Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

por caegama Sex 30 maio 2014, 09:45

Olá a todos do Forum. Estou exatamente com o mesmo problema do amigo ahgramarin. Não consigo instalar o Kaspersky pure 3.0 por causa do Baidu antivirus. Já fiz a desinstalação dele pelos métodos normais e nada, o Kaspersky continua acusando a existência do Baidu. Achei nesses dias o post com o título acima e tentei as soluções que o amigo PowerMax aconselhou para o ahgramarin. Não funcionou, mas entendo que os casos são diferentes pq são máquinas diferentes, com softwares preexistentes diferentes, com configurações diferentes, então pode ser que o procedimento seja um pouco diferente. Mas pelo que li o PowerMax resolveu o problema do ahgramarin. Assim, peço ajuda do PowerMax e dos amigos do Forum para me ajudar (e a todos os outros que estão com o mesmo problema) a desinstalar essa "praga" que "gruda" de um jeito que só especialistas bastante experientes conseguem tirar. Desde já agradeço a ajuda. Um abraço a todos!

P.S. Estou usando Win7-Ultimate de 64 bits.

por **Danii** Sex 30 maio 2014, 09:48

baidu - Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema 648673379

Olá . Seja bem vindo ao Fórum PC Brasil.

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]/

baidu - Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema 772309

baidu - Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema 772309

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

baidu - Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema 772309

Se você já possui um relatório atualizado do AdwCleaner poste por favor.

por caegama Sex 30 maio 2014, 09:54

Ok, aqui vai:

# AdwCleaner v3.211 - Relatório criado 30/05/2014 às 09:51:09
# Atualizado 26/05/2014 por Xplode
# Sistema Operacional : Windows 7 Ultimate Service Pack 1 (64 bits)
# Usuário : Administrador - DESKTOP-PC
# Executando de : C:\Users\Administrador\Downloads\AdwCleaner.exe
# Opção : Examinar

***** [ Serviços ] *****

***** [ Arquivos / Pastas ] *****

***** [ Atalhos ] *****

***** [ Registro ] *****

***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.17041

-\\ Mozilla Firefox v26.0 (en-US)

[ Arquivo : C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\hf4xnavt.default\prefs.js ]

-\\ Google Chrome v31.0.1650.57

[ Arquivo : C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [31782 octets] - [29/05/2014 11:18:25]
AdwCleaner[R1].txt - [1070 octets] - [29/05/2014 11:33:27]
AdwCleaner[R2].txt - [1131 octets] - [29/05/2014 14:41:36]
AdwCleaner[R3].txt - [991 octets] - [30/05/2014 09:51:09]
AdwCleaner[S0].txt - [27826 octets] - [29/05/2014 11:24:36]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [1111 octets] ##########

por **Danii** Sex 30 maio 2014, 09:57

Você postou o relatório de examinação.
Poste o relatório de limpeza por favor.

baidu - Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema 772309

C:\AdwCleaner\AdwCleaner[S0].txt

por caegama Sex 30 maio 2014, 10:00

Ok Danii, aqui vai...

# AdwCleaner v3.211 - Relatório criado 30/05/2014 às 09:57:53
# Atualizado 26/05/2014 por Xplode
# Sistema Operacional : Windows 7 Ultimate Service Pack 1 (64 bits)
# Usuário : Administrador - DESKTOP-PC
# Executando de : C:\Users\Administrador\Downloads\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

***** [ Arquivos / Pastas ] *****

***** [ Atalhos ] *****

***** [ Registro ] *****

***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.17041

-\\ Mozilla Firefox v26.0 (en-US)

[ Arquivo : C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\hf4xnavt.default\prefs.js ]

-\\ Google Chrome v32.0.1700.72

[ Arquivo : C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [31782 octets] - [29/05/2014 11:18:25]
AdwCleaner[R1].txt - [1070 octets] - [29/05/2014 11:33:27]
AdwCleaner[R2].txt - [1131 octets] - [29/05/2014 14:41:36]
AdwCleaner[R3].txt - [1191 octets] - [30/05/2014 09:51:09]
AdwCleaner[S0].txt - [27826 octets] - [29/05/2014 11:24:36]
AdwCleaner[S1].txt - [1110 octets] - [30/05/2014 09:57:53]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1170 octets] ##########

por **Danii** Sex 30 maio 2014, 10:04

Desative temporariamente seu antivírus para evitar conflitos.

*Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek.

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

por caegama Sex 30 maio 2014, 10:31

Danii, parte 1:

Zoek.exe v5.0.0.0 Updated 22-05-2014
Tool run by Administrador on 30/05/2014 at 10:06:11,82.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Administrador\Downloads\zoek (2).exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-05-29-145158.log 27584 bytes

==== System Restore Info ======================

30/05/2014 10:10:32 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Microsoft\Internet Explorer\SearchScopes\{B5945AF4-57E2-48CB-A531-0548E620C0AB} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Approved Extensions\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Approved Extensions\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\ADMINI~2\AppData\Roaming\Mozilla\FireFox\Profiles\hf4xnavt.default\prefs.js:
user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
user_pref("browser.search.defaultenginename", "Google");

