Remover Baidu PC Faster depois que ele inutilisou seu computador

Faça o download do Farbar no endereço abaixo (o qual renomeei para Goiaba.com para enganarmos os virus):
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Execute o Goiaba.com e aceite o contrato


*Clique [Scan]


*Ao término clique [OK] > [OK]



*Serão criados dois relatórios no Desktop: FRST.txt e Addition.txt

Poste estes dois relatórios em sua próxima resposta. (Obs: se não couber em uma só resposta, pode dividi-la em mais postagens).

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 02
Ran by Paulo Jr (administrator) on ICHIBANGTA-PC on 04-03-2014 17:24:52
Running from C:\Users\Paulo Jr\Desktop
Microsoft Windows 7 Ultimate (X86) OS Language: Portuguese Brazilian
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link for 64-Bit Version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

==================== Processes (Whitelisted) =================

(GAS Tecnologia) C:\Program Files\GbPlugin\gbpsv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\STacSV.exe
(Hewlett-Packard) C:\Windows\system32\Hpservice.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\aestsrv.exe
(Broadcom Corporation.) c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Hewlett-Packard Company) C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe
(QUALCOMM, Inc.) C:\QUALCOMM\QDLService\QDLService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(CyberLink) C:\Program Files\Hewlett-Packard\Media\Webcam\YCMMirage.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation) C:\Windows\helppane.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Paulo Jr\Desktop\Goiaba.com
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [WirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [500792 2010-05-20] (Hewlett-Packard Company)
HKLM\...\Run: [SmartMenu] - C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [568888 2010-01-20] ()
HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [323640 2010-02-25] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [DpAgent] - C:\Program Files\DigitalPersona\Bin\dpagent.exe [842816 2009-12-01] (DigitalPersona, Inc.)
HKLM\...\Run: [avast] - C:\Program Files\Alwil Software\Avast5\avastUI.exe [4767304 2013-03-06] (AVAST Software)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdcBase.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [947152 2013-01-27] (Microsoft Corporation)
HKLM\...\Run: [fst_br_41] - [X]
Winlogon\Notify\ GbPluginAbn: C:\Program Files\GbPlugin\gbiehAbn.dll (Banco Real)
Winlogon\Notify\ GbPluginBb: C:\Program Files\GbPlugin\gbieh.dll (Banco do Brasil)
Winlogon\Notify\ GbPluginCef: C:\Program Files\GbPlugin\gbiehCef.dll (Caixa Economica Federal)
Winlogon\Notify\ GbPluginUni: C:\Program Files\GbPlugin\gbiehUni.dll (Banco Itaú Unibanco)
HKU\S-1-5-21-2578838918-163853556-1102255897-1000\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-07-16] ()
HKU\S-1-5-21-2578838918-163853556-1102255897-1000\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [975800 2012-07-16] (Samsung)
HKU\S-1-5-21-2578838918-163853556-1102255897-1000\...\Run: [Pando Media Booster] - C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-09] ()
HKU\S-1-5-21-2578838918-163853556-1102255897-1000\...\Policies\system: [ConsentPromptBehaviorAdmin] 0
HKU\S-1-5-21-2578838918-163853556-1102255897-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Lsa: [Notification Packages] scecli DPPWDFLT

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-BR
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x08A6C899CDDACC01
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DigitalPersona Personal Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\PROGRAM FILES\GBPLUGIN\gbieh.dll (Banco do Brasil)
BHO: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files\GbPlugin\gbiehcef.dll (Caixa Economica Federal)
BHO: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540007} - C:\Program Files\GbPlugin\gbiehAbn.dll (Banco Real)
BHO: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540008} - C:\Program Files\GbPlugin\gbiehUni.dll (Banco Itaú Unibanco)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {E0301295-AB3E-4AF3-979F-3D453C5F9F48} - No File
DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399007} - C:\Program Files\GbPlugin\gbiehAbn.dll [644592 2012-08-02] (Banco Real)
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files\GbPlugin\gbieh.dll [1389096 2013-05-23] (Banco do Brasil)
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files\GbPlugin\gbiehUni.dll [732072 2011-12-20] (Banco Itaú Unibanco)
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files\GbPlugin\gbiehcef.dll [1652584 2012-12-26] (Caixa Economica Federal)
Tcpip\Parameters: [DhcpNameServer] 187.2.216.34 187.2.216.39 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Paulo Jr\AppData\Roaming\Mozilla\Firefox\Profiles\lnxum9vj.default
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @Skype.com/Skype Web Plugin - C:\Program Files\SkypeWebPlugin\npSkypeWebPlugin.dll (Skype)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Paulo Jr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\buscape.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mercadolivre.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-br.xml
FF Extension: Quick Start - C:\Users\Paulo Jr\AppData\Roaming\Mozilla\Firefox\Profiles\lnxum9vj.default\Extensions\quick_start@gmail.com [2014-02-26]
FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - C:\Program Files\DigitalPersona\Bin\FirefoxExt\ []
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! WebRep - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-19]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Paulo Jr\AppData\Roaming\Mozilla\Firefox\Profiles\lnxum9vj.default\extensions\quick_start@gmail.com
FF Extension: Quick Start - C:\Users\Paulo Jr\AppData\Roaming\Mozilla\Firefox\Profiles\lnxum9vj.default\extensions\quick_start@gmail.com [2014-02-26]
FF HKCU\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\DigitalPersona\Bin\firefoxext
FF Extension: DigitalPersona Extension - C:\Program Files\DigitalPersona\Bin\firefoxext [2010-09-08]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [lyrics@LampFit.co] - C:\Program Files\LyricsPod\116.xpi
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [45248 2013-03-06] (AVAST Software)
R2 GbpSv; C:\Program Files\GbPlugin\gbpsv.exe [410152 2013-05-23] (GAS Tecnologia)
R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [47416 2014-02-05] (Hewlett-Packard Company)
S2 KMService; C:\Windows\system32\srvany.exe [8192 2010-09-28] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [20456 2013-01-27] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [295232 2013-01-27] (Microsoft Corporation)
S4 PCFasterSvc_{PCFaster_4.0.0.0}; C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFasterSvc.exe [679920 2014-01-03] (Baidu Inc.)
R2 QDLService; C:\QUALCOMM\QDLService\QDLService.exe [345336 2009-07-30] (QUALCOMM, Inc.)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\STacSV.exe [221266 2009-07-22] (IDT, Inc.)

