Flux 
Social bookmarking
Conservar e compartilhar o endereço de PC Seguro em seu site de social bookmarking
Conservar e compartilhar o endereço de Fórum PC Brasil em seu site de social bookmarking
Estatísticas
Temos 14810 usuários registradosO último membro registrado é Josevinil
Os nossos membros postaram um total de 36047 mensagens em 3685 assuntos
Quem está conectado?
Há 29 usuários online :: 0 registrados, 0 invisíveis e 29 visitantes Nenhum
O recorde de usuários online foi de 301 em Ter 26 Out 2021, 15:28
Procurar
Top dos mais postadores
| Power Max |
| |||
| joram |
| |||
| Wings [In Memoriam] |
| |||
| caedurodrigues |
| |||
| Amigo Brasileiro |
| |||
| luizvilarinho |
| |||
| Danii |
| |||
| Admin |
| |||
| Danilo Marsaro |
| |||
| Andreata |
|
O baidu nao sai do meu pc de jeito nenhum
3 participantes
Página 1 de 1
O baidu nao sai do meu pc de jeito nenhum
por Joao ayres Qui 14 Ago 2014, 16:34
a praga do baidu não sai do meu computador
já tentei desinstalar de todas as maneiras, pelo revo, ccleaner e nao adianta, já fui no local do aquivo e tentei desinstalar, mais quando abre aparece a tela toda branca... srá que tem jeito?
já tentei desinstalar de todas as maneiras, pelo revo, ccleaner e nao adianta, já fui no local do aquivo e tentei desinstalar, mais quando abre aparece a tela toda branca... srá que tem jeito?
Joao ayres- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 09/08/2014
Re: O baidu nao sai do meu pc de jeito nenhum
por Power Max Qui 14 Ago 2014, 17:16
Olá.
Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt
Ficamos na espera.
Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt
Ficamos na espera.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: O baidu nao sai do meu pc de jeito nenhum
por Joao ayres Qui 14 Ago 2014, 17:47
# AdwCleaner v3.305 - Relatório criado 14/08/2014 às 17:40:23
# Atualizado 14/08/2014 por Xplode
# Sistema Operacional : Windows 7 Ultimate (32 bits)
# Usuário : Pessoal - PESSOAL-PC
# Executando de : C:\Users\Pessoal\Downloads\AdwCleaner.exe
# Opção : Limpar
***** [ Serviços ] *****
***** [ Arquivos / Pastas ] *****
Pasta Deletada : C:\ProgramData\baidu
Pasta Deletada : C:\Users\Pessoal\AppData\Roaming\baidu
Pasta Deletada : C:\Users\Public\Documents\baidu
Arquivo Deletada : C:\Windows\system32\GroupPolicy\Machine\Registry.pol
***** [ Tarefas ] *****
***** [ Atalhos ] *****
***** [ Registro ] *****
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
***** [ Navegadores ] *****
-\\ Internet Explorer v9.0.8112.16457
-\\ Mozilla Firefox v
[ Arquivo : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\prefs.js ]
-\\ Google Chrome v
[ Arquivo : C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [58338 octets] - [12/08/2014 11:33:57]
AdwCleaner[R1].txt - [1189 octets] - [12/08/2014 11:50:11]
AdwCleaner[R2].txt - [1510 octets] - [14/08/2014 17:38:49]
AdwCleaner[S0].txt - [55404 octets] - [12/08/2014 11:36:17]
AdwCleaner[S1].txt - [1242 octets] - [12/08/2014 11:52:49]
AdwCleaner[S2].txt - [1418 octets] - [14/08/2014 17:40:23]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1478 octets] ##########
# Atualizado 14/08/2014 por Xplode
# Sistema Operacional : Windows 7 Ultimate (32 bits)
# Usuário : Pessoal - PESSOAL-PC
# Executando de : C:\Users\Pessoal\Downloads\AdwCleaner.exe
# Opção : Limpar
***** [ Serviços ] *****
***** [ Arquivos / Pastas ] *****
Pasta Deletada : C:\ProgramData\baidu
Pasta Deletada : C:\Users\Pessoal\AppData\Roaming\baidu
Pasta Deletada : C:\Users\Public\Documents\baidu
Arquivo Deletada : C:\Windows\system32\GroupPolicy\Machine\Registry.pol
***** [ Tarefas ] *****
***** [ Atalhos ] *****
***** [ Registro ] *****
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
***** [ Navegadores ] *****
-\\ Internet Explorer v9.0.8112.16457
-\\ Mozilla Firefox v
[ Arquivo : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\prefs.js ]
-\\ Google Chrome v
[ Arquivo : C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [58338 octets] - [12/08/2014 11:33:57]
AdwCleaner[R1].txt - [1189 octets] - [12/08/2014 11:50:11]
AdwCleaner[R2].txt - [1510 octets] - [14/08/2014 17:38:49]
AdwCleaner[S0].txt - [55404 octets] - [12/08/2014 11:36:17]
AdwCleaner[S1].txt - [1242 octets] - [12/08/2014 11:52:49]
AdwCleaner[S2].txt - [1418 octets] - [14/08/2014 17:40:23]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1478 octets] ##########
Joao ayres- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 09/08/2014
Re: O baidu nao sai do meu pc de jeito nenhum
por Power Max Qui 14 Ago 2014, 20:59
Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executar corretamente o programa acima é só seguir as dicas deste tutorial:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt
Ficamos na espera.
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executar corretamente o programa acima é só seguir as dicas deste tutorial:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt
Ficamos na espera.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: O baidu nao sai do meu pc de jeito nenhum
por Joao ayres Sáb 16 Ago 2014, 10:19
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x86
Ran by Pessoal on 12/08/2014 at 12:11:32,28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3560792530-821738648-2039541334-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644174462}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644174462}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealio_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealio_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealkeeper1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealkeeper1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealKeeper_Setup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealKeeper_Setup_RASMANCS
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\baidu"
Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\Users\Pessoal\AppData\Roaming\getrighttogo"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12/08/2014 at 12:20:32,95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x86
Ran by Pessoal on 12/08/2014 at 12:11:32,28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3560792530-821738648-2039541334-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644174462}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644174462}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealio_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealio_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealkeeper1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealkeeper1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealKeeper_Setup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealKeeper_Setup_RASMANCS
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\baidu"
Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\Users\Pessoal\AppData\Roaming\getrighttogo"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12/08/2014 at 12:20:32,95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Joao ayres- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 09/08/2014
Re: O baidu nao sai do meu pc de jeito nenhum
por Power Max Sáb 16 Ago 2014, 10:31
Desative temporariamente seu antivírus para evitar conflitos.
Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:
createsrpoint;
autoclean;
emptyalltemp;
iedefaults;
resetieproxy;
resethosts;
shortcutfix;
ffdefaults;
firefoxlook;
reset chrome;
chrdefaults;
chromelook;
emptyfolderscheck;delete
Baidu;z
Baidu;a
*Clique [Run Script]
*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.
Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:
createsrpoint;
autoclean;
emptyalltemp;
iedefaults;
resetieproxy;
resethosts;
shortcutfix;
ffdefaults;
firefoxlook;
reset chrome;
chrdefaults;
chromelook;
emptyfolderscheck;delete
Baidu;z
Baidu;a
*Clique [Run Script]
*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: O baidu nao sai do meu pc de jeito nenhum
por Joao ayres Sáb 16 Ago 2014, 11:24
Zoek.exe v5.0.0.0 Updated 15-08-2014
Tool run by Pessoal on 16/08/2014 at 10:38:48,53.