Added to C:\Users\ADMINI~2\AppData\Roaming\Mozilla\FireFox\Profiles\hf4xnavt.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\ADMINI~2\AppData\Roaming\Mozilla\FireFox\Profiles\hf4xnavt.default

user.js not found
---- Lines adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154 removed from prefs.js ----
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.active", true);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.addressbar", "NA");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.addressbarenhanced", "");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.asyncdb.was_copied", "true");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.asyncdb_dbWasSet", true);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.asyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.asyncinternaldb.was_copied", "true");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.asyncinternaldb_dbWasSet", true);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.asyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.backgroundver", Cool

;
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.certdomaininstaller", "");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.changeprevious", false);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.cookie.InstallationTime.expiration", "Fri Feb 01
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.cookie.InstallationTime.value", "1390483010");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.description", "Turn YouTube videos to High Defin
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.domain", "");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.enablesearch", false);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.homepage", "");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.iframe", false);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.InstallationThankYouPage", false);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.InstallationTime", 1390483010);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb._country_code_.expiration", "Fri Feb
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb._country_code_.value", "%22BR%22");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.installer.expiration", "Fri Feb 01 20
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.installer.value", "%7B%22InstallerIde
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.InstallerIdentifiers.expiration", "Fr
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.InstallerIdentifiers.value", "%7B%22i
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.InstallerParamsCache.expiration", "Fr
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.InstallerParamsCache.value", "%7B%22s
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.InstallerUserIdentifiersCache.expirat
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.InstallerUserIdentifiersCache.value",
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.monetization_plugin_bundledUrls.expir
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.monetization_plugin_bundledUrls.value
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.monetization_plugin_bundledWithHash.e
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.monetization_plugin_bundledWithHash.v
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.monetization_plugin_notBundledArr_.ex
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.monetization_plugin_notBundledArr_.va
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_appVer.expiration", "Fri Fe
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_appVer.value", "175");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_lastVersion.expiration", "F
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_meta.expiration", "Fri Feb
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_queue.expiration", "Fri Feb
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_remote_resources.expiration
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.internaldb.Resources_remote_resources.value", "%
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.lastDailyReport", "1396920742495");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.lastUpdate", "1400440490269");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.manifesturl", "");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.name", "Plus-HD-1.7");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.newtab", "");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.opensearch", "");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plu
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.pluginsversion", 140);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.publisher", "Plus HD");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.searchstatus", 0);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.setnewtab", false);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.thankyou", "");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.updateinterval", 360);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.32154.ver", 175);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.apps", "32154");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.bic", "143bf3ef121f9e8d415cf116285888e5");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.cid", 32154);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.FilesValidatorDueTime", "1396920883027");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.firstrun", false);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.hadappinstalled", true);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.installationdate", 1390483010);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.modetype", "production");
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.reportInstall", true);
user_pref("extensions.adcf3d94054754c1f934773a47512ee998520e31efc6148c8ae3109d4d65bc369com32154.statsDailyCounter", Cool

;
---- Lines af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920 removed from prefs.js ----
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.active", true);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.addressbar", "NA");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.addressbarenhanced", "");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.asyncdb.was_copied", "true");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.asyncdb_dbWasSet", true);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.asyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.asyncinternaldb.was_copied", "true");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.asyncinternaldb_dbWasSet", true);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.asyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.backgroundver", 1);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.certdomaininstaller", "");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.changeprevious", false);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.iframe-exists.expiration", "Fri Feb 01 20
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.iframe-exists.value", "true");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.InstallationTime.expiration", "Fri Feb 01
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.InstallationTime.value", "%221394027341%2
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.InstallerParams.expiration", "Fri Feb 01
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.InstallerParams.value", "%7B%22source_id%
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.jw_token.expiration", "Fri Feb 01 2030 00
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.jw_token.value", "%225de55926-ed4f-8b68-3
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.load_balancer.expiration", "Tue Apr 08 20
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.load_balancer.value", "%22%7B%20%5C%22Sta
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.previous_page.expiration", "Fri Feb 01 20
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.previous_page.value", "%22https%3A//www.y
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.user_id.expiration", "Fri Feb 01 2030 00:
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.cookie.user_id.value", "%22143bf3ef121f9e8d415cf
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.description", "HQ Videos is an add-on for your I
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.domain", "");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.enablesearch", false);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.homepage", "");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.iframe", false);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.InstallationThankYouPage", true);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.InstallationTime", 1394027341);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.__defualt_browser__.expiration", "Fri
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.__defualt_browser__.value", "%22ch%22
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.installer.expiration", "Fri Feb 01 20
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.installer.value", "%7B%22InstallerIde
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.InstallerIdentifiers.expiration", "Fr
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.InstallerIdentifiers.value", "%7B%22i
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.InstallerParams.expiration", "Fri Feb
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.InstallerParams.value", "%7B%22source
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.InstallerParamsCache.expiration", "Fr
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.InstallerParamsCache.value", "%7B%22s
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.InstallerUserIdentifiersCache.expirat
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.InstallerUserIdentifiersCache.value",
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.monetization_plugin_bundledUrls.expir
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.monetization_plugin_bundledUrls.value
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.monetization_plugin_bundledWithHash.e
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.monetization_plugin_bundledWithHash.v
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.monetization_plugin_notBundledArr_.ex
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.monetization_plugin_notBundledArr_.va
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_appVer.expiration", "Fri Fe
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_appVer.value", "31");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_lastVersion.expiration", "F
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_meta.expiration", "Fri Feb
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_nextCheck.expiration", "Tue
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_queue.expiration", "Fri Feb
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.lastDailyReport", "1396920743017");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.lastUpdate", "1400440494891");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.manifesturl", "");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.name", "HQ-Video-Pro-1.4");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.newtab", "");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.opensearch", "");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.pluginsurl", "http://js.clientdemocloud.com/plug
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.pluginsversion", 28);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.publisher", "HQ-Video");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.searchstatus", 0);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.setnewtab", false);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.thankyou", "");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.updateinterval", 360);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.52920.ver", 31);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.apps", "52920");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.bic", "143bf3ef121f9e8d415cf116285888e5");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.cid", 52920);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.FilesValidatorDueTime", "1396920883091");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.firstrun", false);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.hadappinstalled", true);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.installationdate", 1396920739);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.modetype", "production");
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.reportInstall", true);
user_pref("extensions.af6b78e0508194914a9b153baf8fa3cd85f1a7616ab874cb2b56e1218d848ce49com52920.statsDailyCounter", 1);
---- FireFox user.js and prefs.js backups ----

