Remover Baidu

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01 (ATTENTION: ====> FRST version is 29 days old and could be outdated)
Ran by casal (administrator) on AMORE on 11-04-2014 06:33:43
Running from C:\Users\casal\Downloads
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Portuguese Brazilian
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link for 64-Bit Version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Positivo Informática S.A) C:\Program Files\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe
(The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\NielsenUpdate.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.exe
(Positivo Informática) C:\Program Files\Positivo Informática\Recovery\Recovery2.exe
() C:\Program Files\OEM\IPM 1.5\IPM.exe
() C:\Program Files\OEM\OSD 1.7\SunflowerOSD.exe
(Ralink Technology, Corp.) C:\Program Files\Ralink\Common\RaUI.exe
(Dropbox, Inc.) C:\Users\casal\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Positivo Informática S.A) C:\Program Files\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryPower.exe
(Positivo Informática S.A.) C:\Program Files\Positivo Informática\Positivo Experience\Positivo Backup\PositivoSmartBackup.exe
(Positivo Informática S.A.) C:\Program Files\Positivo Informática\Positivo Experience\Positivo Áudio\AudioPower.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Positivo Informática S.A.) C:\Program Files\Positivo Informática\Positivo Experience\Positivo Experience\MundoPositivoService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [495708 2010-06-17] (IDT, Inc.)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM\...\Run: [StartUpManagerPositivo] - C:\Program Files\Positivo Informática\Gerenciador de Inicialização Positivo\ManagerWindows.exe [171520 2012-03-01] ()
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1557800 2009-08-28] (Synaptics Incorporated)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-04] (AVAST Software)
HKLM\...\Run: [NielsenOnline] - C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.exe [91688 2013-10-30] (The Nielsen Company)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2364669226-1398954891-4146519358-1000\...\Run: [Google Update] - C:\Users\casal\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-09-07] (Google Inc.)
Startup: C:\Users\casal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\casal\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SearchScopes: HKCU - Backup.Old.DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SearchScopes: HKCU - {3FEA6371-3532-4691-8FF1-629D66798437} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Tcpip\Parameters: [DhcpNameServer] 187.123.31.55 187.123.31.56 187.123.31.54
Tcpip\..\Interfaces\{B7F4A48C-FC31-4615-AFDB-E88BFDB109FD}: [NameServer]200.175.182.139,200.175.5.139
Tcpip\..\Interfaces\{C8F930EE-434F-4859-82A8-6A1CC10A4FC6}: [NameServer]200.175.182.139,200.175.5.139

FireFox:
========
FF ProfilePath: C:\Users\casal\AppData\Roaming\Mozilla\Firefox\Profiles\yfiiolph.default-1396892395728
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nielsen/FirefoxTracker - C:\Program Files\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll (Nielsen)
FF Plugin: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\casal\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\casal\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\casal\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\casal\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\casal\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\casal\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\buscape.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mercadolivre.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-br.xml
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-04-10]
FF HKLM\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi
FF Extension: Nielsen NetSight - C:\Program Files\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi [2014-04-11]

Chrome:
=======
CHR HomePage: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
CHR DefaultSearchKeyword: google.com.br
CHR Extension: (Nielsen) - C:\Users\casal\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgceplfonlgodadnpognljgdjlcnpjnh [2014-03-07]
CHR Extension: (Google Wallet) - C:\Users\casal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-07]
CHR HKLM\...\Chrome\Extension: [jgceplfonlgodadnpognljgdjlcnpjnh] - C:\Program Files\NetRatingsNetSight\NetSight\meter1\extension.crx [2014-01-21]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 AppManagerService; C:\Program Files\Positivo Informática\Positivo Experience\Positivo Experience\MundoPositivoService.exe [64592 2012-10-03] (Positivo Informática S.A.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-04] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-04-04] (AVAST Software)
R2 BatteryManagerSrv; C:\Program Files\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe [45056 2012-03-20] (Positivo Informática S.A)
R2 NielsenUpdate; C:\Program Files\NetRatingsNetSight\NetSight\NielsenUpdate.exe [2838568 2013-10-30] (The Nielsen Company)
R2 NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [237650 2010-06-17] (IDT, Inc.)
R3 WinHttpAutoProxySvc; winhttp.dll [X]

