Notebook Toshiba L675-S7133 - Trancando

/!\ Boa Tarde! binalima /!\

> Abra a ferramenta OTS.

[kill explorer before fix]
[Unregister Dlls]
[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> 
YN -> HKEY_LOCAL_MACHINE\: Main\\"Start Default_Page_URL" -> about:newtab
YN -> HKEY_LOCAL_MACHINE\: Search\\"Search Page" -> 
YN -> HKEY_LOCAL_MACHINE\: Search\\"Start Default_Page_URL" -> about:newtab
YN -> HKEY_LOCAL_MACHINE\: Search\\"Start Page" -> about:newtab
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-4064657657-4253216823-4133322302-1000\] > -> 
YN -> HKEY_USERS\S-1-5-21-4064657657-4253216823-4133322302-1000\: Main\\"Start Page" -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
YN -> "10" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> "Locked" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< 64bit-SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
YN -> "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" [HKLM] -> Reg Error: Key error. [WebCheck]
< SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
YN -> "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" [HKLM] -> Reg Error: Key error. [WebCheck]
[Registry - Additional Scans - Safe List]
< 64bit-File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\
YN -> .html [@ = BaiduSparkHTML] -> Reg Error: Key error.
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\
YN -> .html [@ = BaiduSparkHTML] -> Reg Error: Key error.
< 64bit-Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\
YN -> ms-help:{314111c7-a502-11d2-bbca-00c04f8ec294} [HKLM] -> Reg Error: Key error.[Reg Error: Key error.]
< Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YN -> {D4C9692E-4EFA-4DA0-8B7F-9439466D9E31} -> Full Tilt Poker
YN -> Malwarebytes Anti-Malware_is1 -> Malwarebytes Anti-Malware versão 2.0.4.1028
YN -> PokerStars -> PokerStars
[Files/Folders - Created Within 30 Days]
NY ->  3 C:\windows\*.tmp files -> C:\windows\*.tmp
NY ->  1 C:\windows\SysNative\*.tmp files -> C:\windows\SysNative\*.tmp
[Files/Folders - Modified Within 30 Days]
NY ->  3 C:\windows\*.tmp files -> C:\windows\*.tmp
NY ->  1 C:\windows\SysNative\*.tmp files -> C:\windows\SysNative\*.tmp
[File - Lop Check]
NY ->  AVG -> C:\Users\Sergio\AppData\Roaming\AVG
[Custom Scans]
YY ->  logCleaner.txt -> C:\logCleaner.txt
[Alternate Data Streams]
NY -> @Alternate Data Stream - 164 bytes -> C:\Users\Sergio\Documents\Oi Telefone.tiff:3or4kl4x13tuuug3Byamue2s4b
[Empty Temp Folders]
[CreateRestorePoint]
[start explorer after fix]

> Cole estas informações que estão em vermelho,para o campo: "Paste Fix Here"

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Clique em Run Fix >> Aguarde!
> Terminando,poste o relatório: C:\_OTS\MovedFiles\OTS.txt 

A+

OK, segue relatório

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Grato

Acho e o 1o. não era txt.

Agora vai correto [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Grato

binalima escreveu:Acho e o 1o. não era txt.

Agora vai correto   [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Grato

Boa Tarde! binalima

> Nenhum dos dois é o correto....
> Como está seu computador? Informe!

A+

Ainda bem lento e trancando.
Como exclui o Browser Baidu conforme recomendação, estou utilizando o Internet Explorar que a todo momento deixa de trabalhar, tranca e vem mensagem que está procurando solução para o problema, não encontra e fecha o sistema.
Att

All Processes Killed
[Registry - Safe List]
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Default_Page_URL deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\\Search Page deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\\Start Default_Page_URL deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\\Start Page deleted successfully.
Registry value HKEY_USERS\S-1-5-21-4064657657-4253216823-4133322302-1000\Software\Microsoft\Internet Explorer\Main\\Start Page deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\Locked deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
[Registry - Additional Scans - Safe List]
Registry value HKEY_LOCAL_MACHINE\software\classes\.html\\'' updated successfully.
Registry value HKEY_LOCAL_MACHINE\software\classes\.html\\'' updated successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294}\ not found.
[Files/Folders - Created Within 30 Days]
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCall.dll deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla.dll deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla2.dll deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla21.dll deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla31.exe deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla32.dll deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla33.dll deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla34.dll deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla37.exe deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseData.ini deleted successfully.
C:\windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP folder deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCall.dll deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla.dll deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla17.dll deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla18.dll deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla18.exe deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla19.dll deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla2.dll deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla20.dll deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla21.dll deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseCustomCalla21.exe deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP\WiseData.ini deleted successfully.
C:\windows\AF54923662584AC6A0435B5B89C6EB61.TMP folder deleted successfully.

