Problema com Tela Azul e programas que não querem desinstalar

por Lucas H. O. Ter 12 Ago 2014, 12:08

Olá, recentemente meu PC apresentou alguns problemas. Inicialmente ficando lento e travando (até aqui, acompanhado às vezes da tela preta, que acusava erro no boot), depois aparecendo a Tela Azul da Morte (já aqui não aparecia a tela preta). Não me incomodei, na primeira, segunda e terceira vez. Na quarta começou a me preocupar e quando a frequência aumentou, fui tentar resolver.

Bom... quando aparece a tela azul da morte, aparece abaixo isto: 'IRQL_NOT_LESS_OR_EQUAL'

Fui pesquisar e, segundo a pesquisa, significava que os drivers estavam incompatíveis ou era algum problema no Hardware. Baixei o Driver Booster e atualizei os drivers. O problema persistiu. Depois, pensando que fosse o Baidu, o desinstalei. Após os dois feitos a frequência até diminuiu. Depois baixei o Bluescreenview e encontrei várias 'causas'. Não sabia o que fazer... por fim encontrei um vídeo para otimizar o computador. Nele foi indicado usar a ferramenta Ccleaner, ir em registro, analisar erros e corrigi-los. Fiz... e novamente usei o bluescreenview, e o que apareceu antes sumiu. Caso a tela azul da morte persista, o que fazer?

O outro problema é alguns programas que não querem desinstalar, e na verdade, um software que não utilizo e nem sei como foi parar lá: PC_Sustainer.

por **Power Max** Ter 12 Ago 2014, 12:45

Olá Lucas. Seja bem vindo ao Fórum PC Brasil.

Problema com Tela Azul e programas que não querem desinstalar 772309

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

por Lucas H. O. Ter 12 Ago 2014, 13:23

Aqui está

# AdwCleaner v3.304 - Relatório criado 12/08/2014 às 13:16:26
# Atualizado 08/08/2014 por Xplode
# Sistema Operacional : Windows 8 Pro (32 bits)
# Usuário : Jarves - LUCAS
# Executando de : C:\Users\Jarves\Downloads\AdwCleaner.exe
# Opção : Examinar

***** [ Serviços ] *****

Serviço Encontrado : qknfd

***** [ Arquivos / Pastas ] *****

Arquivo Encontrado : C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Arquivo Encontrado : C:\Users\Jarves\daemonprocess.txt
Pasta Encontrado : C:\Program Files\Adblocker
Pasta Encontrado : C:\Program Files\Adblocker
Pasta Encontrado : C:\Program Files\BringStar
Pasta Encontrado : C:\Program Files\Mobogenie
Pasta Encontrado : C:\Program Files\NeextuCoeup
Pasta Encontrado : C:\Program Files\orbitdownloader
Pasta Encontrado : C:\Program Files\ppricechop
Pasta Encontrado : C:\ProgramData\Adblocker
Pasta Encontrado : C:\ProgramData\Adblocker
Pasta Encontrado : C:\ProgramData\apn
Pasta Encontrado : C:\ProgramData\baidu
Pasta Encontrado : C:\ProgramData\eSafe
Pasta Encontrado : C:\ProgramData\NeextuCoeup
Pasta Encontrado : C:\ProgramData\ppricechop
Pasta Encontrado : C:\Users\Administrador\AppData\Local\Chromatic Browser
Pasta Encontrado : C:\Users\Administrador\AppData\Local\torch
Pasta Encontrado : C:\Users\Convidado\AppData\Local\Chromatic Browser
Pasta Encontrado : C:\Users\Convidado\AppData\Local\torch
Pasta Encontrado : C:\Users\Jarves\AppData\Local\BeamriseUninstall
Pasta Encontrado : C:\Users\Jarves\AppData\Local\Chromatic Browser
Pasta Encontrado : C:\Users\Jarves\AppData\Local\DProtect
Pasta Encontrado : C:\Users\Jarves\AppData\Local\genienext
Pasta Encontrado : C:\Users\Jarves\AppData\Local\Mobogenie
Pasta Encontrado : C:\Users\Jarves\AppData\Local\torch
Pasta Encontrado : C:\Users\Jarves\AppData\Local\VNT
Pasta Encontrado : C:\Users\Jarves\AppData\Roaming\baidu
Pasta Encontrado : C:\Users\Jarves\AppData\Roaming\newnext.me
Pasta Encontrado : C:\Users\Jarves\AppData\Roaming\RocketUpdater
Pasta Encontrado : C:\Users\Jarves\AppData\Roaming\UpdaterEX
Pasta Encontrado : C:\Users\Jarves\Documents\Mobogenie
Pasta Encontrado : C:\Users\Public\Documents\baidu
Pasta Encontrado : C:\Users\UpdatusUser\AppData\Local\Chromatic Browser
Pasta Encontrado : C:\Users\UpdatusUser\AppData\Local\torch

***** [ Tarefas ] *****

Tarefa Encontrada : Driver Booster Scan
Tarefa Encontrada : Driver Booster Update
Tarefa Encontrada : Rocket Updater
Tarefa Encontrada : UpdaterEX

***** [ Atalhos ] *****

Atalho Encontrado : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk ( [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] )
Atalho Encontrado : C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk ( [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] )
Atalho Encontrado : C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk ( [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] )
Atalho Encontrado : C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk ( [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] )
Atalho Encontrado : C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk ( [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] )

***** [ Registro ] *****

Chave Encontrada : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Encontrada : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Encontrada : HKCU\Software\AppDataLow\Software\Crossrider
Chave Encontrada : HKCU\Software\BI
Chave Encontrada : HKCU\Software\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Chave Encontrada : HKCU\Software\Headlight
Chave Encontrada : HKCU\Software\InstallCore
Chave Encontrada : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Download by Orbit
Chave Encontrada : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Grab video by Orbit
Chave Encontrada : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Do&wnload selected by Orbit
Chave Encontrada : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Down&load all by Orbit
Chave Encontrada : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Chave Encontrada : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Encontrada : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Chave Encontrada : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Chave Encontrada : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Encontrada : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Encontrada : HKCU\Software\Orbit
Chave Encontrada : HKCU\Software\Rocket Browser
Chave Encontrada : HKCU\Software\RocketUpdater
Chave Encontrada : HKCU\Software\Softonic
Chave Encontrada : HKCU\Software\UpdaterEX
Chave Encontrada : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Encontrada : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Encontrada : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Chave Encontrada : HKLM\SOFTWARE\Classes\CLSID\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Encontrada : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Encontrada : HKLM\SOFTWARE\Classes\CLSID\{3F1D494B-0CEF-4468-96C9-386E2E4DEC90}
Chave Encontrada : HKLM\SOFTWARE\Classes\CLSID\{7854F00C-DC77-477E-A10E-603F48442D3B}
Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{A0880527-DC28-4EBB-BA27-D22102F22A9F}
Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{BCDDE143-FAE3-4C57-B22B-C4E8678CFDC0}
Chave Encontrada : HKLM\SOFTWARE\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Chave Encontrada : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{32148148}
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Orbit_is1
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-1337081322
Chave Encontrada : HKLM\Software\Orbit
Chave Encontrada : HKLM\Software\portaldositesSoftware
Chave Encontrada : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Dados Encontrada : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Dados Encontrada : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\Users\Jarves\AppData\Local\DProtect\eBP.dll,C:\Users\Jarves\AppData\Local\DProtect\eBPSD.dll
Valor Encontrada : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Valor Encontrada : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Orbitdownloader\orbitdm.exe]
Valor Encontrada : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Orbitdownloader\orbitnet.exe]

***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16688

Configurações Encontrado : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Configurações Encontrado : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Configurações Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Configurações Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

-\\ Google Chrome v35.0.1916.153

[ Arquivo : C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Encontrada [Extension] : ibnjmihbbanannlbobkbmnmckjnmdnom

*************************

AdwCleaner[R0].txt - [10353 octets] - [12/08/2014 13:16:26]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [10414 octets] ##########

por **Power Max** Ter 12 Ago 2014, 13:24

Você usou só a opção de Examinar.

