"="\"C:\\Program Files (x86)\\Baidu Security\\PC Faster\\3.7.0.0\\PCFaster.exe\" -auto -start"

[HKEY_LOCAL_MACHINE\SOFTWARE\Spearit\StartUp This\Run\Baidu PC Faster 3.7.0.0]

[HKEY_LOCAL_MACHINE\SOFTWARE\Spearit\StartUp This\Run\Baidu PC Faster 3.7.0.0]
"Command Line"="\"C:\\Program Files (x86)\\Baidu Security\\PC Faster\\3.7.0.0\\PCFaster.exe\" -auto -start"

[HKEY_LOCAL_MACHINE\SOFTWARE\Spearit\StartUp This\Run\Baidu PC Faster 3.7.0.0]
"Description"="Baidu PC Faster"

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\Install]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\LastReportTime]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\Run]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\Run\Disable]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\Run\Disable\alluser]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\Run\Disable\curuser]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\Run\Disable\hkcu]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\Run\Disable\hklm]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.4.0.17\Statistic]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.7.0.0]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.7.0.0\Install]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.7.0.0\Install\9133234]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.7.0.0\Install\9133234]
"url"="http://sync.pcfaster.baidu.com/cgi-bin-py/get_channel_info.cgi?install_channel=Baixaki|br|IBD|Bundle&version=3.7.1.39149&errorcode=0006&errortext=RmFpbGVkIHRvIHdyaXRlIHRoZSBmaWxlICdDOlxQcm9ncmFtIEZpbGVzICh4ODYpXEJhaWR1IFNlY3VyaXR5XFBDIEZhc3RlclwzLjcuMC4wXFVuaW5zdENhbGxlci5leGUnLg==&userid=WD-WMAVU-E0699577A613!8e2c6f66-849d-48be-9df7-2bf02a08ca3a@#E0699577A613&install_time=2013-08-31 17:18:53&cost_time=17"

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.7.0.0\Install\9133312]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\3.7.0.0\Install\9133312]
"url"="http://sync.security.baidu.co.th/cgi-bin-py/get_channel_info.cgi?install_channel=Baixaki|br|IBD|Bundle&version=3.7.1.39149&errorcode=0006&errortext=RmFpbGVkIHRvIHdyaXRlIHRoZSBmaWxlICdDOlxQcm9ncmFtIEZpbGVzICh4ODYpXEJhaWR1IFNlY3VyaXR5XFBDIEZhc3RlclwzLjcuMC4wXFVuaW5zdENhbGxlci5leGUnLg==&userid=WD-WMAVU-E0699577A613!8e2c6f66-849d-48be-9df7-2bf02a08ca3a@#E0699577A613&install_time=2013-08-31 17:18:53&cost_time=17"

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\DataReport]

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Baidu Security\PC Faster\Setup]

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"="C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"
"ISUSPM"="C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler"

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"="C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"
"ISUSPM"="C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler"
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-21-1624093564-1394921759-3378475032-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Baidu PC Faster 3.7.0.0"="C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe -auto -start"
"BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"
"20131121"="C:\Program Files\AVAST Software\Avast\setup\emupdate\38a627b6-71e4-4c06-8ef1-94b602e5903f.exe /check"
"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"IndexSearch"="C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe"
"PaperPort PTD"="C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe"
"PDFHook"="C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe"
"PDF5 Registry Controller"="C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe"
"ControlCenter4"="C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"="C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"
"ISUSPM"="C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"
"VMSnap3"="C:\Windows\VMSnap3.exe"
"Domino"="C:\Windows\Domino.exe"