prefs_052014_1016_.backup

por caegama Sex 30 maio 2014, 10:31

Parte 2:
==== Deleting Files \ Folders ======================

C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} deleted
C:\Users\Administrador\.android deleted
C:\PROGRA~2\GUMA9A.tmp deleted
C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted
C:\PROGRA~2\Wise\Wise Registry Cleaner deleted
C:\found.000 deleted
C:\found.003 deleted
C:\found.004 deleted
C:\Users\Administrador\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk deleted
C:\Users\Administrador\AppData\Roaming\burnaware.ini deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\systweak deleted
C:\PROGRA~3\FileSplitUpLoad.dll deleted
C:\PROGRA~3\ProductData deleted
C:\PROGRA~3\InstallMate deleted
C:\Users\Administrador\AppData\Local\cache deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\fst_br_52 deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx deleted
C:\Users\Administrador\Downloads\iLividSetup-r484-n-bf.exe deleted
C:\Users\Administrador\Downloads\DownloadManagerSetup.exe deleted
C:\Users\Administrador\Downloads\SoftonicDownloader_para_kaspersky-anti-virus-remover.exe deleted
C:\Users\Administrador\Downloads\SoftonicDownloader_para_regcleaner.exe deleted
C:\Users\Administrador\Downloads\SoftonicDownloader_para_vdownloader.exe deleted
C:\Users\Administrador\AppData\LocalLow\ADSRemoval deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\searchresultstb deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\ilividtoolbargaw deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Application Updater deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Smartbar deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\uTorrentBar_PT deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\PriceGong deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Conduit deleted
C:\Windows\wininit.ini deleted
C:\Windows\Syswow64\InstallUtil.InstallLog deleted
C:\Users\ADMINI~2\AppData\Roaming\Mozilla\FireFox\Profiles\hf4xnavt.default\searchplugins\Reimage Search.xml deleted
C:\Users\Administrador\Desktop\Continue vDownloader Installation.lnk deleted
C:\Users\Administrador\Desktop\Moo0 YouTube Downloader 1.07.lnk deleted
C:\Users\Administrador\AppData\Roaming\unins000.exe deleted
"C:\PROGRA~3\Package Cache" deleted

==== Folders Found ======================

2014-05-29 14:24:37 2014-05-29 14:24:37 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-05-29 14:24:59 2014-05-29 14:24:59 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Administrador\AppData\Roaming\baidu
2014-05-29 14:24:59 2014-05-29 14:24:59 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Administrador\AppData\Roaming\baidu\Baidu Antivirus
2014-05-29 14:25:01 2014-05-29 14:25:01 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Public\Documents\baidu
2013-07-15 23:36:02 2014-05-02 12:36:04 -------- d-----w- C:\ProgramData\Baidu Security
2013-12-31 15:25:44 2013-12-31 15:25:44 -------- d-----w- C:\Users\Administrador\AppData\Roaming\Baidu Security
2014-01-01 14:01:04 2014-01-01 14:01:04 -------- d-----w- C:\Users\Administrador\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
2014-01-01 14:01:23 2014-01-01 14:01:23 -------- d-----w- C:\Users\Administrador\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
2013-03-14 04:08:36 2013-11-20 16:49:26 -------- d-----w- C:\Users\Administrador\caegama\AppData\Roaming\baidu
2013-07-15 23:33:38 2013-07-15 23:33:38 -------- d-----w- C:\Users\Administrador\caegama\AppData\Roaming\Baidu Security
2013-07-15 23:35:38 2013-12-31 17:19:18 -------- d-----w- C:\Users\Administrador\caegama\AppData\Roaming\baidu\Baidu Antivirus
2013-07-16 02:39:59 2013-07-16 02:39:59 -------- d-----w- C:\Users\Administrador\caegama\AppData\Roaming\Baidu Security\PC Faster\3.4.0.17\Uninstall\Baidu PC Faster Uninstall
2013-07-16 02:39:59 2013-07-16 02:39:59 -------- d-----w- C:\Users\Administrador\caegama\AppData\Roaming\Baidu Security\PC Faster\3.4.0.17\Uninstall\Baidu PC Faster Uninstall HK
2013-12-30 01:08:54 2013-12-30 01:08:54 -------- d-----w- C:\Users\Administrador\caegama\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
2013-12-30 01:08:54 2013-12-30 01:08:54 -------- d-----w- C:\Users\Administrador\caegama\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
2013-12-31 03:27:34 2013-12-31 03:27:38 -------- d-----w- C:\Users\Administrador\caegama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Baidu PC Faster
2013-07-15 23:36:02 2014-05-02 12:36:04 -------- d-----w- C:\Users\All Users\Baidu Security
2013-12-30 00:46:08 2013-12-31 12:50:33 -------- d-----w- C:\Users\Public\Documents\Baidu Security