É preciso clicar no botão Limpar e ir seguindo os passos que estão descritos no tutorial que te passei. Depois disto poste o relatório que estará em C:\AdwCleaner\AdwCleaner[S0].txt

por Lucas H. O. Ter 12 Ago 2014, 13:32

Pronto

# AdwCleaner v3.304 - Relatório criado 12/08/2014 às 13:26:55
# Atualizado 08/08/2014 por Xplode
# Sistema Operacional : Windows 8 Pro (32 bits)
# Usuário : Jarves - LUCAS
# Executando de : C:\Users\Jarves\Downloads\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

Serviço Deletada : qknfd

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\Adblocker
Pasta Deletada : C:\ProgramData\apn
Pasta Deletada : C:\ProgramData\baidu
Pasta Deletada : C:\ProgramData\eSafe
Pasta Deletada : C:\ProgramData\NeextuCoeup
Pasta Deletada : C:\ProgramData\ppricechop
Pasta Deletada : C:\Program Files\Adblocker
Pasta Deletada : C:\Program Files\BringStar
Pasta Deletada : C:\Program Files\Mobogenie
[!] Pasta Deletada : C:\Program Files\orbitdownloader
Pasta Deletada : C:\Program Files\NeextuCoeup
Pasta Deletada : C:\Program Files\ppricechop
Pasta Deletada : C:\Users\Administrador\AppData\Local\Chromatic Browser
Pasta Deletada : C:\Users\Administrador\AppData\Local\torch
Pasta Deletada : C:\Users\Convidado\AppData\Local\Chromatic Browser
Pasta Deletada : C:\Users\Convidado\AppData\Local\torch
Pasta Deletada : C:\Users\Jarves\AppData\Local\BeamriseUninstall
Pasta Deletada : C:\Users\Jarves\AppData\Local\Chromatic Browser
Pasta Deletada : C:\Users\Jarves\AppData\Local\DProtect
Pasta Deletada : C:\Users\Jarves\AppData\Local\genienext
Pasta Deletada : C:\Users\Jarves\AppData\Local\Mobogenie
Pasta Deletada : C:\Users\Jarves\AppData\Local\torch
Pasta Deletada : C:\Users\Jarves\AppData\Local\VNT
Pasta Deletada : C:\Users\Jarves\AppData\Roaming\baidu
Pasta Deletada : C:\Users\Jarves\AppData\Roaming\newnext.me
Pasta Deletada : C:\Users\Jarves\AppData\Roaming\RocketUpdater
Pasta Deletada : C:\Users\Jarves\AppData\Roaming\UpdaterEX
Pasta Deletada : C:\Users\Jarves\Documents\Mobogenie
Pasta Deletada : C:\Users\Public\Documents\baidu
Pasta Deletada : C:\Users\UpdatusUser\AppData\Local\Chromatic Browser
Pasta Deletada : C:\Users\UpdatusUser\AppData\Local\torch
Arquivo Deletada : C:\Users\Jarves\daemonprocess.txt
Arquivo Deletada : C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage

***** [ Tarefas ] *****

Tarefa Deletedo : Driver Booster Scan
Tarefa Deletedo : Driver Booster Update
Tarefa Deletedo : Rocket Updater
Tarefa Deletedo : UpdaterEX

***** [ Atalhos ] *****

Atalho Desinfectada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Atalho Desinfectada : C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Atalho Desinfectada : C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Atalho Desinfectada : C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Atalho Desinfectada : C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk

***** [ Registro ] *****

Chave Deletedo : HKCU\Software\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Download by Orbit
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Grab video by Orbit
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Do&wnload selected by Orbit
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Down&load all by Orbit
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Chave Deletedo : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-1337081322
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{32148148}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{3F1D494B-0CEF-4468-96C9-386E2E4DEC90}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{7854F00C-DC77-477E-A10E-603F48442D3B}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{A0880527-DC28-4EBB-BA27-D22102F22A9F}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{BCDDE143-FAE3-4C57-B22B-C4E8678CFDC0}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Dados Restaurada : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Valor Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Orbitdownloader\orbitdm.exe]
Valor Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Orbitdownloader\orbitnet.exe]
Chave Deletedo : HKCU\Software\BI
Chave Deletedo : HKCU\Software\Headlight
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\Orbit
Chave Deletedo : HKCU\Software\Rocket Browser
Chave Deletedo : HKCU\Software\RocketUpdater
Chave Deletedo : HKCU\Software\Softonic
Chave Deletedo : HKCU\Software\UpdaterEX
Chave Deletedo : HKCU\Software\AppDataLow\Software\Crossrider
Chave Deletedo : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Deletedo : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Chave Deletedo : HKLM\Software\Orbit
Chave Deletedo : HKLM\Software\portaldositesSoftware
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Orbit_is1

***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16688

Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v35.0.1916.153

[ Arquivo : C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Extension] : ibnjmihbbanannlbobkbmnmckjnmdnom

*************************

AdwCleaner[S0].txt - [8745 octets] - [12/08/2014 13:26:55]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8805 octets] ##########

por **Power Max** Ter 12 Ago 2014, 13:37

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

por Lucas H. O. Ter 12 Ago 2014, 13:56

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8 Pro x86
Ran by Jarves on 12/08/2014 at 13:46:27,69
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Users\Jarves\AppData\Roaming\getrighttogo"

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12/08/2014 at 13:54:23,99
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

por **Power Max** Ter 12 Ago 2014, 13:57

Desative temporariamente seu antivírus para evitar conflitos.

Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

por Lucas H. O. Ter 12 Ago 2014, 14:25

Zoek.exe v5.0.0.0 Updated 11-August-2014
Tool run by Jarves on 12/08/2014 at 14:08:55,58.
Microsoft Windows 8 Pro 6.2.9200 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jarves\Downloads\zoek\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

12/08/2014 14:09:29 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\Program Files\Ruta deleted successfully
C:\Program Files\Skype deleted successfully
C:\Program Files\VS Revo Group deleted successfully
C:\Users\Jarves\AppData\Roaming\Vso deleted successfully
C:\Users\Jarves\AppData\Local\PointBlank deleted successfully
C:\Users\Jarves\AppData\Local\WMTools Downloaded Files deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\Users\Jarves\.android deleted
C:\Program Files\PC_Booster deleted
C:\Editor.exe deleted
C:\PROGRA~2\FileSplitUpLoad.dll deleted
C:\PROGRA~2\InstallMate deleted
C:\Users\Jarves\AppData\Local\cache deleted
C:\Users\Jarves\Searches deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\Baidu deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{3D0F43D9-C1D7-733C-01F8-4A3001BF8CC3}.20140807193010" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{3D0F43D9-C1D7-733C-01F8-4A3001BF8CC3}.20140807194259" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{4820778D-AB0D-6D18-C316-52A6A0E1D507}.20140717042104" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{4820778D-AB0D-6D18-C316-52A6A0E1D507}.20140729091241" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{4820778D-AB0D-6D18-C316-52A6A0E1D507}.20140729091427" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}.20140717042124" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{FDB962F0-B5B8-9460-D12F-7966E97BAA43}.20140717041933" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{FDB962F0-B5B8-9460-D12F-7966E97BAA43}.20140717042028" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{FDB962F0-B5B8-9460-D12F-7966E97BAA43}.20140717043754" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{FDB962F0-B5B8-9460-D12F-7966E97BAA43}.20140807192850" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad\{FDB962F0-B5B8-9460-D12F-7966E97BAA43}.20140807193011" deleted
"C:\PROGRA~2\9f2d5d20e6c6ffad" deleted

==== Folders Found ======================

2014-08-12 16:27:00 2014-08-12 16:27:00 -------- d-----w- C:\AdwCleaner\Quarantine\C\ProgramData\baidu
2014-08-12 16:27:14 2014-08-12 16:27:14 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Jarves\AppData\Roaming\baidu
2014-08-12 16:27:14 2014-08-12 16:27:14 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Jarves\AppData\Roaming\baidu\Baidu Antivirus
2014-08-12 16:27:15 2014-08-12 16:27:15 -------- d-----w- C:\AdwCleaner\Quarantine\C\Users\Public\Documents\baidu
2013-10-04 23:01:06 2013-12-25 22:58:39 -------- d-----w- C:\Program Files\Baidu Security
2014-06-29 19:19:49 2014-06-29 19:19:49 -------- d-----w- C:\Program Files\Baidu-Security-2014-4.4.4.73687
2013-12-25 22:58:39 2014-04-10 12:44:14 -------- d-----w- C:\Program Files\Baidu Security\Baidu Antivirus
2014-06-29 19:19:49 2014-07-16 21:07:48 -------- d-----w- C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus
2013-10-04 23:01:06 2014-07-17 07:26:55 -------- d-----w- C:\ProgramData\Baidu Security
2013-10-04 23:01:06 2014-07-17 07:26:55 -------- d-----w- C:\Users\All Users\Baidu Security
2013-10-04 23:01:29 2013-10-04 23:01:29 -------- d-----w- C:\Users\Jarves\AppData\Roaming\Baidu Security
2013-10-04 23:57:52 2013-10-04 23:57:52 -------- d-----w- C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall\Baidu PC Faster Uninstall
2013-10-04 23:57:52 2013-10-04 23:57:52 -------- d-----w- C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall\Baidu PC Faster Uninstall HK
2013-10-04 23:01:10 2013-10-04 23:01:36 -------- d-----w- C:\Users\Public\Documents\Baidu Security
2014-08-12 17:16:39 2014-08-12 17:16:39 -------- d---a-w- C:\zoek_backup\C_Windows_system32_config_systemprofile_AppData_LocalLow_Baidu

==== Files Found ======================

--- C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\icon\baidu_engine_ico.png ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 1323
Created time: 2014-06-29 19:18:53
Modified time: 2014-01-13 13:40:30
MD5: FBCB3967D17EC32B5C06AA8811A53A5B
SHA1: DF0B4F19325E070A20E9CA9AEB75E863DFBCBDD1

--- C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\icon\baidu_engine_ico_gray.png ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 1338
Created time: 2014-06-29 19:18:53
Modified time: 2014-01-13 13:40:30
MD5: BD2291EAA1C833CCA729214DFBE7B341
SHA1: FD6D550FE31ACDF679ED6005C47638DA7FB82BFB

--- C:\Users\Jarves\AppData\Roaming\Orbit\icon\Baidu Antivirus.ico ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 134564
Created time: 2014-06-29 21:12:00
Modified time: 2014-08-11 01:48:26
MD5: B0FFF8DFF910C8E14CB071D9A6220E43
SHA1: 2E6B606191ABB3376D230B23DE9E00BA40BC35D0