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [29/06/2013 05:59]
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1624093564-1394921759-3378475032-1000Core.job --a------ C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe [09/07/2013 20:58]
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1624093564-1394921759-3378475032-1000UA.job --a------ C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe [09/07/2013 20:58]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [29/06/2013 05:29]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [29/06/2013 05:29]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-1624093564-1394921759-3378475032-1000Core" [C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-1624093564-1394921759-3378475032-1000UA" [C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [16/11/2013 13:38]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"lyrics@LampFit.co"="C:\Program Files (x86)\LyricsPod\116.xpi" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\neilianddro\AppData\Roaming\Mozilla\Firefox\Profiles\kfq92o76.default
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Radio Jovem Pan FM - %ProfilePath%\extensions\radiojovempan@upx.com.br.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\neilianddro\AppData\Roaming\Mozilla\Firefox\Profiles\kfq92o76.default
AF661355EBAB898EB92D5454AEF93CE0 - C:\Windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.400.43
3D76B5C0E02ECC19C1F5756E8FD97F72 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll - Shockwave Flash
E7BC792810EC02DD1F7ED25D830E9324 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll - Shockwave Flash
0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Users\neilianddro\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
blefcpkldpjpbapgmoemkmdibidpiojd - C:\Program Files (x86)\LyricsPod\116.crx[]
fjoijdanhaiflhibkljeklcghcmmfffh - C:\Program Files (x86)\Web Cake\WebCakeLayers.crx[]

Web Cake - neilianddro - Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh

==== Chrome Fix ======================

C:\Users\neilianddro\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh deleted successfully
C:\Users\neilianddro\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjoijdanhaiflhibkljeklcghcmmfffh_0.localstorage deleted successfully
C:\Users\neilianddro\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fjoijdanhaiflhibkljeklcghcmmfffh_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.superdownloads.com.br/?utm_source=core&utm_medium=ppi&utm_campaign=portal"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.superdownloads.com.br/?utm_source=core&utm_medium=ppi&utm_campaign=portal"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.superdownloads.com.br/?utm_source=core&utm_medium=ppi&utm_campaign=portal"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.superdownloads.com.br/?utm_source=core&utm_medium=ppi&utm_campaign=portal"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\blefcpkldpjpbapgmoemkmdibidpiojd deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh deleted successfully

==== HijackThis Entries ======================

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Baidu PC Faster 3.7.0.0] "C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe" -auto -start
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\38a627b6-71e4-4c06-8ef1-94b602e5903f.exe /check
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [PDFHook] C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe
O4 - HKLM\..\Run: [PDF5 Registry Controller] C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\neilianddro\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1624093564-1394921759-3378475032-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1624093564-1394921759-3378475032-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O8 - Extra context menu item: Se&nd to OneNote - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: seg.banestes.com.br
O15 - Trusted Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O15 - Trusted Zone: wwws.banestes.com.br
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PDFProFiltSrvPP - Nuance Communications, Inc. - C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\neilianddro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\neilianddro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\neilianddro\AppData\Local\Mozilla\Firefox\Profiles\kfq92o76.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\neilianddro\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\NEILIA~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 30/11/2013 at 19:25:01,58 ======================

 Olá Leandro!

Faça o download do arquivo Fix.txt anexado nesta minha resposta. Abra-o > Clique no menu: Editar » Selecionar Tudo), depois disso volte novamente no menu: Editar » e clique na opção: Copiar.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Cole o texto que você acabou de copiar do arquivo anexado no espaço em branco do Zoek.

*Clique em [Run Script]

*Durante o scan a mensagem abaixo será apresentada. Aguarde o término...pode demorar!

Zoek.exe is running now.
Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

*Caso a reinicialização do PC seja solicitada, clique [OK]

O log do Zoek estará em C:\zoek-results.txt.
_____________________________

Caso o problema tenha se resolvido com esta dica acima, baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de Xplode) e salve-o no Desktop (Área de Trabalho)

*Execute-o, deixe selecionadas as opções Remove disinfection tools e Purge system restore

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Clique [Run] e feche o relatório apresentado

Delete o DelFix e o arquivo C:\DelFix.txt

ok! Marcos Felipe, obrigado.

O problema foi resolvido, a mensagem parou de aparecer!

Valeu!

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.