Remoção de link bucks

por Márcia Secco Fernandez Ter 29 Out 2013, 11:10

Olá pessoal sou nova por aqui e preciso de ajuda meu pc está infectado por link bucks todo site que acesso quando redireciono aparece isto..não sei mais o que fazer já passei adwcleaner, avg, kasperky removal tool e nada.. por favor ajudem.. desde já obrigada..ah isto pode ser p "pego" pela rede de um local aonde acesso a net por cabo?

por Wings [In Memoriam] Ter 29 Out 2013, 11:12

Olá Márcia Secco Fernandez

Qual a versão do seu Windows?

por Márcia Secco Fernandez Ter 29 Out 2013, 14:21

Olá meu windows é o 7

por Wings [In Memoriam] Ter 29 Out 2013, 15:11

Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de Smeenk)

*Extraia o arquivo Zoek.exe para o Desktop (Área de Trabalho)

*Clique com o botão direito do mouse no Zoek e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Copie e cole as linhas em marrom no espaço do Zoek

LinkBucks;a
chromelook;
firefoxlook;
filesrcm;

*Clique [Run Script]

*Durante o scan a mensagem abaixo será apresentada. Aguarde o término...pode demorar!

Zoek.exe is running now.
Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

*Cole ou anexe o relatório C:\zoek-results.txt

por Márcia Secco Fernandez Ter 29 Out 2013, 15:59

Ok...Farei isso... depois colo aqui.. valeu

por Márcia Secco Fernandez Ter 29 Out 2013, 22:29

resultado:

Zoek.exe Version 4.0.0.5 Updated 26-October-2013
Tool run by SONY on 29/10/2013 at 22:19:19,83.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\SONY\Desktop\zoek.exe [Script inserted]

==== System Restore Info ======================

29/10/2013 22:20:53 Zoek.exe System Restore Point Created Succesfully.

==== Registry Search Results for "LinkBucks" ======================

No instances of string "LinkBucks" found.

