Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Administrador at 2015-03-15 22:48:55 Run:1
Running from C:\Users\CARLOS\Desktop
Loaded Profiles: CARLOS & Administrador (Available profiles: CARLOS & Administrador)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
start
CreateRestorePoint:
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:373E1720
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\avastui.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\avastsvc.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\ashUpd.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\ashQuick.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\sched.exe <====== ATTENTION
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig] <===== ATTENTION
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oquefazernainternet.com/
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.oquefazernainternet.com/
URLSearchHook: [S-1-5-21-3504019602-3750793420-2798553429-500] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe
www.jogostempo.com?oem=brsoftv3&uid=WD-WXE308E21880_WDCWD1600BEVS-00VAT0&tm=1422627361
CHR HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\SOFTWARE\Google\Chrome\Extensions...\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] -
https://clients2.google.com/service/update2/crx
OPR Extension: (I - Cinema) - C:\Users\CARLOS\AppData\Roaming\Opera Software\Opera Stable\Extensions\dimfohdigjaffdaanhmbocfkpolglnjk [2015-01-31]
S3 BdApiUtil; ??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdApiUtil64.sys [X]
S3 BdCameraProtect; ??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdCameraProtect64.sys [X]
S3 BprotectEx; ??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 cpuz134; ??\C:\Users\CARLOS\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 PCFApiUtil; ??\C:\Program Files (x86)\PC Faster\PCFApiUtil64.sys [X]
C:\Program Files (x86)\Baidu Security
C:\Windows\System32\drivers\BprotectEx.sys
C:\Program Files (x86)\PC Faster
2015-01-25 13:12 - 2015-01-25 13:12 - 0001248 _____ () C:\Users\CARLOS\AppData\Roaming\YHSKM
2015-01-30 11:36 - 2015-01-30 11:36 - 0613057 _____ (CMI Limited) C:\Users\CARLOS\AppData\Local\nsnBC48.tmp
2014-01-15 02:15 - 2014-01-15 02:15 - 0167784 _____ (Baidu, Inc.) C:\ProgramData\FileSplitUpLoad.dll
C:\ProgramData\FileSplitUpLoad.dll
C:\Users\Todos os Usuários\FileSplitUpLoad.dll
C:\Users\CARLOS\AppData\Local\Temp\1.tmp.exe
C:\Users\CARLOS\AppData\Local\Temp\Baidu_Secure_SystemUp_5.1.3.109697.exe
C:\Users\CARLOS\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
C:\Users\CARLOS\AppData\Local\Temp\eFixProPackage.exe
EmptyTemp:
end
*****************
Restore point was successfully created.
C:\ProgramData\TEMP => ":373E1720" ADS removed successfully.
"C:\Users\Todos os Usuários\TEMP" => ":373E1720" ADS not found.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
"HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore" => Key deleted successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main\Search Page => value deleted successfully.
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main\Search Bar => value deleted successfully.
Error setting Default URLSearchHook.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}" => Key deleted successfully.
HKCR\CLSID{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes{632F07F3-19A1-4d16-A23F-E6CE9486BAB5}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key not found.
HKU.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope => value deleted successfully.
HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
HKCR\CLSID{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
"HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}" => Key deleted successfully.
HKCR\CLSID{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} => Key not found.
"HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully.
HKCR\CLSID{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
"HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{E733165D-CBCF-4FDA-883E-ADEF965B476C}" => Key deleted successfully.
HKCR\CLSID{E733165D-CBCF-4FDA-883E-ADEF965B476C} => Key not found.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\Default => Value was restored successfully.
"HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\SOFTWARE\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce" => Key deleted successfully.
C:\Users\CARLOS\AppData\Roaming\Opera Software\Opera Stable\Extensions\dimfohdigjaffdaanhmbocfkpolglnjk => Moved successfully.
BdApiUtil => Service deleted successfully.
BdCameraProtect => Service deleted successfully.
BprotectEx => Service deleted successfully.
cpuz134 => Service deleted successfully.
PCFApiUtil => Service deleted successfully.
"C:\Program Files (x86)\Baidu Security" => File/Directory not found.
"C:\Windows\System32\drivers\BprotectEx.sys" => File/Directory not found.
"C:\Program Files (x86)\PC Faster" => File/Directory not found.
C:\Users\CARLOS\AppData\Roaming\YHSKM => Moved successfully.
C:\Users\CARLOS\AppData\Local\nsnBC48.tmp => Moved successfully.
C:\ProgramData\FileSplitUpLoad.dll => Moved successfully.
"C:\ProgramData\FileSplitUpLoad.dll" => File/Directory not found.
"C:\Users\Todos os Usuários\FileSplitUpLoad.dll" => File/Directory not found.
C:\Users\CARLOS\AppData\Local\Temp\1.tmp.exe => Moved successfully.
C:\Users\CARLOS\AppData\Local\Temp\Baidu_Secure_SystemUp_5.1.3.109697.exe => Moved successfully.
C:\Users\CARLOS\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe => Moved successfully.
C:\Users\CARLOS\AppData\Local\Temp\eFixProPackage.exe => Moved successfully.
EmptyTemp: => Removed 944.6 MB temporary data.
The system needed a reboot.
==== End of Fixlog 22:50:47 ====