Remoção do Baidu...

Ola Bom dia...li no forum algumas maneiras de remover totalmente esse maldito Baidu, porem nao consegui remover totalmente, pois quando tento instalar o kaspersky anti-virus ele detecta o Baidu.
Tentei usar o AdwCleaner, JRT e nada dessa praga sair.
Se alguem no forum puder me ajudar desde ja agradeco.

segue o resultado do AdwCleaner

# AdwCleaner v3.208 - Relatório criado 16/05/2014 às 11:01:10
# Atualizado 11/05/2014 por Xplode
# Sistema Operacional : Microsoft Windows XP Service Pack 3 (32 bits)
# Usuário : Usuario - SERV2
# Executando de : C:\Documents and Settings\Usuario\Meus documentos\Downloads\adwcleaner_3.208.exe
# Opção : Limpar

***** [ Serviços ] *****

Serviço Deletada : IePluginService
[#] Serviço Deletada : iSafeNetFilter
Serviço Deletada : MgAssistService
Serviço Deletada : Wpm

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\apn
Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\baidu
Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\IePluginService
Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\WPM
Pasta Deletada : C:\Arquivos de programas\AskPartnerNetwork
Pasta Deletada : C:\Arquivos de programas\iSafe
Pasta Deletada : C:\Arquivos de programas\Mobogenie
Pasta Deletada : C:\Arquivos de programas\SupTab
Pasta Deletada : C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Mobogenie
Pasta Deletada : C:\DOCUME~1\Usuario\CONFIG~1\Temp\webget
Pasta Deletada : C:\Documents and Settings\Usuario\Dados de aplicativos\baidu
Pasta Deletada : C:\Documents and Settings\Usuario\Dados de aplicativos\DigitalSites
Pasta Deletada : C:\Documents and Settings\Usuario\Dados de aplicativos\eCyber
Pasta Deletada : C:\Documents and Settings\Usuario\Dados de aplicativos\iSafe
Pasta Deletada : C:\Documents and Settings\Usuario\Dados de aplicativos\SupTab
Pasta Deletada : C:\Documents and Settings\Usuario\Dados de aplicativos\sweet-page
Pasta Deletada : C:\Documents and Settings\Usuario\Dados de aplicativos\Systweak
Pasta Deletada : C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Mobogenie
Pasta Deletada : C:\Documents and Settings\Usuario\Meus documentos\Mobogenie
Arquivo Deletada : C:\WINDOWS\system32\roboot.exe
Arquivo Deletada : C:\Documents and Settings\Usuario\daemonprocess.txt
Arquivo Deletada : C:\Documents and Settings\Usuario\Desktop\Mobogenie.lnk

***** [ Atalhos ] *****


***** [ Registro ] *****

Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKCU\Software\Conduit
Chave Deletedo : HKCU\Software\dsiteproducts
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\systweak
Chave Deletedo : HKLM\Software\Conduit
Chave Deletedo : HKLM\Software\iSafe
Chave Deletedo : HKLM\Software\SupTab
Chave Deletedo : HKLM\Software\supWPM
Chave Deletedo : HKLM\Software\sweet-pageSoftware
Chave Deletedo : HKLM\Software\systweak
Chave Deletedo : HKLM\Software\Wpm
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wpm

***** [ Navegadores ] *****

-\\ Internet Explorer v8.0.6001.18702

Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v

[ Arquivo : C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\preferences ]

Deletedo [Extension] : nchpfiddbhbdnagofhkjlaiaejmkdcla

*************************

AdwCleaner[R0].txt - [4656 octets] - [16/05/2014 11:00:25]
AdwCleaner[S0].txt - [4254 octets] - [16/05/2014 11:01:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4314 octets] ##########

e o do JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Microsoft Windows XP x86
Ran by Usuario on 16/05/2014 at 11:08:40,01
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16/05/2014 at 11:11:06,12
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  Olá Hay.

Desative temporariamente seu antivírus para evitar conflitos.

 Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek.

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

segue o resultado do Zoek


Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Usuario on 16/05/2014 at 13:27:31,07.
Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Usuario\Meus documentos\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

16/05/2014 13:27:59 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Documents and Settings\Usuario\.android deleted
C:\Documents and Settings\Usuario\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Mobogenie.lnk deleted
C:\WINDOWS\system32\config\systemprofile\Dados de aplicativos\isafe deleted
C:\WINDOWS\SET3.tmp deleted
C:\WINDOWS\SET4.tmp deleted
C:\WINDOWS\SET8.tmp deleted

==== Folders Found ======================

2014-05-16 14:01:11 2014-05-16 14:01:11 -------- d-----w- C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Dados de aplicativos\baidu
2014-05-16 14:01:28 2014-05-16 14:01:28 -------- d-----w- C:\AdwCleaner\Quarantine\C\Documents and Settings\Usuario\Dados de aplicativos\baidu
2014-05-16 14:01:28 2014-05-16 14:01:28 -------- d-----w- C:\AdwCleaner\Quarantine\C\Documents and Settings\Usuario\Dados de aplicativos\baidu\Baidu Antivirus
2014-05-05 20:06:49 2014-05-05 20:06:49 -------- d-----w- C:\Documents and Settings\All Users\Dados de aplicativos\Baidu Security
2014-05-05 20:06:16 2014-05-05 20:06:16 -------- d-----w- C:\Documents and Settings\All Users\Documentos\Baidu

==== Files Found ======================


==== Registry Search Results for "Baidu" ======================


[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"="baidubar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"="baidubar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bhbase]
"DisplayName"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bndef]
"DisplayName"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"InstPath"="C:\\Arquivos de programas\\Baidu Security\\Baidu Antivirus"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bhbase]
"DisplayName"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bndef]
"DisplayName"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bprotect]
"InstPath"="C:\\Arquivos de programas\\Baidu Security\\Baidu Antivirus"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase]
"DisplayName"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bndef]
"DisplayName"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"InstPath"="C:\\Arquivos de programas\\Baidu Security\\Baidu Antivirus"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_USERS\.DEFAULT\Software\Baidu]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\PC Faster]

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Microsoft\Search Assistant\ACMru\5603]
"000"="baidu"

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Baidu Antivirus]

[HKEY_USERS\S-1-5-18\Software\Baidu]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.bing.com/search?q={searchTerms}"
"CustomizeSearch"="http://www.bing.com/search?q={searchTerms}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

Nothing found to reset

==== shortcuts on Users Desktops ======================

C:\Documents and Settings\Usuario\Desktop\Bloco de notas.lnk - C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Usuario\Desktop\Google Chrome.lnk - C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Usuario\Desktop\Microsoft Office Word 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
C:\Documents and Settings\Usuario\Desktop\RCKY - SW.lnk - C:\RCKY\RCKY-SW.exe

==== shortcuts on All Users Desktop ======================

C:\Documents and Settings\All Users\Desktop\Argobar Pro.lnk - C:\Arquivos de programas\ARGOX\Argobar Pro\Argobar.exe
C:\Documents and Settings\All Users\Desktop\MGV5.lnk - C:\Arquivos de programas\TOLEDO\MGV5\MGV5.exe
C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8
C:\Documents and Settings\All Users\Desktop\TeamViewer 9.lnk - C:\Arquivos de programas\TeamViewer\Version9\TeamViewer.exe