==== Files Found ======================

--- C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\baidu_ff.xml.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 3958
Created time: 2012-11-12 17:26:02
Modified time: 2012-11-12 17:26:02
MD5: DA0EC54C773C9ABF2378361584814AA8
SHA1: 72D798185B1DE87A6FDCE3BCF289CC9A0D27554A

--- C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\baidu_ie.xml.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 416
Created time: 2012-11-12 17:26:02
Modified time: 2012-11-12 17:26:02
MD5: A156DEAAAAE97C4C17CA47482F90B643
SHA1: 19E8D32C68862C2B7D64DCD26C31545869B7C6E4

--- C:\AdwCleaner\Quarantine\C\Program Files (x86)\IObit Apps Toolbar\Res\search_baidu.gif.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 614
Created time: 2012-11-29 17:40:48
Modified time: 2012-11-29 17:40:48
MD5: 35413285571F6052D773CFE59C1DF7E9
SHA1: AC8CE8A7E602A266F3CD8B4C503EE8478501D152

--- C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\Safari_baidu_script.js ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 1556
Created time: 2013-12-23 22:56:30
Modified time: 2013-04-22 14:30:56
MD5: 670B367C3485AB4FA0046B9D1DDFF1B7
SHA1: DD0C159627F22F3BF83A8632A357EE62DE132EEC

--- C:\Program Files (x86)\JDownloader\jd\plugins\decrypter\PanBaiduCom.class ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 7932
Created time: 2013-03-15 02:21:11
Modified time: 2013-03-15 02:21:11
MD5: E3C09A65B44D4840E9F5F704E5BC984C
SHA1: E238DB8B43ACE9DA5BBD005729FE653E5465E213

--- C:\Program Files (x86)\JDownloader\jd\plugins\hoster\PanBaiduCom.class ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 5539
Created time: 2013-03-18 00:32:15
Modified time: 2013-03-18 00:32:15
MD5: A134A9386695398E333055CBF900976B
SHA1: 4C45B9C357667DEABDF0224EFC0C68E2216D513F

--- C:\Users\Administrador\caegama\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.8.4_0\css\quickSearch\img\baidu.png ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 2201
Created time: 2014-01-08 20:39:29
Modified time: 2014-01-08 20:39:29
MD5: 534EAB62EBF77D52923A117533C6D338
SHA1: 948CCC9B02BF75EB865FEE8B3107D963512AF96F

--- C:\Users\Administrador\caegama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Baidu PC Faster\Baidu PC Faster.lnk ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 1413
Created time: 2013-12-31 03:27:34
Modified time: 2013-12-31 03:27:35
MD5: 8FC825DAB1673CF0CF8E0301EB4EB50A
SHA1: 3F168DEAD33209F0F55CDD3B1D7BE318A515F7E2

==== Registry Search Results for "Baidu" ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
"DisplayName"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"InstPath"="C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
"DisplayName"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"InstPath"="C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
"DisplayName"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"InstPath"="C:\\Program Files (x86)\\Baidu Security\\Baidu Antivirus"

[HKEY_USERS\.DEFAULT\Software\Baidu]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

[HKEY_USERS\.DEFAULT\Software\Baidu Security]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\010214-27970-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\010214-29437-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\010214-30576-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\010214-35958-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\032814-22464-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\033014-50840-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\040814-49109-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Install]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\alluser]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\curuser]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu]
"Advanced SystemCare Ultimate_BaiDuSafe_RegType"=dword:00000002

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm64]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Statistic]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\UUReport]

[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\Setup]

[HKEY_USERS\S-1-5-18\Software\Baidu]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

[HKEY_USERS\S-1-5-18\Software\Baidu Security]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\010214-27970-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\010214-29437-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\010214-30576-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\010214-35958-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\032814-22464-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\033014-50840-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\040814-49109-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"support@vdownloader.com"="C:\Program Files\VDownloader\Addons\FireFox" [18/04/2014 21:43]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{87F8774F-B485-47E2-A755-A40A8A5E886C}"="C:\Users\Administrador\AppData\Local\GAS Tecnologia\GBBD\bb\xpi" [08/04/2014 21:28]

==== Firefox Extensions ======================

ProfilePath: C:\Users\ADMINI~2\AppData\Roaming\Mozilla\FireFox\Profiles\hf4xnavt.default
- Advanced SystemCare Surfing Protection - C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\hf4xnavt.default\extensions\ascsurfingprotection@iobit.com
- Undetermined - C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\hf4xnavt.default\extensions\quick_start@gmail.com
- Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
- Undetermined - C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\hf4xnavt.default\extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com
- Undetermined - C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\hf4xnavt.default\extensions\f6b78e05-0819-4914-a9b1-53baf8fa3cd8@5f1a7616-ab87-4cb2-b56e-1218d848ce49.com
- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\hf4xnavt.default
A58DE0A570148AF5FF3512B2A340D09F - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll - Shockwave Flash
7B32EC68B2D0EAE4C1333EEB53199571 - C:\Users\Administrador\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll - Módulo de Proteção - Banco do Brasil
6A03609A79D8C5ACECB66EED53F3A0AB - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll - RealNetworks(tm) Chrome Background Extension Plug-In (32-bit)
70677064555D2EB816249ABB0150951F - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll - RealPlayer(tm) HTML5VideoShim Plug-In (32-bit)
66640A55AEFF3819C94E0A8D40D7E0AD - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll - Shockwave for Director / Shockwave for Director
02330237B960CA470FBC068FD8936EBA - C:\Program Files\VDownloader\Addons\npVDownloader.dll - VDownloader
87132527E2256CF6683A18C4EB34DD3B - C:\Windows\system32\Wat\npWatWeb.dll - Windows Activation Technologies
4DC48F347E212C32BACCEC6FE3532300 - C:\Users\Administrador\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll - Módulo de Proteção - Banco do Brasil

por caegama Sex 30 maio 2014, 10:33

Parte 3 (final):