C:\windows\msdownld.tmp folder deleted successfully.
C:\windows\SysNative\SET7C6C.tmp deleted successfully.
[Files/Folders - Modified Within 30 Days]
[File - Lop Check]
C:\Users\Sergio\AppData\Roaming\AVG\AWL2014\TuningIndex folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2014\StartUp Manager folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2014\Speed Optimizer folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2014\Dashboard folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2014\Backups folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2014 folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2012\TuningIndex folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2012\StartUp Manager folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2012\Speed Optimizer folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2012\Dashboard folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2012\Backups folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL2012 folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL\CrashDumps folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG\AWL folder moved successfully.
C:\Users\Sergio\AppData\Roaming\AVG folder moved successfully.
[Custom Scans]
C:\logCleaner.txt moved successfully.
[Alternate Data Streams]
ADS C:\Users\Sergio\Documents\Oi Telefone.tiff:3or4kl4x13tuuug3Byamue2s4b deleted successfully.
[Empty Temp Folders]


User: Administrator

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest

User: HomeGroupUser$

User: Public

User: Sergio
->Temp folder emptied: 195740 bytes
->Temporary Internet Files folder emptied: 243561578 bytes
->Java cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 1362 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5008 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 232.00 mb

Restore point Set: OTS Restore Point
< End of fix log >
OTS by OldTimer - Version 3.1.47.2 fix logfile created on 12152014_122935

Files\Folders moved on Reboot...
C:\Users\Sergio\AppData\Local\Temp\Low\JavaDeployReg.log moved successfully.
C:\Users\Sergio\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Sergio\AppData\Local\Temp\~DF4B93039F9F27A66A.TMP moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\0[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\7r8gQb8MIqE[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\authorization[4].css moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\b[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\cazamba[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\chat_message_52df20dbc4522c398abba5d0b6377131[1].dat moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\checkOAuth[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\count[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\hscv[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\http___www.naoleveportras[1].json moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\likebox[2].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\nexac[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRCTYK8Q\postmessageRelay[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\7r8gQb8MIqE[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\authorization[2].css moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\authorization[3].css moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\authorization[4].css moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\authorization[5].css moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\ca-pub-6895777216591447[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\cm[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\count[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\frame[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\generateCookie[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\getAllAppDefault[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\mgadget[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\mtvn-dest[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\pingjs[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\rm[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CJ1H6JG2\tp[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\300lo[2].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\7r8gQb8MIqE[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\authorization[1].css moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\cazamba[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\chat_message_52df20dbc4522c398abba5d0b6377131[1].dat moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\count[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\css[4].css moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\fastbutton[2].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\fastbutton[3].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\generateCookie[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\g[1].json moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\like[3].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\like[4].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\like[5].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\like[6].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\pingjs[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\shares[1].json moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\spider3[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\spider3[2].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9KHNSTUO\tweet_button.ff7d9077a26377d36b6a53b1a95be617.pt[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\7r8gQb8MIqE[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\authorization[5].css moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\count[2].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\count[3].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\count[4].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\count[5].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\QFNXPX0U.htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\t3265p14-notebook-tohiba-l675-s7133-trancando[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7NDS00SH\t3265p14-notebook-tohiba-l675-s7133-trancando[2].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6YW0UW5Q\99969[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6YW0UW5Q\postmessageRelay[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\669W9KXH\proxy[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3O50CW5S\-g5pDUSRgvxvOl5u-a_WHw[1].woff moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3O50CW5S\3TRKWOQQ.htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3O50CW5S\65698178[1].js moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3O50CW5S\container[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3O50CW5S\postmessageRelay[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3O50CW5S\tweet_button.ff7d9077a26377d36b6a53b1a95be617.pt[2].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3F3PPL9F\0[2].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3F3PPL9F\cJZKeOuBrn4kERxqtaUH3T8E0i7KZn-EPnyo3HZu7kw[1].woff moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3F3PPL9F\dn[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3F3PPL9F\grlryt2bdKIyfMSOhzd1eA[1].woff moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3F3PPL9F\k3k702ZOKiLJc3WVjuplzHhCUOGz7vYGh680lGh-uXM[1].woff moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3F3PPL9F\proxy[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3F3PPL9F\rs=AItRSTOx17EHTVp8AbYa1gjjMjLP62gd6A[1].htm moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\4A72F430-B40C-4D36-A068-CE33ADA5ADF9.dat moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
C:\windows\temp\ZLT01604.TMP moved successfully.