==================== Drivers (Whitelisted) ====================

R0 360HookOem; C:\Windows\System32\drivers\360HookOem.sys [54912 2012-05-31] (360安全中心)
R2 aswFsBlk; C:\Windows\system32\Drivers\aswFsBlk.sys [29816 2013-03-06] (AVAST Software)
R1 aswKbd; C:\Windows\system32\Drivers\aswKbd.sys [18544 2012-08-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-03-06] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [60656 2013-03-06] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49248 2013-03-06] ()
R1 aswSnx; C:\Windows\system32\Drivers\aswSnx.sys [765736 2013-03-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\Drivers\aswSP.sys [368176 2013-03-06] (AVAST Software)
R1 aswTdi; C:\Windows\system32\Drivers\aswTdi.sys [62376 2013-03-06] (AVAST Software)
S3 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [164736 2013-03-06] ()
R0 Bhbase; C:\Windows\System32\drivers\Bhbase.sys [47456 2014-01-09] (Baidu, Inc.)
R1 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [100160 2014-01-09] (Baidu, Inc.)
R3 clwvd; C:\Windows\System32\DRIVERS\clwvd.sys [29168 2010-07-30] (Windows (R) Win 7 DDK provider)
R0 GbpKm; C:\Windows\System32\drivers\gbpkm.sys [49536 2013-05-08] (GAS Tecnologia)
S3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [31560 2014-03-04] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [195296 2013-01-20] (Microsoft Corporation)
S3 Ndisrd; C:\Windows\System32\DRIVERS\gbpndisrd.sys [31088 2014-03-04] (GbPlugin NDIS Device Driver)
R3 NdisrdMP; C:\Windows\System32\DRIVERS\gbpndisrd.sys [31088 2014-03-04] (GbPlugin NDIS Device Driver)
S3 PCFApiUtil; C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil.sys [119168 2014-01-09] (Baidu, Inc.)
S3 USBET; C:\Windows\System32\DRIVERS\ETdrv.sys [164992 2010-01-11] (Etron)
S3 AESTAud; system32\drivers\AESTAud.sys [X]
S3 CpqDfw; system32\drivers\CpqDfw.sys [X]
S3 iscFlash; \??\C:\Users\PAULOJ~1\AppData\Local\Temp\iscflash.sys [X]
S1 MpKsl92497369; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5342F988-B3E7-4BAC-A317-89DB897C2E67}\MpKsl92497369.sys [X]
S1 MpKsleb3fa785; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5342F988-B3E7-4BAC-A317-89DB897C2E67}\MpKsleb3fa785.sys [X]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [X]
S3 XDva397; \??\C:\Windows\system32\XDva397.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-04 17:24 - 2014-03-04 17:25 - 00016582 ____C () C:\Users\Paulo Jr\Desktop\FRST.txt
2014-03-04 17:24 - 2014-03-04 17:24 - 00000000 ___DC () C:\FRST
2014-03-04 17:23 - 2014-03-04 17:24 - 01145344 ____C (Farbar) C:\Users\Paulo Jr\Desktop\Goiaba.com
2014-03-04 17:17 - 2014-03-04 17:18 - 03007700 ____C () C:\Users\Paulo Jr\Desktop\revouninstaller.zip
2014-03-04 17:11 - 2014-03-04 17:12 - 06866603 ____C (Nicolas Coolman ) C:\Users\Paulo Jr\Desktop\ZHPDiag2.exe
2014-03-04 17:00 - 2014-03-04 17:00 - 00004691 ____C () C:\Users\Paulo Jr\Desktop\JRT.txt
2014-03-04 16:29 - 2014-03-04 16:29 - 00000000 ____D () C:\Windows\ERUNT
2014-03-04 16:26 - 2014-03-04 16:27 - 01037734 ____C (Thisisu) C:\Users\Paulo Jr\Desktop\Casarão.com
2014-03-04 15:47 - 2014-03-04 16:20 - 00000000 ___DC () C:\AdwCleaner
2014-03-04 15:47 - 2014-03-04 15:47 - 01244192 ____C () C:\Users\Paulo Jr\Desktop\amizade.com
2014-03-04 15:19 - 2014-03-04 15:19 - 00031560 _____ () C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-04 00:46 - 2014-03-04 00:46 - 00000914 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-04 00:46 - 2014-03-04 00:46 - 00000000 ___DC () C:\Users\Todos os Usuários\Malwarebytes
2014-03-04 00:46 - 2014-03-04 00:46 - 00000000 ___DC () C:\Users\Paulo Jr\AppData\Roaming\Malwarebytes
2014-03-04 00:46 - 2014-03-04 00:46 - 00000000 ___DC () C:\ProgramData\Malwarebytes
2014-03-04 00:46 - 2014-03-04 00:46 - 00000000 ___DC () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-04 00:46 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-04 00:45 - 2014-03-04 00:46 - 10285040 ____C (Malwarebytes Corporation ) C:\Users\Paulo Jr\Desktop\mbam-setup-downloaded.exe
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\winlogon.exe
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\svchost.exe
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\rundll32.exe
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\mbam-chameleon.scr
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\mbam-chameleon.pif
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\mbam-chameleon.exe
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\mbam-chameleon.com
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\iexplore.exe
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\firefox.scr
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\firefox.pif
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\firefox.exe
2014-03-04 00:45 - 2012-08-15 08:48 - 00218184 ____C () C:\Users\Paulo Jr\Desktop\firefox.com
2014-03-04 00:45 - 2012-03-03 11:32 - 00186068 ____C () C:\Users\Paulo Jr\Desktop\chameleon.chm
2014-03-04 00:44 - 2014-03-04 00:44 - 01440846 ____C () C:\Users\Paulo Jr\Desktop\mbam-chameleon-1.62.1.1000.zip
2014-03-04 00:18 - 2014-03-04 14:48 - 00002004 ____C () C:\Users\Paulo Jr\Desktop\Rkill.txt
2014-03-04 00:17 - 2014-03-04 00:17 - 01933048 ____C (Bleeping Computer, LLC) C:\Users\Paulo Jr\Desktop\rkill.com
2014-03-03 23:48 - 2014-03-03 23:49 - 01145344 ____C (Farbar) C:\Users\Paulo Jr\Desktop\FRST.exe
2014-03-03 22:57 - 2014-03-03 22:57 - 01244192 ____C () C:\Users\Paulo Jr\Desktop\AdwCleaner.exe
2014-03-03 15:24 - 2014-03-03 15:24 - 00347440 ____C (Microsoft Corporation) C:\Users\Paulo Jr\Documents\MicrosoftFixit-portable.exe
2014-03-03 15:23 - 2014-03-03 15:23 - 00347816 ____C (Microsoft Corporation) C:\MicrosoftFixit.ProgramInstallUninstall.RNP.54317294816125378.4.1.Run.exe
2014-03-03 15:05 - 2014-03-03 15:05 - 01481920 ____C (Baidu Inc.) C:\PC_Faster_Setup_Mini_BR.exe
2014-03-03 12:50 - 2014-03-03 12:50 - 00616056 ____C ( ) C:\iobit-uninstaller-3172405-32-bits.exe
2014-03-03 12:23 - 2014-03-03 12:23 - 01071000 ____C (Solid State Networks) C:\install_flashplayer12x32_mssa_aaa_aih.exe
2014-03-03 12:08 - 2014-03-03 12:08 - 04395008 ____C () C:\HPSupportSolutionsFramework.msi
2014-03-03 12:06 - 2014-03-03 12:06 - 04669416 ____C (AVAST Software) C:\avast_internet_security_setup_online.exe
2014-03-02 23:12 - 2014-03-02 23:12 - 01569312 ____C (Baidu Inc.) C:\PC_Faster_Setup_Mini_B58.exe
2014-03-02 22:25 - 2014-03-04 16:04 - 00001476 _____ () C:\Windows\setupact.log
2014-03-02 22:25 - 2014-03-04 14:41 - 00338846 _____ () C:\Windows\PFRO.log
2014-03-02 22:25 - 2014-03-02 22:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-02 14:27 - 2014-03-02 14:27 - 24793312 ____C (Microsoft Corporation) C:\Users\Paulo Jr\Documents\Windows-KB890830-V5.9.exe
2014-03-02 14:24 - 2014-03-02 14:31 - 62914560 ____C () C:\Users\Paulo Jr\Documents\msert.exe
2014-03-02 09:07 - 2014-03-02 10:47 - 00000000 ____D () C:\Users\Public\Documents\Baidu Security
2014-03-01 23:19 - 2014-03-03 22:16 - 00000000 ___DC () C:\Users\Todos os Usuários\Log
2014-03-01 23:19 - 2014-03-03 22:16 - 00000000 ___DC () C:\ProgramData\Log
2014-03-01 23:19 - 2014-01-09 08:42 - 00100160 _____ (Baidu, Inc.) C:\Windows\system32\Drivers\BprotectEx.sys
2014-03-01 23:19 - 2014-01-09 08:42 - 00047456 _____ (Baidu, Inc.) C:\Windows\system32\Drivers\Bhbase.sys
2014-02-14 23:08 - 2014-03-04 16:02 - 00000000 ___DC () C:\Program Files\Mozilla Firefox
2014-02-11 13:29 - 2014-02-11 13:29 - 00000000 ___DC () C:\Users\Paulo Jr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dispositivos Bluetooth
2014-02-07 15:34 - 2014-02-07 15:34 - 00000000 ___DC () C:\Program Files\SkypeWebPlugin