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\SONY\AppData\Local\Temp ====
2013-10-27 22:53:04 7967115DADFCAAA989901507470479EE 27084152 ----a-w- C:\Users\SONY\AppData\Local\Temp\is701137889\24488634_stp.EXE
====== Java Cache =====
2013-10-29 13:03:26 302DA77AF33B291A86A92EFA84ABA198 7316 ----a-w- C:\Users\SONY\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\33a6d040-71298830
2013-10-29 13:03:26 DD4DEC2DC647E9875D490E13EC28515B 5281 ----a-w- C:\Users\SONY\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\22244fd9-7b432f31
2013-10-29 12:56:04 CFDBA872EEACBBFC0C740E4ABCB04987 3855 ----a-w- C:\Users\SONY\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\3d80bff1-44c75d45
2013-10-29 13:03:26 CFDBA872EEACBBFC0C740E4ABCB04987 3855 ----a-w- C:\Users\SONY\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\3d80bff1-54bef036
2013-10-29 13:03:27 BE83F71E76A8800FFD4B0A98E48CBF5F 8825 ----a-w- C:\Users\SONY\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\14fd6ab2-11427e28
====== C:\Windows\SysWOW64 =====
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
====== C:\Windows\Sysnative\drivers =====
2013-10-08 19:14:12 E2C933EDBC389386EBE6D2BA953F43D8 785624 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys
2013-10-08 19:14:12 80B0F7D5CCF86CEB5D402EAAF61FEC31 100864 ----a-w- C:\Windows\Sysnative\drivers\usbcir.sys
2013-10-08 19:14:12 1F775DA4CF1A3A1834207E975A72E9D7 185344 ----a-w- C:\Windows\Sysnative\drivers\usbvideo.sys
2013-10-08 19:14:11 9661DA76B4531B2DA272ECCE25A8AF24 42496 ----a-w- C:\Windows\Sysnative\drivers\usbscan.sys
2013-10-08 19:14:11 856E76B3641746ABBC2946BED1372098 32896 ----a-w- C:\Windows\Sysnative\drivers\hidparse.sys
2013-10-08 19:14:11 597C3699384E53CC59587ED50CCE5CA2 76800 ----a-w- C:\Windows\Sysnative\drivers\hidclass.sys
2013-10-08 19:14:10 1A4F75E63C9FB84B85DFFC6B63FD5404 140800 ----a-w- C:\Windows\Sysnative\drivers\mrxdav.sys
2013-10-08 19:14:07 40AF23633D197905F03AB5628C558C51 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys
2013-10-08 19:14:07 314C17917AC8523EC77A710215012A65 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys
2013-10-08 19:13:50 88612F1CE3BF42256913BF6E61C70D52 983488 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys
2013-10-08 19:13:48 E73A7A04FDAC9DD46EE2A4257F09E91C 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys
2013-10-08 19:13:48 ACCEA6BC68D0C9A78EB97EE159028B4E 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys
2013-10-08 19:13:48 311C1DD1088E55BEAE15954D17F50646 52736 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys
2013-10-08 19:13:47 A83D0EC9AE4C31704442099D40BA2471 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys
2013-10-08 19:13:47 9406D801042FAF859CF81B2C886413DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys
2013-10-08 19:13:47 861C197502A5057E68F0AC75D9EFCDD7 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys
2013-10-08 19:13:47 280E90CBF4B2DDD169F0728CB44D726F 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys
2013-10-06 01:34:48 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\Sysnative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-10-04 02:22:57 EA8F41484CCC5BA6A1455C2AD3D1BE3C 203672 ----a-w- C:\Windows\Sysnative\drivers\ssudmdm.sys
2013-10-04 02:22:56 0B3F6C8F93C5C25977EA5A8B2E656357 103448 ----a-w- C:\Windows\Sysnative\drivers\ssudbus.sys
====== C:\Windows\Tasks ======
2013-10-27 22:57:39 D8BF11DC38CE513A5331127DA328504E 3228 ----a-w- C:\Windows\Sysnative\Tasks\UpdaterEX
2013-10-27 22:57:39 A0B1DD8B741BFAC3EF71C50D5572D76B 288 ----a-w- C:\Windows\Tasks\UpdaterEX.job
2013-10-27 01:02:42 84A1D179072B97020F8AAACD7B47DDE1 3142 ----a-w- C:\Windows\Sysnative\Tasks\{2300D398-4061-4F50-BBA2-83A810D1E246}
2013-10-27 00:51:55 F29634D59A0EA0FA9890A9B49DC5F3A5 3360 ----a-w- C:\Windows\Sysnative\Tasks\Baidu PC Faster Update
====== C:\Windows\Temp ======
======= C:\Program Files =====
======= C:\PROGRA~2 =====
2013-10-04 02:25:03 -------- d-----w- C:\PROGRA~2\MarkAny
2013-10-04 02:18:51 -------- d-----w- C:\PROGRA~2\Samsung
======= C: =====
====== C:\Users\SONY\AppData\Roaming ======
2013-10-30 00:06:11 -------- d-----r- C:\Users\SONY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-10-27 22:57:39 -------- d-----w- C:\Users\SONY\AppData\Roaming\UpdaterEX
2013-10-27 00:35:39 -------- d-----w- C:\Users\SONY\AppData\Roaming\eCyber
2013-10-27 00:11:22 -------- d-----w- C:\Users\SONY\AppData\Roaming\iSafe
2013-10-04 02:24:04 -------- d-----w- C:\Users\SONY\AppData\Local\Samsung
2013-10-04 02:24:02 -------- d-----w- C:\Users\SONY\AppData\Roaming\Samsung
2013-10-04 02:17:36 -------- d-----w- C:\Users\SONY\AppData\Local\Downloaded Installations
====== C:\Users\SONY ======
2013-10-27 23:09:12 -------- d-----w- C:\Users\TODOSO~1\Licenses
2013-10-27 23:09:12 -------- d-----w- C:\ProgramData\Licenses
2013-10-27 23:01:22 -------- d-----w- C:\Users\TODOSO~1\Simply Super Software
2013-10-27 23:01:22 -------- d-----w- C:\ProgramData\Simply Super Software
2013-10-27 22:57:37 7967115DADFCAAA989901507470479EE 27084152 ----a-w- C:\Users\SONY\Downloads\trjsetup688.exe
2013-10-27 17:55:11 -------- d-----w- C:\Users\TODOSO~1\Kaspersky Lab
2013-10-27 17:55:11 -------- d-----w- C:\ProgramData\Kaspersky Lab
2013-10-27 17:32:18 A2BE6FB383294DCF610E94ED4C0EBD2C 142186192 ----a-w- C:\Users\SONY\Desktop\setup_11-0-0-1245-x01_2012_10_31_19_17.exe
2013-10-27 17:30:29 DBF530E64D581B65031687C9A4367137 400752 ----a-w- C:\Users\SONY\Downloads\SoftonicDownloader_para_kaspersky-virus-removal-tool.exe
2013-10-27 00:08:30 7B5352BFFAEE7856A2A9182A57F9D881 633672 ----a-w- C:\Users\SONY\Downloads\iSafedl.exe
2013-10-26 20:48:10 8C27D71B2F6719136407C525ECF18D51 1060070 ----a-w- C:\Users\SONY\Downloads\adwcleaner.exe
2013-10-12 22:56:15 -------- d-----w- C:\Users\TODOSO~1\Hewlett-Packard
2013-10-12 22:56:15 -------- d-----w- C:\ProgramData\Hewlett-Packard
2013-10-08 17:28:12 -------- d-----w- C:\Users\TODOSO~1\SummerSoft
2013-10-08 17:28:12 -------- d-----w- C:\ProgramData\SummerSoft
2013-10-08 17:27:54 -------- d-----w- C:\Users\TODOSO~1\InstallMate
2013-10-08 17:27:54 -------- d-----w- C:\ProgramData\InstallMate
2013-10-04 02:19:44 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2013-10-04 02:18:51 -------- d-----w- C:\Users\TODOSO~1\Samsung
2013-10-04 02:18:51 -------- d-----w- C:\ProgramData\Samsung