==== shortcuts in Users Start Menu ======================

C:\Documents and Settings\Default User\Menu Iniciar\Programas\Assistência remota.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Windows Media Player.lnk - C:\Arquivos de programas\Windows Media Player\wmplayer.exe /prefetch:1
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Assistente de compatibilidade de programa.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Bloco de notas.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Prompt de comando.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Sincronizar.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Tour do Windows XP.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Windows Explorer.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Acessibilidade\Gerenciador de utilitários.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Acessibilidade\Lente de aumento.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Acessibilidade\Teclado virtual.lnk -
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Entretenimento\Windows Media Player.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Assistência remota.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Internet Explorer.lnk - C:\Arquivos de programas\Internet Explorer\iexplore.exe
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Outlook Express.lnk - C:\Arquivos de programas\Outlook Express\msimn.exe
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Windows Media Player.lnk - C:\Arquivos de programas\Windows Media Player\wmplayer.exe /prefetch:1
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Assistente de compatibilidade de programa.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Catálogo de endereços.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Prompt de comando.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Sincronizar.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Tour do Windows XP.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Windows Explorer.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Acessibilidade\Gerenciador de utilitários.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Acessibilidade\Lente de aumento.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Acessibilidade\Teclado virtual.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Acessórios\Ferramentas do Sistema\Internet Explorer (Sem Complementos).lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\Google Chrome\Google Chrome.lnk - C:\Documents and Settings\Usuario\Configurações locais\Dados de aplicativos\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\HP\Atualização de software HP.lnk -
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\WinRAR\Ajuda do WinRAR.lnk - C:\Arquivos de programas\WinRAR\WinRAR.chm
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\WinRAR\Manual do Console RAR.lnk - C:\Arquivos de programas\WinRAR\Rar.txt
C:\Documents and Settings\Usuario\Menu Iniciar\Programas\WinRAR\WinRAR.lnk - C:\Arquivos de programas\WinRAR\WinRAR.exe