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
dchlnpcodkpfdpacogkljefecpegganj - _path[]
hpljfflibaokjcndmchkfjalpjjblioc - C:\Users\caegama\AppData\Local\MyMovieMagnet.crx[]
jagncdcchgajhfhijbbhecadmaiegcmh - _path[]
jfmjfhklogoienhpfnppmbcbjfjnkonk - _path[]
kcendgajlhoaiiccpijilcpmgphfflnj - C:\Users\caegama\AppData\Local\newhb.crx[]
lladpgmmlijbmhfknhgkenkhikoaapmj - C:\Users\caegama\AppData\Local\RealSummerSale.crx[]
mdebcffgnijbblbinknkbefciofebcda - C:\Users\caegama\AppData\Local\CRE\mdebcffgnijbblbinknkbefciofebcda.crx[]
nfengeggddojhakldhlpjdlddgkkjkdd - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePluginFor6.crx[]
pjldcfjmnllhmgjclecdnfampinooman - _path[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
pgacfjdigcddmmncljpflgcfpfahebkh - C:\Users\Administrador\AppData\Local\GAS Tecnologia\GBBD\bb\sf.crx[26/02/2014 15:09]

Google Wallet - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
GBBD Banco do Brasil - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgacfjdigcddmmncljpflgcfpfahebkh
Search-Gol Toolbar - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac
Google Docs - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Extended Protection - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Speed Analysis - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfcbmgbfdbijmjgjihagbomfbjfjmgon
Plus-HD-1.7 - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn
Google Search - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Kaspersky URL Advisor - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj
PassWidget - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdagnimlohkpamglloopgfnoiijpmoj
My Movie Magnet - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc
Virtual Keyboard - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh
Foxtab Speed Dial - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj
Real Summer Sale - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj
uTorrentBar_PT - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdebcffgnijbblbinknkbefciofebcda
Google Wallet - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
DivX Plus Web Player HTML5 \u003Cvideo\u003E - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm
Gmail - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
Anti-Banner - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman
Lightning speedDial - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkndmigholgfjlniaohblojbhgjbkakn