====== C: exe-files ==
2013-10-27 22:57:37 7967115DADFCAAA989901507470479EE 27084152 ----a-w- C:\Users\SONY\Downloads\trjsetup688.exe
2013-10-27 22:53:04 7967115DADFCAAA989901507470479EE 27084152 ----a-w- C:\Users\SONY\AppData\Local\Temp\is701137889\24488634_stp.EXE
2013-10-27 17:32:18 A2BE6FB383294DCF610E94ED4C0EBD2C 142186192 ----a-w- C:\Users\SONY\Desktop\setup_11-0-0-1245-x01_2012_10_31_19_17.exe
2013-10-27 17:30:29 DBF530E64D581B65031687C9A4367137 400752 ----a-w- C:\Users\SONY\Downloads\SoftonicDownloader_para_kaspersky-virus-removal-tool.exe
2013-10-27 01:04:26 201BCF8550512C105BAC78E9FA401260 452136 ----a-w- C:\Program Files (x86)\GbPlugin\gbpsv.exe
2013-10-27 00:46:46 757C8EE12863ED371C024A6D25444900 945464 ----a-w- C:\Users\SONY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XQZXLI5Z\IminentMinibarIE[1].exe
2013-10-27 00:46:41 EBE41EA3EED45C5779CCB3FD56D81F55 1046952 ----a-w- C:\Users\SONY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6JW96A0Z\MinibarChrome[1].exe
2013-10-27 00:46:36 991B430288A4995693A16A407DD5EF6A 1112456 ----a-w- C:\Users\SONY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\055F3TK1\MinibarFirefox[1].exe
2013-10-27 00:09:07 7365074DDD7653EEA74022836A0229D2 5976112 ----a-w- C:\Users\SONY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\055F3TK1\iSafe_setup[1].exe
2013-10-27 00:08:30 7B5352BFFAEE7856A2A9182A57F9D881 633672 ----a-w- C:\Users\SONY\Downloads\iSafedl.exe
2013-10-26 20:48:10 8C27D71B2F6719136407C525ECF18D51 1060070 ----a-w- C:\Users\SONY\Downloads\adwcleaner.exe
=== C: other files ==