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [26136 2014-04-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-04-04] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [269728 2014-04-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-04-04] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-04-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [776976 2014-04-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411552 2014-04-04] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [67264 2014-04-04] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180760 2014-04-04] ()
S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1500160 2010-01-05] (Atheros Communications, Inc.)
S3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [750592 2009-08-05] (Ralink Technology Corp.)
R1 nnfwdk; C:\Program Files\NetRatingsNetSight\NetSight\meter1\nnfwdk.sys [23080 2013-12-18] (The Nielsen Company)
R3 PositivoAudioDriverWdm; C:\Windows\System32\DRIVERS\pad.sys [52496 2011-10-03] ()
S3 RTL8192Ce; C:\Windows\System32\DRIVERS\rtl8192Ce.sys [999016 2010-11-02] (Realtek Semiconductor Corporation )
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1334856 2013-05-02] (Realtek Semiconductor Corporation )
R2 SoilIO; C:\Windows\system32\Drivers\SoilIO.sys [16248 2009-12-04] ()
R3 soilkbc; C:\Windows\system32\Drivers\soilkbc.sys [10744 2009-12-04] (Systems Internals)
R3 SoilMC; C:\Windows\system32\Drivers\SoilMC.sys [10616 2009-12-04] (Systems Internals)
S3 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [7168 2009-11-12] ()
S3 BdApiUtil; \??\C:\Program Files\Baidu Security\Baidu Antivirus\BdApiUtil.sys [X]
S0 Bhbase; System32\drivers\Bhbase.sys [X]
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 PCFApiUtil; \??\C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil.sys [X]
S0 SMR300; System32\drivers\SMR300.SYS [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-11 06:33 - 2014-04-11 06:34 - 00015394 _____ () C:\Users\casal\Downloads\FRST.txt
2014-04-11 06:33 - 2014-04-11 06:33 - 00000000 ____D () C:\FRST
2014-04-11 06:31 - 2014-04-11 06:32 - 00001329 _____ () C:\Users\casal\Desktop\FRST.lnk
2014-04-11 06:30 - 2014-04-11 06:31 - 01145856 _____ (Farbar) C:\Users\casal\Downloads\FRST.exe
2014-04-10 22:04 - 2014-04-10 22:04 - 00001015 _____ () C:\Users\casal\Desktop\ZHPFixReport.txt
2014-04-10 21:38 - 2014-04-10 21:38 - 00040478 _____ () C:\Users\casal\Desktop\ZHPDiag.txt
2014-04-10 10:34 - 2014-04-10 22:04 - 00000000 ____D () C:\Users\casal\AppData\Roaming\ZHP
2014-04-10 10:34 - 2014-04-10 21:32 - 00000000 ____D () C:\Program Files\ZHPDiag
2014-04-10 10:34 - 2014-04-10 10:34 - 00001937 _____ () C:\Users\casal\Desktop\ZHPFix.lnk
2014-04-10 10:34 - 2014-04-10 10:34 - 00001810 _____ () C:\Users\casal\Desktop\ZHPDiag.lnk
2014-04-10 10:33 - 2014-04-10 10:33 - 06863066 _____ (Nicolas Coolman ) C:\Users\casal\Downloads\ZHPDiag2.exe
2014-04-10 09:49 - 2014-04-10 09:51 - 00001318 _____ () C:\Users\casal\Desktop\JRT.lnk
2014-04-10 09:31 - 2014-04-10 09:31 - 00000000 ____D () C:\Windows\ERUNT
2014-04-10 09:30 - 2014-04-10 09:31 - 01016261 _____ (Thisisu) C:\Users\casal\Downloads\JRT.exe
2014-04-10 08:25 - 2014-04-10 08:24 - 00000697 _____ () C:\Users\casal\Desktop\zoek.htm
2014-04-10 08:18 - 2014-04-10 08:18 - 00000000 ____D () C:\zoek_backup
2014-04-10 08:16 - 2014-04-10 08:16 - 01285120 _____ () C:\Users\casal\Downloads\zoek.exe
2014-04-10 07:50 - 2014-04-10 08:01 - 00001114 _____ () C:\Users\casal\Desktop\AdwCleaner.lnk
2014-04-10 07:19 - 2014-04-10 08:05 - 00000000 ____D () C:\AdwCleaner
2014-04-10 07:17 - 2014-04-10 07:18 - 01426178 _____ () C:\Users\casal\Downloads\AdwCleaner.exe
2014-04-09 00:31 - 2014-03-30 20:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 00:31 - 2014-03-30 19:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 00:31 - 2014-03-04 05:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 00:31 - 2014-02-03 22:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 00:31 - 2014-02-03 22:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 00:31 - 2014-02-03 22:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 00:31 - 2014-02-03 22:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 00:30 - 2014-01-23 22:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-04 23:20 - 2014-04-04 23:20 - 00002053 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-04-04 23:18 - 2014-04-04 23:18 - 00269728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-04-04 23:18 - 2014-04-04 23:18 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-04 23:18 - 2014-04-04 23:18 - 00026136 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-04-04 15:39 - 2014-04-05 01:01 - 24675933 _____ () C:\Users\casal\Downloads\vlc-2.1.3-win32(1).exe.part
2014-04-03 10:11 - 2014-04-03 10:12 - 00385688 _____ () C:\Users\casal\Downloads\HijackThis.exe
2014-04-03 09:59 - 2014-04-03 10:00 - 01309544 _____ () C:\Users\casal\Downloads\PDFCreatorSetup.exe
2014-04-03 09:27 - 2014-04-08 23:15 - 00000000 ____D () C:\Users\casal\Documents\zoek-3
2014-04-03 09:19 - 2014-04-08 23:15 - 00000000 ____D () C:\Users\casal\Documents\zoek-1
2014-04-03 06:39 - 2014-04-03 06:43 - 24430653 _____ () C:\Users\casal\Downloads\vlc-2.1.3-win32.exe
2014-04-03 06:21 - 2014-04-11 06:25 - 00001064 _____ () C:\Windows\setupact.log
2014-04-03 06:21 - 2014-04-03 06:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-23 15:18 - 2014-03-23 15:18 - 01071000 _____ () C:\Users\casal\Downloads\install_flashplayer12x32_mssd_aaa_aih.exe
2014-03-23 00:50 - 2012-05-04 05:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-03-23 00:20 - 2014-03-23 00:22 - 00004425 _____ () C:\Users\casal\Downloads\like.php
2014-03-23 00:09 - 2014-03-23 00:11 - 05025752 _____ (Systweak Inc ) C:\Users\casal\Downloads\rcpsetup_vmed.exe
2014-03-22 23:31 - 2014-03-22 23:32 - 00912752 _____ () C:\Users\casal\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-21 16:19 - 2014-03-21 16:19 - 00000000 ____D () C:\Users\casal\AppData\Roaming\PC TEKNIX
2014-03-19 13:58 - 2014-04-03 06:28 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-04-11 06:34 - 2014-04-11 06:33 - 00015394 _____ () C:\Users\casal\Downloads\FRST.txt
2014-04-11 06:33 - 2014-04-11 06:33 - 00000000 ____D () C:\FRST
2014-04-11 06:33 - 2009-07-14 00:34 - 00016160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-11 06:33 - 2009-07-14 00:34 - 00016160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-11 06:32 - 2014-04-11 06:31 - 00001329 _____ () C:\Users\casal\Desktop\FRST.lnk
2014-04-11 06:31 - 2014-04-11 06:30 - 01145856 _____ (Farbar) C:\Users\casal\Downloads\FRST.exe
2014-04-11 06:31 - 2012-10-30 22:21 - 00001054 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-11 06:29 - 2011-11-24 20:36 - 01506491 _____ () C:\Windows\WindowsUpdate.log
2014-04-11 06:26 - 2013-11-03 21:47 - 00000000 ___RD () C:\Users\casal\Dropbox
2014-04-11 06:26 - 2013-11-03 21:37 - 00000000 ____D () C:\Users\casal\AppData\Roaming\Dropbox
2014-04-11 06:25 - 2014-04-03 06:21 - 00001064 _____ () C:\Windows\setupact.log
2014-04-11 06:25 - 2012-10-30 22:21 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-11 06:25 - 2009-07-14 00:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-10 23:02 - 2012-04-17 09:04 - 00000902 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-10 22:53 - 2013-09-23 22:17 - 00001078 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2364669226-1398954891-4146519358-1000UA.job
2014-04-10 22:07 - 2010-11-20 17:48 - 01840220 _____ () C:\Windows\PFRO.log
2014-04-10 22:04 - 2014-04-10 22:04 - 00001015 _____ () C:\Users\casal\Desktop\ZHPFixReport.txt
2014-04-10 22:04 - 2014-04-10 10:34 - 00000000 ____D () C:\Users\casal\AppData\Roaming\ZHP
2014-04-10 21:38 - 2014-04-10 21:38 - 00040478 _____ () C:\Users\casal\Desktop\ZHPDiag.txt
2014-04-10 21:32 - 2014-04-10 10:34 - 00000000 ____D () C:\Program Files\ZHPDiag
2014-04-10 17:25 - 2014-03-03 18:39 - 00000000 ____D () C:\Program Files\Baidu Security
2014-04-10 17:12 - 2013-10-29 22:07 - 00000000 ____D () C:\Users\casal\AppData\Roaming\exe
2014-04-10 17:12 - 2013-10-29 22:05 - 00000000 ____D () C:\Program Files\exe
2014-04-10 10:34 - 2014-04-10 10:34 - 00001937 _____ () C:\Users\casal\Desktop\ZHPFix.lnk
2014-04-10 10:34 - 2014-04-10 10:34 - 00001810 _____ () C:\Users\casal\Desktop\ZHPDiag.lnk
2014-04-10 10:33 - 2014-04-10 10:33 - 06863066 _____ (Nicolas Coolman ) C:\Users\casal\Downloads\ZHPDiag2.exe
2014-04-10 09:51 - 2014-04-10 09:49 - 00001318 _____ () C:\Users\casal\Desktop\JRT.lnk
2014-04-10 09:31 - 2014-04-10 09:31 - 00000000 ____D () C:\Windows\ERUNT
2014-04-10 09:31 - 2014-04-10 09:30 - 01016261 _____ (Thisisu) C:\Users\casal\Downloads\JRT.exe
2014-04-10 08:24 - 2014-04-10 08:25 - 00000697 _____ () C:\Users\casal\Desktop\zoek.htm
2014-04-10 08:18 - 2014-04-10 08:18 - 00000000 ____D () C:\zoek_backup
2014-04-10 08:16 - 2014-04-10 08:16 - 01285120 _____ () C:\Users\casal\Downloads\zoek.exe
2014-04-10 08:05 - 2014-04-10 07:19 - 00000000 ____D () C:\AdwCleaner
2014-04-10 08:01 - 2014-04-10 07:50 - 00001114 _____ () C:\Users\casal\Desktop\AdwCleaner.lnk
2014-04-10 07:18 - 2014-04-10 07:17 - 01426178 _____ () C:\Users\casal\Downloads\AdwCleaner.exe
2014-04-10 06:56 - 2013-04-10 08:14 - 00002127 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-10 06:39 - 2013-09-23 22:17 - 00001026 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2364669226-1398954891-4146519358-1000Core.job
2014-04-09 22:07 - 2009-07-13 22:37 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-04-09 00:57 - 2012-01-31 16:37 - 00000000 ____D () C:\Users\Todos os Usuários\Microsoft Help
2014-04-09 00:57 - 2012-01-31 16:37 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 00:54 - 2013-09-07 16:15 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 00:50 - 2012-02-01 16:13 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-08 23:15 - 2014-04-03 09:27 - 00000000 ____D () C:\Users\casal\Documents\zoek-3
2014-04-08 23:15 - 2014-04-03 09:19 - 00000000 ____D () C:\Users\casal\Documents\zoek-1
2014-04-08 23:05 - 2009-07-13 22:04 - 00000580 _____ () C:\Windows\win.ini
2014-04-08 01:32 - 2012-05-31 01:36 - 00000000 ____D () C:\Users\casal\Documents\Escolas
2014-04-07 13:40 - 2014-02-19 23:24 - 00000000 ____D () C:\Users\casal\Desktop\Dados anteriores do Firefox
2014-04-05 01:01 - 2014-04-04 15:39 - 24675933 _____ () C:\Users\casal\Downloads\vlc-2.1.3-win32(1).exe.part
2014-04-04 23:20 - 2014-04-04 23:20 - 00002053 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-04-04 23:18 - 2014-04-04 23:18 - 00269728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-04-04 23:18 - 2014-04-04 23:18 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-04 23:18 - 2014-04-04 23:18 - 00026136 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-04-04 23:18 - 2013-12-28 09:39 - 00067264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-04-04 23:18 - 2013-04-10 08:58 - 00180760 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-04 23:18 - 2013-04-10 08:58 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-04 23:18 - 2013-04-10 08:09 - 00776976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-04 23:18 - 2013-04-10 08:09 - 00411552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-04-04 23:18 - 2013-04-10 08:09 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-04 23:18 - 2013-04-10 08:09 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-04 23:18 - 2013-04-10 08:08 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-03 10:12 - 2014-04-03 10:11 - 00385688 _____ () C:\Users\casal\Downloads\HijackThis.exe
2014-04-03 10:02 - 2012-01-31 19:03 - 00000000 ____D () C:\Users\casal\AppData\Local\CrashDumps
2014-04-03 10:00 - 2014-04-03 09:59 - 01309544 _____ () C:\Users\casal\Downloads\PDFCreatorSetup.exe
2014-04-03 06:43 - 2014-04-03 06:39 - 24430653 _____ () C:\Users\casal\Downloads\vlc-2.1.3-win32.exe
2014-04-03 06:28 - 2014-03-19 13:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-03 06:21 - 2014-04-03 06:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-30 20:13 - 2014-04-09 00:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-30 19:57 - 2014-04-09 00:31 - 17073152 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-29 10:06 - 2011-04-12 00:47 - 00709402 _____ () C:\Windows\system32\prfh0416.dat
2014-03-29 10:06 - 2011-04-12 00:47 - 00148924 _____ () C:\Windows\system32\prfc0416.dat
2014-03-29 10:06 - 2010-11-20 17:01 - 01645366 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-25 00:19 - 2014-03-04 17:05 - 00000109 _____ () C:\Users\casal\AppData\Roaming\WB.CFG
2014-03-23 15:18 - 2014-03-23 15:18 - 01071000 _____ () C:\Users\casal\Downloads\install_flashplayer12x32_mssd_aaa_aih.exe
2014-03-23 00:22 - 2014-03-23 00:20 - 00004425 _____ () C:\Users\casal\Downloads\like.php
2014-03-23 00:11 - 2014-03-23 00:09 - 05025752 _____ (Systweak Inc ) C:\Users\casal\Downloads\rcpsetup_vmed.exe
2014-03-22 23:51 - 2012-04-28 21:44 - 00000000 ____D () C:\Users\casal\AppData\Roaming\SoftGrid Client
2014-03-22 23:32 - 2014-03-22 23:31 - 00912752 _____ () C:\Users\casal\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-21 16:19 - 2014-03-21 16:19 - 00000000 ____D () C:\Users\casal\AppData\Roaming\PC TEKNIX
2014-03-21 16:17 - 2014-03-04 17:03 - 05053725 _____ (PC TEKNIX) C:\Users\casal\Downloads\flashplayer.exe
2014-03-19 22:45 - 2012-03-06 10:19 - 00000000 ____D () C:\Users\casal\AppData\Roaming\Mozilla
2014-03-19 22:33 - 2012-05-15 21:28 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-14 22:42 - 2012-01-31 19:08 - 00000000 ____D () C:\Users\casal\AppData\Roaming\Positivo Backup
2014-03-13 16:02 - 2012-04-17 09:04 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-13 16:02 - 2012-03-06 10:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

