Baidu impede a instalação do Kaspersky.

Bom dia,

O meu problema é o baidu que impede a instalação do kaspersky. Eu já desinstalei no painel de controle mas isso não mudou nada.

eu vi um tópico onde o power pc citou o uso do zoek. só que eu não to conseguindo ler o código q ele passou para ser colocado no zoek. se alguém tiver esse código, ou o próprio power pc, ficaria agradecido.

   Olá gsdbarreto. Seja bem vindo ao Fórum PC Brasil.

Antes de usar o Zoek, baixe primeiramente o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

Power,

Muito obrigado pelas boas vindas.

Segue o log do adwclenar, mas o baidu não foi removido ainda.

# AdwCleaner v3.024 - Relatório criado 19/04/2014 às 11:23:33
# Atualizado 18/04/2014 por Xplode
# Sistema Operacional : Windows 8.1 Single Language (64 bits)
# Usuário : Gustavo - GUSTAVINHO
# Executando de : C:\Users\Gustavo\Desktop\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

[#] Serviço Deletada : pricemeterliveUpdate
[#] Serviço Deletada : pricemeterliveUpdatem

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\baidu
Pasta Deletada : C:\ProgramData\boost_interprocess
[!] Pasta Deletada : C:\ProgramData\PriceMeterLiveUpdate
[!] Pasta Deletada : C:\Program Files (x86)\PriceMeterLiveUpdate
[!] Pasta Deletada : C:\Users\Gustavo\AppData\Local\Mobogenie
Pasta Deletada : C:\Users\Gustavo\AppData\Local\PriceMeterLiveUpdate
Pasta Deletada : C:\Users\Gustavo\AppData\LocalLow\Conduit
Pasta Deletada : C:\Users\Gustavo\AppData\Roaming\PriceMeterUpdater
Pasta Deletada : C:\Users\Gustavo\AppData\Roaming\UpdaterEX
Pasta Deletada : C:\Users\Gustavo\Documents\Mobogenie
Pasta Deletada : C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdebcffgnijbblbinknkbefciofebcda
Arquivo Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
Arquivo Deletada : C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage
Arquivo Deletada : C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage-journal
Arquivo Deletada : C:\WINDOWS\Tasks\UpdaterEX.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\UpdaterEX

***** [ Atalhos ] *****


***** [ Registro ] *****

Chave Deletedo : HKCU\Software\Google\Chrome\Extensions\mdebcffgnijbblbinknkbefciofebcda
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\mdebcffgnijbblbinknkbefciofebcda
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=3
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=9
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Chave Deletedo : HKCU\Software\Conduit
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\UpdaterEX
Chave Deletedo : HKCU\Software\AppDataLow\Software\Conduit
Chave Deletedo : HKCU\Software\AppDataLow\Software\SmartBar
Chave Deletedo : HKLM\Software\Conduit
Chave Deletedo : HKLM\Software\DealPlyLive
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UpdaterEX

***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Google Chrome v34.0.1847.116

[ Arquivo : C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [3306 octets] - [19/04/2014 11:21:25]
AdwCleaner[S0].txt - [3048 octets] - [19/04/2014 11:23:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3108 octets] ##########

 Desative temporariamente seu antivírus para evitar conflitos.

Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Power, aí o log

Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Gustavo on 19/04/2014 at 11:47:26,51.
Microsoft Windows 8.1 Single Language 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Gustavo\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

19/04/2014 11:48:06 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\Gustavo\daemonprocess.txt deleted
C:\Users\Gustavo\.android deleted
C:\PROGRA~3\FileSplitUpLoad.dll deleted
C:\Users\Gustavo\AppData\Local\CRE deleted
C:\Users\Gustavo\AppData\Local\Mobogenie deleted
C:\Users\Gustavo\AppData\Local\cache deleted
C:\Users\Gustavo\AppData\Roaming\unins000.exe deleted
C:\PROGRA~3\MakeMarkerFile.exe deleted
"C:\PROGRA~3\boost_interprocess\Nobu64AgentService" deleted
"C:\PROGRA~3\boost_interprocess\Nobu64TrayIcon" deleted
"C:\PROGRA~3\boost_interprocess" not deleted