==== Registry Search Results for "Baidu" ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus]
"uuurl"="http://sync.br.bav.baidu.com/cgi-bin/report_uu_msg_bavv2.cgi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]

[HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"="baidubar.dll;BaiduBarX.dll;BaiduBarX.dll;BaiduBarX.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bhbase]
"DisplayName"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bndef]
"DisplayName"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect]
"InstPath"="D:\\Program Files\\Baidu-Security-2014-4.4.4.77038\\Baidu Antivirus\\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BprotectEx]
"DisplayName"="Baidu ProtectEx"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\3.7.0.0"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter]
"DisplayName"="Baidu Antivirus Minifilter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon]
"DisplayName"="Baidu FS Monitor Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase]
"DisplayName"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsEx]
"DisplayName"="Baidu HipsEx Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bndef]
"DisplayName"="Baidu NetDefense"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"DisplayName"="Baidu Protect"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect]
"InstPath"="D:\\Program Files\\Baidu-Security-2014-4.4.4.77038\\Baidu Antivirus\\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BprotectEx]
"DisplayName"="Baidu ProtectEx"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\3.7.0.0"

[HKEY_USERS\.DEFAULT\Software\Baidu]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

[HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]

[HKEY_USERS\.DEFAULT\Software\Baidu Security]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072614-60231-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072814-16801-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072814-16801-01.dmp]
"zippath"="D:\\Program Files\\Baidu-Security-2014-4.4.4.77038\\Baidu Antivirus\\dump\\WD-WMAV2-00270E19A7B0_072814-16801-01.zip"

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072914-13026-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080614-13743-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080614-15272-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080714-12526-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080714-12714-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080714-13228-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080714-13416-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080814-13197-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-12355-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-12854-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-13182-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-13244-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-13306-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-16286-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-12105-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-12994-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-13244-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-13681-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-14367-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\092313-16021-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\092513-13852-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\MEMORY_130521114545704337.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

[HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\bug]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\bug\driver]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\bug\driver\092313-16021-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\bug\driver\092513-13852-01.dmp]

[HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\DataReport]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Install]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\alluser]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\curuser]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\hkcu]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\hklm]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Statistic]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\UUReport]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\DataReport]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\Setup]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\BitTorrent\uTorrent]
"OfferName"="Baidu AntiVirus"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Uninstall.exe"=hex:53,\

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\hao123desk]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\hao123desk]
"ToyPath"="C:\\Users\\UpdatusUser\\AppData\\Roaming\\baidu\\hao123-br\\hao123.1.0.0.1111.exe"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\hao123desk]
"BaiduTn"="tn=incore_pay_sc_05_hao123_br"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\hao123desk]
"NewBaiduTn"="tn=incore_pay_sc_05_hao123_br"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\PC Faster]

[HKEY_USERS\S-1-5-18\Software\Baidu]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe]

[HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe]

[HKEY_USERS\S-1-5-18\Software\Baidu Security]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072614-60231-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072814-16801-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072814-16801-01.dmp]
"zippath"="D:\\Program Files\\Baidu-Security-2014-4.4.4.77038\\Baidu Antivirus\\dump\\WD-WMAV2-00270E19A7B0_072814-16801-01.zip"

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072914-13026-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080614-13743-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080614-15272-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080714-12526-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080714-12714-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080714-13228-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080714-13416-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080814-13197-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-12355-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-12854-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-13182-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-13244-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-13306-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-16286-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-12105-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-12994-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-13244-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-13681-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-14367-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\092313-16021-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\092513-13852-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\MEMORY_130521114545704337.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"ucloud"="u.br.bav.baidu.com"

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"dcloud"="http://up.br.bav.baidu.com/cgi-bin/url_warnning/url_warnning.cgi"

[HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web]
"rcloud"="http://up.br.bav.baidu.com/cgi-bin/url_visit_action.cgi"

[HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug\driver]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug\driver\092313-16021-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug\driver\092513-13852-01.dmp]

[HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\DataReport]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"quiknowledge@quiknowledge.com"="C:\Program Files\Mozilla Firefox\extensions\quiknowledge@quiknowledge.com" []

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[12/08/2014 12:45]

priucechopu - Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - Jarves\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Jarves\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Jarves\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
OpenSubtitles Utilities - Jarves\AppData\Local\Google\Chrome\User Data\Default\Extensions\bokkhpcjhfanbnpfgkjdcjfdfohdlbpf
avast Online Security - Jarves\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
NeextuCoeup - Jarves\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Downloader - Jarves\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp
Google Wallet - Jarves\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
APK Downloader - Jarves\AppData\Local\Google\Chrome\User Data\Default\Extensions\obhlfmheblhjhkmacldlhdnbgbaiigba
Quebrador de Links - Jarves\AppData\Local\Google\Chrome\User Data\Default\Extensions\pchaoppopfjnlficjlobfjhfceadbfla
Docs - Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake
priucechopu - Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - Jarves\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - Jarves\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - Jarves\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga
priucechopu - UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda
NeextuCoeup - UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom
Favorite Doodle - UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga

==== Chromium Startpages ======================

C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences
"homepage": "http://rocket-find.com/?f=1&a=rckt_ir_14_26_ch&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtCzy0AyB0BtDtB0CtDzztN0D0Tzu0SzytCtCtN1L2XzutBtFtBtCtFzztFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEyCyByCtCtDzytCtG0BtB0D0BtGyCyB0D0EtGtBtB0EyEtGyC0BtAyCtBzy0FyBtAtB0E0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0E0AyByDtDyE0EtG0DtByEzytGtByEtByEtGyByDzy0FtGtD0F0FzzyC0DtB0CyBtAtC0A2Q&cr=1486364606&ir=",

==== Chrome Fix ======================

C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.speedanalysis.net_0.localstorage deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.best-deals-products.com_0.localstorage deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.best-deals-products.com_0.localstorage deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_game-booster.softonic.com.br_0.localstorage deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.softonic.com.br_0.localstorage deleted successfully
C:\Users\Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Jarves\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cfgbidhnjbddpfecgikdlpbalakeecda deleted successfully
C:\Users\Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Jarves\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\imcmgnlfachihddepknccjoelhmemhom deleted successfully
C:\Users\Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\Jarves\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\Jarves\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully
C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nedjejdfkkjgebciefdfofjhmeogiaga deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences was reset successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\quiknowledge@quiknowledge.com deleted successfully

==== shortcuts on Users Desktops ======================

C:\Users\Jarves\Desktop\Artigos Científicos.lnk -
C:\Users\Jarves\Desktop\Cursar Biologia.lnk - H:\Ciência\Cursar Biologia
C:\Users\Jarves\Desktop\My Lockbox Control Panel.lnk - C:\Program Files\My Lockbox\mylbx.exe /cp
C:\Users\Jarves\Desktop\My Lockbox.lnk - C:\Program Files\My Lockbox\mylbx.exe /f
C:\Users\Jarves\Desktop\Word 2013.lnk - C:\Windows\Installer\{90150000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\Jarves\Desktop\Ídolos e Admiradores(as).lnk -
C:\Users\Jarves\Desktop\Neurosoftware\Acelerador de Leitura.lnk - C:\Program Files\Acelerador de Leitura\Acelerador de Leitura.exe
C:\Users\Jarves\Desktop\Neurosoftware\Acelerador de Memoria.lnk - C:\Program Files\Acelerador de Memoria\Acelerador de Memoria.exe
C:\Users\Jarves\Desktop\Neurosoftware\Acelerador de Raciocinio.lnk - C:\Program Files\Acelerador de Raciocinio\Acelerador de Raciocinio.exe
C:\Users\Jarves\Desktop\Neurosoftware\Jogos para Inteligencia 1.lnk - C:\Program Files\Jogos para Inteligencia 1\Jogos para Inteligencia 1.EXE
C:\Users\Jarves\Desktop\Neurosoftware\Leitura Superdinamica.lnk - C:\Program Files\Leitura Superdinamica\Leitura Superdinamica.exe
C:\Users\Jarves\Desktop\Neurosoftware\Memoria de genio.lnk - C:\Program Files\Memoria de Genio\Memoria de genio.exe
C:\Users\Jarves\Desktop\Neurosoftware\Raciocinio Turbinado.lnk - C:\Program Files\Raciocinio Turbinado\Raciocinio Turbinado.exe
C:\Users\Jarves\Desktop\Neurosoftware\Ruta.lnk - C:\Windows\Ruta.exe
C:\Users\UpdatusUser\Desktop\Hao123.lnk - C:\Users\Jarves\AppData\Roaming\Baidu\hao123-br\hao123.1.0.0.1111.exe
C:\Users\UpdatusUser\Desktop\Media Subtitler.lnk - C:\Program Files\DivXLand\Media Subtitler\MediaSub.exe
C:\Users\UpdatusUser\Desktop\PhotoScape.lnk - C:\Program Files\PhotoScape\PhotoScape.exe
C:\Users\UpdatusUser\Desktop\PointBlank.lnk - C:\ongame\Pointblank\PBLauncher.exe
C:\Users\UpdatusUser\Desktop\Ruta.lnk - C:\Windows\Ruta.exe
C:\Users\UpdatusUser\Desktop\Xadrez Nx.lnk - C:\Program Files\Syncsoft\Xadrez Nx\xadreznx.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\avast Free Antivirus.lnk -
C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe
C:\Users\Public\Desktop\Driver Booster.lnk - C:\Program Files\IObit\Driver Booster\SkipUacExec.exe
C:\Users\Public\Desktop\HP Deskjet 2050 J510 series.lnk - C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HP Deskjet 2050 J510 series.exe -Start UDCDevicePage
C:\Users\Public\Desktop\Wise PC 1stAid.lnk - C:\Program Files\Wise\Wise PC 1stAid\WisePCAid.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Leitura\Acelerador de Leitura Uninstaller.lnk - C:\Windows\Acelerador de Leitura Uninstaller.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Leitura\Acelerador de Leitura.lnk - C:\Program Files\Acelerador de Leitura\Acelerador de Leitura.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Memoria\Acelerador de Memoria Uninstaller.lnk - C:\Windows\Acelerador de Memoria Uninstaller.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Memoria\Acelerador de Memoria.lnk - C:\Program Files\Acelerador de Memoria\Acelerador de Memoria.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Raciocinio\Acelerador de Raciocinio Uninstaller.lnk - C:\Windows\Acelerador de Raciocinio Uninstaller.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Raciocinio\Acelerador de Raciocinio.lnk - C:\Program Files\Acelerador de Raciocinio\Acelerador de Raciocinio.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory\FormatFactory.lnk - C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory\Help.lnk - C:\Program Files\FreeTime\FormatFactory\FormatFactory.exe /help
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory\Uninstall.lnk - C:\Program Files\FreeTime\FormatFactory\uninst.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Leitura Superdinamica\Leitura Superdinamica Uninstaller.lnk - C:\Windows\Leitura Superdinamica Uninstaller.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Leitura Superdinamica\Leitura Superdinamica.lnk - C:\Program Files\Leitura Superdinamica\Leitura Superdinamica.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruta\Ruta Uninstaller.lnk - C:\Windows\Ruta Uninstaller.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruta\Ruta.lnk - C:\Windows\Ruta.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 2050 J510 series.lnk -