Microsoft Windows 7 Ultimate 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Pessoal\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
16/08/2014 10:42:12 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Empty Folders Check ======================
C:\Program Files\tperfectcoupoN deleted successfully
C:\Program Files\Common Files\Nero deleted successfully
C:\PROGRA~2\Oracle deleted successfully
C:\Users\Pessoal\AppData\Roaming\Media Player Classic deleted successfully
C:\Users\Pessoal\AppData\Roaming\Windows Live Writer deleted successfully
C:\Users\Pessoal\AppData\Local\Adobe deleted successfully
C:\Users\Pessoal\AppData\Local\Unity deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Microsoft\Internet Explorer\SearchScopes\{86c83f9e-48a4-4cd2-a763-64fea5df35f7} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\prefs.js:
Added to C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\prefs.js:
ProfilePath: C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default
user.js not found
---- FireFox user.js and prefs.js backups ----
prefs_082014_1057_.backup
==== Deleting Files \ Folders ======================
C:\Users\Pessoal\AppData\LocalLow\{19345764-ED78-7727-1104-FD4BB1EF6957} deleted
C:\Users\Pessoal\.android deleted
C:\Program Files\Yahoo! deleted
C:\Users\Pessoal\AppData\Roaming\cdr.ini deleted
C:\Users\Pessoal\AppData\Roaming\Baidu deleted
C:\Users\Pessoal\AppData\Roaming\Yahoo! deleted
C:\PROGRA~2\FileSplitUpLoad.dll deleted
C:\PROGRA~2\Baidu deleted
C:\Users\Pessoal\AppData\Local\nsq4048.tmp deleted
C:\Users\Pessoal\AppData\Local\cache deleted
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted
C:\Users\Pessoal\Downloads\DownloadManagerSetup.exe deleted
C:\Users\Pessoal\Searches deleted
C:\Users\Pessoal\Downloads\IminentSetup{1.4NJxQPaP.1} (1).exe deleted
C:\Users\Pessoal\Downloads\IminentSetup{1.4NJxQPaP.1}.exe deleted
C:\Users\Pessoal\Downloads\SoftonicDownloader_para_photofiltre-studio-x.exe deleted
C:\Users\Pessoal\Downloads\SoftonicDownloader_para_super-mario-world-x.exe deleted
C:\Users\Pessoal\AppData\LocalLow\Plus-HD-1.3 deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\Application Updater deleted
C:\Windows\system32\tasks\Baidu Antivirus Update deleted
C:\Windows\System32\InstallUtil.InstallLog deleted
C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\extensions\staged deleted
C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\CT1460988 deleted
C:\Users\Pessoal\Desktop\Continue AVG Anti-Virus Free.lnk deleted
C:\Users\Pessoal\AppData\Roaming\unins000.exe deleted
C:\Users\Pessoal\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks deleted
C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com deleted
"C:\Users\Pessoal\AppData\Local\{1C79752B-A56E-4E7B-B9D1-72F396A46F63}" deleted
"C:\Users\Pessoal\AppData\Local\{94073D53-F0ED-4467-98EC-0EE025C50FA8}" deleted
"C:\Users\Pessoal\AppData\Local\{D2539ABF-9C8B-431D-A58E-1C7672187786}" deleted
"C:\Users\Pessoal\AppData\Roaming\+558585015452_fcpd" deleted
"C:\Users\Pessoal\AppData\Roaming\8585015452_fcpd" deleted
"C:\ProgramData\382c2027203335453930_c" deleted
"C:\PROGRA~2\6b380f84b15dc99e\{23B82977-C816-92D2-66E7-BE67DD1E7786}" deleted
"C:\PROGRA~2\6b380f84b15dc99e" deleted
==== Folders Found ======================
2014-08-12 14:36:28 2014-08-12 14:36:28 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-08-12 14:36:35 2014-08-12 14:36:35 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Pessoal\AppData\Roaming\baidu
2014-08-12 14:36:35 2014-08-12 14:36:35 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Pessoal\AppData\Roaming\baidu\Baidu Antivirus
2014-08-12 14:36:36 2014-08-12 14:36:36 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Public\Documents\baidu
2014-07-22 20:51:20 2014-07-23 12:49:23 -------- d-----w- C:\Program Files\Baidu-Security-2014-4.4.4.73687
2014-07-22 20:51:20 2014-08-16 13:58:47 -------- d-----w- C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus
2014-02-13 16:33:06 2014-07-22 20:51:42 -------- d-----w- C:\ProgramData\Baidu Security
2014-02-13 16:33:06 2014-07-22 20:51:42 -------- d-----w- C:\Users\All Users\Baidu Security
2014-02-13 16:34:58 2014-02-13 16:34:58 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Baidu Security
2013-04-05 21:08:23 2013-04-06 12:07:55 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster
2014-02-13 16:40:30 2014-02-13 16:40:31 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
2014-02-13 16:40:31 2014-02-13 16:40:31 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
2014-08-14 20:43:27 2014-08-14 20:43:27 -------- d-----w- C:\Users\Public\Documents\Baidu
2014-08-12 12:34:19 2014-08-12 12:34:19 -------- d-----w- C:\Users\Public\Documents\Baidu Security
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_PROGRA~2_Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_Users_Pessoal_AppData_Roaming_Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_Users_Pessoal_AppData_Roaming_Baidu\Baidu Antivirus
==== Files Found ======================
--- C:\Users\Pessoal\Downloads\Baidu Antivirus Free.exe ---
Company: Firseria.-.Installer · sl
File Description: Installer
File Version: 3.1.22.4
Product Name: Apps-manager
Copyright: copyright © 2014
Original Filename:
File type: ----a-w-
File size: 585920
Created time: 2014-08-11 15:03:02
Modified time: 2014-08-11 15:04:32
MD5: 1B4D4A1E803EB9A952330721183059D4
SHA1: 4DFE460AE5E87A8D8F944217070801D216CA0196
--- C:\zoek_backup\C_Windows_system32_tasks_Baidu Antivirus Update.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 3450
Created time: 2014-08-16 13:58:01
Modified time: 2014-07-22 20:51:37
MD5: 6CD9EDA31F613031163ECB8AC88DBD1E
SHA1: FAA759248366453480CD63C56F24D53A32831CEF
==== Registry Search Results for "Baidu" ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
"uuurl"="http://sync.br.bav.baidu.com/cgi-bin/report_uu_msg_bavv2.cgi"
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\LogLoc]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\LogUp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Processing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp]
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-Updater-2014-02-13 02-38-24-0435-[5955].tmp"=""
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-PCFasterSvc-2014-02-13 02-38-24-0435-[5955].tmp"=""
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-PcfTray-2014-02-13 02-39-20-0922-[6138].tmp"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon]
@="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Bav.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command]
@="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Bav.exe\" UI_Start_From_IE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon]
@="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Translator.exe,-201"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command]
@="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Translator.exe\" \"%1\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}]
@="baidu right click handler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32]
@="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BavShx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32]
@="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BavShx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Baidu Antivirus"="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BavTray.exe\" -auto"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}"="Baidu Scan"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayName"="Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayIcon"="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Bav.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"UninstallString"="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Uninstall.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"URLInfoAbout"="http://antivirus.baidu.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"Publisher"="Baidu, Inc."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"InstallDir"="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}]
"Path"="\\Baidu Antivirus Update"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu Antivirus Update]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"RestoreStatusDescription"="Revo Uninstaller's restore point - Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
"DisplayName"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
"Description"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdCameraProtect.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase]
"DisplayName"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
"DisplayName"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
"Description"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
"DisplayName"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"DisplayName"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"InstPath"="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
"DisplayName"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0\\PCFApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