==== Folders Found ======================

2014-04-19 14:23:34 2014-04-19 14:23:34 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-04-08 19:45:00 2014-04-08 19:45:00 -------- d-----w- C:\Program Files (x86)\Baidu Security
2014-04-08 19:45:00 2014-04-08 19:54:11 -------- d-----w- C:\Program Files (x86)\Baidu Security\Baidu Antivirus
2014-04-08 19:45:50 2014-04-08 19:45:50 -------- d-----w- C:\ProgramData\Baidu Security
2014-04-08 19:45:50 2014-04-08 19:45:50 -------- d-----w- C:\Users\All Users\Baidu Security

==== Files Found ======================


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\DQPQHQ0T\baidu-pc-faster[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 37891
Created time: 2014-04-19 05:58:39
Modified time: 2014-04-19 05:58:41
MD5: AE6AA68A0EB1AEC5A09D34CA6F273B70
SHA1: 10E487331C75604691993B1BCBB5C3C142C7B32F


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\NVFB54S9\baidu-pc-faster-uninstall[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 38350
Created time: 2014-04-19 05:58:40
Modified time: 2014-04-19 05:58:43
MD5: 4388E7C8739FD9AD9699DC11500F15F5
SHA1: FB63786EA3A46E3C8D59A471F97DB7830FD20B8B


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\T5181WX2\t2036-baidu-impede-a-instalacao-do-kaspersky[1].htm ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 33069
Created time: 2014-04-19 14:46:21
Modified time: 2014-04-19 14:46:22
MD5: C27D5114E4D07913A8F6FB57A8893DE5
SHA1: D721DFF971A1189901F32CB38FF2C3539B4B7986


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\YUOQK2Q1\baidu-pc-faster-virus[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 41455
Created time: 2014-04-19 05:58:39
Modified time: 2014-04-19 05:58:41
MD5: BFE05E13DA90337659CF0303BD562059
SHA1: 5F8C958928796DB8A442D3F98059568E81670033


--- C:\Users\Gustavo\AppData\Local\Temp\379F2568-C7CF-11E3-BEB7-50B7C3BF5CFF\Cleaner\baidu_av_4_0_3_57478.ini ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 227
Created time: 2014-04-19 14:31:10
Modified time: 2014-04-17 19:06:08
MD5: C9F2E09C386C9A6E5434D21A0200F6E0
SHA1: 442F80424FDDE56047D0E11824A66CCC37D89CE4


--- C:\Users\Gustavo\AppData\Local\Temp\CE31A324-C77D-11E3-BEB5-50B7C3BF5CFF\Cleaner\baidu_av_4_0_3_57478.ini ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 227
Created time: 2014-04-19 04:48:25
Modified time: 2014-04-17 19:06:08
MD5: C9F2E09C386C9A6E5434D21A0200F6E0
SHA1: 442F80424FDDE56047D0E11824A66CCC37D89CE4


--- C:\Users\Gustavo\AppData\Local\Temp\D5EB55D0-C77E-11E3-BEB6-50B7C3BF5CFF\Cleaner\baidu_av_4_0_3_57478.ini ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 227
Created time: 2014-04-19 04:55:48
Modified time: 2014-04-17 19:06:08
MD5: C9F2E09C386C9A6E5434D21A0200F6E0
SHA1: 442F80424FDDE56047D0E11824A66CCC37D89CE4


==== Registry Search Results for "Baidu" ======================


[HKEY_LOCAL_MACHINE\SOFTWARE\baidu]

[HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll]

[HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload]

[HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload\bav]

[HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload\bav]
"DllVersion_2.0"="C:\\ProgramData\\baidu\\commondll\\splitupload\\DllVersion_2.0\\FileSplitUpLoad.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BdApiUtil]
"ImagePath"="\\??\\C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus\\BdApiUtil64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BdCameraProtect]
"ImagePath"="\\??\\C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus\\BdCameraProtect64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"InstPath"="C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus\\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdApiUtil]
"ImagePath"="\\??\\C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus\\BdApiUtil64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdCameraProtect]
"ImagePath"="\\??\\C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus\\BdCameraProtect64.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"InstPath"="C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus\\"

[HKEY_USERS\.DEFAULT\Software\Baidu]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1001\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1001\Software\Baidu Security\PC Faster]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\PC Faster]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Microsoft\Internet Explorer\TypedURLs]
"url11"="http://www.forumpcbrasil.com/t1999-resolvido-kaspersky-detecta-baidu-antivirus-e-nao-consigo-remove-lo"