==== Chrome Fix ======================

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpljfflibaokjcndmchkfjalpjjblioc deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdebcffgnijbblbinknkbefciofebcda deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfcbmgbfdbijmjgjihagbomfbjfjmgon deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkndmigholgfjlniaohblojbhgjbkakn deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pkndmigholgfjlniaohblojbhgjbkakn_0.localstorage deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cokhadepfhgbjhnngnmkkbcclhgjelkn_0.localstorage deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cokhadepfhgbjhnngnmkkbcclhgjelkn_0.localstorage deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cokhadepfhgbjhnngnmkkbcclhgjelkn_0.localstorage-journal deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cokhadepfhgbjhnngnmkkbcclhgjelkn_0 deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cokhadepfhgbjhnngnmkkbcclhgjelkn deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cokhadepfhgbjhnngnmkkbcclhgjelkn_0 deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cokhadepfhgbjhnngnmkkbcclhgjelkn deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdagnimlohkpamglloopgfnoiijpmoj deleted successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Default_Search_URL"="http://www.google.com"
"Search Bar"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
"Search Bar"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
"Search Page"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
"Search Bar"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
"Search Page"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=77324&st=bs&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=77324&st=bs&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.certified-toolbar.com?si=77324&st=bs&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=77324&st=bs&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.certified-toolbar.com?si=77324&st=bs&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=77324&st=bs&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.google.com"
"(Default)"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.google.com"
"(Default)"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si=77324&st=bs&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
"Search Bar"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
"Search Page"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
"Search Bar"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
"Search Page"="http://search.certified-toolbar.com?si=77324&tid=18194&ver=5.7&ts=1399034240613&tguid=77324-18194-1399034240613-7190EB5572CCE292FEFB1B777977672B&st=chrome&q="
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Acronis True Image 2014.lnk - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageLauncher.exe
C:\Users\Public\Desktop\Advanced SystemCare Ultimate 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate 7\ASCTray.exe /manual
C:\Users\Public\Desktop\Alcohol 52%.lnk - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\Alcohol.exe
C:\Users\Public\Desktop\AntiToolbar.lnk - C:\Program Files\AntiToolbar\AntiToolbar.exe
C:\Users\Public\Desktop\Arduino.lnk - C:\Program Files (x86)\Arduino\arduino.exe
C:\Users\Public\Desktop\Ashampoo Burning Studio 2014.lnk - C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 2014\burningstudio.exe
C:\Users\Public\Desktop\ASUS WebStorage.lnk - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.139.290\AsusWSPanel.exe
C:\Users\Public\Desktop\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\Public\Desktop\Azzul.lnk - C:\Program Files (x86)\Azzul\Azzul.exe
C:\Users\Public\Desktop\Bamboo Dock.lnk - C:\Program Files (x86)\Bamboo Dock\Bamboo Dock\Bamboo Dock.exe
C:\Users\Public\Desktop\BurnAware Free.lnk - C:\Program Files (x86)\BurnAware Free\BurnAware.exe
C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk - C:\Program Files (x86)\Calibre2\calibre.exe
C:\Users\Public\Desktop\Camtasia Studio 8.lnk - C:\Program Files (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\Users\Public\Desktop\CDBurnerXP.lnk - C:\Program Files (x86)\CDBurnerXP\cdbxpp.exe
C:\Users\Public\Desktop\Central de Soluções HP.lnk -
C:\Users\Public\Desktop\Comprar suprimentos HP.lnk - C:\Program Files (x86)\HP\HPSSUPPLY\hpqSSupply.exe
C:\Users\Public\Desktop\CPUID HWMonitor.lnk - C:\Program Files\CPUID\HWMonitor\HWMonitor.exe
C:\Users\Public\Desktop\DAEMON Tools Lite.lnk - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Public\Desktop\DOSBox 0.74.lnk - C:\Program Files (x86)\DOSBox-0.74\DOSBox.exe -userconf
C:\Users\Public\Desktop\Driver Booster.lnk - C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk - C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe
C:\Users\Public\Desktop\EaseUS Data Recovery Wizard 7.0.lnk - C:\Program Files (x86)\EaseUS\EaseUS Data Recovery Wizard\DRW.exe
C:\Users\Public\Desktop\EaseUS Partition Master 9.3.0.lnk - C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EPMStartLoader.exe
C:\Users\Public\Desktop\Emsisoft HiJackFree.lnk - C:\Program Files (x86)\Emsisoft HiJackFree\a2hijackfree.exe
C:\Users\Public\Desktop\FinanceDesktop.lnk - C:\Program Files (x86)\Myfreecomm\FinanceDesktop\financedesktop.exe
C:\Users\Public\Desktop\Find Drivers with DriverAgent.lnk - C:\Program Files (x86)\eSupport.com\driveragent\DriverAgent.exe /nr
C:\Users\Public\Desktop\foobar2000.lnk - C:\Program Files (x86)\foobar2000\foobar2000.exe
C:\Users\Public\Desktop\Geany.lnk - C:\Program Files (x86)\Geany\bin\Geany.exe
C:\Users\Public\Desktop\GetDataBack for FAT.lnk - C:\Program Files (x86)\Runtime Software\GetDataBack\gdb.exe
C:\Users\Public\Desktop\GnuCash.lnk - C:\Program Files (x86)\gnucash\bin\gnucash.exe
C:\Users\Public\Desktop\GOM Player.lnk - C:\Program Files (x86)\GRETECH\GomPlayer\GOM.EXE
C:\Users\Public\Desktop\HDClone.lnk - C:\Program Files (x86)\HDClone 4.2 Professional Edition\hdclone.exe run
C:\Users\Public\Desktop\InfraRecorder.lnk - C:\Program Files (x86)\InfraRecorder\infrarecorder.exe
C:\Users\Public\Desktop\IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe
C:\Users\Public\Desktop\JetBoost.lnk - C:\Program Files (x86)\BlueSprig\JetBoost\JetBoost.exe
C:\Users\Public\Desktop\JRiver Media Center 19.lnk - C:\Program Files (x86)\J River\Media Center 19\Media Center 19.exe
C:\Users\Public\Desktop\Media Player Center.lnk -
C:\Users\Public\Desktop\MediaMonkey.lnk - C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe
C:\Users\Public\Desktop\Messenger Center.lnk -
C:\Users\Public\Desktop\MiniTool Power Data Recovery - Bootable Media Builder.lnk - C:\Program Files (x86)\MiniTool Power Data Recovery - Bootable Media Builder\BootMediaBuilder.exe
C:\Users\Public\Desktop\Mozilla Firefox.lnk -
C:\Users\Public\Desktop\NetBeans IDE 7.3.lnk - C:\Program Files (x86)\NetBeans 7.3\bin\netbeans64.exe
C:\Users\Public\Desktop\Paragon Drive Copy™ 14 Professional Demo.lnk -
C:\Users\Public\Desktop\Paragon Hard Disk Manager™ 14 Suite.lnk -
C:\Users\Public\Desktop\PCB123 V4 Design Suite.lnk - C:\Windows\Installer\{705250AB-D4D9-4D02-B9AA-2D07B574F1EB}\_240C2FC0D24AD8C5E72012.exe
C:\Users\Public\Desktop\PDF To Word Converter.lnk - C:\PDFToWordConverter\PDF2Word.exe
C:\Users\Public\Desktop\Quick Boost.lnk - C:\Program Files (x86)\BlueSprig\JetBoost\JetBoost.exe -game
C:\Users\Public\Desktop\Receitanet 1.04 .lnk - C:\Program Files (x86)\Programas RFB\Receitanet\Windows\Receitanet.exe
C:\Users\Public\Desktop\Recuva.lnk - C:\Program Files\Recuva\recuva64.exe
C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe
C:\Users\Public\Desktop\RSD Lite.lnk - C:\Windows\Installer\{ECC06EC0-BD58-447F-8642-76D202933128}\_96B0BB46FB55F5319E6861.exe
C:\Users\Public\Desktop\scilab-5.3.3.lnk - C:\Program Files (x86)\scilab-5.3.3\bin\WScilex.exe
C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
C:\Users\Public\Desktop\SlimDrivers.lnk - C:\Windows\Installer\{A5457401-D56A-43F2-9524-78E54A7FC07A}\Icon.exe
C:\Users\Public\Desktop\Smart Defrag 3.lnk - C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe
C:\Users\Public\Desktop\SmartDraw 2014.lnk - C:\Program Files (x86)\SmartDraw 2014\SmartDraw.exe
C:\Users\Public\Desktop\TweakNow RegCleaner.lnk - C:\Program Files (x86)\TweakNow RegCleaner\RegCleaner.exe
C:\Users\Public\Desktop\USB Printer Controller (TP-LINK TL WR1043ND).lnk - C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe
C:\Users\Public\Desktop\USB Printer Controller.lnk - C:\Program Files (x86)\TP-LINK\USB Printer Controller\USB Printer Controller.exe
C:\Users\Public\Desktop\VDownloader.lnk - C:\Program Files\VDownloader\VDownloader.exe
C:\Users\Public\Desktop\Video Search.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe /VIDEOSEARCH
C:\Users\Public\Desktop\WinImage (administrator).lnk - C:\Program Files (x86)\WinImage\winimage.exe
C:\Users\Public\Desktop\WinImage.lnk - C:\Program Files (x86)\WinImage\winimage.exe
C:\Users\Public\Desktop\WinZip (1).lnk - C:\Program Files (x86)\WinZip\WINZIP64.EXE