"DisplayName"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
"Description"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdCameraProtect.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase]
"DisplayName"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
"DisplayName"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
"Description"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
"DisplayName"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"DisplayName"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"InstPath"="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
"DisplayName"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0\\PCFApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
"DisplayName"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
"Description"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdCameraProtect.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase]
"DisplayName"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
"DisplayName"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
"Description"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
"DisplayName"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"DisplayName"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"InstPath"="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
"DisplayName"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0\\PCFApiUtil.sys"
[HKEY_USERS\.DEFAULT\Software\Baidu]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[HKEY_USERS\.DEFAULT\Software\Baidu Security]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Install]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\alluser]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\curuser]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Statistic]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\UUReport]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\alluser]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\curuser]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hkcu]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hklm]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Setup]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic]
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=dword:00000001
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[HKEY_USERS\S-1-5-18\Software\Baidu]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[HKEY_USERS\S-1-5-18\Software\Baidu Security]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext" [05/01/2013 11:51]
==== Firefox Extensions ======================
ProfilePath: C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default
- Guardiao Itau 30 horas - %ProfilePath%\extensions\{87F8774F-B485-47E2-A755-A40A8A5E8873}
==== Firefox Plugins ======================
Profilepath: C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default
5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
E18B5B26F41D8C37CCAA7256F29F6A15 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)
1C8124B6A03A620EB0CBCA615666D2AE - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery
7ABA2EAB736F7E9EB0E03ACAA42CCB51 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[29/11/2012 19:35]
Google Wallet - Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
==== Chromium Startpages ======================
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "https://www.google.com.br/",
"startup_urls": [ "https://www.google.com.br/" ],
==== Chrome Fix ======================
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lyrics007.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pt.iminent.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_geobanner.adultfriendfinder.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_m.adultfriendfinder.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_photofiltre-studio-x.softonic.com.br_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_super-mario-world-x.softonic.com.br_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sweetpacks-search.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=sol&utm_medium=ppi&utm_campaign=portal"
"Search Page"="http://br.yhs4.search.yahoo.com/yhs/search?hspart=baixaki&hsimp=yhs-baixaki_br_solimba_01&p={searchTerms}"
"Search Bar"="http://www.google.com"
"Use Search Asst"="yes"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://www.google.com"
"SearchAssistant"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=sol&utm_medium=ppi&utm_campaign=portal"
"Use Search Asst"="no"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
==== Reset Google Chrome ======================
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== shortcuts on Users Desktops ======================
C:\Users\Pessoal\Desktop\Biblia Eletrônica.lnk -
C:\Users\Pessoal\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Pessoal\Desktop\Google Chrome.lnk - C:\Users\Pessoal\AppData\Local\Google\Chrome\Application\chrome.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
C:\Users\Pessoal\Desktop\internet explore.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\Desktop\Revo Uninstaller.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Users\Pessoal\Desktop\RemoveWAT.2.2.5.Hazar.carter67\Jogos - Atalho.lnk -
==== shortcuts on All Users Desktop ======================
C:\Users\Public\Desktop\avast Free Antivirus.lnk -
C:\Users\Public\Desktop\Foxit Reader.lnk - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe
C:\Users\Public\Desktop\QualityCapture.exe.lnk - C:\Windows\Installer\{0D171001-4ECE-44C6-A6F6-AE7884BBD480}\_7E491CC2D2090E03855699.exe
C:\Users\Public\Desktop\RealPlayer.lnk - C:\program files\real\realplayer\RealPlay.exe /launch:desktop
C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe
==== shortcuts in Users Start Menu ======================
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Users\Pessoal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe -hunter
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\uninst.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url
==== shortcuts in All Users Start Menu ======================
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast\avast Free Antivirus.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123-Brazil\Desinstalar hao123.lnk - C:\Users\Pessoal\AppData\Roaming\baidu\hao123-br\hao123.1.0.0.1111.exe -uninstall
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123-Brazil\Hao123.lnk - C:\Users\Pessoal\AppData\Roaming\baidu\hao123-br\hao123.1.0.0.1111.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiPony\MiPony.lnk - C:\Program Files\MiPony\MiPony.exe
==== shortcuts in Quick Launch ======================
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Iniciar Microsoft Office Outlook.lnk - C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE /recycle
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk - C:\Windows\system32\calc.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\internet explore.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Media Player Classic.lnk - C:\Program Files\XP Codec Pack\mpc\mplayerc.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Office Word 2003.lnk - C:\Windows\Installer\{90110416-6000-11D3-8CFE-0150048383C9}\wordicon.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Skype.lnk - C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Users\Pessoal\AppData\Local\Google\Chrome\Application\chrome.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Messenger .lnk - C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\WPRES20.lnk - C:\WPRES20\WPRES20.EXE
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
==== Reset IE Proxy ======================
Value(s) before fix:
"ProxyOverride"="<-loopback>"
"ProxyEnable"=dword:00000000
Value(s) after fix:
"ProxyEnable"=dword:00000000
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtTray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\removeSearchqudatamngr deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\removeSearchqutoolbar deleted successfully
==== Empty IE Cache ======================
C:\Users\Pessoal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Pessoal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
C:\Users\Pessoal\AppData\Local\Mozilla\Firefox\Profiles\w777v6lp.default\Cache emptied successfully
==== Empty Chrome Cache ======================
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=222 folders=68 12493493 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Pessoal\AppData\Local\Temp will be emptied at reboot
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Pessoal\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Pessoal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\FXSSVCDebugLogFile.txt" not deleted
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\FXSTIFFDebugLogFile.txt" not deleted
==== EOF on 16/08/2014 at 11:08:19,86 ======================
Tool run by Pessoal on 16/08/2014 at 10:38:48,53.