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus\\Uninstall.exe"=hex:53,\

[HKEY_USERS\S-1-5-18\Software\Baidu]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

==== Chrome Look ======================

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
pgacfjdigcddmmncljpflgcfpfahebkh - C:\Users\Gustavo\AppData\Local\GAS Tecnologia\GBBD\bb\sf.crx[]

Solitaire Games - Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\eljmkmbmhmgmpmmbkagbobpmpocacdbo
Feedly - News Blogs and Youtube - Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob
SparkChess 7 - Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\khgabmflimjjbclkmljlpmgaleanedem
Norton Identity Protection - Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
Pocket (formerly Read It Later) - Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj
Google Wallet - Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Charlotte Ronson - Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\obakimnhgahiedhcjlcnohielmendpen
Gmail - Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chrome Fix ======================

C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_google-chrome-windows-8.softonic.com.br_0.localstorage deleted successfully
C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_google-chrome-windows-8.softonic.com.br_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=core&utm_medium=ppi&utm_campaign=portal"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=core&utm_medium=ppi&utm_campaign=portal"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{C811BA99-2819-4252-84E5-F091CF307B69}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{2A280DA7-1803-4732-8E57-B7923D8AB0CA} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{C811BA99-2819-4252-84E5-F091CF307B69} Google Url="http://www.google.com/search?hl=en&q={searchTerms}"

==== Reset Google Chrome ======================

C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Microsoft\Internet Explorer\SearchScopes\{2A280DA7-1803-4732-8E57-B7923D8AB0CA} deleted successfully

==== Deleting CLSID Registry Values ======================


==== shortcuts on Users Desktops ======================

C:\Users\Gustavo\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Gustavo\Desktop\Revo Uninstaller.lnk - C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Users\Gustavo\Desktop\µTorrent.lnk -

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Adobe Reader X.lnk - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Users\Public\Desktop\BS.Player FREE.lnk - C:\Program Files (x86)\Webteh\BSPlayer\bsplayer.exe
C:\Users\Public\Desktop\Mendeley Desktop.lnk - C:\Program Files (x86)\Mendeley Desktop\MendeleyDesktop.exe
C:\Users\Public\Desktop\Winamp.lnk - C:\Program Files (x86)\Winamp\winamp.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices\Gsdb.lnk - C:\Program Files (x86)\Bluetooth Suite\Win7UI.exe 88:9b:39:b6:e3:a3
C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter\Uninstall Price Metar.lnk - C:\Users\Gustavo\AppData\Local\PriceMeter\uninst.exe /uninstall
C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk - C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk - C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe -hunter
C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk - C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk - C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Ferramentas do Office 2013\Office 2013 Upload Center.lnk - C:\Program Files (x86)\Microsoft Office 15\root\office15\MSOUC.EXE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager\Adquira agora o Security Task Manager.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager\Ajuda.lnk - C:\Program Files (x86)\Security Task Manager\Setup.exe -redirect taskman chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager\Desinstalar.lnk - C:\Program Files (x86)\Security Task Manager\uninstal.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager\Manual.lnk - C:\Program Files (x86)\Security Task Manager\Setup.exe -redirect manual pdf
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager\Security Task Manager.lnk - C:\Program Files (x86)\Security Task Manager\TaskMan.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager\Spy Protector.lnk - C:\Program Files (x86)\Security Task Manager\SpyProtector.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk - C:\Program Files (x86)\Webteh\BSPlayer\bsplayer.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Settings.lnk - C:\Program Files (x86)\Samsung\Settings\sSettings.exe
C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\User Guide.lnk - C:\Program Files (x86)\Samsung\User Guide\RunManual.exe
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_CURRENT_USER\Software\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\pgacfjdigcddmmncljpflgcfpfahebkh deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=182 folders=27 10395644 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Gustavo\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Gustavo\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\PROGRA~3\boost_interprocess" not found

==== EOF on 19/04/2014 at 12:31:07,27 ======================

 Desative temporariamente seu antivírus para evitar conflitos.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Removido! Brigadao power

Ainda devem ter sobrado restos dele. Poste o relatório do Zoek para vermos como está o PC.

Não to conseguindo achar o log dessa operação. sabe qual é o caminho. ou se eu colocar baidu;z e baidu;a já dá para saber se tem vestígios ou não?

O log está neste local:
C:\zoek-results.txt

achei aqui o log..

Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Gustavo on 19/04/2014 at 13:10:59,05.
Microsoft Windows 8.1 Single Language 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Gustavo\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-04-19-153107.log 22023 bytes

==== System Restore Info ======================

19/04/2014 13:13:16 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdApiUtil deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdCameraProtect deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload\bav]
[HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload\bav]
"DllVersion_2.0"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BdApiUtil]
"ImagePath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BdCameraProtect]
"ImagePath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfilter]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfmon]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"InstPath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdApiUtil]
"ImagePath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdCameraProtect]
"ImagePath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"InstPath"=-
[-HKEY_USERS\.DEFAULT\Software\Baidu]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1001\Software\Baidu Security]
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1001\Software\Baidu Security\PC Faster]
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security]
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]
"rcloud"=-
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\PC Faster]
[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Microsoft\Internet Explorer\TypedURLs]
"url11"=-
[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus\\Uninstall.exe"=-
[-HKEY_USERS\S-1-5-18\Software\Baidu]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

==== Deleting Files \ Folders ======================

"C:\Users\Gustavo\AppData\Local\Temp\379F2568-C7CF-11E3-BEB7-50B7C3BF5CFF\Cleaner\baidu_av_4_0_3_57478.ini" not found
"C:\Users\Gustavo\AppData\Local\Temp\CE31A324-C77D-11E3-BEB5-50B7C3BF5CFF\Cleaner\baidu_av_4_0_3_57478.ini" not found
"C:\Users\Gustavo\AppData\Local\Temp\D5EB55D0-C77E-11E3-BEB6-50B7C3BF5CFF\Cleaner\baidu_av_4_0_3_57478.ini" not found
C:\Program Files (x86)\Baidu Security deleted
C:\ProgramData\Baidu Security deleted

==== Folders Found ======================

2014-04-19 14:23:34 2014-04-19 14:23:34 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-04-19 16:13:42 2014-04-19 16:13:43 -------- d---a-w- C:\zoek_backup\C_Program Files (x86)_Baidu Security
2014-04-19 16:13:43 2014-04-08 19:54:11 -------- d---a-w- C:\zoek_backup\C_Program Files (x86)_Baidu Security_Baidu Antivirus
2014-04-19 16:13:43 2014-04-19 16:13:43 -------- d---a-w- C:\zoek_backup\C_ProgramData_Baidu Security
2014-04-19 16:13:43 2014-04-19 16:13:43 -------- d---a-w- C:\zoek_backup\C_Users_All Users_Baidu Security
2014-04-19 16:13:43 2014-04-08 19:54:11 -------- d---a-w- C:\zoek_backup\C_Program Files (x86)_Baidu Security\Baidu Antivirus

==== Files Found ======================


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\DQPQHQ0T\baidu-pc-faster[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 37891
Created time: 2014-04-19 05:58:39
Modified time: 2014-04-19 05:58:41
MD5: AE6AA68A0EB1AEC5A09D34CA6F273B70
SHA1: 10E487331C75604691993B1BCBB5C3C142C7B32F


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\NVFB54S9\baidu-pc-faster-uninstall[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 38350
Created time: 2014-04-19 05:58:40
Modified time: 2014-04-19 05:58:43
MD5: 4388E7C8739FD9AD9699DC11500F15F5
SHA1: FB63786EA3A46E3C8D59A471F97DB7830FD20B8B


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\T5181WX2\t2036-baidu-impede-a-instalacao-do-kaspersky[1].htm ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 33069
Created time: 2014-04-19 14:46:21
Modified time: 2014-04-19 14:46:22
MD5: C27D5114E4D07913A8F6FB57A8893DE5
SHA1: D721DFF971A1189901F32CB38FF2C3539B4B7986


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\T9VBHPD2\t2036-baidu-impede-a-instalacao-do-kaspersky[1].htm ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 69851
Created time: 2014-04-19 16:01:25
Modified time: 2014-04-19 16:01:26
MD5: 8A77A7D47C3205A5295958445C7D963B
SHA1: 56203C95D541A4B820BEE64BA794130A7E98AAAB


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\T9VBHPD2\t2036-baidu-impede-a-instalacao-do-kaspersky[2].htm ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 69850
Created time: 2014-04-19 16:13:27
Modified time: 2014-04-19 16:13:28
MD5: D4F7739338B93946F429D3C060DE1EB6
SHA1: 4E1E8AE2059469BFBFE62572AA4AEA2CCF8A932D