Registry entries deleted on Reboot...

Boa Tarde! binalima

> Desinstale todos os softwares da IObit + TuneUp Utilities.

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >  < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] > ( ... de Nicolas Coolman )
> Ou [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] << Link!
> Salve-o no disco local! ( C ou D )
> Desabilite seu antivírus e execute "ZHPDiag2.exe",para instalar a ferramenta.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Execute o ícone do pergaminho. ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

> Clique "COMPLETA" e aguarde a conclusão!
> Clique OK e,ao concluir,poste o relatório! ( ZHPDiag.txt ) 
> Ps: Como o log será extenso,envie-o à [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].

> Ou acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > 

> Ou acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

> Ou anexe-o |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| << Link!

> Maiores informações: < |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| > << Hospedagem!

A+

Vou desinstalar, mas baixei estes programas para tentar melhorar o notebook que já estava trancando na época.
Enquanto faço estes procedimentos, posso instalar o Chrome, por exemplo? O Internet Explorer está trancando e depois fechando sozinho

binalima escreveu:Vou desinstalar, mas baixei estes programas para tentar melhorar o notebook que já estava trancando na época.
Enquanto faço estes procedimentos, posso instalar o Chrome, por exemplo? O Internet Explorer está trancando e depois fechando sozinho

Boa Tarde! binalima

> Instale o Chrome após desinstalar os softwares.

A+

Vc. não vai acreditar que somente agora consegui desinstalar tudo.
Baixei o Chrome mas não identifico onde foi parar. Não criou ícone no Desktop.
Baixei o Opera que também gosto.
Agora vou fazer os procedimentos
Att.,

binalima escreveu:Vc. não vai acreditar que somente agora consegui desinstalar tudo.
Baixei o Chrome mas não identifico onde foi parar. Não criou ícone no Desktop.
Baixei o Opera que também gosto.
Agora vou fazer os procedimentos
Att.,

Boa Noite! binalima

> Remova resquícios da IObit com este programinha.

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by T-Tools )
> Salve-o no desktop! 

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

> Marque todas as checkbox.
> Clique "Go" >> "Sim!"

A+

OK. Já executei BitRemover.
Agora vou ao ZHP

binalima escreveu:OK. Já executei BitRemover.
Agora vou ao ZHP

OK! binalima

> Após o script com ZHPFix,eliminaremos resquícios da Baidu com a OTM.

A+

Relatorio ZHP

< [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

Grato!

/!\ Boa Noite! binalima /!\ 

> Execute este script na ferramenta ZHPFix.
> Selecione e copie estas informações que estão em vermelho,para o Bloco de Notas.
> Com o Bloco de Notas aberto,faça: ctrl+a >> ctrl+c ( Selecionar e Copiar )
> À seguir,minimize o Bloco de Notas.

Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash
HiddenFix
B1 - OSP: search.ini [Sergio] URL=http://start.mysearchdial.com/?f=4&q=%s
[MD5.ABB4AD86B94BE051249AF19AA547EC52] - (.Opera Software - Opera Installer.) -- C:\Users\Sergio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZOBOFNO2\Opera_NI_stable.exe [683720] [PID.5092]
[MD5.C44993816EA633E59F25D8B7474DE408] - (...) -- C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe [535160] [PID.4812]
[MD5.00000000000000000000000000000000] [APT] [{6371DB09-B7AE-4BD3-B595-6F346A8FA76F}] (...) -- E:\Claro\Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FDE2E1C9-15C7-47CC-AED0-72940940E669}] (...) -- C:\Users\Sergio\Downloads\comprovante-reemetido-do-vencimento-04-2014.cpl (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{69192696-DE8E-4C3D-BFA4-AFCDBF8EA3EE}] (...) -- C:\Users\Sergio\AppData\Roaming\istartsurf\UninstallManager.exe (.not file.) [0]
[MD5.3388875095220851B59A8FC2B5E4B021] [SPRF][15/12/2014] (.Thomas Hoen - T-Tools - BitRemover.) -- C:\Users\Sergio\Desktop\BitRemover.exe [110080]
[MD5.FB9DA1DD951232244203558A96E8FF66] [SPRF][07/02/2013] (.No owner - AntiDust Tool.) -- C:\Program Files (x86)\AntiDust.exe [50330]
[MD5.00000000000000000000000000000000] [APT] [Uninstaller_SkipUac_Administrator] (...) -- C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe (.not file.) [0] 
[MD5.00000000000000000000000000000000] [APT] [{931C02BC-85DE-424B-AEED-F019F43F805E}] (...) -- C:\Users\Sergio\AppData\Roaming\Easeware\DriverEasy\drivers\5qcnpzqc.bgk\Win7Vista_64_152258.exe (.not file.) [0]     
[MD5.00000000000000000000000000000000] [APT] [{B372FAC9-E728-4DA7-86AD-00BA4CAD4489}] (...) -- C:\Users\Sergio\AppData\Roaming\Easeware\DriverEasy\drivers\sk5dh1xb.trv\chipset INFs\Ssetup.exe (.not file.) [0]     
O2 - BHO: ExplorerWnd Helper [64Bits] - {10921475-03CE-4E04-90CE-E2E7EF20C814} Chave orfã
O41 - Driver: (Avgdiska) . (. - .) - C:\Windows\System32\DRIVERS\avgdiska.sys (.not file.)
O41 - Driver: (AVGIDSDriver) . (. - .) - C:\Windows\System32\DRIVERS\avgidsdrivera.sys (.not file.)
O41 - Driver: (Avgldx64) . (. - .) - C:\Windows\System32\DRIVERS\avgldx64.sys (.not file.)
O41 - Driver: (Avgtdia) . (. - .) - C:\Windows\System32\DRIVERS\avgtdia.sys (.not file.)
O41 - Driver: (Bfilter) . (. - .) - C:\windows\system32\drivers\Bfilter.sys (.not file.)
O41 - Driver: (Bfmon) . (. - .) - C:\windows\system32\drivers\Bfmon.sys (.not file.)
O41 - Driver: (Bprotect) . (. - .) - C:\windows\system32\drivers\Bprotect.sys (.not file.)
O41 - Driver: (BprotectEx) . (. - .) - C:\windows\system32\drivers\BprotectEx.sys (.not file.)
O43 - CFD: 11/12/2014 - 14:22:51 - [] ----D C:\Program Files (x86)\Full Tilt Poker
O43 - CFD: 24/11/2014 - 11:28:16 - [] ----D C:\Program Files (x86)\PokerStars
O43 - CFD: 14/12/2014 - 23:25:39 - [0] ----D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
O43 - CFD: 06/10/2014 - 14:51:46 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Full Tilt Poker
O43 - CFD: 11/12/2014 - 14:22:41 - [] ----D C:\Users\Sergio\AppData\Local\FullTiltPoker
O43 - CFD: 14/12/2014 - 12:50:40 - [] ----D C:\Users\Sergio\AppData\Local\PokerStars
O43 - CFD: 03/12/2014 - 09:10:05 - [] ----D C:\ProgramData\IObit 
O43 - CFD: 12/08/2014 - 11:48:35 - [] ----D C:\ProgramData\TuneUp Software
O53 - SMSR:HKLM\...\startupreg\IObit Malware Fighter [Key] . (...) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (.not file.)
O61 - LFC: 15/12/2014 - 20:20:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Sergio\AppData\Local\Temp\is-I7MA9.tmp\_isetup\_shfoldr.dll [23312]
O61 - LFC: 15/12/2014 - 20:20:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Sergio\AppData\Local\Temp\is-LFEAP.tmp\_isetup\_shfoldr.dll [23312]
O61 - LFC: 15/12/2014 - 20:20:34 ---A- . (.Microsoft Corporation.) -- C:\Users\Sergio\AppData\Local\Temp\is-OQHDT.tmp\_isetup\_shfoldr.dll [23312]
O61 - LFC: 15/12/2014 - 20:20:39 ---A- . (.Thomas Hoen - T-Tools.) -- C:\Users\Sergio\Desktop\BitRemover.exe [110080]
[HKCU\Software\Activeris]
[HKCU\Software\Baidu Security]     
[HKCU\Software\Baixaki]     
[HKCU\Software\IObit] 
[HKCU\Software\TuneUp]     
[HKCU\Software\baidu]     
[HKLM\Software\Baidu Security]     
[HKLM\Software\IObit] 
[HKLM\Software\TuneUp]     
[HKLM\Software\Wow6432Node\ADSRemoval]     
[HKLM\Software\Wow6432Node\AdwCleaner] 
[HKLM\Software\Wow6432Node\Baidu Security]     
[HKLM\Software\Wow6432Node\Baidu_Drp_pos]     
[HKLM\Software\Wow6432Node\IObit] 
[HKLM\Software\Wow6432Node\TuneUp]     
[HKLM\Software\Wow6432Node\baidu]     
[HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}]
[HKLM\Software\Wow6432Node\Activeris]
[HKLM\Software\360Safe]
[HKCU\Software\Conduit]
[HKLM\Software\SOFTWARE]
[HKCU\Software\Full Tilt Poker]
[HKLM\Software\Wow6432Node\Full Tilt Poker]
C:\ProgramData\Log
ServiceStop:Bfilter
ServiceStop:Bfmon
ServiceStop:Bprotect
ServiceStop:BprotectEx
ServiceStop:Avgldx64