==== shortcuts in All Users Start Menu ======================

C:\Documents and Settings\All Users\Menu Iniciar\Catálogo do Windows.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Definir acesso e padrões do programa.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Diretivo HP.lnk - C:\Arquivos de programas\HP\Digital Imaging\bin\Hpqdirec.exe
C:\Documents and Settings\All Users\Menu Iniciar\HP Image Zone.lnk - C:\Arquivos de programas\HP\Digital Imaging\bin\hpqthb08.exe
C:\Documents and Settings\All Users\Menu Iniciar\Windows Update.lnk - C:\WINDOWS\system32\wupdmgr.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Registro OCR I.R.I.S..lnk - C:\Arquivos de programas\HP\Digital Imaging\DocProc\regipe.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Windows Messenger.lnk - C:\Arquivos de programas\Messenger\msmsgs.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Windows Movie Maker.lnk - C:\Arquivos de programas\Movie Maker\moviemk.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Calculadora.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Conexão de Área de Trabalho Remota.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Paint.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Scanner and Camera Wizard.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\WordPad.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Acessibilidade\Assistente de acessibilidade.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Assistente de configuração de rede.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Assistente para Configuração de Rede sem Fio.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Assistente para novas conexões.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Conexões de rede.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\HyperTerminal.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Entretenimento\Controle de volume.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Entretenimento\Gravador de som.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Assistente para transferência de arquivos e configurações.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Backup.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Central de Segurança.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Desfragmentador de disco.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Informações sobre o sistema.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Limpeza de disco.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Mapa de caracteres.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Restauração do sistema.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Tarefas agendadas.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\ARGOX Applications\Argobar Pro.lnk - C:\Arquivos de programas\ARGOX\Argobar Pro\Argobar.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Assistentes do Microsoft .NET Framework 1.1.lnk - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Configuração do Microsoft .NET Framework 1.1.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Desempenho.lnk - C:\WINDOWS\system32\perfmon.msc /s
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Diretiva de segurança local.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Fontes de dados (ODBC).lnk - C:\WINDOWS\system32\odbcad32.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Gerenciamento do computador.lnk - C:\WINDOWS\system32\compmgmt.msc /s
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Microsoft .NET Framework 1.1 Configuration.lnk - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.msc
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Microsoft .NET Framework 1.1 Wizards.lnk - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Serviços de componente.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Serviços.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Visualizar eventos.lnk - C:\WINDOWS\system32\eventvwr.msc /s
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Foxit Reader\Foxit Reader.lnk - C:\Arquivos de programas\Foxit Software\Foxit Reader\Foxit Reader.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Foxit Reader\Uninstall.lnk - C:\Arquivos de programas\Foxit Software\Foxit Reader\Uninstall.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\Dignósticos do sistema.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\Diretivo HP.lnk - C:\Arquivos de programas\HP\Digital Imaging\bin\Hpqdirec.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\HP Diagnostic Assistant.lnk - C:\Arquivos de programas\HP\Diagnostic Assistant\bin\hprbevwr.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\Image Zone .lnk - C:\Arquivos de programas\HP\Digital Imaging\bin\hpqthb08.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\Impressão de tela HP.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\Tour do HP Image Zone.lnk - C:\Arquivos de programas\HP\Digital Imaging\Help\cuetour\START.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\Visualizador de documentos HP.lnk - C:\Arquivos de programas\HP\Digital Imaging\bin\hpqgalry.exe -Document
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\OfficeJet All-In-One 4200 series\Ajuda.lnk - C:\Arquivos de programas\HP\Digital Imaging\Help\aio08.chm
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\OfficeJet All-In-One 4200 series\Desinstalar.lnk - C:\Arquivos de programas\HP\Digital Imaging\{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe -datfile hposcr04.dat -forcereboot -nocopytotemp
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\OfficeJet All-In-One 4200 series\Leiame.lnk - C:\Arquivos de programas\HP\Digital Imaging\Help\Readme.html
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\OfficeJet All-In-One 4200 series\Registro do produto.lnk - C:\Arquivos de programas\HP\Digital Imaging\bin\hpqwrg.exe "officejet 4200 series"
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\OfficeJet All-In-One 4200 series\Site de suporte a produtos.lnk - C:\Arquivos de programas\HP\Digital Imaging\hp officejet 4200 series\help\HP Product Support Website.url
C:\Documents and Settings\All Users\Menu Iniciar\Programas\HP\OfficeJet All-In-One 4200 series\Tour.lnk - C:\Arquivos de programas\HP\Digital Imaging\hp officejet 4200 series\tour\START.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Inicializar\HP Digital Imaging Monitor.lnk - C:\Arquivos de programas\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Inicializar\Inicialização rápida do HP Image Zone.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Inicializar\Monitor dos programas MGV5.lnk - C:\Arquivos de programas\TOLEDO\MGV5\MGVMONIT.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\About Java.lnk - C:\Arquivos de programas\Java\jre7\bin\javacpl.exe -tab about
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\Check For Updates.lnk - C:\Arquivos de programas\Java\jre7\bin\javacpl.exe -tab update
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\Configure Java.lnk - C:\Arquivos de programas\Java\jre7\bin\javacpl.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\Get Help.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\Visit Java.com.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Campo minado.lnk - C:\WINDOWS\system32\winmine.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Copas para Internet.lnk - C:\Arquivos de programas\MSN Gaming Zone\Windows\hrtzzm.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Copas.lnk - C:\WINDOWS\system32\mshearts.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Damas para Internet.lnk - C:\Arquivos de programas\MSN Gaming Zone\Windows\chkrzm.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Espadas para Internet.lnk - C:\Arquivos de programas\MSN Gaming Zone\Windows\shvlzm.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Freecell.lnk - C:\WINDOWS\system32\freecell.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Gamão para Internet.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Paciência Spider.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Paciência.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Pinball.lnk - C:\Arquivos de programas\Windows NT\Pinball\PINBALL.EXE