Files to move or delete:
====================
C:\ProgramData\FileSplitUpLoad.dll
C:\Users\Todos os Usuários\FileSplitUpLoad.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-07 16:54

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by casal at 2014-04-11 06:35:20
Running from C:\Users\casal\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
32 Bit HP CIO Components Installer (Version: 8.1.4 - Hewlett-Packard) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Atualização do produto Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{717C9095-8AAE-41CB-B046-BD6E8399F4F3}) (Version: - Microsoft)
Atualização do produto Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{5016CB22-B9A7-44FB-AA72-AF28B27B15EA}) (Version: - Microsoft)
Atualização do produto Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{BE3A7C0C-0081-4694-B5F9-980DD66BDDF8}) (Version: - Microsoft)
Atualização do produto Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{7297E3A9-FCD4-4E0E-A306-7A90359E50E3}) (Version: - Microsoft)
aTube Catcher (HKLM\...\aTube Catcher) (Version: 3.8.5187 - DsNET Corp)
avast! Internet Security (HKLM\...\avast) (Version: 9.0.2016 - Avast Software)
Baidu Antivirus (HKLM\...\Baidu Antivirus) (Version: 4.0.3.57478 - Baidu, Inc.)
Bejeweled(R) 3 (remove only) (HKLM\...\Bejeweled(R) 3) (Version: - )
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.2.7.1878 - CDBurnerXP)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Driver 1.2 (HKLM\...\{BA56CD60-1D9F-4BE6-AC2F-B7C4A5437C35}) (Version: 1.2 - OEM)
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
eXe -- eLearning XHTML editor (HKLM\...\exe) (Version: - eXe Project)
Galeria de Fotos (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Gerenciador de Inicialização Positivo (HKLM\...\{E365D4D7-BD51-4A7F-8ECA-0B6C0C42D3CF}_is1) (Version: 1.0.16.1 - Positivo Informática S.A.)
Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.)
Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM\...\{E121A4FE-009B-385B-BB0D-B934E2A88288}) (Version: 5.2.4.18058 - Google)
Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden
HP Update (HKLM\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6289.0 - IDT)
Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2117 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
IPM 1.5 (HKLM\...\{AADF4228-0772-4D43-92EB-B245E3A17B00}) (Version: 1.5 - OEM)
IRPF2012 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM\...\IRPF2012) (Version: 1.0 - Receita Federal do Brasil)
IRPF2013 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM\...\IRPF2013) (Version: 1.0 - Receita Federal do Brasil)
IRPF2014 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM\...\IRPF2014) (Version: 1.0 - Receita Federal do Brasil)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
JMicron Ethernet Adapter NDIS Driver (HKLM\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.45.0 - JMicron Technology Corp.)
Junk Mail filter update (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office com Clique para Executar 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office com Clique para Executar 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM\...\{95140000-007A-0416-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Portuguese (Brazil)) 2007 (Version: 12.0.4518.1019 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Portuguese (Brazil)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 pt-BR) (HKLM\...\Mozilla Firefox 28.0 (x86 pt-BR)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
Mundo Positivo (HKLM\...\{AAB13E97-449B-4D5B-BDE2-AB47B938B722}_is1) (Version: 1.3.8.0 - Positivo Informática S.A.)
Nielsen (HKLM\...\NetSight) (Version: - )
OSD 1.7 (HKLM\...\{5A9C96FE-1376-45E1-8556-C81255F0B5A7}) (Version: 1.7 - OEM)
Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Positivo Ajudante (HKLM\...\{4F44FDC9-6B66-4549-882A-7D5C4E3A79A2}_is1) (Version: 1.4.0.2 - Positivo Informática S.A)
Positivo Áudio (HKLM\...\{D00FA097-5115-400D-84AD-4ADEF3EBDB5E}_is1) (Version: 1.4.1.0 - Positivo Informática S.A.)
Positivo Backup (HKLM\...\{387B3DFA-BB12-45E6-B431-4A7BF2EBD985}_is1) (Version: 1.5.2.2 - Positivo Informática S.A.)
Positivo Bateria (HKLM\...\{FD6F6859-2863-4ABB-87D0-A263F3E9FF45}_is1) (Version: 1.4.4.0 - Positivo Informática S.A.)
Positivo Conversor 3D (HKLM\...\{D0582368-2DFF-48EA-AC8D-1FA8E31CA38C}_is1) (Version: 1.0.0.7 - Positivo Informática S.A.)
Positivo NIS 2011 License Activator (HKLM\...\{5400FA29-4A55-4EB9-AD27-AF20DBD334E1}_is1) (Version: 1.1.0.0 - Positivo Informática S.A.)
Positivo Sincronize (HKLM\...\{6DA3261A-DCEB-401A-ABE0-A367C252B86C}_is1) (Version: 1.5.3.0 - Positivo Informática S.A.)
Positivo WebCam (HKLM\...\{E11C7438-7550-4676-92CE-846CC5DA3548}_is1) (Version: 1.5.1.0 - Positivo Informática S.A.)
Ralink RT2870 Wireless LAN Card (HKLM\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.4.0 - Ralink)
REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.0174 - REALTEK Semiconductor Corp.)
Receitanet (HKLM\...\ECC16E3C-16D1-4DC2-9D8A-6AC06B3005A5) (Version: 1.04 - Serpro - Serviço Federal de Processamento de Dados)
Software básico do dispositivo HP Deskjet 3050 J610 series (HKLM\...\{6FC163A1-3774-4918-8565-47F4FF0DF8B7}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
Software de Cadastro Positivo 6.0 (HKLM\...\{4A33ECF3-6AC6-4A9B-932C-4E81625423C7}_is1) (Version: 6.0.0.0 - Positivo Informática)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.3.0 - Synaptics Incorporated)
TP-LINK Wireless Client Utility (HKLM\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)
Tutorial 1.0 (HKLM\...\{1C86726E-4A85-4322-8A1C-56EDE170FAB5}_is1) (Version: 1.0.0.0 - Positivo Informática)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{52F3455A-9ADB-41A6-BCE7-8D99F3770590}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version: - Microsoft)
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Webcam 1.5 (HKLM\...\{39B78651-6FD2-4752-BE68-C3BDB6F2D9EE}) (Version: 1.5 - OEM)
Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 4.20 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
ZHPDiag 2014 (HKLM\...\ZHPDiag_is1) (Version: 2014 - Nicolas Coolman)