> Abra a ferramenta ZHPFix. < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >
> Clique IMPORTAÇÃO >> OK.
> Ps: Ao clicar "OK",verifique se o campo está limpo para que receba,somente,as informações do script.
> Clique "GO".
> Poste o relatório!

A+

Segue relatório ZHPFix
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Grato

Rapport de ZHPFix 2014.10.24.12 par Nicolas Coolman, Update du 24/10/2014
Fichier d'export Registre :
Run by Sergio at 16/12/2014 06:33:40
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 09s)
Prefetcher vazio

========== Estado dos serviços ==========
Bfilter Parado
Bfmon Parado
Bprotect Parado
BprotectEx Parado
Avgldx64 Parado

========== Chaves do Registo ==========
ELIMINÉ Driver Key: Avgdiska
ELIMINÉ Driver Key: AVGIDSDriver
ELIMINÉ Driver Key: Avgldx64
ELIMINÉ Driver Key: Avgtdia
ELIMINÉ Driver Key: Bfilter
ELIMINÉ Driver Key: Bfmon
ELIMINÉ Driver Key: Bprotect
ELIMINÉ Driver Key: BprotectEx
ELIMINÉ:* StartupReg: IObit Malware Fighter
ELIMINÉ: HKCU\Software\Activeris
ELIMINÉ: HKCU\Software\Baidu Security
ELIMINÉ: HKCU\Software\Baixaki
ELIMINÉ: HKCU\Software\IObit
ELIMINÉ: HKCU\Software\TuneUp
ELIMINÉ: HKCU\Software\baidu
ELIMINÉ:* HKLM\Software\Baidu Security
ELIMINÉ:* HKLM\Software\IObit
ELIMINÉ:* HKLM\Software\TuneUp
ELIMINÉ: HKLM\Software\Wow6432Node\ADSRemoval
ELIMINÉ: HKLM\Software\Wow6432Node\AdwCleaner
ELIMINÉ: HKLM\Software\Wow6432Node\Baidu_Drp_pos
ELIMINÉ: HKLM\Software\Wow6432Node\baidu
ELIMINÉ: HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
ELIMINÉ: HKLM\Software\Wow6432Node\Activeris
ELIMINÉ:* HKLM\Software\360Safe
ELIMINÉ: HKCU\Software\Conduit
ELIMINÉ:* HKLM\Software\SOFTWARE
ELIMINÉ: HKCU\Software\Full Tilt Poker
ELIMINÉ: HKLM\Software\Wow6432Node\Full Tilt Poker

========== Valores do Registo ==========
Ausente Valor Perfil Padrão: FirewallRaz :
Ausente Valor Perfil Domínio FirewallRaz :

========== Preferências do navegador ==========
ELIMINÉ: Opera Search Page: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