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher\aTube Catcher.lnk - C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast\avast Free Antivirus.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster\Desinstalar Driver Booster.lnk - C:\Program Files\IObit\Driver Booster\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster\Driver Booster.lnk - C:\Program Files\IObit\Driver Booster\SkipUacExec.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise PC 1stAid\Wise PC 1stAid.lnk - C:\Program Files\Wise\Wise PC 1stAid\WisePCAid.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk - C:\Program Files\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Orbit.lnk - C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Jarves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Notepad.lnk - C:\Windows\system32\notepad.exe
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Hao123.lnk - C:\Users\Jarves\AppData\Roaming\Baidu\hao123-br\hao123.1.0.0.1111.exe
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ea987219-9174-4d6c-a481-9c440ba401d1 deleted successfully

==== Empty IE Cache ======================

C:\Users\Jarves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jarves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3YFVKCMN will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=220 folders=102 9771588 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Jarves\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Jarves\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Jarves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3YFVKCMN" not found

==== EOF on 12/08/2014 at 14:22:19,62 ======================

por **Power Max** Ter 12 Ago 2014, 15:49

Faça o download do OTM (de Old Timer) no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Selecione e copie todo o texto destacado em vermelho que te passei.

Clique com o botão direito do mouse sobre o OTM.exe e escolha a opção Executar como administrador.

Cole o texto que você acabou de copiar acima no espaço em branco abaixo da frase Paste instructions for itens to be Moved

Depois disto clique no botão MoveIt!

Depois de fazer os procedimentos acima, feche o OTM. Nota: O OTM deverá pedir para reiniciar o PC para concluir o processo de eliminação dos problemas, neste caso é só confirmar clicando em Yes. Neste caso, após a reinicialização, navegue até a pasta C:\_OTMoveIt\MovedFiles e abra o mais novo arquivo com extensão .log presente, selecione e copie todo o conteúdo desse relatório e poste aqui em seu próximo post.

por Lucas H. O. Ter 12 Ago 2014, 16:29

========== SERVICES/DRIVERS ==========
========== PROCESSES ==========
All processes killed
========== SERVICES/DRIVERS ==========
Service Bfilter stopped successfully!
Service Bfilter deleted successfully!
Service Bfmon stopped successfully!
Service Bfmon deleted successfully!
Service Bhbase stopped successfully!
Service Bhbase deleted successfully!
Service BHipsEx stopped successfully!
Service BHipsEx deleted successfully!
Service Bndef stopped successfully!
Service Bndef deleted successfully!
Service Bprotect stopped successfully!
Service Bprotect deleted successfully!
Service BprotectEx stopped successfully!
Service BprotectEx deleted successfully!
========== FILES ==========
C:\Program Files\Baidu Security\PC Faster\3.7.0.0 folder moved successfully.
C:\Program Files\Baidu Security\PC Faster folder moved successfully.
C:\Program Files\Baidu Security\Baidu Antivirus\update folder moved successfully.
C:\Program Files\Baidu Security\Baidu Antivirus\log folder moved successfully.
C:\Program Files\Baidu Security\Baidu Antivirus folder moved successfully.
C:\Program Files\Baidu Security folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\update folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\sound\1046\4 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\sound\1046\3 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\sound\1046\2 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\sound\1046\1 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\sound\1046 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\sound folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_translator\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_translator folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_file_shredder\skin\list_head folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_file_shredder\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_file_shredder folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin\tree folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin\sysbutton folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin\progress folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin\list_head folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin\icon folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin\checkbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin\bg folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\skin_bavpluginremove folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\ieprotect\skin\checkbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\ieprotect\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\ieprotect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools\ieprotect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\tools folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_shopprotect\skin\sites folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_shopprotect\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_shopprotect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_shopprotect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_investigate\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_investigate folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_feedback\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_feedback folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_crashreporter\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_crashreporter folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavui_frame\skin\menu folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavui_frame\skin\bavui folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavui_frame\skin\aboutus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavui_frame\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavui_frame folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin\radiobox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin\msgbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin\menu folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin\icon folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin\firsttips folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin\combobox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin\checkbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\skin_bavtray folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin\tree folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin\sysbutton folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin\scrollbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin\radiobox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin\icon folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin\checkbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin\bg folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\common folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bav_updater\skin\stepbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bav_updater\skin\progressbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bav_updater\skin\checkbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bav_updater\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bav_updater folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin\tree folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin\sysbutton folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin\scrollbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin\msgbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin\menu folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin\icon folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin\bg folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin\bavcloud folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\qv folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\plugscan\data folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\plugscan folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\VirusList\skin\scrollbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\VirusList\skin\onaccess folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\VirusList\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\VirusList\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\VirusList folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\RemovedTips folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\LockList\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\LockList folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\FloatingWnd folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res\FailedTips folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_USBProtect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Trust\res\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Trust\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Trust folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Settings\res\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Settings\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Settings folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Quarantine\res\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Quarantine\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Quarantine folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA\res\skin\scrollbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA\res\skin\onaccess\plugin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA\res\skin\onaccess folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA\res\skin\checkbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA\res\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA\res\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_OA folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Hips\res\skin\icon folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Hips\res\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Hips\res\skin\bg folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Hips\res\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Hips\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Hips folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download\res\skin\scrollbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download\res\skin\icon folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download\res\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download\res\skin\bg folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download\res\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Pop_Download folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_LogStatus\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_LogStatus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Guide\res\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Guide\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Guide folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\tree folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\tools folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\scrollbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\protect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\progressbar folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\icon folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\feedback folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\engine folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\checkbox folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\button folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\bg folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\log folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\Translator folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\ShopProtect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\ShopProtect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\investigate\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\investigate folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\ieprotect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\ieprotect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\Font folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\fileshredder\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\fileshredder folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\feedback\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\feedback folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavUpdater\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavUpdater folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavUi\skin\antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavUi\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavUi folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavTray\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavTray folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavPluginRemove folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavCloud\skin\main folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavCloud\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082\BavCloud folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\3082 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\Translator folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\ShopProtect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\ShopProtect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\investigate\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\investigate folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\ieprotect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\ieprotect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\Font folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\fileshredder\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\fileshredder folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\feedback\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\feedback folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavUpdater\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavUpdater folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavUi\skin\antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavUi\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavUi folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavTray\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavTray folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavPluginRemove folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavCloud\skin\main folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavCloud\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057\BavCloud folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1057 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\Translator folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\ShopProtect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\ShopProtect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\investigate\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\investigate folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\ieprotect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\ieprotect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\Font folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\fileshredder\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\fileshredder folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\feedback\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\feedback folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavUpdater\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavUpdater folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavUi\skin\antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavUi\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavUi folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavTray\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavTray folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavPluginRemove folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavCloud\skin\main folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavCloud\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054\BavCloud folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1054 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\Translator folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\ShopProtect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\ShopProtect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\investigate\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\investigate folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\ieprotect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\ieprotect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\Font folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\fileshredder\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\fileshredder folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\feedback\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\feedback folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavUpdater\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavUpdater folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavUi\skin\antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavUi\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavUi folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavTray\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavTray folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavPluginRemove folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavCloud\skin\main folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavCloud\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046\BavCloud folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1046 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\Translator folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\ShopProtect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\ShopProtect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\investigate\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\investigate folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\ieprotect\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\ieprotect folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\Font folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\fileshredder\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\fileshredder folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\feedback\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\feedback folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\context folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavUpdater\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavUpdater folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavUi\skin\antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavUi\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavUi folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavTray\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavTray folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavPluginRemove folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavCloud\skin\main folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavCloud\skin folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033\BavCloud folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N\1033 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\I18N folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\dump folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\DIYResource folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\dbg64 folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\data folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus folder moved successfully.
C:\Program Files\Baidu-Security-2014-4.4.4.73687 folder moved successfully.
File/Folder C:\Program Files\Baidu Security\Baidu Antivirus not found.
File/Folder C:\Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus not found.
C:\ProgramData\Baidu Security\RpData folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\3.7.0.0\sysopt folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\3.7.0.0\Run\Disable folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\3.7.0.0\Run folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\3.7.0.0\Plugins\Plugin.LeakRepair\Hotfix folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\3.7.0.0\Plugins\Plugin.LeakRepair folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\3.7.0.0\Plugins folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster\3.7.0.0 folder moved successfully.
C:\ProgramData\Baidu Security\PC Faster folder moved successfully.
C:\ProgramData\Baidu Security folder moved successfully.
File/Folder C:\Users\All Users\Baidu Security not found.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall\Baidu PC Faster Uninstall HK\0 folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall\Baidu PC Faster Uninstall HK folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall\Baidu PC Faster Uninstall\0 folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall\Baidu PC Faster Uninstall folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Run\Disable folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Run folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\PopMsg folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0 folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Baidu Security folder moved successfully.
File/Folder C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall\Baidu PC Faster Uninstall not found.
File/Folder C:\Users\Jarves\AppData\Roaming\Baidu Security\PC Faster\3.7.0.0\Uninstall\Baidu PC Faster Uninstall HK not found.
C:\Users\Public\Documents\Baidu Security\PC Faster folder moved successfully.
C:\Users\Public\Documents\Baidu Security\Bav\Dump\3.7.1.39149 folder moved successfully.
C:\Users\Public\Documents\Baidu Security\Bav\Dump folder moved successfully.
C:\Users\Public\Documents\Baidu Security\Bav folder moved successfully.
C:\Users\Public\Documents\Baidu Security folder moved successfully.
C:\Users\Jarves\AppData\Roaming\Orbit\icon\Baidu Antivirus.ico moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\Antivirus not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\PC Faster\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}\\DllName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{77FEF28E-EB96-44FF-B511-3185DEA48697}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\\DllName deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfilter not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfilter\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfmon not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bfmon\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bhbase not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bhbase\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BHipsEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BHipsEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bndef not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bndef\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfilter\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bfmon\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bhbase\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BHipsEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bndef not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bndef\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Bprotect\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BprotectEx\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BprotectEx not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BprotectEx\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BavSvc.exe\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072614-60231-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072814-16801-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072814-16801-01.dmp not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\072914-13026-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080614-13743-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080614-15272-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080714-12526-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080714-12714-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080714-13228-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080714-13416-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080814-13197-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-12355-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-12854-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-13182-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-13244-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-13306-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\080914-16286-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-12105-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-12994-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-13244-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-13681-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\081114-14367-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\092313-16021-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\092513-13852-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\bug\driver\MEMORY_130521114545704337.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\bug\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\bug\driver\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\bug\driver\092313-16021-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\bug\driver\092513-13852-01.dmp\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu Security\PC Faster\DataReport\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Install\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\alluser\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\curuser\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\hkcu\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Run\Disable\hklm\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\Statistic\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\3.7.0.0\UUReport\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\DataReport\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Baidu Security\PC Faster\Setup\ not found.
Registry value HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\BitTorrent\uTorrent\\OfferName deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store\\C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Uninstall.exe not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\hao123desk\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\hao123desk not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\hao123desk not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu\Hao123-br\hao123desk not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1002\Software\Baidu Security\PC Faster\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BavSvc.exe\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu\Application Bug\Bav\log\BHipsSvc.exe\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072614-60231-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072814-16801-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072814-16801-01.dmp not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\072914-13026-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080614-13743-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080614-15272-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080714-12526-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080714-12714-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080714-13228-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080714-13416-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080814-13197-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-12355-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-12854-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-13182-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-13244-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-13306-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\080914-16286-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-12105-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-12994-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-13244-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-13681-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\081114-14367-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\092313-16021-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\092513-13852-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\bug\driver\MEMORY_130521114545704337.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\Antivirus\web not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug\driver\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug\driver\092313-16021-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug\driver\092513-13852-01.dmp\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\DataReport\ not found.
========== COMMANDS ==========
Restore point Set: OTM Restore Point