==================== Restore Points =========================

23-03-2014 04:58:57 Windows Update
23-03-2014 05:48:05 Windows Update
23-03-2014 19:02:34 Removed Extreme Flash Player
02-04-2014 17:29:33 avast! antivirus system restore point
03-04-2014 02:28:56 Windows Update
03-04-2014 03:28:36 Windows Update
03-04-2014 08:02:51 avast! antivirus system restore point
03-04-2014 10:29:08 avast! antivirus system restore point
03-04-2014 10:39:45 avast! antivirus system restore point
03-04-2014 10:46:31 avast! antivirus system restore point
03-04-2014 11:54:02 avast! antivirus system restore point
03-04-2014 12:46:36 avast! antivirus system restore point
03-04-2014 14:04:56 avast! antivirus system restore point
04-04-2014 19:19:09 avast! antivirus system restore point
05-04-2014 03:15:15 avast! antivirus system restore point
05-04-2014 03:19:08 Instalação de Pacote de Driver de Dispositivo: Avast Serviço de Rede
07-04-2014 17:03:58 Windows Update
09-04-2014 04:48:24 Windows Update
10-04-2014 21:23:44 ZHPFix Restore System Point
10-04-2014 21:32:23 ZHPFix Restore System Point
11-04-2014 02:03:47 ZHPFix Restore System Point