========== Pastas ==========
ELIMINÉ Temporários windows (19)
ELIMINÉ Flash Cookies (0)
ELIMINÉ: C:\Program Files (x86)\Full Tilt Poker
ELIMINÉ: C:\Program Files (x86)\PokerStars
ELIMINÉ: C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
ELIMINÉ: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Full Tilt Poker
ELIMINÉ: C:\Users\Sergio\AppData\Local\FullTiltPoker
ELIMINÉ: C:\Users\Sergio\AppData\Local\PokerStars
ELIMINÉ: C:\ProgramData\IObit
ELIMINÉ: C:\ProgramData\TuneUp Software
ELIMINÉ: c:\programdata\log

========== Ficheiros ==========
ELIMINÉ Temporários windows (88) (22.069.589 octets)
ELIMINÉ Flash Cookies (0) (0 octets)
ELIMINÉ: c:\users\sergio\desktop\bitremover.exe

========== Tarefa planificada ==========
ELIMINÉ: {6371DB09-B7AE-4BD3-B595-6F346A8FA76F}
ELIMINÉ: {FDE2E1C9-15C7-47CC-AED0-72940940E669}
ELIMINÉ: {69192696-DE8E-4C3D-BFA4-AFCDBF8EA3EE}
ELIMINÉ: Uninstaller_SkipUac_Administrator
ELIMINÉ: {931C02BC-85DE-424B-AEED-F019F43F805E}
ELIMINÉ: {B372FAC9-E728-4DA7-86AD-00BA4CAD4489}

========== Pastas/Ficheiros ocultos restaurados ==========
Mes images (My Pictures) : 22 restaurados com sucesso
Ma musique (My Music) : 28 restaurados com sucesso
Ma Video (My Video) : 2 restaurados com sucesso
Mes Favoris (My Favorites) : 5 restaurados com sucesso
Mes Documents (My Documents) : 11 restaurados com sucesso
Mon Bureau (My Desktop) : 1 restaurados com sucesso
Menu demarrer (Programs) : 5 restaurados com sucesso
Dossier utilisateur (AppData) : 44 restaurados com sucesso
Programmes (Program Files) : 12 restaurados com sucesso


========== Recapitulativo ==========
29 : Chaves do Registo
2 : Valores do Registo
11 : Pastas
3 : Ficheiros
1 : Preferências do navegador
5 : Estado dos serviços
6 : Tarefa planificada
130 : Pastas/Ficheiros ocultos restaurados


End of clean in 07mn 55s

========== Caminho do ficheiro do relatório ==========
C:\Users\Sergio\AppData\Roaming\ZHP\ZHPFix[R1].txt - 15/12/2014 19:15:11 [603]
C:\Users\Sergio\AppData\Roaming\ZHP\ZHPFix[R2].txt - 16/12/2014 06:33:52 [3819]

Foi parar na Lixeira o arquivo Prefetch File.
Me parece ter muita coisa ali. Posso excluí-lo ?

binalima escreveu:Foi parar na Lixeira o arquivo Prefetch File.
Me parece ter muita coisa ali. Posso excluí-lo ?

Bom Dia! binalima

> Sim! Tudo que estiver na lixeira pode deletar!


> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by Smeenk )

< [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

> Salve-o ao desktop!
> Desabilite seu antivírus!
> Para Windows 7,execute zoek.exe como administrador.

emptyfolderscheck;delete
emptytemp;
autoclean;
Baidu;a
Baidu;z 

> Copie e cole estas informações,que estão em vermelho,no campo da ferramenta.
> Clique "Run Script". 

Zoek.exe is running now. 
Do not start any browser windows, they will be closed automatically. 
Please wait! This window will close when finished. 
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

> Surgirão informações,pedindo-lhe que aguarde o surgimento do relatório.
> Ps: Essas informações,podem permanecer estáticas na tela por 20 minutos ou mais.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Confirme o reboot!

zoek.hta failed by unknown error.
Restart computer, and try again.

> Ps: Ao obter algum erro,reinicie o PC e execute,novamente,a ferramenta.
> Poste o relatório,que estará em C:\zoek-results.txt << 

A+

Segue ZOEK-results.
Grato

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Boa Tarde! binalima

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by OldTimer Tools )
> Salve-o no desktop e,execute-o aí mesmo!
> Para Windows Vista ou 7,execute-a como administrador!