Microsoft Windows 7 Ultimate 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Pessoal\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
16/08/2014 10:42:12 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Empty Folders Check ======================
C:\Program Files\tperfectcoupoN deleted successfully
C:\Program Files\Common Files\Nero deleted successfully
C:\PROGRA~2\Oracle deleted successfully
C:\Users\Pessoal\AppData\Roaming\Media Player Classic deleted successfully
C:\Users\Pessoal\AppData\Roaming\Windows Live Writer deleted successfully
C:\Users\Pessoal\AppData\Local\Adobe deleted successfully
C:\Users\Pessoal\AppData\Local\Unity deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Microsoft\Internet Explorer\SearchScopes\{86c83f9e-48a4-4cd2-a763-64fea5df35f7} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\prefs.js:
Added to C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\prefs.js:
ProfilePath: C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default
user.js not found
---- FireFox user.js and prefs.js backups ----
prefs_082014_1057_.backup
==== Deleting Files \ Folders ======================
C:\Users\Pessoal\AppData\LocalLow\{19345764-ED78-7727-1104-FD4BB1EF6957} deleted
C:\Users\Pessoal\.android deleted
C:\Program Files\Yahoo! deleted
C:\Users\Pessoal\AppData\Roaming\cdr.ini deleted
C:\Users\Pessoal\AppData\Roaming\Baidu deleted
C:\Users\Pessoal\AppData\Roaming\Yahoo! deleted
C:\PROGRA~2\FileSplitUpLoad.dll deleted
C:\PROGRA~2\Baidu deleted
C:\Users\Pessoal\AppData\Local\nsq4048.tmp deleted
C:\Users\Pessoal\AppData\Local\cache deleted
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted
C:\Users\Pessoal\Downloads\DownloadManagerSetup.exe deleted
C:\Users\Pessoal\Searches deleted
C:\Users\Pessoal\Downloads\IminentSetup{1.4NJxQPaP.1} (1).exe deleted
C:\Users\Pessoal\Downloads\IminentSetup{1.4NJxQPaP.1}.exe deleted
C:\Users\Pessoal\Downloads\SoftonicDownloader_para_photofiltre-studio-x.exe deleted
C:\Users\Pessoal\Downloads\SoftonicDownloader_para_super-mario-world-x.exe deleted
C:\Users\Pessoal\AppData\LocalLow\Plus-HD-1.3 deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\Application Updater deleted
C:\Windows\system32\tasks\Baidu Antivirus Update deleted
C:\Windows\System32\InstallUtil.InstallLog deleted
C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\extensions\staged deleted
C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\CT1460988 deleted
C:\Users\Pessoal\Desktop\Continue AVG Anti-Virus Free.lnk deleted
C:\Users\Pessoal\AppData\Roaming\unins000.exe deleted
C:\Users\Pessoal\AppData\Roaming\Mozilla\Extensions\statuswinks@StatusWinks deleted
C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com deleted
"C:\Users\Pessoal\AppData\Local\{1C79752B-A56E-4E7B-B9D1-72F396A46F63}" deleted
"C:\Users\Pessoal\AppData\Local\{94073D53-F0ED-4467-98EC-0EE025C50FA8}" deleted
"C:\Users\Pessoal\AppData\Local\{D2539ABF-9C8B-431D-A58E-1C7672187786}" deleted
"C:\Users\Pessoal\AppData\Roaming\+558585015452_fcpd" deleted
"C:\Users\Pessoal\AppData\Roaming\8585015452_fcpd" deleted
"C:\ProgramData\382c2027203335453930_c" deleted
"C:\PROGRA~2\6b380f84b15dc99e\{23B82977-C816-92D2-66E7-BE67DD1E7786}" deleted
"C:\PROGRA~2\6b380f84b15dc99e" deleted
==== Folders Found ======================
2014-08-12 14:36:28 2014-08-12 14:36:28 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-08-12 14:36:35 2014-08-12 14:36:35 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Pessoal\AppData\Roaming\baidu
2014-08-12 14:36:35 2014-08-12 14:36:35 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Pessoal\AppData\Roaming\baidu\Baidu Antivirus
2014-08-12 14:36:36 2014-08-12 14:36:36 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Public\Documents\baidu
2014-07-22 20:51:20 2014-07-23 12:49:23 -------- d-----w- C:\Program Files\Baidu-Security-2014-4.4.4.73687
2014-07-22 20:51:20 2014-08-16 13:58:47 -------- d-----w- C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus
2014-02-13 16:33:06 2014-07-22 20:51:42 -------- d-----w- C:\ProgramData\Baidu Security
2014-02-13 16:33:06 2014-07-22 20:51:42 -------- d-----w- C:\Users\All Users\Baidu Security
2014-02-13 16:34:58 2014-02-13 16:34:58 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Baidu Security
2013-04-05 21:08:23 2013-04-06 12:07:55 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster
2014-02-13 16:40:30 2014-02-13 16:40:31 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
2014-02-13 16:40:31 2014-02-13 16:40:31 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
2014-08-14 20:43:27 2014-08-14 20:43:27 -------- d-----w- C:\Users\Public\Documents\Baidu
2014-08-12 12:34:19 2014-08-12 12:34:19 -------- d-----w- C:\Users\Public\Documents\Baidu Security
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_PROGRA~2_Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_Users_Pessoal_AppData_Roaming_Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_Users_Pessoal_AppData_Roaming_Baidu\Baidu Antivirus
==== Files Found ======================
--- C:\Users\Pessoal\Downloads\Baidu Antivirus Free.exe ---
Company: Firseria.-.Installer · sl
File Description: Installer
File Version: 3.1.22.4
Product Name: Apps-manager
Copyright: copyright © 2014
Original Filename:
File type: ----a-w-
File size: 585920
Created time: 2014-08-11 15:03:02
Modified time: 2014-08-11 15:04:32
MD5: 1B4D4A1E803EB9A952330721183059D4
SHA1: 4DFE460AE5E87A8D8F944217070801D216CA0196
--- C:\zoek_backup\C_Windows_system32_tasks_Baidu Antivirus Update.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 3450
Created time: 2014-08-16 13:58:01
Modified time: 2014-07-22 20:51:37
MD5: 6CD9EDA31F613031163ECB8AC88DBD1E
SHA1: FAA759248366453480CD63C56F24D53A32831CEF
==== Registry Search Results for "Baidu" ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
"uuurl"="http://sync.br.bav.baidu.com/cgi-bin/report_uu_msg_bavv2.cgi"
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\LogLoc]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\LogUp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Processing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp]
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-Updater-2014-02-13 02-38-24-0435-[5955].tmp"=""
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-PCFasterSvc-2014-02-13 02-38-24-0435-[5955].tmp"=""
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-PcfTray-2014-02-13 02-39-20-0922-[6138].tmp"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon]
@="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Bav.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command]
@="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Bav.exe\" UI_Start_From_IE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon]
@="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Translator.exe,-201"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command]
@="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Translator.exe\" \"%1\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}]
@="baidu right click handler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32]
@="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BavShx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32]
@="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BavShx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Baidu Antivirus"="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BavTray.exe\" -auto"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}"="Baidu Scan"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayName"="Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayIcon"="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Bav.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"UninstallString"="\"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Uninstall.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"URLInfoAbout"="http://antivirus.baidu.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"Publisher"="Baidu, Inc."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"InstallDir"="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}]
"Path"="\\Baidu Antivirus Update"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu Antivirus Update]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"RestoreStatusDescription"="Revo Uninstaller's restore point - Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
"DisplayName"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
"Description"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdCameraProtect.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase]
"DisplayName"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
"DisplayName"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
"Description"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
"DisplayName"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"DisplayName"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"InstPath"="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
"DisplayName"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0\\PCFApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
"DisplayName"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
"Description"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdCameraProtect.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase]
"DisplayName"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
"DisplayName"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
"Description"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
"DisplayName"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"DisplayName"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"InstPath"="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
"DisplayName"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0\\PCFApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
"DisplayName"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
"Description"="Baidu Antivirus Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdApiUtil.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect]
"ImagePath"="\\??\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\BdCameraProtect.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase]
"DisplayName"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
"DisplayName"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
"Description"="Baidu Hips Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
"DisplayName"="Baidu NetDefense"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"DisplayName"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"InstPath"="C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
"DisplayName"="Baidu ProtectEx"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0\\PCFApiUtil.sys"
[HKEY_USERS\.DEFAULT\Software\Baidu]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[HKEY_USERS\.DEFAULT\Software\Baidu Security]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Install]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\alluser]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\curuser]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Statistic]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\UUReport]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\alluser]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\curuser]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hkcu]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hklm]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Setup]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic]
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=dword:00000001
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[HKEY_USERS\S-1-5-18\Software\Baidu]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[HKEY_USERS\S-1-5-18\Software\Baidu Security]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext" [05/01/2013 11:51]
==== Firefox Extensions ======================
ProfilePath: C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default
- Guardiao Itau 30 horas - %ProfilePath%\extensions\{87F8774F-B485-47E2-A755-A40A8A5E8873}
==== Firefox Plugins ======================
Profilepath: C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\w777v6lp.default
5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
E18B5B26F41D8C37CCAA7256F29F6A15 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)
1C8124B6A03A620EB0CBCA615666D2AE - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery
7ABA2EAB736F7E9EB0E03ACAA42CCB51 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[29/11/2012 19:35]
Google Wallet - Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
==== Chromium Startpages ======================
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "https://www.google.com.br/",
"startup_urls": [ "https://www.google.com.br/" ],
==== Chrome Fix ======================