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [20/09/2013 21:34]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{87F8774F-B485-47E2-A755-A40A8A5E886C}"="C:\Users\SONY\AppData\Local\GAS Tecnologia\GBBD\bb\xpi" [10/09/2013 09:48]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\SONY\AppData\Roaming\Mozilla\Firefox\Profiles\pcdz1cqi.default
D309C69345B2E7DE6644B2226E8F1CB0 - C:\Users\SONY\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll - Módulo de Proteção - Banco do Brasil
4BF70B35B943BD73BD6E13EB7C1BA4B3 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll - Shockwave Flash
AF661355EBAB898EB92D5454AEF93CE0 - C:\Windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.400.43
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
blefcpkldpjpbapgmoemkmdibidpiojd - C:\Program Files (x86)\LyricsPod\116.crx[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
pgacfjdigcddmmncljpflgcfpfahebkh - C:\Users\SONY\AppData\Local\GAS Tecnologia\GBBD\bb\sf.crx[10/09/2013 09:48]

Webcam Toy - SONY - Default\Extensions\lfbgimoladefibpklnfmkpknadbklade
Chrome In-App Payments service - SONY - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
GBBD Banco do Brasil - SONY - Default\Extensions\pgacfjdigcddmmncljpflgcfpfahebkh

==== EOF on 29/10/2013 at 22:24:26,87 ======================

por Wings [In Memoriam] Ter 29 Out 2013, 22:49

Baixe o arquivo fix.txt

remoção - Remoção de link bucks 772309

Clique com o botão direito do mouse no Zoek e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Selecione, copie e cole todo o conteúdo do arquivo fix.txt no espaço do Zoek

*Feche o seu navegador e clique [Run Script]

*Durante o scan a mensagem abaixo será apresentada. Aguarde o término...pode demorar!

Zoek.exe is running now.
Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

*Caso a reinicialização do PC seja solicitada, clique [OK]

*Cole ou anexe o relatório C:\zoek-results.txt

Informe como está o PC

por Márcia Secco Fernandez Ter 29 Out 2013, 23:18

Resultado:
Zoek.exe Version 4.0.0.5 Updated 26-October-2013
Tool run by SONY on 29/10/2013 at 22:59:15,94.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\SONY\Desktop\zoek.exe [Script inserted]

==== Older Logs ======================

C:\zoek-results2013-10-30-002426.log 10476 bytes

==== Creating Sample_102013_2305.zip ======================

Process chrome.exe killed
Copied file C:\Users\SONY\AppData\Roaming\unins000.exe to sample\unins000.exe
sample\unins000.exe renamed to AD6E810B9CE3D8C0C1FF0203C68C6FA6

C:\Users\Public\Desktop\sample_102013_2305.zip created successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Users\SONY\AppData\Roaming\Mozilla\Firefox\Profiles\pcdz1cqi.default

user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 3);
---- FireFox user.js and prefs.js backups ----

prefs_102013_2306_.backup

==== Deleting Files \ Folders ======================

C:\Windows\Sysnative\Tasks\UpdaterEX deleted
C:\Windows\Sysnative\Tasks\Baidu PC Faster Update deleted
C:\Users\SONY\AppData\Roaming\UpdaterEX deleted
C:\PROGRA~2\COMMON~1\DVDVideoSoft\bin deleted
C:\Users\SONY\AppData\Roaming\eCyber deleted
C:\Users\SONY\AppData\Roaming\iSafe deleted
C:\Users\SONY\Music\Qtrax Media Library deleted
C:\ProgramData\InstallMate deleted
C:\ProgramData\SummerSoft deleted
C:\Users\SONY\AppData\Local\CRE deleted
C:\Users\SONY\Downloads\iSafedl.exe deleted
C:\Users\SONY\Downloads\SoftonicDownloader_para_kaspersky-virus-removal-tool.exe deleted
C:\Users\SONY\AppData\LocalLow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com deleted
C:\Windows\tasks\UpdaterEX.job deleted
C:\Users\SONY\AppData\Roaming\unins000.exe deleted
C:\Users\SONY\Downloads\Legendas230(1).exe deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [20/09/2013 21:34]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{87F8774F-B485-47E2-A755-A40A8A5E886C}"="C:\Users\SONY\AppData\Local\GAS Tecnologia\GBBD\bb\xpi" [10/09/2013 09:48]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\SONY\AppData\Roaming\Mozilla\Firefox\Profiles\pcdz1cqi.default
D309C69345B2E7DE6644B2226E8F1CB0 - C:\Users\SONY\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll - Módulo de Proteção - Banco do Brasil
4BF70B35B943BD73BD6E13EB7C1BA4B3 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll - Shockwave Flash
AF661355EBAB898EB92D5454AEF93CE0 - C:\Windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.400.43
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
blefcpkldpjpbapgmoemkmdibidpiojd - C:\Program Files (x86)\LyricsPod\116.crx[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
pgacfjdigcddmmncljpflgcfpfahebkh - C:\Users\SONY\AppData\Local\GAS Tecnologia\GBBD\bb\sf.crx[10/09/2013 09:48]