XXXXXXXXXX
:Files
C:\BaiduDownloads
C:\ProgramData\Baidu Security
C:\Users\Public\Documents\Baidu
C:\Users\All Users\Baidu Security
C:\Users\Public\Documents\Baidu Security
C:\Users\Sergio\AppData\Local\Temp\Baidu
C:\Users\Sergio\AppData\Roaming\Baidu Security
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Baidu Security
C:\Program Files (x86)\Baidu Security
C:\Program Files (x86)\Baidu Security\MoboMarket
C:\Program Files (x86)\Baidu Security\Baidu Antivirus
C:\Program Files (x86)\Baidu Security\MoboMarket\1.2.8.3611
C:\Program Files (x86)\Baidu Security\MoboMarket\1.2.8.3611\Data
C:\Program Files (x86)\Baidu Security\MoboMarket\1.2.8.3611\Data\Temp
C:\Program Files (x86)\Baidu Security\MoboMarket\1.2.8.3611\Data\Temp\com.baidu.browser.inter75.apk 
C:\ProgramData\Spybot - Search & Destroy\Quarantine\*.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine
C:\ProgramData\Spybot - Search & Destroy
C:\Users\All Users\Spybot - Search & Destroy
C:\Users\All Users\Spybot - Search & Destroy\Quarantine
C:\Users\All Users\Spybot - Search & Destroy\Quarantine\*.zip

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload]
[-HKEY_LOCAL_MACHINE\SOFTWARE\baidu\Spark]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\LogLoc]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\MoboMarket]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\MoboMarket\Processing]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Processing]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}]
"DllName"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}]
"DllName"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared\HTML]
"KnownIDs"="htmlfile;Opera.HTML"
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\baiduqqsina.cn]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\baiduqqsina.cn\www]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\baiduqqsina.cn]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\baiduqqsina.cn\www]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]
"Baidu Bsr"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Android Store 1.2.8.3611]
"DisplayIcon"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Android Store 1.2.8.3611]
"UninstallString"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Android Store 1.2.8.3611]
"Publisher"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Android Store 1.2.8.3611]
"InstallDir"=""
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Spark.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Spark.exe]
"Path"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Opera Software]
"Previous Default Browser"=""
[-HKEY_LOCAL_MACHINE\SOFTWARE\TuneUp\Utilities]
[HKEY_LOCAL_MACHINE\SOFTWARE\TuneUp\Utilities\ProgramDeactivator]
"ProgManReDeactivateTUID0"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.htm]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.html]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.shtml]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xht]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xhtml]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon]
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\BaiduSparkHTML]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\BaiduSparkHTML\DefaultIcon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\BaiduSparkHTML\DefaultIcon]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug]
[-HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster]
[-HKEY_USERS\.DEFAULT\Software\Baidu]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BFILTER]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BFMON]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BNDEF]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BPROTECT]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BPROTECTEX]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCAppStoreSvc_{PCAppStore_3.15.8.4011}]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFasterSvc_{PCFaster_4.0.0.0}]
:Commands 
[emptytemp]
[Reboot]


XXXXXXXXXX

> Copie e cole estas informações,entre os XXXXX...,para o campo ( clipboard ),da ferramenta.
> Ps: Área abaixo de "Paste Instructions for Items to be Moved".
> Clique em MoveIt.
> Na solicitação de reboot,confirme! >> Aguarde!
> Terminando,verifique o conteúdo texto da pasta: C:\_OTM\MovedFiles
> Copie e poste,o relatório: C:\_OTM\MovedFiles\xxxx2014_xxxxxx.log <<
> Ps: Como a ferramenta não sobre-escreve seus relatórios,devemos observar o que foi gerado logo após sua execução.

A+

OK.
Rodado OTM e a seguir relatório.
Espero que eu tenha feito certo, pois não entendi muito bem o Ps da tua mensagem.

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

binalima escreveu:OK.
Rodado OTM e a seguir relatório.
Espero que eu tenha feito certo, pois não entendi muito bem o Ps da tua mensagem.

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Boa Tarde! binalima

> Este link que postou não mostra o relatório! Tente,novamente,postar o relatório da OTM.
> O que houve? Observou algum erro,ao obter o link?
> Em todo caso,cole-o diretamente,em seu Post.

A+

Não sei o que houve. Fiz o link do mesmo arquivo que estou colocando no post.