==================== Hosts content: ==========================

2009-07-13 22:04 - 2009-06-10 17:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00C39C86-E733-41F9-8913-3DB7FE4EF13A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-13] (Adobe Systems Incorporated)
Task: {0E24767B-4193-4C64-9441-B542AAFE81E3} - System32\Tasks\{0DD0F863-9D52-4870-A560-2380B9CC6A63} => Chrome.exe
Task: {1079D203-51E0-4299-A17B-03577D43FE3A} - System32\Tasks\{6A51DC2C-9DCA-48BB-9E99-F721479AF6E7} => Chrome.exe
Task: {11319DDE-0260-49F2-918D-68C913E2A7EB} - System32\Tasks\{9F466F0D-28B8-49A8-BA81-29492BEEF9BB} => Chrome.exe
Task: {1D7AF179-48AC-4287-8248-3181044F000F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2364669226-1398954891-4146519358-1000UA => C:\Users\casal\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-07] (Google Inc.)
Task: {2052721E-B17D-4340-B609-3F41854C6251} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-30] (Google Inc.)
Task: {22D477EC-DA79-4CC6-A19F-4FDB94351864} - System32\Tasks\{6C0FDFCA-0081-464D-8B36-CDE9C7AC4E93} => Chrome.exe
Task: {24697A66-AAE5-4A2C-9368-5CC71EB22989} - System32\Tasks\{410C36AD-4055-4872-81C0-E9EEF31A781A} => C:\Program Files\Norton Internet Security\Engine\19.9.0.9\uistub.exe
Task: {268534DA-449B-4E48-A24C-6048C2F06A72} - System32\Tasks\{1BA8F945-04BA-4AED-AB36-5A4A452EEB01} => Chrome.exe
Task: {2AF0DB67-B87F-4369-BC79-A90F93193544} - System32\Tasks\{54046C9D-0C94-4FBA-AAB9-F47D07EC2927} => Chrome.exe
Task: {2BBD0B62-9F67-4765-B8C7-F696BCEE9891} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-30] (Google Inc.)
Task: {34AE7C9B-6B76-4D8A-B813-57D0DAA364DC} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {355B03C3-AF4E-4AE7-A6E6-29309EA50BD2} - System32\Tasks\{248790DF-D5AF-4840-ABD4-BA8566CF0511} => Chrome.exe
Task: {381E177A-11F1-4044-A588-0B9975B47552} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-04] (AVAST Software)
Task: {3BBD99A3-C749-4DC0-9B9C-1D3BB51928BB} - System32\Tasks\{A12685BF-9102-4465-8B2B-05FC2B80E3AF} => Chrome.exe
Task: {3D73ED8B-158E-45BA-B8EE-796D17943EAE} - System32\Tasks\Baidu Antivirus Update => C:\Program Files\Baidu Security\Baidu Antivirus\BavUpdater.exe
Task: {44AB0D1D-F5C4-45BF-8F70-CB8C9CEA866A} - System32\Tasks\{4D2C01EF-450D-4959-8491-3A2744483442} => Chrome.exe
Task: {47824B28-00D4-4049-8922-19553196C545} - System32\Tasks\{890FDB3C-DA4B-47DB-B70E-27E8FFC63ACE} => C:\Program Files\Norton Internet Security\Engine\19.9.0.9\uistub.exe
Task: {5D3A4231-A4BF-4BA6-9A85-978A4F256C1D} - System32\Tasks\{A59BEC52-E4B8-49C9-89CE-EE1F377E4138} => Chrome.exe
Task: {648E27EA-AD4B-4362-8A79-6AB6EA154237} - System32\Tasks\{AA22BC3B-9A4F-4522-8D56-3E0ADF29F1AF} => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HP Deskjet 3050 J610 series.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {652C219C-D8E7-4E87-B963-80B06DC335B9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {66154A41-99B0-45C1-951C-173A0C267217} - System32\Tasks\{8F99B308-F8FF-4076-ACD0-03F7CBF3E68E} => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HP Deskjet 3050 J610 series.exe [2010-11-16] (Hewlett-Packard Co.)
Task: {6ABF6F92-6763-4963-9E20-D2C212BCEC5C} - System32\Tasks\{56021F95-488E-4FC3-9553-621D91512186} => Chrome.exe
Task: {7CD0F49B-0F8C-41B6-BFC7-58DF619EFDA8} - System32\Tasks\{181D28A9-04FE-4E02-B0FD-4232ABE545BA} => Chrome.exe
Task: {7D3C7871-A917-4EF0-82E8-5F0A96423051} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe
Task: {8A2F105C-5661-43BD-99EF-B9A38A5C38E6} - System32\Tasks\{C3722DD0-F602-4681-A9D1-4CDE6D60A9BB} => Firefox.exe
Task: {8A4799B9-E549-4555-9819-FC956DC45A7C} - System32\Tasks\{0FDF2D55-ED79-4D7D-8C6B-F578BEE678D7} => Chrome.exe
Task: {96D94BB0-2B22-4AD7-B719-D689F27F9000} - System32\Tasks\{67836FBF-4698-4D94-8745-8B76F1409E39} => Chrome.exe
Task: {9A71A48E-2187-4B64-A219-E102FB7041A6} - System32\Tasks\{CCC8D53D-E644-4AD0-A9A1-79C93D92227D} => Chrome.exe
Task: {9B9233A4-A555-4A67-B421-21AC88EF08F2} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2364669226-1398954891-4146519358-1000
Task: {9E8EC137-5C99-4746-A43B-01FC7FBEDE98} - System32\Tasks\{8747697A-E202-4D89-AA43-7EDC94BC45F6} => Firefox.exe
Task: {AE1AA37B-3ABA-4934-A4D7-44E27B990054} - System32\Tasks\{CB52A441-DC21-4E3B-966E-318F7A0A10C5} => Chrome.exe
Task: {B5A57D37-767C-4E15-A894-A3052EFDA6A2} - System32\Tasks\{FA958BE3-360D-4295-87E4-55675F8CCE7A} => Chrome.exe
Task: {B783435D-689F-431F-AE6C-0E3FC3BE9F68} - System32\Tasks\{42004203-8A39-495E-9B5F-07A654D0CFB5} => Firefox.exe
Task: {CC576519-8EBC-4F0A-A3F9-02EE89986477} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Cscript.exe "C:\ProgramData\Baidu Security\Duplicaterecord.js"
Task: {D1789D0F-BEF2-4731-A149-07ABF2E6B4B5} - System32\Tasks\{A36EB03E-89ED-4868-9E4E-BFD864034877} => Firefox.exe
Task: {D21F6024-191F-4454-BBBC-09A650DA2549} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe
Task: {E0EAE09D-87AA-4F66-A951-FC1447BB2756} - System32\Tasks\{1608256D-2B8C-4045-84BC-DD96A4E64097} => Firefox.exe
Task: {EFC0170A-7779-420C-ABB5-505945B9B2AD} - System32\Tasks\Programa de atualização online Adobe => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {F0934E4D-3DFA-4057-8947-D465E48B37B1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2364669226-1398954891-4146519358-1000Core => C:\Users\casal\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-07] (Google Inc.)
Task: {F45F07BA-B8E9-4750-9367-AE105D613750} - System32\Tasks\{77C82021-44ED-4861-AF8E-6959E0AD2409} => Chrome.exe
Task: {F587F037-A624-45BE-BE31-0F5A9711AA5E} - System32\Tasks\Programa de atualização online da HP => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09] (Hewlett-Packard)
Task: {F71A061D-BE28-4B9F-AC11-409763A77056} - System32\Tasks\{CECDA389-DCF5-497E-B512-04A5A8A154DE} => Chrome.exe
Task: {FD85FE9A-AD79-4F3F-ADF1-593F36366F71} - System32\Tasks\{D0B87182-5868-4D5E-9DD6-54796D2355EA} => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HP Deskjet 3050 J610 series.exe [2010-11-16] (Hewlett-Packard Co.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2364669226-1398954891-4146519358-1000Core.job => C:\Users\casal\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2364669226-1398954891-4146519358-1000UA.job => C:\Users\casal\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-04-10 21:14 - 2014-04-10 21:14 - 02193408 _____ () C:\Program Files\AVAST Software\Avast\defs\14041001\algo.dll
2014-04-11 06:27 - 2014-04-11 06:27 - 02209792 _____ () C:\Program Files\AVAST Software\Avast\defs\14041100\algo.dll
2012-01-31 16:16 - 2009-11-12 11:48 - 00071096 _____ () C:\Program Files\CDBurnerXP\NMSAccessU.exe
2014-01-21 22:28 - 2013-12-18 09:12 - 00504832 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter1\communication.dll
2014-01-21 22:24 - 2013-10-30 15:49 - 00504320 _____ () C:\Program Files\NetRatingsNetSight\NetSight\nsmmc.dll
2013-10-24 09:50 - 2013-10-24 09:50 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-01-21 22:28 - 2013-12-18 09:14 - 01246720 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter1\npffaddons.dll
2014-01-21 22:28 - 2013-12-18 09:14 - 00851968 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter1\npfirefoxprocessor.dll
2014-01-21 22:28 - 2013-12-18 09:13 - 00150528 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter1\npsp1.dll
2014-01-21 22:28 - 2013-12-18 09:13 - 00228864 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter1\npsurvey.dll
2014-01-21 22:28 - 2013-12-18 09:13 - 00224768 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter1\npwmi.dll
2010-06-25 14:54 - 2010-06-25 14:54 - 01106432 _____ () C:\Program Files\OEM\IPM 1.5\IPM.exe
2009-11-17 15:21 - 2009-11-17 15:21 - 00092160 _____ () C:\Program Files\OEM\IPM 1.5\SoilIO.dll
2010-06-25 14:53 - 2010-06-25 14:53 - 00207360 _____ () C:\Program Files\OEM\IPM 1.5\vista.dll
2010-07-16 13:42 - 2010-07-16 13:42 - 00548864 _____ () C:\Program Files\OEM\OSD 1.7\SunflowerOSD.exe
2009-11-17 15:21 - 2009-11-17 15:21 - 00092160 _____ () C:\Program Files\OEM\OSD 1.7\SoilIO.dll
2010-05-11 08:51 - 2010-05-11 08:51 - 16137728 _____ () C:\Program Files\OEM\OSD 1.7\Media.dll
2012-03-08 10:40 - 2009-08-13 17:42 - 00860160 _____ () C:\Program Files\Ralink\Common\RaWLAPI.dll
2013-10-18 19:55 - 2013-10-18 19:55 - 25100288 _____ () C:\Users\casal\AppData\Roaming\Dropbox\bin\libcef.dll
2011-11-21 06:27 - 2012-03-12 10:54 - 00194560 _____ () C:\Program Files\Positivo Informática\Positivo Experience\Positivo Áudio\LibSoundManager.dll
2014-03-19 13:58 - 2014-03-19 13:58 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-02-12 22:24 - 2014-02-12 22:24 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\bfd5296be62268bc7a31a424f0d1ad5f\IsdiInterop.ni.dll
2011-11-21 05:39 - 2010-03-03 18:08 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BavSvc => "Service"=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BavSvc => "Service"=""

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^Users^casal^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Recorte de tela e Iniciador do OneNote 2007.lnk => C:\Windows\pss\Recorte de tela e Iniciador do OneNote 2007.lnk.Startup
MSCONFIG\startupreg: Facebook Update => "C:\Users\casal\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: uTorrent => "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptador de Túnel Teredo da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/11/2014 06:27:03 AM) (Source: Application Hang) (User: )
Description: O programa firefox.exe versão 28.0.0.5186 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID de Processo: 1330

Hora de Início: 01cf557074b4db4a

Hora de Término: 158

Caminho do Aplicativo: C:\Program Files\Mozilla Firefox\firefox.exe

Id do Relatório: c9f25c3c-c163-11e3-9d57-80ee732b127d

Error: (04/11/2014 06:25:56 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 10:08:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 10:03:46 PM) (Source: VSS) (User: )
Description: Erro do Serviço de Cópias de Sombra de Volume: erro inesperado ao consultar a interface IVssWriterCallback. hr = 0x80070005, Acesso negado.
.
Muitas vezes, isso é causado por configurações de segurança incorretas no processo gravador ou solicitante.