OTM by OldTimer - Version 3.1.21.0 log created on 08122014_162202

por **Power Max** Ter 12 Ago 2014, 16:32

Desative temporariamente seu antivírus para evitar conflitos.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

por Lucas H. O. Ter 12 Ago 2014, 17:58

Zoek.exe v5.0.0.0 Updated 11-August-2014
Tool run by Jarves on 12/08/2014 at 16:36:21,09.
Microsoft Windows 8 Pro 6.2.9200 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jarves\Downloads\zoek\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-08-12-172219.log 46967 bytes

por **Power Max** Ter 12 Ago 2014, 19:14

Parece que seu relatório ficou incompleto. Copie ele todo e poste aqui em seu tópico da forma normal, sem anexar.

por Lucas H. O. Ter 12 Ago 2014, 19:35

NA VERDADE SÓ APARECE ESSE MESMO: 'Zoek.exe v5.0.0.0 Updated 11-August-2014
Tool run by Jarves on 12/08/2014 at 16:36:21,09.
Microsoft Windows 8 Pro 6.2.9200 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jarves\Downloads\zoek\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-08-12-172219.log 46967 bytes'

----
Na verdade, fiquei em dúvida se havia acabado. Havia ficado desde do início até a hora que postei esse aí em: 'Checking Input...'. Mas mesmo assim fui na pasta e encontrei isso aí.

por Lucas H. O. Ter 12 Ago 2014, 19:41

REFIZ....

Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 1323
Created time: 2014-06-29 19:18:53
Modified time: 2014-01-13 13:40:30
MD5: FBCB3967D17EC32B5C06AA8811A53A5B
SHA1: DF0B4F19325E070A20E9CA9AEB75E863DFBCBDD1

--- C:\_OTM\MovedFiles\08122014_162202\C_Program Files\Baidu-Security-2014-4.4.4.73687\Baidu Antivirus\Plugins\Plugin_Antivirus\res\skin\icon\baidu_engine_ico_gray.png ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 1338
Created time: 2014-06-29 19:18:53
Modified time: 2014-01-13 13:40:30
MD5: BD2291EAA1C833CCA729214DFBE7B341
SHA1: FD6D550FE31ACDF679ED6005C47638DA7FB82BFB

--- C:\_OTM\MovedFiles\08122014_162202\C_Users\Jarves\AppData\Roaming\Orbit\icon\Baidu Antivirus.ico ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 134564
Created time: 2014-06-29 21:12:00
Modified time: 2014-08-11 01:48:26
MD5: B0FFF8DFF910C8E14CB071D9A6220E43
SHA1: 2E6B606191ABB3376D230B23DE9E00BA40BC35D0

==== Registry Search Results for "Baidu" ======================

[HKEY_USERS\S-1-5-21-3399956542-2365677156-1161273617-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\\Program Files\\Baidu-Security-2014-4.4.4.73687\\Baidu Antivirus\\Uninstall.exe"=hex:53,\

==== C:\zoek_backup content ======================

C:\zoek_backup (files=219 folders=102 5475396 bytes)

==== EOF on 12/08/2014 at 19:40:06,64 ======================

por **Power Max** Ter 12 Ago 2014, 19:44

Faça o download do SystemLook.exe no endereço abaixo e salve no seu Desktop (área de trabalho):
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Clique com o direito sobre o arquivo SystemLook.exe, depois clique em [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Após abrir o SystemLook.exe, selecione e copie todo este texto destacado em vermelho que te passei.

Cole o texto que você acabou de copiar na caixa de texto do SystemLook.

Clique no botão Look e ao fim do exame um log (relatório) se abrirá. Ele é salvo como SystemLook.txt no Desktop.

Selecione, copie e cole o conteúdo deste log na sua próxima resposta.

por Lucas H. O. Ter 12 Ago 2014, 19:52

>>>>
SystemLook 30.07.11 by jpshortstuff
Log created at 19:51 on 12/08/2014 by Jarves
Administrator - Elevation successful

========== filefind ==========

Searching for "baidu"
No files found.

========== folderfind ==========

Searching for "baidu"
C:\AdwCleaner\Quarantine\C\ProgramData\baidu d------ [16:27 12/08/2014]
C:\AdwCleaner\Quarantine\C\Users\Jarves\AppData\Roaming\baidu d------ [16:27 12/08/2014]
C:\AdwCleaner\Quarantine\C\Users\Public\Documents\baidu d------ [16:27 12/08/2014]

========== regfind ==========

Searching for "baidu"
No data found.

-= EOF =-

por **Power Max** Ter 12 Ago 2014, 19:57

Faça o download do Malwarebytes em um destes links abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para instalá-lo e executá-lo corretamente siga, por gentileza, as dicas desta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log (relatório) do Malwarebytes.