==================== One Month Modified Files and Folders =======

2014-03-04 17:25 - 2014-03-04 17:24 - 00016582 ____C () C:\Users\Paulo Jr\Desktop\FRST.txt
2014-03-04 17:24 - 2014-03-04 17:24 - 00000000 ___DC () C:\FRST
2014-03-04 17:24 - 2014-03-04 17:23 - 01145344 ____C (Farbar) C:\Users\Paulo Jr\Desktop\Goiaba.com
2014-03-04 17:18 - 2014-03-04 17:17 - 03007700 ____C () C:\Users\Paulo Jr\Desktop\revouninstaller.zip
2014-03-04 17:12 - 2014-03-04 17:11 - 06866603 ____C (Nicolas Coolman ) C:\Users\Paulo Jr\Desktop\ZHPDiag2.exe
2014-03-04 17:05 - 2012-11-25 12:16 - 00396156 _____ () C:\Windows\system32\perfh011.dat
2014-03-04 17:05 - 2012-11-25 12:16 - 00111774 _____ () C:\Windows\system32\perfc011.dat
2014-03-04 17:05 - 2010-09-02 22:30 - 02067722 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-04 17:05 - 2009-07-17 15:48 - 00675724 _____ () C:\Windows\system32\prfh0416.dat
2014-03-04 17:05 - 2009-07-17 15:48 - 00137570 _____ () C:\Windows\system32\prfc0416.dat
2014-03-04 17:02 - 2013-08-06 13:54 - 01327723 _____ () C:\Windows\WindowsUpdate.log
2014-03-04 17:00 - 2014-03-04 17:00 - 00004691 ____C () C:\Users\Paulo Jr\Desktop\JRT.txt
2014-03-04 16:56 - 2009-07-13 23:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-03-04 16:35 - 2009-07-13 23:37 - 00000000 ____D () C:\Windows\tracing
2014-03-04 16:31 - 2010-09-03 22:22 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-04 16:29 - 2014-03-04 16:29 - 00000000 ____D () C:\Windows\ERUNT
2014-03-04 16:27 - 2014-03-04 16:26 - 01037734 ____C (Thisisu) C:\Users\Paulo Jr\Desktop\Casarão.com
2014-03-04 16:20 - 2014-03-04 15:47 - 00000000 ___DC () C:\AdwCleaner
2014-03-04 16:10 - 2009-07-14 01:34 - 00014224 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-04 16:10 - 2009-07-14 01:34 - 00014224 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-04 16:05 - 2012-03-07 14:08 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-03-04 16:05 - 2010-09-03 22:22 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-04 16:04 - 2014-03-02 22:25 - 00001476 _____ () C:\Windows\setupact.log
2014-03-04 16:04 - 2012-01-24 07:01 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\Windows\system32\Drivers\GbpNdisrd.sys
2014-03-04 16:04 - 2009-07-14 01:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-04 16:02 - 2014-02-14 23:08 - 00000000 ___DC () C:\Program Files\Mozilla Firefox
2014-03-04 15:47 - 2014-03-04 15:47 - 01244192 ____C () C:\Users\Paulo Jr\Desktop\amizade.com
2014-03-04 15:26 - 2010-09-02 22:43 - 00000000 ___DC () C:\Users\Todos os Usuários\Microsoft Help
2014-03-04 15:26 - 2010-09-02 22:43 - 00000000 ___DC () C:\ProgramData\Microsoft Help
2014-03-04 15:19 - 2014-03-04 15:19 - 00031560 _____ () C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-04 14:48 - 2014-03-04 00:18 - 00002004 ____C () C:\Users\Paulo Jr\Desktop\Rkill.txt
2014-03-04 14:41 - 2014-03-02 22:25 - 00338846 _____ () C:\Windows\PFRO.log
2014-03-04 00:46 - 2014-03-04 00:46 - 00000914 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-04 00:46 - 2014-03-04 00:46 - 00000000 ___DC () C:\Users\Todos os Usuários\Malwarebytes
2014-03-04 00:46 - 2014-03-04 00:46 - 00000000 ___DC () C:\Users\Paulo Jr\AppData\Roaming\Malwarebytes
2014-03-04 00:46 - 2014-03-04 00:46 - 00000000 ___DC () C:\ProgramData\Malwarebytes
2014-03-04 00:46 - 2014-03-04 00:46 - 00000000 ___DC () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-04 00:46 - 2014-03-04 00:45 - 10285040 ____C (Malwarebytes Corporation ) C:\Users\Paulo Jr\Desktop\mbam-setup-downloaded.exe
2014-03-04 00:44 - 2014-03-04 00:44 - 01440846 ____C () C:\Users\Paulo Jr\Desktop\mbam-chameleon-1.62.1.1000.zip
2014-03-04 00:17 - 2014-03-04 00:17 - 01933048 ____C (Bleeping Computer, LLC) C:\Users\Paulo Jr\Desktop\rkill.com
2014-03-03 23:55 - 2010-09-02 22:26 - 00000000 _SHDC () C:\Recovery
2014-03-03 23:49 - 2014-03-03 23:48 - 01145344 ____C (Farbar) C:\Users\Paulo Jr\Desktop\FRST.exe
2014-03-03 23:45 - 2009-07-14 01:53 - 00032588 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-03 22:57 - 2014-03-03 22:57 - 01244192 ____C () C:\Users\Paulo Jr\Desktop\AdwCleaner.exe
2014-03-03 22:16 - 2014-03-01 23:19 - 00000000 ___DC () C:\Users\Todos os Usuários\Log
2014-03-03 22:16 - 2014-03-01 23:19 - 00000000 ___DC () C:\ProgramData\Log
2014-03-03 15:24 - 2014-03-03 15:24 - 00347440 ____C (Microsoft Corporation) C:\Users\Paulo Jr\Documents\MicrosoftFixit-portable.exe
2014-03-03 15:23 - 2014-03-03 15:23 - 00347816 ____C (Microsoft Corporation) C:\MicrosoftFixit.ProgramInstallUninstall.RNP.54317294816125378.4.1.Run.exe
2014-03-03 15:05 - 2014-03-03 15:05 - 01481920 ____C (Baidu Inc.) C:\PC_Faster_Setup_Mini_BR.exe
2014-03-03 12:50 - 2014-03-03 12:50 - 00616056 ____C ( ) C:\iobit-uninstaller-3172405-32-bits.exe
2014-03-03 12:23 - 2014-03-03 12:23 - 01071000 ____C (Solid State Networks) C:\install_flashplayer12x32_mssa_aaa_aih.exe
2014-03-03 12:08 - 2014-03-03 12:08 - 04395008 ____C () C:\HPSupportSolutionsFramework.msi
2014-03-03 12:06 - 2014-03-03 12:06 - 04669416 ____C (AVAST Software) C:\avast_internet_security_setup_online.exe
2014-03-03 11:37 - 2010-09-03 12:05 - 00000000 ___DC () C:\Users\Todos os Usuários\GbPlugin
2014-03-03 11:37 - 2010-09-03 12:05 - 00000000 ___DC () C:\ProgramData\GbPlugin
2014-03-02 23:12 - 2014-03-02 23:12 - 01569312 ____C (Baidu Inc.) C:\PC_Faster_Setup_Mini_B58.exe
2014-03-02 22:25 - 2014-03-02 22:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-02 22:18 - 2012-08-30 20:57 - 00000000 ___DC () C:\Users\Paulo Jr\AppData\Roaming\Media Player Classic
2014-03-02 22:18 - 2010-09-03 06:53 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-03-02 14:31 - 2014-03-02 14:24 - 62914560 ____C () C:\Users\Paulo Jr\Documents\msert.exe
2014-03-02 14:27 - 2014-03-02 14:27 - 24793312 ____C (Microsoft Corporation) C:\Users\Paulo Jr\Documents\Windows-KB890830-V5.9.exe
2014-03-02 10:47 - 2014-03-02 09:07 - 00000000 ____D () C:\Users\Public\Documents\Baidu Security
2014-03-01 23:16 - 2013-06-22 23:24 - 00000000 ___DC () C:\Users\Todos os Usuários\Baidu Security
2014-03-01 23:16 - 2013-06-22 23:24 - 00000000 ___DC () C:\ProgramData\Baidu Security
2014-03-01 23:15 - 2010-09-03 09:26 - 00000000 ___DC () C:\Users\Todos os Usuários\Hewlett-Packard
2014-03-01 23:15 - 2010-09-03 09:26 - 00000000 ___DC () C:\ProgramData\Hewlett-Packard
2014-03-01 22:58 - 2012-08-31 15:13 - 00000000 ___DC () C:\Users\Paulo Jr\AppData\Local\Google
2014-03-01 22:58 - 2010-09-03 22:21 - 00000000 ___DC () C:\Program Files\Google
2014-03-01 00:48 - 2012-11-09 19:36 - 00000000 ___DC () C:\Users\Paulo Jr\AppData\Local\PMB Files
2014-02-27 21:05 - 2012-08-02 16:58 - 00000000 ___DC () C:\Users\Paulo Jr\Documents\Minhas digitalizações
2014-02-26 20:19 - 2010-09-24 17:45 - 00000000 ___DC () C:\Program Files\CCleaner
2014-02-26 15:07 - 2014-01-13 16:34 - 00773776 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-02-26 15:07 - 2014-01-13 16:34 - 00421008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-02-17 22:31 - 2013-12-20 14:47 - 00000000 ___DC () C:\Program Files\Mozilla Firefox.bak
2014-02-11 13:29 - 2014-02-11 13:29 - 00000000 ___DC () C:\Users\Paulo Jr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dispositivos Bluetooth
2014-02-07 15:34 - 2014-02-07 15:34 - 00000000 ___DC () C:\Program Files\SkypeWebPlugin