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Reversi para Internet.lnk - C:\Arquivos de programas\MSN Gaming Zone\Windows\Rvsezm.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office Access 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office Excel 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office Groove 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\GrooveIcon.ico
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office InfoPath 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office OneNote 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office Outlook 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office PowerPoint 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office Publisher 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Ferramentas do Microsoft Office\Certificado Digital para Projetos do VBA.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Ferramentas do Microsoft Office\Diagnóstico do Microsoft Office.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Ferramentas do Microsoft Office\Microsoft Media Gallery.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Ferramentas do Microsoft Office\Microsoft Office 2007 Configurações de Idioma.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Ferramentas do Microsoft Office\Microsoft Office Picture Manager.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Nero Home.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero Home\NeroHome.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Nero ProductSetup.lnk - C:\Arquivos de programas\Arquivos comuns\Ahead\Nero Web\SetupX.exe -ScParameter=8 MODE="update"
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Nero StartSmart.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Compartilhar\Nero MediaHome.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero MediaHome\NeroMediaHome.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\dados\Nero BackItUp.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero BackItUp\BackItUp.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\dados\Nero Burning ROM.lnk - C:\Arquivos de programas\Nero\Nero 7\Core\nero.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\dados\Nero Express.lnk - C:\Arquivos de programas\Nero\Nero 7\Core\nero.exe -ScParameter=8 /w
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Etiquetas\Nero CoverDesigner.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero CoverDesigner\CoverDes.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Ferramentas\Nero BurnRights.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero Toolkit\NeroBurnRights.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Ferramentas\Nero CD-DVD Speed.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero Toolkit\CDSpeed.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Ferramentas\Nero DriveSpeed.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero Toolkit\DriveSpeed.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Ferramentas\Nero ImageDrive.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero ImageDrive\ImageDrive.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Ferramentas\Nero InfoTool.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero Toolkit\InfoTool.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Ferramentas\Nero Scout.lnk - C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroScoutOptions.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Foto e Vídeo\Nero PhotoSnap Viewer.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Foto e Vídeo\Nero PhotoSnap.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Foto e Vídeo\Nero Recode.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Foto e Vídeo\Nero Vision.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero Recode\NeroRecode_ptb.chm
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero Adobe Premiere Plug-In [Inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero BackItUp [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero BurnRights [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero CD-DVD Speed [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero CoverDesigner [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero Express [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero Home [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero MediaHome [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero Mobile [Manual em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero PhotoSnap [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero ShowTime [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero SoundTrax [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero StartSmart [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero Vision [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Manuais\Nero WaveEditor [Ajuda em inglês].lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Tocar\Nero Mobile.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero Mobile\SetupNeroMobile.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\Tocar\Nero ShowTime.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero ShowTime\ShowTime.exe -ScParameter=8
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\áudio\Nero Burning ROM.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\áudio\Nero Express.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\áudio\Nero SoundTrax.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Nero 7 Ultra Edition\áudio\Nero WaveEditor.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\TeamViewer 9\License.lnk - C:\Arquivos de programas\TeamViewer\Version9\License.txt
C:\Documents and Settings\All Users\Menu Iniciar\Programas\TeamViewer 9\TeamViewer 9.lnk - C:\Arquivos de programas\TeamViewer\Version9\TeamViewer.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\TeamViewer 9\Uninstall TeamViewer 9.lnk - C:\Arquivos de programas\TeamViewer\Version9\uninstall.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Assistente de Restauração de Backups Toledo.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Assistente de Suporte Técnico Toledo.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Backup.lnk - C:\Arquivos de programas\TOLEDO\MGV5\Bck.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Configuração do Transceptor WEB.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Controle de Acesso à Rede Toledo.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Desinstalar o MGV5.lnk - C:\Arquivos de programas\TOLEDO\MGV5\UNWISE.EXE
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\MExpress.lnk - C:\Arquivos de programas\TOLEDO\MGV5\MExpress.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Módulo Gerenciador de Vendas 5.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Servidor TCPIP Toledo.lnk - C:\Arquivos de programas\TOLEDO\MGV5\TCPIPTOL.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\SETREDE.lnk - C:\Arquivos de programas\TOLEDO\MGV5\SetRede.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Ajuda\Ajuda do MGV5 - Versão HTML.lnk -
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Ajuda\Ajuda do MGV5.lnk - C:\Arquivos de programas\TOLEDO\MGV5\Help\MGV5.HLP
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Toledo do Brasil\MGV5\Gerenciador WEB\Gerenciador Web.lnk - C:\Arquivos de programas\TOLEDO\MGV5\CONCWEB.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\WinRAR\Ajuda do WinRAR.lnk - C:\Arquivos de programas\WinRAR\WinRAR.chm
C:\Documents and Settings\All Users\Menu Iniciar\Programas\WinRAR\Manual do Console RAR.lnk - C:\Arquivos de programas\WinRAR\Rar.txt
C:\Documents and Settings\All Users\Menu Iniciar\Programas\WinRAR\WinRAR.lnk - C:\Arquivos de programas\WinRAR\WinRAR.exe