All processes killed
========== FILES ==========
C:\BaiduDownloads folder moved successfully.
File/Folder C:\ProgramData\Baidu Security not found.
File/Folder C:\Users\Public\Documents\Baidu not found.
File/Folder C:\Users\All Users\Baidu Security not found.
File/Folder C:\Users\Public\Documents\Baidu Security not found.
File/Folder C:\Users\Sergio\AppData\Local\Temp\Baidu not found.
File/Folder C:\Users\Sergio\AppData\Roaming\Baidu Security not found.
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Baidu Security\PC App Store\4.6.1.6274\Dump folder moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Baidu Security\PC App Store\4.6.1.6274 folder moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Baidu Security\PC App Store\4.4.0.5890\Dump folder moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Baidu Security\PC App Store\4.4.0.5890 folder moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Baidu Security\PC App Store folder moved successfully.
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Baidu Security folder moved successfully.
File/Folder C:\Program Files (x86)\Baidu Security not found.
File/Folder C:\Program Files (x86)\Baidu Security\MoboMarket not found.
File/Folder C:\Program Files (x86)\Baidu Security\Baidu Antivirus not found.
File/Folder C:\Program Files (x86)\Baidu Security\MoboMarket\1.2.8.3611 not found.
File/Folder C:\Program Files (x86)\Baidu Security\MoboMarket\1.2.8.3611\Data not found.
File/Folder C:\Program Files (x86)\Baidu Security\MoboMarket\1.2.8.3611\Data\Temp not found.
File/Folder C:\Program Files (x86)\Baidu Security\MoboMarket\1.2.8.3611\Data\Temp\com.baidu.browser.inter75.apk not found.
File/Folder C:\ProgramData\Spybot - Search & Destroy\Quarantine\*.zip not found.
File/Folder C:\ProgramData\Spybot - Search & Destroy\Quarantine not found.
File/Folder C:\ProgramData\Spybot - Search & Destroy not found.
File/Folder C:\Users\All Users\Spybot - Search & Destroy not found.
File/Folder C:\Users\All Users\Spybot - Search & Destroy\Quarantine not found.
File/Folder C:\Users\All Users\Spybot - Search & Destroy\Quarantine\*.zip not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\baidu\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\baidu\CommonDll\Splitupload\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\baidu\Spark\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\DuplicateRecord\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu Security\LogLoc\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\MoboMarket\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\MoboMarket\Processing\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Processing\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Baidu_Drp_pos\DRP\Temp\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B580CF65-E151-49C3-B73F-70B13FCA8E86}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{77FEF28E-EB96-44FF-B511-3185DEA48697}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86} not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared\HTML\\"KnownIDs"|"htmlfile;Opera.HTML" /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\baiduqqsina.cn\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\baiduqqsina.cn\www\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\baiduqqsina.cn\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\baiduqqsina.cn\www\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-\\Baidu Bsr deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Android Store 1.2.8.3611\\"DisplayIcon"|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Android Store 1.2.8.3611\\"UninstallString"|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Android Store 1.2.8.3611\\"Publisher"|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Android Store 1.2.8.3611\\"InstallDir"|"" /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Spark.exe\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Spark.exe not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Opera Software\\"Previous Default Browser"|"" /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\TuneUp\Utilities\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\TuneUp\Utilities\ProgramDeactivator not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.htm\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.html\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.shtml\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xht\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xhtml\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\DefaultIcon\\@|"" /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bav\shell\open\command not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\BaiduSparkHTML\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\BaiduSparkHTML\DefaultIcon\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\BaiduSparkHTML\DefaultIcon not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Baidu_Scan\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\Baidu_Scan\ deleted successfully.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\bug\ deleted successfully.
Registry key HKEY_USERS\S-1-5-18\Software\Baidu Security\PC Faster\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Baidu\ deleted successfully.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFILTER\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BFMON\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BNDEF\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECT\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BFILTER\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BFMON\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BNDEF\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BPROTECT\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_BPROTECTEX\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFILTER\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BFMON\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BNDEF\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECT\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFILTER\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BFMON\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECT\ scheduled to be deleted on reboot.
Registry delete failed. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\ scheduled to be deleted on reboot.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BAVSvc\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdApiUtil\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BdCameraProtect\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BHipsSvc\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCAppStoreSvc_{PCAppStore_3.15.8.4011}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFApiUtil\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCFasterSvc_{PCFaster_4.0.0.0}\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]