Some content of TEMP:
====================
C:\Users\Paulo Jr\AppData\Local\Temp\Baidu_Secure_SystemUp_4.0.1.56634.exe
C:\Users\Paulo Jr\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Paulo Jr\AppData\Local\Temp\fp_pl_pfs_installer.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 15:59

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-03-2014 02
Ran by Paulo Jr at 2014-03-04 17:27:26
Running from C:\Users\Paulo Jr\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Microsoft Security Essentials (Enabled - Up to date) {3F839487-C7A2-C958-E30C-E2825BA31FB5}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {84E27563-E198-C6D6-D9BC-D9F020245508}

==================== Installed Programs ======================

1400 (Version: 130.0.365.000 - Hewlett-Packard) Hidden
1400_Help (Version: 82.0.242.000 - Hewlett-Packard) Hidden
1400Trb (Version: 82.0.242.000 - Hewlett-Packard) Hidden
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
Adobe Reader 9.5.4 - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-A95000000001}) (Version: 9.5.4 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
AIO_CDB_ProductContext (Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (Version: 130.0.421.000 - Hewlett-Packard) Hidden
avast! Free Antivirus (HKLM\...\avast) (Version: 8.0.1483.0 - AVAST Software)
Baidu PC Faster (HKLM\...\Baidu PC Faster 4.0.0.0) (Version: 4.0.1.56634 - Baidu, Inc.) <==== ATTENTION
Broadcom 2070 Bluetooth 2.1 + EDR (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.1100 - Broadcom Corporation)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
BufferChm (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 3.11 - Piriform)
Cheat Engine 6.3 (HKLM\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
Compresor WinRAR (HKLM\...\WinRAR archiver) (Version: - )
Controle ActiveX do Windows Live Mesh para Conexões Remotas (HKLM\...\{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}) (Version: 15.4.5722.2 - Microsoft Corporation)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D7453B4F-9A57-4B46-9878-48F90223F8F7}) (Version: - Microsoft)
DigitalPersona Personal 4.11 (HKLM\...\{47F3EDF5-C821-49E6-B9B3-D00BF0A9BAB8}) (Version: 4.11.3826 - DigitalPersona, Inc.)
DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden
DVD Menu Pack for HP MediaSmart Video (HKLM\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4121 - Hewlett-Packard)
DVD Menu Pack for HP MediaSmart Video (Version: 4.1.4121 - Hewlett-Packard) Hidden
ENE CIR Receiver Driver (HKLM\...\5B73F775A90397BAF80173B8A6C0B327BE3872FB) (Version: 2.7.3.519 - ENE)
ESU for Microsoft Windows 7 (HKLM\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Free Audio CD Burner version 1.4 (HKLM\...\Free Audio CD Burner_is1) (Version: - DVDVideoSoft Limited.)
Free Studio version 5.1.5 (HKLM\...\Free Studio_is1) (Version: - DVDVideoSoft Limited.)
GeoGebra (HKLM\...\GeoGebra) (Version: 3.2.42.0 - International GeoGebra Institute)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
Graphmatica (HKLM\...\Graphmatica) (Version: - )
Hewlett-Packard ACLM.NET v1.2.1.1 (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM\...\{4337D507-533C-4FDE-BA2F-DC93E56784B8}) (Version: 4.0.3.1 - Hewlett-Packard)
HP Customer Experience Enhancements (Version: 6.0.1.3 - Hewlett-Packard) Hidden
HP MediaSmart SmartMenu (HKLM\...\{5DD1608E-F564-49C1-BB8C-01AEA7BB2AB9}) (Version: 3.1.1.12 - Hewlett-Packard)
HP MediaSmart Video (HKLM\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.0.4021 - Hewlett-Packard)
HP MediaSmart Video (Version: 4.0.4021 - Hewlett-Packard) Hidden
HP MediaSmart Webcam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3130 - Hewlett-Packard)
HP MediaSmart Webcam (Version: 4.1.3130 - Hewlett-Packard) Hidden
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Product Detection (HKLM\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
HP Quick Launch Buttons (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.17.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM\...\{86FD8326-909D-45F5-BB61-0619D0D31293}) (Version: 11.50.0011 - Hewlett-Packard Company)
HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{F9A43C0C-F274-4EC0-B02E-202C15C09C00}) (Version: 3.50.12.1 - Hewlett-Packard)
HPPhotoSmartDiscLabelContent1 (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.211.000 - Hewlett-Packard) Hidden
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1883 - Intel Corporation)
Java 7 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.32.1 - JMicron Technology Corp.)
K-Lite Codec Pack 9.1.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 9.1.0 - )
Malwarebytes Anti-Malware versão 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
MediaSmart DVD (Version: 3.01.0000 - CyberLink Corp.) Hidden
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM\...\{95140000-007A-0416-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (HKLM\...\{95140000-007D-0409-0000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.2.0223.1 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.2.223.1 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Movie Theme Pack for HP MediaSmart Video (HKLM\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.0.3715 - Hewlett-Packard)
Movie Theme Pack for HP MediaSmart Video (Version: 4.0.3715 - Hewlett-Packard) Hidden
Mozilla Firefox 27.0.1 (x86 pt-BR) (HKLM\...\Mozilla Firefox 27.0.1 (x86 pt-BR)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 22.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network (Version: 140.0.215.000 - Hewlett-Packard) Hidden
NewPlayer (HKLM\...\NewPlayer) (Version: v2.1.1.0 - TUGUU SL) <==== ATTENTION
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
PaintTool SAI (HKLM\...\PaintTool SAI1.1.0) (Version: 1.1.0 - Eddie Sekiguchi Softwares)
Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
Plants vs. Zombies (HKLM\...\Plants vs. Zombies) (Version: - PopCap Games)
QLBCASL (Version: 6.40.17.2 - Hewlett-Packard) Hidden
Qualcomm Gobi Driver Package for HP (HKLM\...\{0D43DAA2-E26D-4E29-8227-ED87D39149B0}) (Version: 1.0.27 - QUALCOMM)
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0009 - Realtek)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.2.0.12014_18 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.2.0.12014_18 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.6.0 - SAMSUNG Electronics Co., Ltd.)
Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Web Plugin (HKLM\...\{2266F46F-0E46-491C-B278-DAF80F7C58D7}) (Version: 2.2.12059.16911 - Skype)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SoftStylus (HKLM\...\{10AF7194-B746-4871-B145-BF07A4450B00}) (Version: 2.2.119.2 - Motorola)
System Requirements Lab for Intel (HKLM\...\{C71067FC-288F-4E0B-88C6-44DFDA8311E2}) (Version: 4.5.9.0 - Husdawg, LLC)
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TuneUp Utilities Language Pack (pt-BR) (Version: 13.0.3000.155 - TuneUp Software) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version: - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2010 (KB2494150) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7AC49FC8-F8D2-4DD8-9086-09E52385A21F}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{48E1B6C2-7299-4F3F-AA63-42F0ACE55AA4}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{18B3CF2A-73F7-4716-B1AE-86D68726D408}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM\...\{90140000-001F-0416-0000-0000000FF1CE}_Office14.PROPLUS_{ACBCC818-8E67-43A8-B877-A821A3C6FAD2}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{995A7832-B512-46D5-87C9-2D71FB541435}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553272) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C06ABC7E-8923-4BB1-A7A2-197F5A3E0973}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (HKLM\...\{90140000-006E-0416-0000-0000000FF1CE}_Office14.PROPLUS_{BDE8DD25-D017-443C-AD04-B4FC21489EFB}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ED31DE9A-3E13-4E2C-9106-E0D8AFFB9FA6}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2598289) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{06ABCB4E-77D8-4420-B2EA-EF51558DBFD1}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (HKLM\...\{90140000-00A1-0416-0000-0000000FF1CE}_Office14.PROPLUS_{435C0D41-8F38-42CE-9DCB-23676CB6A6A1}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3613AECC-1454-4DDD-AC36-C42DC16D6DEE}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38990592-F6A1-4A26-96C7-0600E36AE794}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition (HKLM\...\{90140000-001A-0416-0000-0000000FF1CE}_Office14.PROPLUS_{2B32758E-3CCA-4506-BED0-310CBED486BE}) (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BC6DFBFD-16DD-47E1-A7EF-2C062930FA4F}) (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM\...\{90140000-001A-0416-0000-0000000FF1CE}_Office14.PROPLUS_{B95699E7-EEEB-45EC-865F-37E3E746BFB4}) (Version: - Microsoft)
Update Service (HKLM\...\Update Service) (Version: 2.10.7.15 - Sony Ericsson Mobile Communications AB)
WebReg (Version: 140.0.212.017 - Hewlett-Packard) Hidden
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (12/16/2009 6.2.0.9414) (HKLM\...\0973B297E079B467E3776E59F763D63FD557795B) (Version: 12/16/2009 6.2.0.9414 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points =========================