Ficamos no aguardo.

por Lucas H. O. Ter 12 Ago 2014, 20:22

Tá complicado...

A taxa varia de 3,5 Kb's a 0 Kb

----------------
Voltou ao normal...

por Lucas H. O. Ter 12 Ago 2014, 22:08

Malwarebytes Anti-Malware
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Data de Verificação: 12/08/2014
Hora da Verificação: 20:46:13
Logfile: Malwarebytes.txt
Administrador: Sim

Versão: 2.00.2.1012
Malware Database: v2014.08.12.12
Rootkit Database: v2014.08.04.01
Licença: Grátis
Proteção de Malware: Desabilitado
Proteção de Site Malicioso: Desabilitado
Self-protection: Desabilitado

OS: Windows 8
CPU: x86
Sistema de Arquivo: NTFS
Usuário: Jarves

Tipo da Verificação: Verificação Personalizada
Resultado: Completado
Arquivos Verificados: 467008
Tempo Decorrido: 1 hr, 12 min, 52 seg

Memória: Enabled
Inicialização: Enabled
Filesystem: Enabled
Arquivos: Enabled
Rootkits: Desabilitado
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processos: 0
(No malicious items detected)

Módulos: 0
(No malicious items detected)

Chaves de Registro: 2
PUP.Optional.Quiknowledge.A, HKLM\SOFTWARE\QUIKNOWLEDGE, Quarantined, [d1ebf8cde09bb87e0b534fb03ec420e0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3399956542-2365677156-1161273617-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [8c306e5793e8bf7706979a9819eb46ba],

Valores de Registro: 1
PUP.Optional.Quiknowledge.A, HKLM\SOFTWARE\QUIKNOWLEDGE|ie-ver, 10.0.9200.16688, Quarantined, [d1ebf8cde09bb87e0b534fb03ec420e0]

Dados do Registro: 0
(No malicious items detected)

Pastas: 1
PUP.Optional.Booster.A, C:\ProgramData\Wideblue installer\PC_Booster, Quarantined, [427a5174accfd660ab04636af30fa25e],

Arquivos: 14
PUP.Optional.4Shared, C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\File System\018\t\00\00000000, No Action By User, [704ca3220d6ecd69df39396e7e83728e],
PUP.Optional.OneClickDownloader.A, C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\File System\015\t\00\00000000, Quarantined, [803c7d48d9a2d660886465b77a87d729],
PUP.Optional.OneClickDownloader.A, C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\File System\016\t\00\00000000, Quarantined, [e8d4cafb641714228b6123f90cf5b44c],
Adware.Solimba, H:\Documentos\ReaÃ§Ãµes Quimicas\atoms symbols and equations.exe, Quarantined, [388473528dee5dd96203b8ebde22d62a],
Adware.Solimba, H:\Documentos\ReaÃ§Ãµes Quimicas\chemicpen.exe, Quarantined, [9e1e972ed5a6d363de874b58867a46ba],
Adware.Solimba, H:\Documentos\ReaÃ§Ãµes Quimicas\formulario quimica.exe, Quarantined, [c2fa685d562542f47fe6683be917f709],
Adware.Solimba, H:\Documentos\ReaÃ§Ãµes Quimicas\model chemlab.exe, Quarantined, [f2cac500017a2e0897cea6fd2bd5dd23],
Adware.Solimba, H:\Documentos\ReaÃ§Ãµes Quimicas\organic builder.exe, Quarantined, [bb0105c089f29b9bc4a1e5be06fa629e],
Adware.Solimba, H:\Documentos\ReaÃ§Ãµes Quimicas\vlabq laboratorio virtual de quimica.exe, Quarantined, [b00cc9fc76058aac99cc11924ab6d927],
Hacktool.Agent, H:\Programas\SO's\Windows 7\AtvdR W7 By PH Downs.rar, Quarantined, [57655372601bb4822593de763ac7629e],
HackTool.Activator, H:\Programas\SO's\Windows 8\AtVDR. W8 By PHTutoriais.rar, Quarantined, [229a1ea7fd7e2610fb145fe4e61c5fa1],
PUP.Optional.V9.A, C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.v9.com_0.localstorage, Quarantined, [2c908540c1ba1125ee59579afd056a96],
PUP.Optional.V9.A, C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.v9.com_0.localstorage-journal, Quarantined, [14a816afd1aad6605fe8c1302ed4e41c],
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633, Quarantined, [26967e477dfe65d11884dc65f90bd22e],

Physical Sectors: 0
(No malicious items detected)

(end)

por **Power Max** Ter 12 Ago 2014, 22:46

Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPDiag para baixá-lo, tal como mostra a imagem abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Para instalá-lo e executá-lo corretamente siga as dicas deste artigo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a sua verificação, copie todo o conteúdo do seu relatório ZHPDiag.txt e poste em sua próxima resposta.

Obs : como estou acessando pelo celular, amanhã te passo o próximo procedimento.

por Lucas H. O. Ter 12 Ago 2014, 23:14

Ok

~ Relatório do ZHPDiag v2014.8.11.117 - Nicolas Coolman (11/08/2014)
~ Iniciado por Jarves (12/08/2014 23:07:15)
~ Endereço do Website : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Endereço do Webforum : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão : Versão atualizada.
~ Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user

---\\ Navegadores Internet
MSIE: Internet Explorer v10.0.9200.16688
GCIE: Google Chrome v35.0.1916.153 (Defaut)

---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 8 Pro, 32-bit (Build 9200)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Softwares de proteçao do sistema
avast! Free Antivirus v9.0.2018
Malwarebytes Anti-Malware versão 2.0.2.1012
Windows Defender W8 (Deactivate)

---\\ Softwares d'optimização do sistema
CCleaner v4.15

---\\ Softwares de partilha do PeerToPeer (P2P)

---\\ Monitoramento dos softwares
Adobe Flash Player 11 Plugin
Java 7 Update 45

---\\ Informações sobre o sistema
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2035 MB (30% free)
System Restore: Activé (Enable)
System drive C: has 12 GB (24%) free of 49 GB

---\\ Modo de conexão ao sistema
~ Computer Name: LUCAS
~ User Name: Jarves
~ All Users Names: UpdatusUser, Jarves, Convidado, Administrador,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator

---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\Jarves\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Jarves\AppData\Roaming\
~ %Desktop% : C:\Users\Jarves\Desktop\
~ %Favorites% : C:\Users\Jarves\Favorites\
~ %LocalAppData% : C:\Users\Jarves\AppData\Local\
~ %StartMenu% : C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 12 Go of 49 Go)
D: Hard drive, Flash drive, Thumb drive (Free 67 Go of 200 Go)
E: Hard drive, Flash drive, Thumb drive (Free 4 Go of 48 Go)
F: CD-ROM drive (Not Inserted)
G: Hard drive, Flash drive, Thumb drive (Free 214 Go of 346 Go)
H: Hard drive, Flash drive, Thumb drive (Free 85 Go of 586 Go)

---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Security Center: 41 Legitimates Filtered in 00mn 00s

---\\ Pesquisa particular de ficheiros genéricos
[MD5.5B6ED1B57DBFF18D405A0260559B571E] - (.Microsoft Corporation - Windows Explorer.) (.26/07/2012 - 00:50:01.) -- C:\Windows\Explorer.exe [2114936]
[MD5.7109FF769FFF962869C50D720F7AA7D7] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.26/07/2012 - 00:21:01.) -- C:\Windows\System32\Wininit.exe [101376]
[MD5.F73CE26EFC7AE039A8534722395CE9A7] - (.Microsoft Corporation - Internet Extensions para Win32.) (.20/08/2013 - 23:06:11.) -- C:\Windows\System32\wininet.dll [1767936]
[MD5.C06BA1F360CEF6AB51F41B3D0D5FE92D] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.26/07/2012 - 00:21:01.) -- C:\Windows\System32\Winlogon.exe [411648]
[MD5.FAB11E1AC62579A9BE21593319F8E464] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.26/07/2012 - 00:20:01.) -- C:\Windows\System32\sppcomapi.dll [246784]
[MD5.6043C72306D5C7B8BC823A1CC49F53B8] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.26/07/2012 - 01:17:16.) -- C:\Windows\system32\Drivers\AFD.sys [438272]
[MD5.48D8C3F2006698691F5AE0BB595FDCC8] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 00:42:31.) -- C:\Windows\system32\Drivers\atapi.sys [22768]
[MD5.00B4FA77732C7823D292ECD672660882] - (.Microsoft Corporation - CD-ROM File System Driver.) (.25/07/2012 - 23:38:28.) -- C:\Windows\system32\Drivers\Cdfs.sys [89088]
[MD5.4E707EC5071DD8F5C29A7410780BD4C3] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.25/07/2012 - 23:33:53.) -- C:\Windows\system32\Drivers\Cdrom.sys [135680]
[MD5.B21FDAC50FCD4CE53C203F097273532A] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.25/07/2012 - 23:34:25.) -- C:\Windows\system32\Drivers\DfsC.sys [92160]
[MD5.0E3FC2062E796F6A9B1ED995E1CBB25E] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.25/07/2012 - 23:34:53.) -- C:\Windows\system32\Drivers\HDAudBus.sys [62464]
[MD5.11EDC37780E8A2F8E311D73F7658A4D7] - (.Microsoft Corporation - Driver de porta i8042.) (.25/07/2012 - 23:36:23.) -- C:\Windows\system32\Drivers\i8042prt.sys [89600]
[MD5.57B0C0D982013C72911A3F5CBA795034] - (.Microsoft Corporation - IP Network Address Translator.) (.25/07/2012 - 23:29:57.) -- C:\Windows\system32\Drivers\IpNat.sys [126976]
[MD5.5FAC7AC77D9ADD42579EDF678F08DF9F] - (.Microsoft Corporation - Minirdr SMB do Windows NT.) (.05/02/2013 - 19:30:11.) -- C:\Windows\system32\Drivers\MRxSmb.sys [304128]
[MD5.303A053C25E468B9925C22288BEF8484] - (.Microsoft Corporation - MBT Transport driver.) (.25/07/2012 - 23:31:28.) -- C:\Windows\system32\Drivers\netBT.sys [254464]
[MD5.99C73E3FE9B36275BD91D2009F2BA2E0] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.02/02/2013 - 06:53:24.) -- C:\Windows\system32\Drivers\ntfs.sys [1614568]
[MD5.8BCE63AF5B52642E832630F862DE96EF] - (.Microsoft Corporation - Driver de porta paralela.) (.25/07/2012 - 23:38:17.) -- C:\Windows\system32\Drivers\Parport.sys [90624]
[MD5.6E0649D7325D85C47C844EB3267E4625] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.25/07/2012 - 23:30:07.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [88064]
[MD5.2CAD2A13569741C67CD9C52F97E0F992] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.25/07/2012 - 23:32:22.) -- C:\Windows\system32\Drivers\rdpdr.sys [156160]
[MD5.0886D9F1B5A5334FBB143A260E4BFB5C] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 01:17:16.) -- C:\Windows\system32\Drivers\tdx.sys [97792]
[MD5.8E15C3D58A8ADE841060661DBA6E7A9B] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.26/07/2012 - 00:39:34.) -- C:\Windows\system32\Drivers\volsnap.sys [282352]
~ Generic Processes: Scanned in 00mn 00s