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lyrics007.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pt.iminent.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_geobanner.adultfriendfinder.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_m.adultfriendfinder.com_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_photofiltre-studio-x.softonic.com.br_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_super-mario-world-x.softonic.com.br_0.localstorage-journal deleted successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.sweetpacks-search.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=sol&utm_medium=ppi&utm_campaign=portal"
"Search Page"="http://br.yhs4.search.yahoo.com/yhs/search?hspart=baixaki&hsimp=yhs-baixaki_br_solimba_01&p={searchTerms}"
"Search Bar"="http://www.google.com"
"Use Search Asst"="yes"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://www.google.com"
"SearchAssistant"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=sol&utm_medium=ppi&utm_campaign=portal"
"Use Search Asst"="no"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
==== Reset Google Chrome ======================
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== shortcuts on Users Desktops ======================
C:\Users\Pessoal\Desktop\Biblia Eletrônica.lnk -
C:\Users\Pessoal\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Pessoal\Desktop\Google Chrome.lnk - C:\Users\Pessoal\AppData\Local\Google\Chrome\Application\chrome.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
C:\Users\Pessoal\Desktop\internet explore.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\Desktop\Revo Uninstaller.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Users\Pessoal\Desktop\RemoveWAT.2.2.5.Hazar.carter67\Jogos - Atalho.lnk -
==== shortcuts on All Users Desktop ======================
C:\Users\Public\Desktop\avast Free Antivirus.lnk -
C:\Users\Public\Desktop\Foxit Reader.lnk - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe
C:\Users\Public\Desktop\QualityCapture.exe.lnk - C:\Windows\Installer\{0D171001-4ECE-44C6-A6F6-AE7884BBD480}\_7E491CC2D2090E03855699.exe
C:\Users\Public\Desktop\RealPlayer.lnk - C:\program files\real\realplayer\RealPlay.exe /launch:desktop
C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe
==== shortcuts in Users Start Menu ======================
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Users\Pessoal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe -hunter
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\uninst.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk - C:\Program Files\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url
==== shortcuts in All Users Start Menu ======================
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast\avast Free Antivirus.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123-Brazil\Desinstalar hao123.lnk - C:\Users\Pessoal\AppData\Roaming\baidu\hao123-br\hao123.1.0.0.1111.exe -uninstall
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123-Brazil\Hao123.lnk - C:\Users\Pessoal\AppData\Roaming\baidu\hao123-br\hao123.1.0.0.1111.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiPony\MiPony.lnk - C:\Program Files\MiPony\MiPony.exe
==== shortcuts in Quick Launch ======================
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Iniciar Microsoft Office Outlook.lnk - C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE /recycle
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk - C:\Windows\system32\calc.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\internet explore.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Media Player Classic.lnk - C:\Program Files\XP Codec Pack\mpc\mplayerc.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Office Word 2003.lnk - C:\Windows\Installer\{90110416-6000-11D3-8CFE-0150048383C9}\wordicon.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Skype.lnk - C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Users\Pessoal\AppData\Local\Google\Chrome\Application\chrome.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Messenger .lnk - C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\Pessoal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\WPRES20.lnk - C:\WPRES20\WPRES20.EXE
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
==== Reset IE Proxy ======================
Value(s) before fix:
"ProxyOverride"="<-loopback>"
"ProxyEnable"=dword:00000000
Value(s) after fix:
"ProxyEnable"=dword:00000000
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtTray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\removeSearchqudatamngr deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\removeSearchqutoolbar deleted successfully
==== Empty IE Cache ======================
C:\Users\Pessoal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Pessoal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
C:\Users\Pessoal\AppData\Local\Mozilla\Firefox\Profiles\w777v6lp.default\Cache emptied successfully
==== Empty Chrome Cache ======================
C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=222 folders=68 12493493 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Pessoal\AppData\Local\Temp will be emptied at reboot
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Pessoal\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Pessoal\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\FXSSVCDebugLogFile.txt" not deleted
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\FXSTIFFDebugLogFile.txt" not deleted
==== EOF on 16/08/2014 at 11:08:19,86 ======================
Joao ayres- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 09/08/2014
Re: O baidu nao sai do meu pc de jeito nenhum
por Power Max Sáb 16 Ago 2014, 12:27
Faça o download do OTM (de Old Timer) no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Selecione e copie todo o texto destacado em vermelho abaixo:
:Services
:Processes
KILLALLPROCESSES
:Services
BAVSvc
BdApiUtil
BdCameraProtect
Bfilter
Bfmon
Bhbase
BHipsEx
BHipsSvc
Bndef
Bprotect
BprotectEx
PCFApiUtil
:Files
C:\Program Files\Baidu-Security-2014-4.4.4.73687
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus
C:\ProgramData\Baidu Security
C:\Users\All Users\Baidu Security
C:\Users\Pessoal\AppData\Roaming\Baidu Security
C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
C:\Users\Public\Documents\Baidu
C:\Users\Public\Documents\Baidu Security
C:\Users\Pessoal\Downloads\Baidu Antivirus Free.exe
:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
"uuurl"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\LogLoc]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\LogUp]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Processing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp]
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-Updater-2014-02-13 02-38-24-0435-[5955].tmp"=-
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-PCFasterSvc-2014-02-13 02-38-24-0435-[5955].tmp"=-
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-PcfTray-2014-02-13 02-39-20-0922-[6138].tmp"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Baidu Antivirus"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayIcon"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"UninstallString"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"URLInfoAbout"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"Publisher"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"InstallDir"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}]
"Path"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu Antivirus Update]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
"InstPath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil]
[-HKEY_USERS\.DEFAULT\Software\Baidu]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"rcloud"=-
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"rcloud"=-
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Install]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\alluser]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\curuser]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Statistic]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\UUReport]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\alluser]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\curuser]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hkcu]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hklm]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Setup]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic]
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=-
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=-
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=-
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=-
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_USERS\S-1-5-18\Software\Baidu]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"rcloud"=-
:Commands
[createrestorepoint]
[Reboot]
Clique com o botão direito do mouse sobre o OTM.exe e escolha a opção Executar como administrador.
Cole o texto que você acabou de copiar acima no espaço em branco abaixo da frase Paste instructions for itens to be Moved
Depois disto clique no botão MoveIt!
Depois de fazer os procedimentos acima, feche o OTM. Nota: O OTM deverá pedir para reiniciar o PC para concluir o processo de eliminação dos problemas, neste caso é só confirmar clicando em Yes. Neste caso, após a reinicialização, navegue até a pasta C:\_OTMoveIt\MovedFiles e abra o mais novo arquivo com extensão .log presente, selecione e copie todo o conteúdo desse relatório e poste aqui em seu próximo post.
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Selecione e copie todo o texto destacado em vermelho abaixo:
:Services
:Processes
KILLALLPROCESSES
:Services
BAVSvc
BdApiUtil
BdCameraProtect
Bfilter
Bfmon
Bhbase
BHipsEx
BHipsSvc
Bndef
Bprotect
BprotectEx
PCFApiUtil
:Files
C:\Program Files\Baidu-Security-2014-4.4.4.73687
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus
C:\ProgramData\Baidu Security
C:\Users\All Users\Baidu Security
C:\Users\Pessoal\AppData\Roaming\Baidu Security
C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
C:\Users\Public\Documents\Baidu
C:\Users\Public\Documents\Baidu Security
C:\Users\Pessoal\Downloads\Baidu Antivirus Free.exe
:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
"uuurl"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\LogLoc]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\LogUp]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Processing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp]
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-Updater-2014-02-13 02-38-24-0435-[5955].tmp"=-
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-PCFasterSvc-2014-02-13 02-38-24-0435-[5955].tmp"=-
"C:\\ProgramData\\Baidu Security\\RpData\\rpFile-PcfTray-2014-02-13 02-39-20-0922-[6138].tmp"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Baidu Antivirus"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayName"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"DisplayIcon"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"UninstallString"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"URLInfoAbout"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"Publisher"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
"InstallDir"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}]
"Path"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu Antivirus Update]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
"Description"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
"InstPath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
"DisplayName"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx]
"InstPath"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil]
"ImagePath"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil]
[-HKEY_USERS\.DEFAULT\Software\Baidu]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp]
[-HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"rcloud"=-
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web]
"rcloud"=-
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Install]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\alluser]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\curuser]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Statistic]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\UUReport]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\alluser]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\curuser]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hkcu]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hklm]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Setup]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic]
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=-
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=-
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=-
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=-
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_USERS\S-1-5-18\Software\Baidu]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"ucloud"=-
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"dcloud"=-
[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"rcloud"=-
:Commands
[createrestorepoint]
[Reboot]
Clique com o botão direito do mouse sobre o OTM.exe e escolha a opção Executar como administrador.