03-03-2014 15:08:47 Installed HP Support Solutions Framework
04-03-2014 18:23:10 Windows Update

==================== Hosts content: ==========================

2009-07-13 23:04 - 2012-06-11 23:19 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {10A88426-8E6D-4D69-A242-66D883C4A043} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2013-03-06] (AVAST Software)
Task: {1DAAC0CD-AEEC-4D83-8393-40DFE292B2C5} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {263B01DC-9A4A-468D-BCCC-5D39DA104D32} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {2E32434E-FE86-4868-98E0-705A1F59DF47} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {322F408B-44E0-4A98-A593-1DCE58295CEA} - System32\Tasks\{B5AAA43C-69C4-4F03-A792-3D31060A1687} => C:\Program Files\ETRON\WebCam\x86\VideoCap.exe
Task: {3BE2AEC5-252C-4D1B-8D4A-56AF55ABB564} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {4FF05AD9-3099-40A2-A21B-A15B4A9E64C0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {6A569236-9F41-4C19-9FF8-54EF7827270E} - System32\Tasks\MirageAgent => C:\Program Files\Hewlett-Packard\Media\Webcam\YCMMirage.exe [2010-07-30] (CyberLink)
Task: {7397CCE7-3B05-4668-9D5C-B6D9C100C843} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-03] (Google Inc.)
Task: {942481C8-3D5D-4612-8A96-2EC31647FF2E} - System32\Tasks\ReclaimerUpdateFiles_Paulo Jr => C:\Users\Paulo Jr\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.50\agent\rnupgagent.exe [2013-06-16] (RealNetworks, Inc.)
Task: {94C3AE6A-4B5C-4711-89B9-156AA30AEAD6} - System32\Tasks\{66E245B4-78DB-400D-99AC-F2B05B2DF44F} => C:\Program Files\ETRON\WebCam\x86\VideoCap.exe
Task: {C3A41EA8-8E77-41C1-A5A6-E6D2B034C6B2} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {D4D017C1-426A-45A9-858C-DA82324FA6C4} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: {DA4E2CB0-BB98-4DF2-9612-765D0C7990A6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-03] (Google Inc.)
Task: {F5E5E8A5-14C5-461F-9A24-CA2F74AC4ACE} - System32\Tasks\Baidu PC Faster Update => C:\Program Files\Baidu Security\PC Faster\4.0.0.0\Updater.exe [2014-01-08] (Baidu Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-03-04 11:19 - 2014-03-04 08:29 - 02275840 _____ () C:\Program Files\Alwil Software\Avast5\defs\14030400\algo.dll
2011-03-17 00:11 - 2011-03-17 00:11 - 04297568 ____C () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-02-14 23:08 - 2014-02-14 23:09 - 03578992 ____C () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows\System32:28CDADCD_Abn.gbp
AlternateDataStreams: C:\Windows\System32:28CDADCD_Bb.gbp
AlternateDataStreams: C:\Windows\System32:28CDADCD_Cef.gbp
AlternateDataStreams: C:\Windows\System32:28CDADCD_Uni.gbp
AlternateDataStreams: C:\Windows\system32\drivers:GbpKmAp.lst
AlternateDataStreams: C:\ProgramData\Temp:05EE1EEF
AlternateDataStreams: C:\ProgramData\Temp:322A8416
AlternateDataStreams: C:\Users\Todos os Usuários\Temp:05EE1EEF
AlternateDataStreams: C:\Users\Todos os Usuários\Temp:322A8416

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: PCFasterSvc_{PCFaster_4.0.0.0} => 2
MSCONFIG\startupreg: Baidu PC Faster 4.0.0.0 => "C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe" -auto -start
MSCONFIG\startupreg: BService => C:\Program Files\Bench\BService\bservice.exe
MSCONFIG\startupreg: Wd => C:\Program Files\Bench\Wd\wd.exe

==================== Faulty Device Manager Devices =============

Name: MpKsleb3fa785
Description: MpKsleb3fa785
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsleb3fa785
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart D110 series
Description: Photosmart D110 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard USB Host Controller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.

Name: Dispositivo Periférico Bluetooth
Description: Dispositivo Periférico Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart D110 series
Description: Photosmart D110 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart D110 series
Description: Photosmart D110 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Dispositivo Periférico Bluetooth
Description: Dispositivo Periférico Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: MpKsl92497369
Description: MpKsl92497369
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl92497369
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (03/04/2014 05:26:44 PM) (Source: DCOM) (User: AUTORIDADE NT)
Description: Específico do aplicativoLocalIniciar{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}AUTORIDADE NTSISTEMAS-1-5-18LocalHost (Usando LRPC)

Error: (03/04/2014 05:16:44 PM) (Source: DCOM) (User: AUTORIDADE NT)
Description: Específico do aplicativoLocalIniciar{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}AUTORIDADE NTSISTEMAS-1-5-18LocalHost (Usando LRPC)

Error: (03/04/2014 05:06:44 PM) (Source: DCOM) (User: AUTORIDADE NT)
Description: Específico do aplicativoLocalIniciar{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}AUTORIDADE NTSISTEMAS-1-5-18LocalHost (Usando LRPC)


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 47%
Total physical RAM: 3002.96 MB
Available physical RAM: 1576.34 MB
Total Pagefile: 6004.19 MB
Available Pagefile: 4435.54 MB
Total Virtual: 2047.88 MB
Available Virtual: 1882.34 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:39.06 GB) (Free:2.88 GB) NTFS
Drive d: (ICHIBAN - GTA) (Fixed) (Total:256.82 GB) (Free:242.41 GB) NTFS
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.82 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or (Size: 298 GB) (Disk ID: FC4C8716)

Partition: GPT Partition Type.