---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
Mes images (My Pictures) : 2/2 (Modified)
~ Mes musiques (My Musics) : 1/3
~ Mes Videos (My Videos) : 1/209
~ Mes Favoris (My Favorites) : 1/5
~ Mes Documents (My Documents) : 2/4
~ Mon Bureau (My Desktop) : 13/3760
~ Menu demarrer (Programs) : 1/45
~ Hidden Files: Scanned in 00mn 08s

---\\ Processos lançados
[MD5.3E7332DE76AF4704B02036B2B49C662C] - (.Microsoft Corporation - Processo de Host para Tarefas do Windows.) -- C:\Windows\system32\taskhostex.exe [53760] [PID.484]
[MD5.D8E110B442E6F06553C0ABAC894F6A09] - (.Microsoft Corporation - Communications Service.) -- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x86__8wekyb3d8bbwe\LiveComm.exe [107888] [PID.3264]
[MD5.47C9EF1600EDD9EBD8155EB6B5206B6B] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [1821984] [PID.3384]
[MD5.AD3A07FEBB3B9F0110C90C26FC95E029] - (.Microsoft Corporation - Runtime Broker.) -- C:\Windows\System32\RuntimeBroker.exe [29808] [PID.3836]
[MD5.A5FCD42334CCC682DA1882A54338686C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [860488] [PID.4068]
[MD5.D5E84756CF5C49A907A59048120EE9F4] - (.FSPro Labs - My Lockbox.) -- C:\Program Files\My Lockbox\mylbx.exe [2289952] [PID.1832]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336] [PID.2464]
[MD5.3E364978E4C74D3BCEA29FB41743CB5A] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704] [PID.504]
[MD5.3433CF435F84B24965A8202118F41A7A] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\Jarves\AppData\Roaming\uTorrent\uTorrent.exe [1322832] [PID.1448] =>P2P.BitTorrent
[MD5.84735ABBCCEB62DC3691F3D38F6DBEF0] - (.Ralink Technology, Corp. - Ralink Wireless Utility.) -- C:\Program Files\RALINK\Common\RaUI.exe [598016] [PID.2516]
[MD5.4FBC630768570E6AC35C3DE8F6EC79F5] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe [6970168] [PID.2976]
[MD5.73A6BF01391CD65DBE9BBCB7300A9863] - (.VideoLAN - VLC media player 2.1.2.) -- C:\Program Files\VideoLAN\VLC\vlc.exe [126464] [PID.3228]
[MD5.48FD4932F734C1BA100CE52DC3E8BF30] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8091136] [PID.3016]
~ Processes Running: Scanned in 00mn 00s

---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\Jarves\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Activé)

---\\ Pasta de extensão do Google Chrome
~ Google Lines Browser: 17 Legitimates Filtered in 00mn 01s

---\\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
~ IE Browser: 10 Legitimates Filtered in 00mn 00s

---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s

---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s

---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21

---\\ Outras conexões do utilizador (04)
O4 - GS\QuickLaunch [Jarves]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Jarves\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Global Startup: 1 Legitimates Filtered in 00mn 03s

---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKLM\..\Run: [mylbx] . (.FSPro Labs - My Lockbox.) -- C:\Program Files\My Lockbox\mylbx.exe
O4 - HKLM\..\Run: [NeroFilterCheck] . (.Nero AG - NeroCheck.) -- C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Jarves\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKUS\S-1-5-21-3399956542-2365677156-1161273617-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Jarves\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Application: Scanned in 00mn 00s

---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~1\Office15\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: Clique para Telefonar do Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\lync.exe
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~1\Office15\ONBTTN~1.dll =>.Microsoft Corporation
~ IE Extra Buttons: Scanned in 00mn 00s

---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A6757DB6-C8A3-48A2-92AB-090133B9D587}: DhcpNameServer = 10.50.0.1 1.1.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{A6757DB6-C8A3-48A2-92AB-090133B9D587}: DhcpDomain = intranet.br
O17 - HKLM\System\CS1\Services\Tcpip\..\{A6757DB6-C8A3-48A2-92AB-090133B9D587}: DhcpNameServer = 10.50.0.1 1.1.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{A6757DB6-C8A3-48A2-92AB-090133B9D587}: DhcpDomain = intranet.br
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.50.0.1 1.1.1.1
~ Domain: Scanned in 00mn 00s

---\\ Protocolo adicional (018)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s

---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - C:\Users\Jarves\AppData\Local\DProtect\eBP.dll (.not file.) =>Trojan.Staser
~ AppInit DLL: Scanned in 00mn 00s

---\\ Tarefas planificadas automaticamente (039)
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1064]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1068]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3399956542-2365677156-1161273617-1001Core [1042]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3399956542-2365677156-1161273617-1001UA [1094]
~ Scheduled Task: 21 Legitimates Filtered in 00mn 09s

---\\ Drivers lançados ao arranque do sistema (041)
O41 - Driver: (Bnbase) . (. - .) - C:\Windows\System32\drivers\bnbasex.sys (.not file.)
O41 - Driver: (MpKsla780c6cb) . (...) - C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default\MpKsla780c6cb.sys
~ Drivers: 44 Legitimates Filtered in 00mn 00s

---\\ Software instalados (042)
O42 - Logiciel: Acelerador de Leitura - (.Neurosoftware.) [HKLM] -- Acelerador de Leitura
O42 - Logiciel: Acelerador de Memoria - (.Neurosoftware.) [HKLM] -- Acelerador de Memoria
O42 - Logiciel: Acelerador de Raciocinio - (.Neurosoftware.) [HKLM] -- Acelerador de Raciocinio
O42 - Logiciel: Leitura Superdinamica - (.Neurosoftware.) [HKLM] -- Leitura Superdinamica
O42 - Logiciel: My Lockbox 3.0.5 - (...) [HKLM] -- My Lockbox_is1
~ Logic: 19 Legitimates Filtered in 00mn 00s

---\\ HKCU & HKLM Software Keys
[HKCU\Software\Meintec]
[HKCU\Software\Vancouver Film School]
[HKCU\Software\superdownloads.com.br]
[HKLM\Software\Livre]
~ Key Software: 209 Legitimates Filtered in 00mn 00s

---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/06/2014 - 16:19:53 - [] ----D C:\Program Files\Acelerador de Leitura
O43 - CFD: 04/07/2014 - 21:09:14 - [] ----D C:\Program Files\Acelerador de Memoria
O43 - CFD: 25/07/2014 - 12:48:45 - [] ----D C:\Program Files\Acelerador de Raciocinio
O43 - CFD: 12/08/2014 - 12:02:58 - [] ----D C:\Program Files\FreeFixer
O43 - CFD: 25/07/2014 - 12:34:27 - [] ----D C:\Program Files\Interactive Calendar
O43 - CFD: 25/07/2014 - 12:52:05 - [] ----D C:\Program Files\Leitura Superdinamica
O43 - CFD: 15/11/2013 - 23:37:33 - [] ----D C:\Program Files\My Lockbox
O43 - CFD: 12/08/2014 - 22:01:05 - [] ----D C:\ProgramData\Wideblue installer
O43 - CFD: 12/08/2014 - 07:17:09 - [] ----D C:\Users\Jarves\AppData\Roaming\FreeFixer
O43 - CFD: 09/03/2014 - 15:27:42 - [] ----D C:\Users\Jarves\AppData\Roaming\rmi
O43 - CFD: 12/08/2014 - 06:11:45 - [] ----D C:\Users\Jarves\AppData\Roaming\Wise PC 1stAid
O43 - CFD: 25/06/2014 - 12:08:20 - [] ----D C:\Users\Jarves\AppData\Local\Able_Opus
O43 - CFD: 12/08/2014 - 06:43:01 - [] ----D C:\Users\Jarves\AppData\Local\FreeFixer
O43 - CFD: 26/06/2014 - 16:18:58 - [] ----D C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Leitura
O43 - CFD: 04/07/2014 - 21:09:14 - [] ----D C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Memoria
O43 - CFD: 25/07/2014 - 12:45:40 - [] ----D C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acelerador de Raciocinio
O43 - CFD: 25/07/2014 - 12:50:30 - [] ----D C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Leitura Superdinamica
O43 - CFD: 15/11/2013 - 23:37:32 - [] ----D C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Lockbox
O43 - CFD: 03/07/2014 - 22:32:50 - [] ----D C:\Users\Jarves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruta
~ Program Folder: 159 Legitimates Filtered in 00mn 01s