Cole o texto que você acabou de copiar acima no espaço em branco abaixo da frase Paste instructions for itens to be Moved
Depois disto clique no botão MoveIt!
Depois de fazer os procedimentos acima, feche o OTM. Nota: O OTM deverá pedir para reiniciar o PC para concluir o processo de eliminação dos problemas, neste caso é só confirmar clicando em Yes. Neste caso, após a reinicialização, navegue até a pasta C:\_OTMoveIt\MovedFiles e abra o mais novo arquivo com extensão .log presente, selecione e copie todo o conteúdo desse relatório e poste aqui em seu próximo post.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: O baidu nao sai do meu pc de jeito nenhum
por Joao ayres Sáb 16 Ago 2014, 13:39
========== SERVICES/DRIVERS ==========
========== PROCESSES ==========
All processes killed
========== SERVICES/DRIVERS ==========
Service BAVSvc stopped successfully!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BAVSvc deleted successfully.
Error: No service named BdApiUtil was found to stop!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdApiUtil deleted successfully.
Error: No service named BdCameraProtect was found to stop!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdCameraProtect deleted successfully.
Error: Unable to stop service Bfilter!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter deleted successfully.
Error: Unable to stop service Bfmon!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon deleted successfully.
Error: Unable to stop service Bhbase!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase deleted successfully.
Service BHipsEx stopped successfully!
Service BHipsEx deleted successfully!
Error: Unable to stop service BHipsSvc!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsSvc deleted successfully.
Service Bndef stopped successfully!
Service Bndef deleted successfully!
Error: Unable to stop service Bprotect!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect deleted successfully.
Service BprotectEx stopped successfully!
Service BprotectEx deleted successfully!
Service PCFApiUtil stopped successfully!
Service PCFApiUtil deleted successfully!
========== FILES ==========
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\update folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\qv folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\plugscan folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Hips folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\vflog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\strlog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\numlog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\filestatlog folder moved successfully.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log scheduled to be moved on reboot.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\dump folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\dbg64 folder moved successfully.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687 scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus scheduled to be moved on reboot.
C:\ProgramData\Baidu Security\RpData folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\sysopt folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Run\Disable folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Run folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Plugins\Plugin.LeakRepair\Hotfix folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Plugins\Plugin.LeakRepair folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Plugins folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0 folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster folder moved successfully.
C:\ProgramData\Baidu Security folder moved successfully.
File/Folder C:\Users\All Users\Baidu Security not found.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK\0 folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall\0 folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Run\Disable folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Run folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\PopMsg folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0 folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster\Uninstall\0 folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster\Uninstall folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster folder moved successfully.
File/Folder C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall not found.
File/Folder C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK not found.
C:\Users\Public\Documents\Baidu\Common\I18N folder moved successfully.
C:\Users\Public\Documents\Baidu\Common folder moved successfully.
C:\Users\Public\Documents\Baidu folder moved successfully.
C:\Users\Public\Documents\Baidu Security\BavCloud folder moved successfully.
C:\Users\Public\Documents\Baidu Security folder moved successfully.
C:\Users\Pessoal\Downloads\Baidu Antivirus Free.exe moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\LogLoc\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\LogUp\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Processing\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32 not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}\\DllName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{77FEF28E-EB96-44FF-B511-3185DEA48697}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\\DllName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Baidu Antivirus deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}\\Path scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu Antivirus Update\ deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000\ scheduled to be deleted on reboot.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil\\ImagePath deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect\\ImagePath deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil\\ImagePath deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil\ deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Install\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\alluser\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\curuser\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Statistic\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\UUReport\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\alluser\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\curuser\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hkcu\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hklm\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Setup\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
========== COMMANDS ==========
Restore point Set: OTM Restore Point
OTM by OldTimer - Version 3.1.21.0 log created on 08162014_125238
Files moved on Reboot...
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\strlog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\numlog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687 folder moved successfully.
Registry entries deleted on Reboot...
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4} not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000\ not found.
========== PROCESSES ==========
All processes killed
========== SERVICES/DRIVERS ==========
Service BAVSvc stopped successfully!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BAVSvc deleted successfully.
Error: No service named BdApiUtil was found to stop!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdApiUtil deleted successfully.
Error: No service named BdCameraProtect was found to stop!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BdCameraProtect deleted successfully.
Error: Unable to stop service Bfilter!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter deleted successfully.
Error: Unable to stop service Bfmon!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon deleted successfully.
Error: Unable to stop service Bhbase!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase deleted successfully.
Service BHipsEx stopped successfully!
Service BHipsEx deleted successfully!
Error: Unable to stop service BHipsSvc!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsSvc deleted successfully.
Service Bndef stopped successfully!
Service Bndef deleted successfully!
Error: Unable to stop service Bprotect!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect deleted successfully.
Service BprotectEx stopped successfully!
Service BprotectEx deleted successfully!
Service PCFApiUtil stopped successfully!
Service PCFApiUtil deleted successfully!
========== FILES ==========
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\update folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\qv folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\plugscan folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Hips folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\vflog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\strlog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\numlog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\filestatlog folder moved successfully.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log scheduled to be moved on reboot.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\dump folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\dbg64 folder moved successfully.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687 scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus scheduled to be moved on reboot.
C:\ProgramData\Baidu Security\RpData folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\sysopt folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Run\Disable folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Run folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Plugins\Plugin.LeakRepair\Hotfix folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Plugins\Plugin.LeakRepair folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0\Plugins folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\4.0.0.0 folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster folder moved successfully.
C:\ProgramData\Baidu Security folder moved successfully.
File/Folder C:\Users\All Users\Baidu Security not found.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK\0 folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall\0 folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Run\Disable folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Run folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\PopMsg folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0 folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\Baidu Security folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster\Uninstall\0 folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster\Uninstall folder moved successfully.
C:\Users\Pessoal\AppData\Roaming\BaiduPcFaster folder moved successfully.
File/Folder C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall not found.
File/Folder C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK not found.
C:\Users\Public\Documents\Baidu\Common\I18N folder moved successfully.
C:\Users\Public\Documents\Baidu\Common folder moved successfully.
C:\Users\Public\Documents\Baidu folder moved successfully.
C:\Users\Public\Documents\Baidu Security\BavCloud folder moved successfully.
C:\Users\Public\Documents\Baidu Security folder moved successfully.