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-03-2014 02
Ran by Paulo Jr at 2014-03-04 17:31:24
Running from C:\Users\Paulo Jr\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Microsoft Security Essentials (Enabled - Up to date) {3F839487-C7A2-C958-E30C-E2825BA31FB5}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {84E27563-E198-C6D6-D9BC-D9F020245508}

==================== Installed Programs ======================

1400 (Version: 130.0.365.000 - Hewlett-Packard) Hidden
1400_Help (Version: 82.0.242.000 - Hewlett-Packard) Hidden
1400Trb (Version: 82.0.242.000 - Hewlett-Packard) Hidden
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
Adobe Reader 9.5.4 - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-A95000000001}) (Version: 9.5.4 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
AIO_CDB_ProductContext (Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (Version: 130.0.421.000 - Hewlett-Packard) Hidden
avast! Free Antivirus (HKLM\...\avast) (Version: 8.0.1483.0 - AVAST Software)
Baidu PC Faster (HKLM\...\Baidu PC Faster 4.0.0.0) (Version: 4.0.1.56634 - Baidu, Inc.) <==== ATTENTION
Broadcom 2070 Bluetooth 2.1 + EDR (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.1100 - Broadcom Corporation)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
BufferChm (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 3.11 - Piriform)
Cheat Engine 6.3 (HKLM\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
Compresor WinRAR (HKLM\...\WinRAR archiver) (Version: - )
Controle ActiveX do Windows Live Mesh para Conexões Remotas (HKLM\...\{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}) (Version: 15.4.5722.2 - Microsoft Corporation)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D7453B4F-9A57-4B46-9878-48F90223F8F7}) (Version: - Microsoft)
DigitalPersona Personal 4.11 (HKLM\...\{47F3EDF5-C821-49E6-B9B3-D00BF0A9BAB8}) (Version: 4.11.3826 - DigitalPersona, Inc.)
DocProc (Version: 13.0.0.0 - Hewlett-Packard) Hidden
DVD Menu Pack for HP MediaSmart Video (HKLM\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4121 - Hewlett-Packard)
DVD Menu Pack for HP MediaSmart Video (Version: 4.1.4121 - Hewlett-Packard) Hidden
ENE CIR Receiver Driver (HKLM\...\5B73F775A90397BAF80173B8A6C0B327BE3872FB) (Version: 2.7.3.519 - ENE)
ESU for Microsoft Windows 7 (HKLM\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Free Audio CD Burner version 1.4 (HKLM\...\Free Audio CD Burner_is1) (Version: - DVDVideoSoft Limited.)
Free Studio version 5.1.5 (HKLM\...\Free Studio_is1) (Version: - DVDVideoSoft Limited.)
GeoGebra (HKLM\...\GeoGebra) (Version: 3.2.42.0 - International GeoGebra Institute)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
Graphmatica (HKLM\...\Graphmatica) (Version: - )
Hewlett-Packard ACLM.NET v1.2.1.1 (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM\...\{4337D507-533C-4FDE-BA2F-DC93E56784B8}) (Version: 4.0.3.1 - Hewlett-Packard)
HP Customer Experience Enhancements (Version: 6.0.1.3 - Hewlett-Packard) Hidden
HP MediaSmart SmartMenu (HKLM\...\{5DD1608E-F564-49C1-BB8C-01AEA7BB2AB9}) (Version: 3.1.1.12 - Hewlett-Packard)
HP MediaSmart Video (HKLM\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.0.4021 - Hewlett-Packard)
HP MediaSmart Video (Version: 4.0.4021 - Hewlett-Packard) Hidden
HP MediaSmart Webcam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3130 - Hewlett-Packard)
HP MediaSmart Webcam (Version: 4.1.3130 - Hewlett-Packard) Hidden
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Product Detection (HKLM\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
HP Quick Launch Buttons (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.17.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM\...\{86FD8326-909D-45F5-BB61-0619D0D31293}) (Version: 11.50.0011 - Hewlett-Packard Company)
HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{F9A43C0C-F274-4EC0-B02E-202C15C09C00}) (Version: 3.50.12.1 - Hewlett-Packard)
HPPhotoSmartDiscLabelContent1 (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (Version: 2.04.0000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.211.000 - Hewlett-Packard) Hidden
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1883 - Intel Corporation)
Java 7 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.32.1 - JMicron Technology Corp.)
K-Lite Codec Pack 9.1.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 9.1.0 - )
Malwarebytes Anti-Malware versão 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
MediaSmart DVD (Version: 3.01.0000 - CyberLink Corp.) Hidden
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM\...\{95140000-007A-0416-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (HKLM\...\{95140000-007D-0409-0000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.2.0223.1 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.2.223.1 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Movie Theme Pack for HP MediaSmart Video (HKLM\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.0.3715 - Hewlett-Packard)
Movie Theme Pack for HP MediaSmart Video (Version: 4.0.3715 - Hewlett-Packard) Hidden
Mozilla Firefox 27.0.1 (x86 pt-BR) (HKLM\...\Mozilla Firefox 27.0.1 (x86 pt-BR)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 22.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network (Version: 140.0.215.000 - Hewlett-Packard) Hidden
NewPlayer (HKLM\...\NewPlayer) (Version: v2.1.1.0 - TUGUU SL) <==== ATTENTION
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
PaintTool SAI (HKLM\...\PaintTool SAI1.1.0) (Version: 1.1.0 - Eddie Sekiguchi Softwares)
Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
Plants vs. Zombies (HKLM\...\Plants vs. Zombies) (Version: - PopCap Games)
QLBCASL (Version: 6.40.17.2 - Hewlett-Packard) Hidden
Qualcomm Gobi Driver Package for HP (HKLM\...\{0D43DAA2-E26D-4E29-8227-ED87D39149B0}) (Version: 1.0.27 - QUALCOMM)
Realtek Ethernet Controller Driver For Windows Vista and Later (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0009 - Realtek)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.2.0.12014_18 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.2.0.12014_18 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.6.0 - SAMSUNG Electronics Co., Ltd.)
Scan (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Web Plugin (HKLM\...\{2266F46F-0E46-491C-B278-DAF80F7C58D7}) (Version: 2.2.12059.16911 - Skype)
SmartWebPrinting (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SoftStylus (HKLM\...\{10AF7194-B746-4871-B145-BF07A4450B00}) (Version: 2.2.119.2 - Motorola)
System Requirements Lab for Intel (HKLM\...\{C71067FC-288F-4E0B-88C6-44DFDA8311E2}) (Version: 4.5.9.0 - Husdawg, LLC)
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TuneUp Utilities Language Pack (pt-BR) (Version: 13.0.3000.155 - TuneUp Software) Hidden
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version: - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2010 (KB2494150) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7AC49FC8-F8D2-4DD8-9086-09E52385A21F}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{48E1B6C2-7299-4F3F-AA63-42F0ACE55AA4}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{18B3CF2A-73F7-4716-B1AE-86D68726D408}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM\...\{90140000-001F-0416-0000-0000000FF1CE}_Office14.PROPLUS_{ACBCC818-8E67-43A8-B877-A821A3C6FAD2}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (HKLM\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{995A7832-B512-46D5-87C9-2D71FB541435}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553272) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C06ABC7E-8923-4BB1-A7A2-197F5A3E0973}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (HKLM\...\{90140000-006E-0416-0000-0000000FF1CE}_Office14.PROPLUS_{BDE8DD25-D017-443C-AD04-B4FC21489EFB}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ED31DE9A-3E13-4E2C-9106-E0D8AFFB9FA6}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2598289) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{06ABCB4E-77D8-4420-B2EA-EF51558DBFD1}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (HKLM\...\{90140000-00A1-0416-0000-0000000FF1CE}_Office14.PROPLUS_{435C0D41-8F38-42CE-9DCB-23676CB6A6A1}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3613AECC-1454-4DDD-AC36-C42DC16D6DEE}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38990592-F6A1-4A26-96C7-0600E36AE794}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition (HKLM\...\{90140000-001A-0416-0000-0000000FF1CE}_Office14.PROPLUS_{2B32758E-3CCA-4506-BED0-310CBED486BE}) (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BC6DFBFD-16DD-47E1-A7EF-2C062930FA4F}) (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM\...\{90140000-001A-0416-0000-0000000FF1CE}_Office14.PROPLUS_{B95699E7-EEEB-45EC-865F-37E3E746BFB4}) (Version: - Microsoft)
Update Service (HKLM\...\Update Service) (Version: 2.10.7.15 - Sony Ericsson Mobile Communications AB)
WebReg (Version: 140.0.212.017 - Hewlett-Packard) Hidden
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom Bluetooth (12/16/2009 6.2.0.9414) (HKLM\...\0973B297E079B467E3776E59F763D63FD557795B) (Version: 12/16/2009 6.2.0.9414 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points =========================

03-03-2014 15:08:47 Installed HP Support Solutions Framework
04-03-2014 18:23:10 Windows Update