--- C:\Users\Gustavo\AppData\Local\Microsoft\Windows\INetCache\Low\IE\YUOQK2Q1\baidu-pc-faster-virus[1].jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 41455
Created time: 2014-04-19 05:58:39
Modified time: 2014-04-19 05:58:41
MD5: BFE05E13DA90337659CF0303BD562059
SHA1: 5F8C958928796DB8A442D3F98059568E81670033


--- C:\zoek_backup\C_Users_Gustavo_AppData_Local_Microsoft_Windows_INetCache_Low_IE_DQPQHQ0T_baidu-pc-faster[1].jpg.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 37891
Created time: 2014-04-19 16:13:43
Modified time: 2014-04-19 05:58:41
MD5: AE6AA68A0EB1AEC5A09D34CA6F273B70
SHA1: 10E487331C75604691993B1BCBB5C3C142C7B32F


--- C:\zoek_backup\C_Users_Gustavo_AppData_Local_Microsoft_Windows_INetCache_Low_IE_NVFB54S9_baidu-pc-faster-uninstall[1].jpg.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 38350
Created time: 2014-04-19 16:13:44
Modified time: 2014-04-19 05:58:43
MD5: 4388E7C8739FD9AD9699DC11500F15F5
SHA1: FB63786EA3A46E3C8D59A471F97DB7830FD20B8B


--- C:\zoek_backup\C_Users_Gustavo_AppData_Local_Microsoft_Windows_INetCache_Low_IE_YUOQK2Q1_baidu-pc-faster-virus[1].jpg.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 41455
Created time: 2014-04-19 16:13:44
Modified time: 2014-04-19 05:58:41
MD5: BFE05E13DA90337659CF0303BD562059
SHA1: 5F8C958928796DB8A442D3F98059568E81670033


==== Registry Search Results for "Baidu" ======================


[HKEY_LOCAL_MACHINE\SOFTWARE\baidu]

[HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll]

[HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload]

[HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload\bav]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Microsoft\Internet Explorer\TypedURLs]
"url17"="http://www.forumpcbrasil.com/t1999-resolvido-kaspersky-detecta-baidu-antivirus-e-nao-consigo-remove-lo"

==== C:\zoek_backup content ======================

C:\zoek_backup (files=187 folders=32 10544215 bytes)

==== EOF on 19/04/2014 at 13:15:10,04 ======================

 Desative temporariamente seu antivírus para evitar conflitos.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

segue o log

C:\zoek-results2014-04-19-153107.log 22023 bytes
C:\zoek-results2014-04-19-161510.log 11207 bytes

==== System Restore Info ======================

19/04/2014 13:57:36 Zoek.exe System Restore Point Created Succesfully.

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload\bav]
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security]
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Microsoft\Internet Explorer\TypedURLs]
"url17"=-

==== Registry Search Results for "Baidu" ======================


[HKEY_USERS\S-1-5-21-2609998517-976880951-3077279418-1002\Software\Microsoft\Internet Explorer\TypedURLs]
"url16"="http://www.forumpcbrasil.com/t1999-resolvido-kaspersky-detecta-baidu-antivirus-e-nao-consigo-remove-lo"

==== C:\zoek_backup content ======================

C:\zoek_backup (files=187 folders=32 10544215 bytes)

==== EOF on 19/04/2014 at 13:58:29,63 ======================

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

Power

o log do jrt

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Single Language x64
Ran by Gustavo on 19/04/2014 at 14:04:15,82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

ele ficou incompleto poste ele todo, por gentileza.

agora sim

~~~ Registry Keys



~~~ Files



~~~ Folders

Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19/04/2014 at 14:12:06,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

como está o PC após estas limpezas?

Ele tava com dois problemas..

o primeiro dele é que eu não conseguia instalar o kaspersky porque dava conflito com o baidu.. esse conflito acabou

a outra era que ele tava gastando muita memória ram. eu ligava tinha 30% e dava um tempo já tava em 80% só com o browser aberto.. e agora ele tá na faixa de 42%, 37%, logo acho que o baidu também tava consumindo memória ram.

muito obrigado pela ajuda!

  Fico feliz que o problema tenha sido resolvido.

 Só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

 Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

  Foi um prazer ajudar. Conte sempre conosco!

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.