Operação:
Obtendo Dados do Gravador

Contexto:
Id de Classe de Gravador: {e8132975-6f93-4464-a53e-1050253ae220}
Nome do Gravador: System Writer
ID de Instância de Gravador: {dddb1f31-73ab-41f1-83b7-5622c96464eb}

Error: (04/10/2014 09:14:34 PM) (Source: Application Hang) (User: )
Description: O programa firefox.exe versão 28.0.0.5186 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID de Processo: 17e8

Hora de Início: 01cf5523079ffa35

Hora de Término: 27

Caminho do Aplicativo: C:\Program Files\Mozilla Firefox\firefox.exe

Id do Relatório: 8b5f4f7b-c116-11e3-9e60-80ee732b127d

Error: (04/10/2014 09:11:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/10/2014 05:32:24 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..


Details:
AddWin32ServiceFiles: Unable to back up image of service Baidu Hips Service since QueryServiceConfig API failed

System Error:
O sistema não pode encontrar o arquivo especificado.
.

Error: (04/10/2014 05:32:24 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..


Details:
AddWin32ServiceFiles: Unable to back up image of service BBUpdate since QueryServiceConfig API failed

System Error:
O sistema não pode encontrar o arquivo especificado.
.

Error: (04/10/2014 05:32:24 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..


Details:
AddWin32ServiceFiles: Unable to back up image of service Bing Bar Update Service since QueryServiceConfig API failed

System Error:
O sistema não pode encontrar o arquivo especificado.
.

Error: (04/10/2014 05:32:24 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..


Details:
AddWin32ServiceFiles: Unable to back up image of service Baidu Antivirus Service since QueryServiceConfig API failed

System Error:
O sistema não pode encontrar o arquivo especificado.
.


System errors:
=============
Error: (04/11/2014 06:25:33 AM) (Source: Service Control Manager) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
Bhbase
SMR300

Error: (04/11/2014 06:25:19 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: AUTORIDADE NT)
Description: Falha na inicialização do Módulo de Extensibilidade de WLAN.

Caminho do Módulo: C:\Windows\system32\Rtlihvs.dll
Código de Erro: 126

Error: (04/10/2014 10:07:38 PM) (Source: Service Control Manager) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
Bhbase
SMR300

Error: (04/10/2014 10:07:22 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: AUTORIDADE NT)
Description: Falha na inicialização do Módulo de Extensibilidade de WLAN.

Caminho do Módulo: C:\Windows\system32\Rtlihvs.dll
Código de Erro: 126

Error: (04/10/2014 09:10:37 PM) (Source: Service Control Manager) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
Bhbase
SMR300

Error: (04/10/2014 09:10:22 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: AUTORIDADE NT)
Description: Falha na inicialização do Módulo de Extensibilidade de WLAN.

Caminho do Módulo: C:\Windows\system32\Rtlihvs.dll
Código de Erro: 126

Error: (04/10/2014 05:53:22 PM) (Source: Service Control Manager) (User: )
Description: Não foi possível iniciar o serviço Baidu Antivirus Service devido ao seguinte erro:
%%3

Error: (04/10/2014 05:53:21 PM) (Source: Service Control Manager) (User: )
Description: Não foi possível iniciar o serviço Baidu Antivirus Service devido ao seguinte erro:
%%3

Error: (04/10/2014 05:53:20 PM) (Source: Service Control Manager) (User: )
Description: Não foi possível iniciar o serviço Baidu Antivirus Service devido ao seguinte erro:
%%3

Error: (04/10/2014 05:53:19 PM) (Source: Service Control Manager) (User: )
Description: Não foi possível iniciar o serviço Baidu Antivirus Service devido ao seguinte erro:
%%3


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 61%
Total physical RAM: 2038.3 MB
Available physical RAM: 792.68 MB
Total Pagefile: 4086.3 MB
Available Pagefile: 2645.35 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.12 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:288.32 GB) (Free:251.69 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or (Size: 298 GB) (Disk ID: 96E1CA8E)
Partition 1: (Active) - (Size=10 GB) - (Type=27)
Partition 2: (Not Active) - (Size=288 GB) - (Type=07 NTFS)

==================== End Of Log ============================

 Baixe o arquivo fixlist.txt que está anexado nesta postagem e salve-o no mesmo lugar onde você deixou o Farbar (FRST) que é este lugar abaixo:
C:\Users\casal\Downloads

Execute o FRST. Clique no botão Fix.

Aguarde e ao final, o log Fixlog.txt será salvo.

Selecione, copie e cole o conteúdo deste Fixlog.txt em sua próxima resposta.

Bom dia! É isso,Power Max?
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01
Ran by casal at 2014-04-11 08:21:46 Run:1
Running from C:\Users\casal\Downloads
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {3FEA6371-3532-4691-8FF1-629D66798437} URL =
BHO: No Name - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - No File
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\awesomehp.xml
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S3 BdApiUtil; \??\C:\Program Files\Baidu Security\Baidu Antivirus\BdApiUtil.sys [X]
S0 Bhbase; System32\drivers\Bhbase.sys [X]
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 PCFApiUtil; \??\C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil.sys [X]
2014-04-10 17:25 - 2014-03-03 18:39 - 00000000 ____D () C:\Program Files\Baidu Security
Baidu Antivirus (HKLM\...\Baidu Antivirus) (Version: 4.0.3.57478 - Baidu, Inc.)
Task: {3D73ED8B-158E-45BA-B8EE-796D17943EAE} - System32\Tasks\Baidu Antivirus Update => C:\Program Files\Baidu Security\Baidu Antivirus\BavUpdater.exe
Task: {CC576519-8EBC-4F0A-A3F9-02EE89986477} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Cscript.exe "C:\ProgramData\Baidu Security\Duplicaterecord.js"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BavSvc => "Service"=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BavSvc => "Service"=""
end
*****************

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3FEA6371-3532-4691-8FF1-629D66798437} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{3FEA6371-3532-4691-8FF1-629D66798437} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKCR\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key not found.
C:\Program Files\mozilla firefox\browser\searchplugins\awesomehp.xml => Moved successfully.
HKCU\SOFTWARE\Policies\Google => Key deleted successfully.
BdApiUtil => Service deleted successfully.
Bhbase => Service deleted successfully.
BprotectEx => Service deleted successfully.
PCFApiUtil => Service deleted successfully.
C:\Program Files\Baidu Security => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3D73ED8B-158E-45BA-B8EE-796D17943EAE} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D73ED8B-158E-45BA-B8EE-796D17943EAE} => Key deleted successfully.
C:\Windows\System32\Tasks\Baidu Antivirus Update => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu Antivirus Update => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CC576519-8EBC-4F0A-A3F9-02EE89986477} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CC576519-8EBC-4F0A-A3F9-02EE89986477} => Key deleted successfully.
C:\Windows\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\060184C3-9766-46a0-B258-F4518A0B2633 => Key deleted successfully.
HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\BavSvc => Key deleted successfully.
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\BavSvc => Key deleted successfully.

Bom dia! É isso,Power Max?

   Sim, é isso mesmo. Outros problemas foram removidos.
____________________________________________________________

 Faça uma limpeza com o Ccleaner e PureRa seguindo as dicas destes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Depois disto nos diga como está seu PC.