---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.5C8874EE321F4623FFF7A1315039DDBC] - 11/08/2014 - 06:34:31 ---A- . (.Fox Magic Software - FM Screen Capture Codec (VFW).) -- C:\Windows\System32\fmcodec.DLL [77824]
O44 - LFC:[MD5.865788DD70DE738FEEADCE42D6F3CE6D] - 11/08/2014 - 06:34:42 ---A- . (...) -- C:\Windows\System32\ScrRecX.log [49]
O44 - LFC:[MD5.9335AF3270D9EF424EA70E6010A39D27] - 11/08/2014 - 20:56:58 ---A- . (...) -- C:\Windows\System32\AcpiServiceVnA.dll [188696]
O44 - LFC:[MD5.8B19C324B15ADE3E5AD17C67301244E6] - 11/08/2014 - 20:56:58 ---A- . (...) -- C:\Windows\System32\audioLibVc.dll [29496]
O44 - LFC:[MD5.0AABBED11783B6E2108A8216A0A138FD] - 11/08/2014 - 20:56:59 ---A- . (.ICEpower a/s - ICEpower ICEsound audio effects.) -- C:\Windows\System32\ICEsoundAPO.dll [265376]
O44 - LFC:[MD5.4013C8B5C62F7F8E6A027DFB19173A4E] - 11/08/2014 - 20:57:00 ---A- . (...) -- C:\Windows\System32\Drivers\RTAIODAT.DAT [1099203]
O44 - LFC:[MD5.886CE666A9507E17475C7156B157D181] - 11/08/2014 - 20:57:00 ---A- . (...) -- C:\Windows\System32\Drivers\rtvienna.dat [5804772]
O44 - LFC:[MD5.107A9B8F83207F0F5F5F63A3C73090E7] - 11/08/2014 - 20:57:03 ---A- . (...) -- C:\Windows\System32\SStudio.dll [2140976]
O44 - LFC:[MD5.4D6C6E0505A8E5A0656DCB223497D37C] - 12/08/2014 - 12:45:21 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [24184]
O44 - LFC:[MD5.0DC5AF80D059DEC792B665ED598C6567] - 12/08/2014 - 13:18:35 ---A- . (.SQLite Development Team - SQLite Dynamic Link Library (No TCL).) -- C:\Windows\System32\sqlite3.dll [536576]
O44 - LFC:[MD5.11363A7BB81071B97D6B8BE6D18C67AC] - 12/08/2014 - 14:22:19 ---A- . (...) -- C:\zoek-results2014-08-12-172219.log [46967]
O44 - LFC:[MD5.5A825794349E95F401DAE1271E8A57CC] - 12/08/2014 - 16:37:04 ---A- . (...) -- C:\zoek-results.txt [364]
O44 - LFC:[MD5.95DB03C92B52643E9132B16212BE73E0] - 12/08/2014 - 16:49:26 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [146630]
O44 - LFC:[MD5.E6503C370475FB207E4FD9B7C66912E8] - 12/08/2014 - 16:49:26 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [725796]
O44 - LFC:[MD5.8C008855C3AD0C3ADBA5465BA0BE81D2] - 12/08/2014 - 19:40:06 ---A- . (...) -- C:\zoek-results.log [4488]
~ Files: 243 Legitimates Filtered in 00mn 08s

---\\ Chave do registo Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{7170830e-3353-11e3-afbc-000ee8ed7be5}\AutoRun\command. (...) -- I:\LGAutoRun.exe (.not file.)
~ Keys: Scanned in 00mn 00s

---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s

---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:12/08/2014 - 12:45:21 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [24184] =>.ALWIL Software
O58 - SDL:12/08/2014 - 12:45:21 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [49944] =>.ALWIL Software
O58 - SDL:12/08/2014 - 12:45:21 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [180632] =>.ALWIL Software
O58 - SDL:26/07/2012 - 00:42:15 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x86.) -- C:\Windows\System32\Drivers\stexstor.sys [26352]
O58 - SDL:25/07/2012 - 19:52:51 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:25/07/2012 - 19:52:51 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:25/07/2012 - 19:52:51 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:25/07/2012 - 19:52:52 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:25/07/2012 - 19:52:52 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:25/07/2012 - 19:52:54 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:25/07/2012 - 19:52:54 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:25/07/2012 - 19:52:54 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:25/07/2012 - 19:52:54 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:25/07/2012 - 19:52:54 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:25/07/2012 - 19:52:51 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33968]
O58 - SDL:25/07/2012 - 19:52:51 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34688]
O58 - SDL:25/07/2012 - 19:52:51 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:25/07/2012 - 19:52:51 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35552]
O58 - SDL:25/07/2012 - 19:52:51 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34688]
~ Drivers: 65 Legitimates Filtered in 00mn 04s

---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s

---\\ Associações Shell Spawning (O67)
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s

---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s

---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {012E1000-F331-11DB-8314-0800200C9A66} [DefaultScope] - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys: Scanned in 00mn 00s

---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.254FBCA565E049648B0CCE2CEADF05D2] [SPRF][29/09/2013] (...) -- C:\Users\Jarves\AppData\Roaming\inst.exe [87608]
~ Files: 2 Legitimates Filtered in 00mn 00s

---\\ Lista das exceções do FireWall (FirewallRules) (O87)
O87 - FAEL: "{AB0CA038-7B24-444A-8312-CC95C0E2785F}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Jarves\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{0F8B7B7E-1873-4227-BA67-71106D829061}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Jarves\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 2 Legitimates Filtered in 00mn 02s

---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 31/10/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 13/04/2007 792112 | (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
SS - | Demand 08/05/2007 271920 | (NMIndexingService) . (.Nero AG.) - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
SS - | Demand 03/09/2013 5206008 | (npggsvc) . (.INCA Internet Co., Ltd..) - C:\Windows\system32\GameMon.des
SS - | Disabled 26/07/2012 23040 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 12/08/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 18/01/2013 639776 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 26/02/2013 1260320 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 18/01/2013 383264 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
SR - | Demand 01/07/2013 14480 | (WinDefend) . (.Microsoft Corporation.) - C:\Program Files\Windows Defender\MsMpEng.exe
~ Services: Scanned in 00mn 12s

---\\ Scâner Aditional (088)
Database Version : 13026 - (11/08/2014)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 2
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 1

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:uTorrent =>P2P.BitTorrent^
C:\Users\Jarves\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent^
~ Additionnel Scan: 247884 Items scanned in 00mn 39s

---\\ Informações complémentaires do módulos
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Internet Explorer, Gestão do Proxy (R5)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Aplicações iniciadas por registo & pastas (04)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Chave do registo Shell MountPoints2 (MPKS) (O51)
~ AMI: 4 Legitimates Filtered in 00mn 00s

---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Trojan.Staser
~ MSI: 1 link(s) detected in 00mn 00s

~ 837 Legitimates filtered by white list
End of the scan (427 lines in 04mn 32s)(0)

por **Power Max** Qua 13 Ago 2014, 09:37

Selecione e copie todo o texto destacado em vermelho que te passei.
_____________________________________________________________________________________________________________

Problema com Tela Azul e programas que não querem desinstalar 772309

Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta.

por Lucas H. O. Qua 13 Ago 2014, 12:46

Rapport de ZHPFix 2014.8.3.6 par Nicolas Coolman, Update du 03/08/2014
Fichier d'export Registre :
Run by Jarves at 13/08/2014 12:45:02
High Elevated Privileges : OK
Windows 8 Business Edition, 32-bit (Build 9200)

Reciclagem vazia (00mn 06s)
Reparação de atalhos do navegador

========== Chaves do Registo ==========
ELIMINÉ Driver Key: Bnbase

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ Temporários windows (0) (0 octets)
ELIMINÉ Flash Cookies (0) (0 octets)

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso

========== Outros ==========
NÃO-TRATADO _____________

========== Recapitulativo ==========
1 : Chaves do Registo
1 : Pastas
2 : Ficheiros
1 : Restauração Sistema
1 : Outros

End of clean in 00mn 19s

========== Caminho do ficheiro do relatório ==========
C:\Users\Jarves\AppData\Roaming\ZHP\ZHPFix[R1].txt - 13/08/2014 12:45:08 [921]

por Conteúdo patrocinado

Problema com Tela Azul e programas que não querem desinstalar

Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Re: Problema com Tela Azul e programas que não querem desinstalar

Seg	Ter	Qua	Qui	Sex	Sáb	Dom
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30