==================== Hosts content: ==========================

2009-07-13 23:04 - 2012-06-11 23:19 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {10A88426-8E6D-4D69-A242-66D883C4A043} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2013-03-06] (AVAST Software)
Task: {1DAAC0CD-AEEC-4D83-8393-40DFE292B2C5} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {263B01DC-9A4A-468D-BCCC-5D39DA104D32} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {2E32434E-FE86-4868-98E0-705A1F59DF47} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {322F408B-44E0-4A98-A593-1DCE58295CEA} - System32\Tasks\{B5AAA43C-69C4-4F03-A792-3D31060A1687} => C:\Program Files\ETRON\WebCam\x86\VideoCap.exe
Task: {3BE2AEC5-252C-4D1B-8D4A-56AF55ABB564} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {4FF05AD9-3099-40A2-A21B-A15B4A9E64C0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {6A569236-9F41-4C19-9FF8-54EF7827270E} - System32\Tasks\MirageAgent => C:\Program Files\Hewlett-Packard\Media\Webcam\YCMMirage.exe [2010-07-30] (CyberLink)
Task: {7397CCE7-3B05-4668-9D5C-B6D9C100C843} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-03] (Google Inc.)
Task: {942481C8-3D5D-4612-8A96-2EC31647FF2E} - System32\Tasks\ReclaimerUpdateFiles_Paulo Jr => C:\Users\Paulo Jr\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.50\agent\rnupgagent.exe [2013-06-16] (RealNetworks, Inc.)
Task: {94C3AE6A-4B5C-4711-89B9-156AA30AEAD6} - System32\Tasks\{66E245B4-78DB-400D-99AC-F2B05B2DF44F} => C:\Program Files\ETRON\WebCam\x86\VideoCap.exe
Task: {C3A41EA8-8E77-41C1-A5A6-E6D2B034C6B2} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {D4D017C1-426A-45A9-858C-DA82324FA6C4} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2578838918-163853556-1102255897-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: {DA4E2CB0-BB98-4DF2-9612-765D0C7990A6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-03] (Google Inc.)
Task: {F5E5E8A5-14C5-461F-9A24-CA2F74AC4ACE} - System32\Tasks\Baidu PC Faster Update => C:\Program Files\Baidu Security\PC Faster\4.0.0.0\Updater.exe [2014-01-08] (Baidu Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-03-04 11:19 - 2014-03-04 08:29 - 02275840 _____ () C:\Program Files\Alwil Software\Avast5\defs\14030400\algo.dll
2011-03-17 00:11 - 2011-03-17 00:11 - 04297568 ____C () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-02-14 23:08 - 2014-02-14 23:09 - 03578992 ____C () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows\System32:28CDADCD_Abn.gbp
AlternateDataStreams: C:\Windows\System32:28CDADCD_Bb.gbp
AlternateDataStreams: C:\Windows\System32:28CDADCD_Cef.gbp
AlternateDataStreams: C:\Windows\System32:28CDADCD_Uni.gbp
AlternateDataStreams: C:\Windows\system32\drivers:GbpKmAp.lst
AlternateDataStreams: C:\ProgramData\Temp:05EE1EEF
AlternateDataStreams: C:\ProgramData\Temp:322A8416
AlternateDataStreams: C:\Users\Todos os Usuários\Temp:05EE1EEF
AlternateDataStreams: C:\Users\Todos os Usuários\Temp:322A8416

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: PCFasterSvc_{PCFaster_4.0.0.0} => 2
MSCONFIG\startupreg: Baidu PC Faster 4.0.0.0 => "C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe" -auto -start
MSCONFIG\startupreg: BService => C:\Program Files\Bench\BService\bservice.exe
MSCONFIG\startupreg: Wd => C:\Program Files\Bench\Wd\wd.exe

==================== Faulty Device Manager Devices =============

Name: MpKsleb3fa785
Description: MpKsleb3fa785
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsleb3fa785
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart D110 series
Description: Photosmart D110 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard USB Host Controller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.

Name: Dispositivo Periférico Bluetooth
Description: Dispositivo Periférico Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart D110 series
Description: Photosmart D110 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Photosmart D110 series
Description: Photosmart D110 series
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Dispositivo Periférico Bluetooth
Description: Dispositivo Periférico Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: MpKsl92497369
Description: MpKsl92497369
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl92497369
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (03/04/2014 05:26:44 PM) (Source: DCOM) (User: AUTORIDADE NT)
Description: Específico do aplicativoLocalIniciar{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}AUTORIDADE NTSISTEMAS-1-5-18LocalHost (Usando LRPC)

Error: (03/04/2014 05:16:44 PM) (Source: DCOM) (User: AUTORIDADE NT)
Description: Específico do aplicativoLocalIniciar{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}AUTORIDADE NTSISTEMAS-1-5-18LocalHost (Usando LRPC)

Error: (03/04/2014 05:06:44 PM) (Source: DCOM) (User: AUTORIDADE NT)
Description: Específico do aplicativoLocalIniciar{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}AUTORIDADE NTSISTEMAS-1-5-18LocalHost (Usando LRPC)


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 47%
Total physical RAM: 3002.96 MB
Available physical RAM: 1567.27 MB
Total Pagefile: 6004.19 MB
Available Pagefile: 4454.08 MB
Total Virtual: 2047.88 MB
Available Virtual: 1885.34 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:39.06 GB) (Free:2.88 GB) NTFS
Drive d: (ICHIBAN - GTA) (Fixed) (Total:256.82 GB) (Free:242.41 GB) NTFS
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.82 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or (Size: 298 GB) (Disk ID: FC4C8716)

Partition: GPT Partition Type.

==================== End Of Log ============================

Faça o download do arquivo Fixlist e salve-o no Desktop (área de trabalho):
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Execute o FRST. Clique no botão Fix.

Aguarde e ao final, o log Fixlog.txt será salvo no seu desktop.

Selecione, copie e cole o conteúdo deste log em sua próxima resposta.

Ele não está deixando salvar no desktop, aparece a mensagem "você não tem permissão para salvar neste local. Entre em contato com o administrador para obter permissão Deseja salvar na pasta documento?"
Baixei o fixlist em outro lugar, mas quando tento salvá-lo no desktop, ele mostra a mesma msg, que não tenho permissão....

Você pode colocar ele em qualquer lugar, é só deixar o FRST e o fixlist no mesmo lugar.

Oi, foi o que eu fiz, e ele está rodando agora, vamos aguardar!!