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk - C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-AB0000000001}\SC_Reader.ico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barra de Ferramentas Crawler\Ajuda da Barra de Ferramentas.lnk - C:\Program Files (x86)\Crawler\Toolbar\CToolbar.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barra de Ferramentas Crawler\Mais produtos Crawler.lnk - C:\Program Files (x86)\Crawler\Toolbar\CToolbar.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management\calibre 64bit - E-book management.lnk - C:\Program Files (x86)\Calibre2\calibre.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management\E-book viewer 64bit.lnk - C:\Program Files (x86)\Calibre2\ebook-viewer.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management\Edit E-book 64bit.lnk - C:\Program Files (x86)\Calibre2\ebook-edit.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management\LRF viewer 64bit.lnk - C:\Program Files (x86)\Calibre2\lrfviewer.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva\Recuva.lnk - C:\Program Files\Recuva\recuva64.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva\Uninstall Recuva.lnk - C:\Program Files\Recuva\uninst.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro\Desinstalar Revo Uninstaller Pro.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller Pro\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro\Revo Uninstaller Pro Help.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller Pro\Revo Uninstaller Pro Help.pdf
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro\Revo Uninstaller Pro.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TweakNow RegCleaner\Help.lnk - C:\Program Files (x86)\TweakNow RegCleaner\Help.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TweakNow RegCleaner\TweakNow RegCleaner.lnk - C:\Program Files (x86)\TweakNow RegCleaner\RegCleaner.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPDiag.lnk - C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPFix.lnk - C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\dchlnpcodkpfdpacogkljefecpegganj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\hpljfflibaokjcndmchkfjalpjjblioc deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\hpljfflibaokjcndmchkfjalpjjblioc deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\kcendgajlhoaiiccpijilcpmgphfflnj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\lladpgmmlijbmhfknhgkenkhikoaapmj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mdebcffgnijbblbinknkbefciofebcda deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\pjldcfjmnllhmgjclecdnfampinooman deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Administrador\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Administrador\caegama\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Administrador\caegama\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1660 folders=628 663792722 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrador\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\ADMINI~2\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied
C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on 30/05/2014 at 10:27:47,31 ======================

por **Power Max** Sáb 31 maio 2014, 10:50

Desative temporariamente seu antivírus para evitar conflitos.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek.

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

por caegama Sáb 31 maio 2014, 11:19

Aqui vai...
Zoek.exe v5.0.0.0 Updated 22-05-2014
Tool run by Administrador on 31/05/2014 at 11:02:44,35.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Administrador\Downloads\zoek (2).exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-05-29-145158.log 27584 bytes
C:\zoek-results2014-05-30-132747.log 80020 bytes

==== System Restore Info ======================

31/05/2014 11:09:54 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfilter deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bfmon deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bndef deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bndef deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bprotect deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"InstPath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"InstPath"=-
[-HKEY_USERS\.DEFAULT\Software\Baidu]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\010214-27970-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\010214-29437-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\010214-30576-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\010214-35958-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\032814-22464-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\033014-50840-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\040814-49109-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"rcloud"=-
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\Antivirus\web]
"rcloud"=-
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Install]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\alluser]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\curuser]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu]
[HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu]
"Advanced SystemCare Ultimate_BaiDuSafe_RegType"=-
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm64]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\Statistic]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\4.0.0.0\UUReport]
[-HKEY_USERS\S-1-5-21-2315137051-53578040-1452129126-500\Software\Baidu Security\PC Faster\Setup]
[-HKEY_USERS\S-1-5-18\Software\Baidu]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\010214-27970-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\010214-29437-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\010214-30576-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\010214-35958-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\032814-22464-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\033014-50840-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\040814-49109-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"rcloud"=-