C:\Users\Pessoal\Downloads\Baidu Antivirus Free.exe moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\LogLoc\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\LogUp\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Processing\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\DefaultIcon\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\BLPFILE\shell\open\command\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32 not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\InprocServer32\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32\\@ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}\InprocServer32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}\\DllName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{77FEF28E-EB96-44FF-B511-3185DEA48697}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\\DllName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Baidu Antivirus deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}\\Path scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu Antivirus Update\ deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfilter\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bfmon\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bhbase\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bndef\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000\ scheduled to be deleted on reboot.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BAVSvc\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil\\ImagePath deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdApiUtil\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect\\ImagePath deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BdCameraProtect\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfilter\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bfmon\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bhbase\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsEx\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BHipsSvc\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bndef\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Bprotect\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx\\DisplayName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\BprotectEx\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil\\ImagePath deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\PCFApiUtil\ deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BAVSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdApiUtil\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BdCameraProtect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfilter\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bfmon\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bhbase\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BHipsSvc\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bndef\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PCFApiUtil\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Install\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\alluser\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\curuser\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hkcu\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Run\Disable\hklm\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\Statistic\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\4.0.0.0\UUReport\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\alluser\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\curuser\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hkcu\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Run\Disable\hklm\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Setup\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster\Statistic not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000_Classes\VirtualStore\MACHINE\SOFTWARE\Baidu Security\DuplicateRecord\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072314-22698-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
========== COMMANDS ==========
Restore point Set: OTM Restore Point
OTM by OldTimer - Version 3.1.21.0 log created on 08162014_125238
Files moved on Reboot...
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\strlog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log\numlog folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687 folder moved successfully.
Registry entries deleted on Reboot...
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0B71496-D98F-4BDE-BE75-51A26AAA36C4} not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BNDEF\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\0000\ not found.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000 not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000\ not found.
Joao ayres- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 09/08/2014
Re: O baidu nao sai do meu pc de jeito nenhum
por Power Max Sáb 16 Ago 2014, 13:55
Desative temporariamente seu antivírus para evitar conflitos.
*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:
Baidu;z
Baidu;a
*Clique [Run Script]
*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.
*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:
Baidu;z
Baidu;a
*Clique [Run Script]
*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: O baidu nao sai do meu pc de jeito nenhum
por Joao ayres Sáb 16 Ago 2014, 14:13
Zoek.exe v5.0.0.0 Updated 15-08-2014
Tool run by Pessoal on 16/08/2014 at 14:02:11,53.
Microsoft Windows 7 Ultimate 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Pessoal\Downloads\zoek.exe [Scan all users] [Script inserted]
==== Older Logs ======================
C:\zoek-results2014-08-16-140819.log 43157 bytes
==== Folders Found ======================
2014-08-12 14:36:28 2014-08-12 14:36:28 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-08-12 14:36:35 2014-08-12 14:36:35 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Pessoal\AppData\Roaming\baidu
2014-08-12 14:36:35 2014-08-12 14:36:35 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Pessoal\AppData\Roaming\baidu\Baidu Antivirus
2014-08-12 14:36:36 2014-08-12 14:36:36 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Public\Documents\baidu
2014-08-16 14:08:00 2014-08-16 14:08:00 -------- d-----w- C:\ProgramData\Baidu
2014-08-16 14:08:00 2014-08-16 14:08:00 -------- d-----w- C:\Users\All Users\Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_PROGRA~2_Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_Users_Pessoal_AppData_Roaming_Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_Users_Pessoal_AppData_Roaming_Baidu\Baidu Antivirus
2014-07-22 20:51:20 2014-08-16 16:01:40 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Program Files\Baidu-Security-2014-4.4.4.73687
2014-07-22 20:51:20 2014-08-16 16:01:40 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus
2014-02-13 16:33:06 2014-08-16 15:58:03 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_ProgramData\Baidu Security
2014-02-13 16:34:58 2014-08-16 15:58:03 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\AppData\Roaming\Baidu Security
2013-04-05 21:08:23 2014-08-16 15:58:04 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\AppData\Roaming\BaiduPcFaster
2014-02-13 16:40:30 2014-08-16 15:58:03 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
2014-02-13 16:40:31 2014-08-16 15:58:03 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
2014-08-14 20:43:27 2014-08-16 15:58:04 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Public\Documents\Baidu
2014-08-12 12:34:19 2014-08-16 15:58:04 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Public\Documents\Baidu Security
==== Files Found ======================
--- C:\zoek_backup\C_Windows_system32_tasks_Baidu Antivirus Update.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 3450
Created time: 2014-08-16 13:58:01
Modified time: 2014-07-22 20:51:37
MD5: 6CD9EDA31F613031163ECB8AC88DBD1E
SHA1: FAA759248366453480CD63C56F24D53A32831CEF
--- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\Downloads\Baidu Antivirus Free.exe ---
Company: Firseria.-.Installer · sl
File Description: Installer
File Version: 3.1.22.4
Product Name: Apps-manager
Copyright: copyright © 2014
Original Filename:
File type: ----a-w-
File size: 585920
Created time: 2014-08-11 15:03:02
Modified time: 2014-08-11 15:04:32
MD5: 1B4D4A1E803EB9A952330721183059D4
SHA1: 4DFE460AE5E87A8D8F944217070801D216CA0196
==== Registry Search Results for "Baidu" ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"RestoreStatusDescription"="Revo Uninstaller's restore point - Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_USERS\.DEFAULT\Software\Baidu]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster]
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=dword:00000001
[HKEY_USERS\S-1-5-18\Software\Baidu]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
==== C:\zoek_backup content ======================
C:\zoek_backup (files=222 folders=68 12493493 bytes)
==== EOF on 16/08/2014 at 14:07:15,45 ======================
Tool run by Pessoal on 16/08/2014 at 14:02:11,53.
Microsoft Windows 7 Ultimate 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Pessoal\Downloads\zoek.exe [Scan all users] [Script inserted]
==== Older Logs ======================
C:\zoek-results2014-08-16-140819.log 43157 bytes
==== Folders Found ======================
2014-08-12 14:36:28 2014-08-12 14:36:28 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-08-12 14:36:35 2014-08-12 14:36:35 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Pessoal\AppData\Roaming\baidu
2014-08-12 14:36:35 2014-08-12 14:36:35 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Pessoal\AppData\Roaming\baidu\Baidu Antivirus
2014-08-12 14:36:36 2014-08-12 14:36:36 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Public\Documents\baidu
2014-08-16 14:08:00 2014-08-16 14:08:00 -------- d-----w- C:\ProgramData\Baidu
2014-08-16 14:08:00 2014-08-16 14:08:00 -------- d-----w- C:\Users\All Users\Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_PROGRA~2_Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_Users_Pessoal_AppData_Roaming_Baidu
2014-08-16 13:57:54 2014-08-16 13:57:54 -------- d---a-w- C:\zoek_backup\C_Users_Pessoal_AppData_Roaming_Baidu\Baidu Antivirus
2014-07-22 20:51:20 2014-08-16 16:01:40 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Program Files\Baidu-Security-2014-4.4.4.73687
2014-07-22 20:51:20 2014-08-16 16:01:40 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus
2014-02-13 16:33:06 2014-08-16 15:58:03 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_ProgramData\Baidu Security
2014-02-13 16:34:58 2014-08-16 15:58:03 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\AppData\Roaming\Baidu Security
2013-04-05 21:08:23 2014-08-16 15:58:04 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\AppData\Roaming\BaiduPcFaster
2014-02-13 16:40:30 2014-08-16 15:58:03 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
2014-02-13 16:40:31 2014-08-16 15:58:03 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
2014-08-14 20:43:27 2014-08-16 15:58:04 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Public\Documents\Baidu
2014-08-12 12:34:19 2014-08-16 15:58:04 -------- d-----w- C:\_OTM\MovedFiles\08162014_125238\C_Users\Public\Documents\Baidu Security
==== Files Found ======================
--- C:\zoek_backup\C_Windows_system32_tasks_Baidu Antivirus Update.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 3450
Created time: 2014-08-16 13:58:01
Modified time: 2014-07-22 20:51:37
MD5: 6CD9EDA31F613031163ECB8AC88DBD1E
SHA1: FAA759248366453480CD63C56F24D53A32831CEF
--- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\Downloads\Baidu Antivirus Free.exe ---
Company: Firseria.-.Installer · sl
File Description: Installer
File Version: 3.1.22.4
Product Name: Apps-manager
Copyright: copyright © 2014
Original Filename:
File type: ----a-w-
File size: 585920
Created time: 2014-08-11 15:03:02
Modified time: 2014-08-11 15:04:32
MD5: 1B4D4A1E803EB9A952330721183059D4
SHA1: 4DFE460AE5E87A8D8F944217070801D216CA0196
==== Registry Search Results for "Baidu" ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"RestoreStatusDescription"="Revo Uninstaller's restore point - Baidu Antivirus"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_USERS\.DEFAULT\Software\Baidu]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster]
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=dword:00000001
[HKEY_USERS\S-1-5-18\Software\Baidu]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
==== C:\zoek_backup content ======================
C:\zoek_backup (files=222 folders=68 12493493 bytes)
==== EOF on 16/08/2014 at 14:07:15,45 ======================
Joao ayres- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 09/08/2014
Re: O baidu nao sai do meu pc de jeito nenhum
por Power Max Sáb 16 Ago 2014, 16:21
Selecione e copie todo o texto destacado em vermelho abaixo:
:Services
:Processes
KILLALLPROCESSES
:Files
C:\ProgramData\Baidu
C:\Users\All Users\Baidu
:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"RestoreStatusDescription"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
[-HKEY_USERS\.DEFAULT\Software\Baidu]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster]
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=-
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=-
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=-
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=-
[-HKEY_USERS\S-1-5-18\Software\Baidu]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
:Commands
[createrestorepoint]
[Reboot]
Clique com o botão direito do mouse sobre o OTM.exe e escolha a opção Executar como administrador.