Espaço 6,03MB
RaProducts' PureRa v1.7
Log created at 08:51 on 11/04/2014 (casal)

C:\Config.MSI emptied.
C:\Users\casal\AppData\LocalLow\Microsoft\CryptNetURLCache\Content emptied.
C:\Users\casal\AppData\LocalLow\Microsoft\CryptNetURLCache\MetaData emptied.
C:\Windows\system32\FNTCACHE.DAT <- O sistema não pode encontrar o arquivo especificado.
Recycle bin emptied.
C:\Windows\SoftwareDistribution\DataStore\Logs emptied.
C:\Windows\SoftwareDistribution\Download emptied.
C:\Windows\SoftwareDistribution\SelfUpdate\Default emptied.
C:\Windows\SoftwareDistribution\WuRedir emptied.
C:\Windows\SoftwareDistribution\ReportingEvents.log <- O arquivo já está sendo usado por outro processo.
C:\Users\casal\AppData\Local\Temp emptied.
C:\Windows\TEMP emptied.
C:\Program Files\exe\style\kyoiku\Thumbs.db <-
C:\Program Files\exe\style\kyoiku\Thumbs.db <-
C:\Program Files\exe\style\kyoiku\Thumbs.db <- Successfully deleted.O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.
C:\Program Files\IDT\Thumbs.db <-
C:\Program Files\IDT\Thumbs.db <-
C:\Program Files\IDT\Thumbs.db <- O sistema não pode encontrar o arquivo especificado. Successfully deleted.O sistema não pode encontrar o arquivo especificado.
C:\Program Files\Windows Sidebar\Shared Gadgets\Widget_Social.Gadget\Thumbs.db <-
C:\Program Files\Windows Sidebar\Shared Gadgets\Widget_Social.Gadget\Thumbs.db <- Successfully deleted.O sistema não pode encontrar o arquivo especificado.
C:\Program Files\Windows Sidebar\Shared Gadgets\Widget_Youtube.Gadget\Images\Thumbs.db <-
C:\Program Files\Windows Sidebar\Shared Gadgets\Widget_Youtube.Gadget\Images\Thumbs.db <- Acesso negado. Successfully deleted.

C:\Program Files\Windows Sidebar\Shared Gadgets\Widget_Youtube.Gadget\launcher\Thumbs.dbC:\Program Files\Windows Sidebar\Shared Gadgets\Widget_Youtube.Gadget\launcher\Thumbs.db <- <-
C:\Program Files\Windows Sidebar\Shared Gadgets\Widget_Youtube.Gadget\launcher\Thumbs.db <- Acesso negado. Successfully deleted.Successfully deleted.
C:\Users\casal\AppData\Local\IconCache.db <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm <-

C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqmC:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm <- <- Successfully deleted.Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqmC:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm
<- C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm <- <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm <- Acesso negado. Acesso negado. Acesso negado. Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db <-
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db <- O sistema não pode encontrar o arquivo especificado.

C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.dbC:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db <- <-
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db <- O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.

C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.dbC:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db <- <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db <- Successfully deleted.Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <-
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <- Successfully deleted.Successfully deleted.O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <- O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_00.sqm <-
<- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_00.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_00.sqm <- Successfully deleted.Successfully deleted.Successfully deleted.


C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_01.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_01.sqm <- <- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_01.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_02.sqm <- Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_02.sqm <- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_02.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_02.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_03.sqm <- O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_03.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_03.sqm <- <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_03.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_04.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_04.sqm <- Successfully deleted.
Successfully deleted.C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_04.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_04.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_05.sqm <- Successfully deleted.
O sistema não pode encontrar o arquivo especificado. C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_05.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_05.sqmO sistema não pode encontrar o arquivo especificado. <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_05.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_06.sqmSuccessfully deleted. <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_06.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_06.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_06.sqm <- O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_07.sqm <- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_07.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_07.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_07.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_08.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_08.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_08.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_08.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_09.sqm <- O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_09.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_09.sqm <- <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_09.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_10.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_10.sqm <- Successfully deleted.O sistema não pode encontrar o arquivo especificado.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_10.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_10.sqm <- <- Successfully deleted.
Successfully deleted.Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_11.sqm <- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_11.sqm
<- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_11.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_11.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_12.sqm <- Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_12.sqm <- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_12.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici2_12.sqm <- Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici3_00.sqm <- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici3_00.sqm <- Successfully deleted.
Successfully deleted.C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici3_00.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici3_00.sqm <- Acesso negado.
Acesso negado. C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_00.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_00.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_00.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_00.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_01.sqm <- Acesso negado.
Successfully deleted.C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_02.sqmAcesso negado.
<-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_02.sqm <- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_02.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_02.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_03.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_03.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_03.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_03.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_04.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_04.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_04.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_04.sqm <- Successfully deleted.
Successfully deleted.C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_05.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_05.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_05.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_05.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_06.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_06.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_06.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_06.sqm <- Acesso negado.
Acesso negado. C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_07.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_07.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_07.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_07.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_08.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_08.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_00.sqmO sistema não pode encontrar o arquivo especificado. <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_00.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_08.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici4_08.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_00.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_00.sqm <- Successfully deleted.Acesso negado.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_01.sqm <- C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_01.sqm <- O sistema não pode encontrar o arquivo especificado. Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_01.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_01.sqm <- <- Successfully deleted.
Successfully deleted.C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_02.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_02.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_02.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\Bici5_02.sqm <- Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\_00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\_00.sqm <- <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\_00.sqmSuccessfully deleted. <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\Bici\_00.sqm <- Successfully deleted.Successfully deleted.Successfully deleted.Successfully deleted.


C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData18_00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData18_00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData18_00.sqm <- <- <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData18_00.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData20_00.sqm <- Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData20_00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData20_00.sqm <- Successfully deleted. <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData20_00.sqm <- Successfully deleted.
Successfully deleted.C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData21_00.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData21_00.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData21_00.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData21_00.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData21_01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData21_01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData21_01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData21_01.sqm <- Acesso negado. Acesso negado. Successfully deleted.O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Mail\sqmnoopt00.sqm <-

C:\Users\casal\AppData\Local\Microsoft\Windows Live Mail\sqmnoopt00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live Mail\sqmnoopt00.sqm <- <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live Mail\sqmnoopt00.sqm <- Acesso negado. Successfully deleted.Successfully deleted.Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-MovieMaker-00.sqm <-

C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-MovieMaker-00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-MovieMaker-00.sqm
<- C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-MovieMaker-00.sqm <- <- Successfully deleted.Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-NoOptIn-MovieMaker-00.sqm
C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-NoOptIn-MovieMaker-00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-NoOptIn-MovieMaker-00.sqm <- <- <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-NoOptIn-MovieMaker-00.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-NoOptIn-MovieMaker-01.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-NoOptIn-MovieMaker-01.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-NoOptIn-MovieMaker-01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Movie Maker\SqmApi\SqmSessionData-NoOptIn-MovieMaker-01.sqm <- Acesso negado. Successfully deleted.Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-00.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-00.sqm <-
<- C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-00.sqm <-
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-00.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-01.sqm <- Successfully deleted.Successfully deleted.

C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-01.sqmC:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-01.sqm <- <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-01.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-02.sqm <- O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-02.sqm
<- C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-02.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-02.sqm <- Acesso negado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-03.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-03.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-03.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-03.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-04.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-04.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-04.sqm <- Successfully deleted.
C:\Users\casal\AppData\Local\Microsoft\Windows Live Photo Gallery\SqmApi\SqmSessionData-WLXPhotoGallery-04.sqm <- Acesso negado. Successfully deleted.O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.
C:\Users\casal\AppData\Roaming\Mozilla\Firefox\Profiles\p4r4c8sz.default-1394306066141\extensions\staged\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\Thumbs.db <- Successfully deleted.
C:\Users\casal\AppData\Roaming\Mozilla\Firefox\Profiles\p4r4c8sz.default-1394306066141\extensions\staged\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\Thumbs.db <- Successfully deleted.
C:\Users\casal\AppData\Roaming\Mozilla\Firefox\Profiles\p4r4c8sz.default-1394306066141\extensions\staged\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\Thumbs.db <- Successfully deleted.
C:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\Thumbs.db <-
C:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\Thumbs.db
<- C:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\gallery\Thumbs.db <- Acesso negado. O sistema não pode encontrar o arquivo especificado. Successfully deleted.
C:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\Thumbs.db <-
C:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\Thumbs.db <- Acesso negado.
C:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\icons\Thumbs.db <- Successfully deleted.O sistema não pode encontrar o arquivo especificado.


C:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\Thumbs.dbC:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\Thumbs.db <- <- C:\Users\casal\Desktop\Dados anteriores do Firefox\0c6r02ph.default-1394739457103\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}\skin\newtab\images\Thumbs.db <- Successfully deleted.Successfully deleted.Successfully deleted.
C:\Windows\Resources\Thumbs.db <-
C:\Windows\Resources\Thumbs.db <- Acesso negado. Successfully deleted.
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\wmpnsslog00.sqm <-
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\wmpnsslog00.sqm <- Acesso negado. Successfully deleted.
C:\Windows\System32\Thumbs.db <- Successfully deleted.
C:\Windows\System32\Thumbs.db <- O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\IconCache.db <-
C:\Windows\System32\config\systemprofile\AppData\Local\IconCache.db <-
C:\Windows\System32\config\systemprofile\AppData\Local\IconCache.db <- Acesso negado.
C:\Windows\System32\config\systemprofile\AppData\Local\IconCache.db <- Successfully deleted.O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm <-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm <- Acesso negado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm <- Acesso negado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm <- Acesso negado. Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db <-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db <- O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db <-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db <- Acesso negado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- Acesso negado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- Successfully deleted.

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db <- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- Acesso negado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- Acesso negado.
O sistema não pode encontrar o arquivo especificado. C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
<- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db <- Acesso negado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db <- Acesso negado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <- O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <- Acesso negado. O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <- Successfully deleted.O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup0.sqm <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup1.sqm <-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup0.sqm <- O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup1.sqm <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup1.sqm <- O sistema não pode encontrar o arquivo especificado. O sistema não pode encontrar o arquivo especificado.
C:\Windows\System32\oobe\Thumbs.db <-
C:\Windows\System32\oobe\Thumbs.db <-
C:\Windows\System32\oobe\Thumbs.db <-
C:\Windows\System32\oobe\Thumbs.db <- Acesso negado. Successfully deleted.Successfully deleted.Successfully deleted.
C:\Windows\Web\Wallpaper\Thumbs.db <-
C:\Windows\Web\Wallpaper\Thumbs.db <-
C:\Windows\Web\Wallpaper\Thumbs.db <- Successfully deleted.Acesso negado. Successfully deleted.

Total space cleaned: 6.03 MB

-=E.O.F=-

Finalizamos?

Nos últimos logs que você postou não consta o Baidu. Ele ainda aparece no seu PC?

E como está o computador depois destes procedimentos?

Na área de trabalho não, somente no Painel de controle -Programas e Recursos. O Computador esta mais rápido, sem propagandas, eficiente. O navegador Firefox não esta travando ao abrir outra janela.
Outra dúvida, quais programas mantenho dos que pediu para baixar ? Todos?

Quanto ao baidu ainda aparecer em Programas e Recursos, a questão é que para eliminar ele completamente seria muito importante o uso do Zoek, como te passei no começo do seu tópico. Tente fazer este procedimento abaixo:

 Desative temporariamente seu antivírus para evitar conflitos.

Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe (se você já estiver com o Zoek no PC não precisa baixar de novo):
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Obs: Se não for possível executar o Zoek no modo normal do Windows, inicie o PC em Modo Seguro (apertando a tecla F8 (ou a tecla F5 em alguns computadores) repetidas vezes quando o computador estiver iniciando e escolhendo a opção Modo Seguro com rede (ou Modo seguro) e ai quando estiver no modo seguro faça o procedimento com o Zoek.

O Zoek esta instalado mas não é executado.

Tente fazer o que lhe falei:

Obs: Se não for possível executar o Zoek no modo normal do Windows, inicie o PC em Modo Seguro (apertando a tecla F8 (ou a tecla F5 em alguns computadores) repetidas vezes quando o computador estiver iniciando e escolhendo a opção Modo Seguro com rede (ou Modo seguro) e ai quando estiver no modo seguro faça o procedimento com o Zoek.

Desabilito o antivírus ,mas ao iniciar conforme descreveu,o Zoek não consta mais no pc e o antivírus diz que é uma ameaça. O que estou fazendo errado?

inicie o PC em Modo Seguro como lhe falei acima e execute o Zoek no Modo seguro.

Estou no modo seguro neste momento, Zoek instalado mas não executa.

Você desativou temporariamente a proteção do Avast? é ele que está bloqueando o Zoek neste caso.

Ele nem aparece na barra de ferramentas esta desabilitado permanentemente, por enquanto.

Mas é certo que ele tem uma outra barreira que impede o Zoek, visto que ele o bloqueia. O Avast que você usa é a versão paga dele, não é mesmo? Mas você tem o serial dele para inserir se você precisar reinstalar? Por que se você tiver como fazer isto, uma solução seria desinstalar o Avast. Depois disto você faz a limpeza com o Zoek, depois você reinstalaria o Avast.

Não tenho. Mas posso desinstalar o avast e conseguir novamente, certo? Como faço? Saio do modo seguro? E reinstalar o avast é em que site? Não dá problema na chave de registro?

 Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Nada acontece. Estou no modo seguro com rede.

Precisa ser o zoek.exe?

Baixe esta versão do Zoek renomeada como Amigo.com que hospedei no endereço abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Depois de baixá-lo, clique sobre ele com o botão direito do mouse e escolha a opção de Executar como administrador.

E veja se assim ele abre. E me diga o resultado.

Só faz o download mas não executa.

 Faça o download do SystemLook.exe no endereço abaixo e salve no seu Desktop (área de trabalho):
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*** Para usuários do usuários do Windows Vista ou Windows 7: Clique com o direito sobre o arquivo SystemLook.exe, depois clique em [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Após abrir o SystemLook.exe, selecione, copie o texto destacado em vermelho que te passei

Cole o texto que você acabou de copiar na caixa de texto do SystemLook.

Clique no botão Look e ao fim do exame um log (relatório) se abrirá. Ele é salvo como SystemLook.txt no Desktop.

Selecione, copie e cole o conteúdo deste log na sua próxima resposta.

SystemLook 30.07.11 by jpshortstuff
Log created at 14:47 on 11/04/2014 by casal
Administrator - Elevation successful

========== filefind ==========

Searching for "baidu"
No files found.

========== folderfind ==========

Searching for "baidu"
C:\AdwCleaner\Quarantine\C\ProgramData\baidu d------ [11:27 10/04/2014]

========== regfind ==========

Searching for "baidu"
[HKEY_CURRENT_USER\Software\AVAST Software\WRC\SearchRules\baidu.com]
[HKEY_CURRENT_USER\Software\AVAST Software\WRC\SearchRules\baidu.com]
"url"="^http\:\/\/www\.baidu\.com\/.*"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2364669226-1398954891-4146519358-1000\Software\Avast Software\WRC\SearchRules\baidu.com]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2364669226-1398954891-4146519358-1000\Software\Avast Software\WRC\SearchRules\baidu.com]
"url"="^http\:\/\/www\.baidu\.com\/.*"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32]
@="C:\Program Files\Baidu Security\Baidu Antivirus\BavShx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}"="Baidu Scan"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayName"="Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayIcon"=""C:\Program Files\Baidu Security\Baidu Antivirus\Bav.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"UninstallString"=""C:\Program Files\Baidu Security\Baidu Antivirus\Uninstall.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"URLInfoAbout"="http://antivirus.baidu.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"Publisher"="Baidu, Inc."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"InstallDir"="C:\Program Files\Baidu Security\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_USERS\.DEFAULT\Software\Baidu]
[HKEY_USERS\.DEFAULT\Software\Baidu Security]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"
[HKEY_USERS\S-1-5-21-2364669226-1398954891-4146519358-1000\Software\AVAST Software\WRC\SearchRules\baidu.com]
[HKEY_USERS\S-1-5-21-2364669226-1398954891-4146519358-1000\Software\AVAST Software\WRC\SearchRules\baidu.com]
"url"="^http\:\/\/www\.baidu\.com\/.*"
[HKEY_USERS\S-1-5-21-2364669226-1398954891-4146519358-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2364669226-1398954891-4146519358-1000\Software\Avast Software\WRC\SearchRules\baidu.com]
[HKEY_USERS\S-1-5-21-2364669226-1398954891-4146519358-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2364669226-1398954891-4146519358-1000\Software\Avast Software\WRC\SearchRules\baidu.com]
"url"="^http\:\/\/www\.baidu\.com\/.*"
[HKEY_USERS\S-1-5-18\Software\Baidu]
[HKEY_USERS\S-1-5-18\Software\Baidu Security]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

-= EOF =-