==== Deleting Files \ Folders ======================

C:\ProgramData\Baidu Security deleted
C:\Users\Administrador\AppData\Roaming\Baidu Security deleted
C:\Users\Administrador\caegama\AppData\Roaming\baidu deleted
C:\Users\Administrador\caegama\AppData\Roaming\Baidu Security deleted
C:\Users\Administrador\caegama\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Baidu PC Faster deleted
C:\Users\Public\Documents\Baidu Security deleted
"C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\Safari_baidu_script.js" deleted
"C:\Users\Administrador\caegama\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.8.4_0\css\quickSearch\img\baidu.png" deleted

==== Folders Found ======================

2014-05-29 14:24:37 2014-05-29 14:24:37 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-05-29 14:24:59 2014-05-29 14:24:59 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Administrador\AppData\Roaming\baidu
2014-05-29 14:24:59 2014-05-29 14:24:59 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Administrador\AppData\Roaming\baidu\Baidu Antivirus
2014-05-29 14:25:01 2014-05-29 14:25:01 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Public\Documents\baidu

==== Files Found ======================

--- C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\baidu_ff.xml.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 3958
Created time: 2012-11-12 17:26:02
Modified time: 2012-11-12 17:26:02
MD5: DA0EC54C773C9ABF2378361584814AA8
SHA1: 72D798185B1DE87A6FDCE3BCF289CC9A0D27554A

--- C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\Spigot\Search Settings\baidu_ie.xml.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 416
Created time: 2012-11-12 17:26:02
Modified time: 2012-11-12 17:26:02
MD5: A156DEAAAAE97C4C17CA47482F90B643
SHA1: 19E8D32C68862C2B7D64DCD26C31545869B7C6E4

--- C:\AdwCleaner\Quarantine\C\Program Files (x86)\IObit Apps Toolbar\Res\search_baidu.gif.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 614
Created time: 2012-11-29 17:40:48
Modified time: 2012-11-29 17:40:48
MD5: 35413285571F6052D773CFE59C1DF7E9
SHA1: AC8CE8A7E602A266F3CD8B4C503EE8478501D152

--- C:\Program Files (x86)\JDownloader\jd\plugins\decrypter\PanBaiduCom.class ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 7932
Created time: 2013-03-15 02:21:11
Modified time: 2013-03-15 02:21:11
MD5: E3C09A65B44D4840E9F5F704E5BC984C
SHA1: E238DB8B43ACE9DA5BBD005729FE653E5465E213

--- C:\Program Files (x86)\JDownloader\jd\plugins\hoster\PanBaiduCom.class ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 5539
Created time: 2013-03-18 00:32:15
Modified time: 2013-03-18 00:32:15
MD5: A134A9386695398E333055CBF900976B
SHA1: 4C45B9C357667DEABDF0224EFC0C68E2216D513F

==== Registry Search Results for "Baidu" ======================

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1757 folders=719 879252700 bytes)

==== EOF on 31/05/2014 at 11:17:30,37 ======================

por **Power Max** Sáb 31 maio 2014, 13:43

Como está o PC depois destes procedimentos?

por caegama Sáb 31 maio 2014, 22:45

Bom, aparentemente o computador está funcionando ok, ou seja, até aqui tudo normal. Tentei instalar agora o Kaspersky mas ele informou "Ocorreu um erro; Instalação não concluída". Não deu mais a mensagem que dava antes, de software incompatível (o Baidu antivirus), mas agora ele está dando outra mensagem de erro: "Erro 1316. Erro de rede ao tentar ler o arquivo C:\Windows\Installer\Kavkis.msi". E aí o processo de instalação não vai à frente e ele pede prá fechar.

P.S. Uma dúvida em relação às página do fórum: não aparece mais as partes em vermelho que vcs enviaram para colar no zoek, isso é normal ou é um problema do meu browser. Estou usando o Chrome.

Mais uma vez, obrigado pela ajuda.

Abç!

por **Power Max** Sáb 31 maio 2014, 22:59

use o desinstalador do Kaspersky seguindo as dicas do tutorial oficial dele no endereço abaixo (está em inglês, mas você pode traduzir usando o Google Tradutor caso necessário):
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Depois disto tente novamente instalar o Kaspersky e veja se dá certo

por caegama Ter 03 Jun 2014, 10:34

Usei o desinstalador e ele ficou acusando a presença do Kaspersky Internet Security, que eu já havia desinstalado anteriormente para instalar o Kaspersky Pure. Resolvi então instalar a versão de avaliação do Kas Int. Sec. e ver no que dava. Ele instalou perfeitamente, sem qualquer problema. Tentei então, mais uma vez, instalar o Kas Pure mas não deu certo. Ele acusa o Kas Int. Sec. e pede para desinstalá-lo. Feito isso, o Kas Pure passou a informar: "O aplicativo Kaspersky Lab já está instalado no computador. Desinstale-o antes de instalar o Kaspersky Pure 3.0".

Abç!

por **Power Max** Ter 03 Jun 2014, 10:43

Nesse caso o melhor é entrar em contato com o suporte do Kaspersky no endereço abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

por caegama Dom 08 Jun 2014, 16:47

Ok, vou tentar com eles. Obrigado pela ajuda!

por **Power Max** Dom 08 Jun 2014, 19:34

TÓPICO ARQUIVADO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.

por Conteúdo patrocinado

Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Re: Kaspersky PURE 3.0 não instala por causa do anti vírus baidu - Mais outro problema

Seg	Ter	Qua	Qui	Sex	Sáb	Dom
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31