==== shortcuts in Quick Launch ======================

C:\Documents and Settings\Usuario\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Iniciar o navegador Internet Explorer.lnk - C:\Arquivos de programas\Internet Explorer\iexplore.exe
C:\Documents and Settings\Usuario\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Arquivos de programas\Windows Media Player\wmplayer.exe /prefetch:1

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Empty IE Cache ======================

C:\Documents and Settings\Default User\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Configurações locais\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\Usuario\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=8 folders=10 2347112 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\Usuario\CONFIG~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== EOF on 16/05/2014 at 13:33:04,03 ======================

Desative temporariamente seu antivírus para evitar conflitos.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek.

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Meu pc nao esta com antivirus no momento, tive de formatar e esqueci de instalar quando voltei a usa-lo, algo em torno de 2 dias e a praga do Baidu ja instalou sozinho.



Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Usuario on 16/05/2014 at 18:29:56,73.
Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Usuario\Meus documentos\Downloads\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-05-16-163304.log 39489 bytes

==== System Restore Info ======================

16/05/2014 18:30:15 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfilter deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfmon deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bhbase deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsEx deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bndef deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bndef deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bprotect deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bprotect]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"InstPath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
[-HKEY_USERS\.DEFAULT\Software\Baidu]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[-HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security]
[-HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]
"rcloud"=-
[-HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\PC Faster]
[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Microsoft\Search Assistant\ACMru\5603]
"000"=-
[-HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Baidu Antivirus]
[-HKEY_USERS\S-1-5-18\Software\Baidu]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

==== Deleting Files \ Folders ======================

C:\Documents and Settings\All Users\Dados de aplicativos\Baidu Security deleted
C:\Documents and Settings\All Users\Documentos\Baidu deleted

==== Folders Found ======================

2014-05-16 14:01:11 2014-05-16 14:01:11 -------- d-----w- C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Dados de aplicativos\baidu
2014-05-16 14:01:28 2014-05-16 14:01:28 -------- d-----w- C:\AdwCleaner\Quarantine\C\Documents and Settings\Usuario\Dados de aplicativos\baidu
2014-05-16 14:01:28 2014-05-16 14:01:28 -------- d-----w- C:\AdwCleaner\Quarantine\C\Documents and Settings\Usuario\Dados de aplicativos\baidu\Baidu Antivirus
2014-05-16 21:30:53 2014-05-16 21:30:53 -------- d---a-w- C:\zoek_backup\C_Documents and Settings_All Users_Dados de aplicativos_Baidu Security
2014-05-16 21:30:53 2014-05-16 21:30:53 -------- d---a-w- C:\zoek_backup\C_Documents and Settings_All Users_Documentos_Baidu

==== Files Found ======================


==== Registry Search Results for "Baidu" ======================


[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-21-1390067357-484763869-1801674531-1003\Software\Baidu Security\Antivirus\web]

==== C:\zoek_backup content ======================

C:\zoek_backup (files=10 folders=14 2362051 bytes)

==== EOF on 16/05/2014 at 18:31:26,25 ======================

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei.

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

TÓPICO ARQUIVADO

Como o autor não respondeu por mais de 15 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.