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 04-03-2014 02
Ran by Paulo Jr at 2014-03-04 22:07:14 Run:1
Running from C:\Program Files\Goiaba
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
(Baidu Inc.) C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe
HKLM\...\Run: [] - [X]
HKLM\...\Run: [fst_br_41] - [X]
SearchScopes: HKLM - DefaultScope value is missing.
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {E0301295-AB3E-4AF3-979F-3D453C5F9F48} - No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\buscape.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mercadolivre.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-br.xml
FF HKCU\...\Firefox\Extensions: [lyrics@LampFit.co] - C:\Program Files\LyricsPod\116.xpi
S4 PCFasterSvc_{PCFaster_4.0.0.0}; C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFasterSvc.exe [679920 2014-01-03] (Baidu Inc.)
R0 360HookOem; C:\Windows\System32\drivers\360HookOem.sys [54912 2012-05-31] (360安全中心)
R0 Bhbase; C:\Windows\System32\drivers\Bhbase.sys [47456 2014-01-09] (Baidu, Inc.)
R1 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [100160 2014-01-09] (Baidu, Inc.)
S3 PCFApiUtil; C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil.sys [119168 2014-01-09] (Baidu, Inc.)
S3 iscFlash; \??\C:\Users\PAULOJ~1\AppData\Local\Temp\iscflash.sys [X]
2014-03-03 15:05 - 2014-03-03 15:05 - 01481920 ____C (Baidu Inc.) C:\PC_Faster_Setup_Mini_BR.exe
2014-03-02 23:12 - 2014-03-02 23:12 - 01569312 ____C (Baidu Inc.) C:\PC_Faster_Setup_Mini_B58.exe
2014-03-02 09:07 - 2014-03-02 10:47 - 00000000 ____D () C:\Users\Public\Documents\Baidu Security
2014-03-01 23:19 - 2014-01-09 08:42 - 00100160 _____ (Baidu, Inc.) C:\Windows\system32\Drivers\BprotectEx.sys
2014-03-01 23:19 - 2014-01-09 08:42 - 00047456 _____ (Baidu, Inc.) C:\Windows\system32\Drivers\Bhbase.sys
2014-03-03 15:05 - 2014-03-03 15:05 - 01481920 ____C (Baidu Inc.) C:\PC_Faster_Setup_Mini_BR.exe
2014-03-02 23:12 - 2014-03-02 23:12 - 01569312 ____C (Baidu Inc.) C:\PC_Faster_Setup_Mini_B58.exe
2014-03-02 10:47 - 2014-03-02 09:07 - 00000000 ____D () C:\Users\Public\Documents\Baidu Security
2014-03-01 23:16 - 2013-06-22 23:24 - 00000000 ___DC () C:\Users\Todos os Usuários\Baidu Security
2014-03-01 23:16 - 2013-06-22 23:24 - 00000000 ___DC () C:\ProgramData\Baidu Security
C:\Users\Paulo Jr\AppData\Local\Temp\Baidu_Secure_SystemUp_4.0.1.56634.exe
C:\Users\Paulo Jr\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Paulo Jr\AppData\Local\Temp\fp_pl_pfs_installer.exe
Baidu PC Faster (HKLM\...\Baidu PC Faster 4.0.0.0) (Version: 4.0.1.56634 - Baidu, Inc.) <==== ATTENTION
NewPlayer (HKLM\...\NewPlayer) (Version: v2.1.1.0 - TUGUU SL) <==== ATTENTION
Task: {F5E5E8A5-14C5-461F-9A24-CA2F74AC4ACE} - System32\Tasks\Baidu PC Faster Update => C:\Program Files\Baidu Security\PC Faster\4.0.0.0\Updater.exe [2014-01-08] (Baidu Inc.)
AlternateDataStreams: C:\ProgramData\Temp:05EE1EEF
AlternateDataStreams: C:\ProgramData\Temp:322A8416
AlternateDataStreams: C:\Users\Todos os Usuários\Temp:05EE1EEF
AlternateDataStreams: C:\Users\Todos os Usuários\Temp:322A8416
MSCONFIG\Services: PCFasterSvc_{PCFaster_4.0.0.0} => 2
MSCONFIG\startupreg: Baidu PC Faster 4.0.0.0 => "C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe" -auto -start
MSCONFIG\startupreg: BService => C:\Program Files\Bench\BService\bservice.exe
MSCONFIG\startupreg: Wd => C:\Program Files\Bench\Wd\wd.exe
end

*****************

[3908] C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Process closed successfully.
[3892] C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Process closed successfully.
[5984] C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Process closed successfully.
C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Failed to close process.
[3752] C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Process closed successfully.
[3920] C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Process closed successfully.
[3384] C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Process closed successfully.
[3548] C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Process closed successfully.
[5528] C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe => Process closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\fst_br_41 => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Value deleted successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E0301295-AB3E-4AF3-979F-3D453C5F9F48} => Value deleted successfully.
HKCR\CLSID\{E0301295-AB3E-4AF3-979F-3D453C5F9F48} => Key not found.
HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File => Key not found.
FF Plugin: @microsoft.com/GENUINE - disabled No File not found.
C:\Program Files\mozilla firefox\browser\searchplugins\buscape.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\mercadolivre.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-br.xml => Moved successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\lyrics@LampFit.co => Value deleted successfully.
PCFasterSvc_{PCFaster_4.0.0.0} => Service deleted successfully.
360HookOem => Unable to stop service
360HookOem => Service deleted successfully.
Bhbase => Unable to stop service
Bhbase => Service deleted successfully.
BprotectEx => Unable to stop service
BprotectEx => Service deleted successfully.
PCFApiUtil => Service deleted successfully.
iscFlash => Service deleted successfully.
C:\PC_Faster_Setup_Mini_BR.exe => Moved successfully.
C:\PC_Faster_Setup_Mini_B58.exe => Moved successfully.
C:\Users\Public\Documents\Baidu Security => Moved successfully.
C:\Windows\system32\Drivers\BprotectEx.sys => Moved successfully.
C:\Windows\system32\Drivers\Bhbase.sys => Moved successfully.
"C:\PC_Faster_Setup_Mini_BR.exe" => File/Directory not found.
"C:\PC_Faster_Setup_Mini_B58.exe" => File/Directory not found.
C:\Users\Public\Documents\Baidu Security => Moved successfully.
C:\Users\Todos os Usuários\Baidu Security => Moved successfully.
"C:\ProgramData\Baidu Security" => File/Directory not found.
C:\Users\Paulo Jr\AppData\Local\Temp\Baidu_Secure_SystemUp_4.0.1.56634.exe => Moved successfully.
C:\Users\Paulo Jr\AppData\Local\Temp\fp_pl_pfs_installer-1.exe => Moved successfully.
C:\Users\Paulo Jr\AppData\Local\Temp\fp_pl_pfs_installer.exe => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F5E5E8A5-14C5-461F-9A24-CA2F74AC4ACE} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5E5E8A5-14C5-461F-9A24-CA2F74AC4ACE} => Key deleted successfully.
C:\Windows\System32\Tasks\Baidu PC Faster Update => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu PC Faster Update => Key deleted successfully.
C:\ProgramData\Temp => ":05EE1EEF" ADS removed successfully.
C:\ProgramData\Temp => ":322A8416" ADS removed successfully.
"C:\Users\Todos os Usuários\Temp" => ":05EE1EEF" ADS not found.
"C:\Users\Todos os Usuários\Temp" => ":322A8416" ADS not found.

========= MSCONFIG\startupBaidu PC Faster 4.0.0.0 => "C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe" -auto -start =========

O sistema nÆo pode encontrar o caminho especificado.


========= End of Reg: =========


========= MSCONFIG\startupBService => C:\Program Files\Bench\BService\bservice.exe =========

O sistema nÆo pode encontrar o caminho especificado.


========= End of Reg: =========


========= MSCONFIG\startupWd => C:\Program Files\Bench\Wd\wd.exe =========

O sistema nÆo pode encontrar o caminho especificado.


========= End of Reg: =========



The system needed a reboot.

==== End of Fixlog ====

Depois deste procedimento você reiniciou o computador? Se não tiver reiniciado, reinicie e depois nos diga como está o PC.

Sim, na verdade ele reiniciou sozinho, mas o Baidu continua ativo....

Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:

createsrpoint;
autoclean;
emptyalltemp;
iedefaults;
resetieproxy;
resethosts;
shortcutfix;
ffdefaults;
firefoxlook;
reset chrome;
chrdefaults;
chromelook;
Baidu;z
Baidu;a

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Não consigo fazer o download do Zoek.exe....

Nem o zip, nem o winrar, ele diz que não tem o programa. Já tentei baixar um descompressor, mas não consigo rodar

Esqueça o Zoek por enquanto.

Faça o download do RegSeeker:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Depois de baixar, clique com o botão direito do mouse sobre ele e escolha a opção de extraí-lo > Abra a pasta dele e clique com o botão direito do mouse no arquivo RegSeeker.exe e escolha a opção de Executar como administrador.

Clique na opção Find in Registry > Em search for digite Baidu e clique em Search.

Quando ele concluir a pesquisa, selecione as entradas que ele encontrou, clique em Action e escolha a opção Delete selected itens.

Depois disto nos diga o resultado.

Eu não tenho essa opção "executar como administrador"

Sim, então execute do jeito normal mesmo.

Não consigo...

o que acontece?

Ele abre a janela para executar, e qdo clico nada acontece, só parece que está carregando, mas não abre nada.

baixe esta versão do regseeker renomeada:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Depois é só extrair > aí abra a pasta dele e execute o arquivo amigo.com e aí é só fazer a limpeza como disse na outra postagem anterior.

Consegui abrir e já estou rodando o programa!   

Apareceu o Baidu, mas não consigo deletar, ele não me dá essa opção, apesar dela estar lá. Será que é porque eles estão na quarentena do Adwcleaner?

Os que estão na quarentena do Adwcleaner nós vamos remover depois. Mas e quanto aos outros? é possível remover?

só aparecem dois ítens que são as pastas na quarentena