Cole o texto que você acabou de copiar acima no espaço em branco abaixo da frase Paste instructions for itens to be Moved
Depois disto clique no botão MoveIt!
Depois de fazer os procedimentos acima, feche o OTM. Nota: O OTM deverá pedir para reiniciar o PC para concluir o processo de eliminação dos problemas, neste caso é só confirmar clicando em Yes. Neste caso, após a reinicialização, navegue até a pasta C:\_OTMoveIt\MovedFiles e abra o mais novo arquivo com extensão .log presente, selecione e copie todo o conteúdo desse relatório e poste aqui em seu próximo post.
:Services
:Processes
KILLALLPROCESSES
:Files
C:\ProgramData\Baidu
C:\Users\All Users\Baidu
:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"RestoreStatusDescription"=-
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"=-
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
[-HKEY_USERS\.DEFAULT\Software\Baidu]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
[-HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security]
[HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster]
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=-
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=-
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=-
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=-
[-HKEY_USERS\S-1-5-18\Software\Baidu]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]
[-HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]
:Commands
[createrestorepoint]
[Reboot]
Clique com o botão direito do mouse sobre o OTM.exe e escolha a opção Executar como administrador.
Cole o texto que você acabou de copiar acima no espaço em branco abaixo da frase Paste instructions for itens to be Moved
Depois disto clique no botão MoveIt!
Depois de fazer os procedimentos acima, feche o OTM. Nota: O OTM deverá pedir para reiniciar o PC para concluir o processo de eliminação dos problemas, neste caso é só confirmar clicando em Yes. Neste caso, após a reinicialização, navegue até a pasta C:\_OTMoveIt\MovedFiles e abra o mais novo arquivo com extensão .log presente, selecione e copie todo o conteúdo desse relatório e poste aqui em seu próximo post.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: O baidu nao sai do meu pc de jeito nenhum
por Joao ayres Seg 18 Ago 2014, 10:10
========== SERVICES/DRIVERS ==========
========== PROCESSES ==========
All processes killed
========== FILES ==========
C:\ProgramData\Baidu\Antivirus folder moved successfully.
C:\ProgramData\Baidu folder moved successfully.
File/Folder C:\Users\All Users\Baidu not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\\RestoreStatusDescription deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
========== COMMANDS ==========
Restore point Set: OTM Restore Point
OTM by OldTimer - Version 3.1.21.0 log created on 08182014_100222
Files moved on Reboot...
Registry entries deleted on Reboot...
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
========== PROCESSES ==========
All processes killed
========== FILES ==========
C:\ProgramData\Baidu\Antivirus folder moved successfully.
C:\ProgramData\Baidu folder moved successfully.
File/Folder C:\Users\All Users\Baidu not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\\RestoreStatusDescription deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster not found.
Registry key HKEY_USERS\S-1-5-21-3560792530-821738648-2039541334-1000\Software\Baidu Security\PC Faster not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
========== COMMANDS ==========
Restore point Set: OTM Restore Point
OTM by OldTimer - Version 3.1.21.0 log created on 08182014_100222
Files moved on Reboot...
Registry entries deleted on Reboot...
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\\DeviceDesc scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000\ scheduled to be deleted on reboot.
Joao ayres- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 09/08/2014
Re: O baidu nao sai do meu pc de jeito nenhum
por Power Max Seg 18 Ago 2014, 10:13
Desative temporariamente seu antivírus para evitar conflitos.
*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:
Baidu;z
Baidu;a
*Clique [Run Script]
*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.
*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:
Baidu;z
Baidu;a
*Clique [Run Script]
*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: O baidu nao sai do meu pc de jeito nenhum
por Joao ayres Seg 18 Ago 2014, 11:03
--- C:\_OTM\MovedFiles\08162014_125238\C_Users\Pessoal\Downloads\Baidu Antivirus Free.exe ---
Company: Firseria.-.Installer · sl
File Description: Installer
File Version: 3.1.22.4
Product Name: Apps-manager
Copyright: copyright © 2014
Original Filename:
File type: ----a-w-
File size: 585920
Created time: 2014-08-11 15:03:02
Modified time: 2014-08-11 15:04:32
MD5: 1B4D4A1E803EB9A952330721183059D4
SHA1: 4DFE460AE5E87A8D8F944217070801D216CA0196
==== Registry Search Results for "Baidu" ======================
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000]
"DeviceDesc"="Baidu Antivirus Minifilter Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000]
"DeviceDesc"="Baidu FS Monitor Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000]
"DeviceDesc"="Baidu Protect"
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Temp\\Baidu_Secure_SystemUp_4.0.1.56634.exe"=dword:00000001
"C:\\Users\\Pessoal\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\EJZLVYNC\\GoogleEarthPluginSetup[1].exe"=dword:00000001
"C:\\Users\\Pessoal\\Downloads\\Baidu Antivirus Free.exe"=dword:00000001
==== C:\zoek_backup content ======================
C:\zoek_backup (files=222 folders=68 12493493 bytes)
==== EOF on 18/08/2014 at 10:38:23,52 ======================
Joao ayres- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 09/08/2014
Re: O baidu nao sai do meu pc de jeito nenhum
por Power Max Seg 18 Ago 2014, 11:18
Desative temporariamente seu antivírus para evitar conflitos.
*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:
createsrpoint;
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000];r
Baidu;z
Baidu;a
*Clique [Run Script]
*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.
*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:
createsrpoint;
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000];r
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000];r
"DeviceDesc"=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\0000];r
Baidu;z
Baidu;a
*Clique [Run Script]
*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
*Caso a reinicialização do PC seja solicitada, clique [OK]
* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: O baidu nao sai do meu pc de jeito nenhum
por joram Qui 18 Set 2014, 11:00
Tópico Arquivado
Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.
Como o autor não respondeu por mais de 30 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.
joram- Administrador
- Mensagens : 4162
Reputação : 471
Data de inscrição : 26/01/2014
Localização : Rio de Janeiro
Página 1 de 1
Permissões neste sub-fórum
Não podes responder a tópicos|
|
|