Webcam Toy - SONY - Default\Extensions\lfbgimoladefibpklnfmkpknadbklade
Chrome In-App Payments service - SONY - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
GBBD Banco do Brasil - SONY - Default\Extensions\pgacfjdigcddmmncljpflgcfpfahebkh

==== Chrome Fix ======================

C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_app.mam.conduit.com_0.localstorage deleted successfully
C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_app.mam.conduit.com_0.localstorage-journal deleted successfully
C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fastcontent.conduit.com_0.localstorage deleted successfully
C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fastcontent.conduit.com_0.localstorage-journal deleted successfully
C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_youtube.conduitapps.com_0.localstorage deleted successfully
C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_youtube.conduitapps.com_0.localstorage-journal deleted successfully
C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_utorrentbarpt.ourtoolbar.com_0.localstorage deleted successfully
C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_utorrentbarpt.ourtoolbar.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0191A6B0-1154-4C22-9182-23A95BBE92D9}"
{0191A6B0-1154-4C22-9182-23A95BBE92D9} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2761824557-1718106404-2677581669-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2761824557-1718106404-2677581669-1000\Software\Mozilla\Firefox\Extensions\lyrics@LampFit.co deleted successfully

==== shortcuts on Users Desktops ======================

C:\Users\SONY\Desktop\µTorrent.lnk -

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Ares.lnk - C:\Program Files (x86)\Ares\Ares.exe
C:\Users\Public\Desktop\avast Free Antivirus.lnk -
C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk - C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe
C:\Users\Public\Desktop\Free YouTube Download.lnk - C:\Program Files (x86)\DVDVideoSoft\Free YouTube Download\FreeYTVDownloader.exe
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Public\Desktop\Samsung Kies (Lite).lnk - C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite
C:\Users\Public\Desktop\Samsung Kies.lnk - C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe

==== shortcuts in Users Start Menu ======================

C:\Users\SONY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Kies\Samsung Kies (Lite).lnk - C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Kies\Samsung Kies.lnk - C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Kies\Uninstall Kies.lnk - C:\Program Files (x86)\InstallShield Installation Information\{758C8301-2696-4855-AF45-534B1200980A}\setup.exe /removeonly
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Samsung Story Album Viewer\Samsung Story Album Viewer.lnk - C:\Program Files (x86)\Samsung\Story Album Viewer\HTML5Viewer.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Samsung Story Album Viewer\Uninstall Samsung Story Album Viewer.lnk - C:\Program Files (x86)\InstallShield Installation Information\{698BBAD8-B116-495D-B879-0F07A533E57F}\setup.exe /removeonly

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies (Lite).lnk - C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies.lnk - C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Story Album Viewer.lnk - C:\Program Files (x86)\Samsung\Story Album Viewer\HTML5Viewer.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PlayMemories Home.lnk - C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Messenger.lnk - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Users\SONY\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1C106B69-51A0-88AF-980F-267F78AB6B34} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\blefcpkldpjpbapgmoemkmdibidpiojd deleted successfully
HKEY_CURRENT_USER\Software\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\SONY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\SONY\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\SONY\AppData\Local\Mozilla\Firefox\Profiles\pcdz1cqi.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\SONY\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 29/10/2013 at 23:09:43,07 ======================

por Wings [In Memoriam] Ter 29 Out 2013, 23:25

Clique com o botão direito do mouse no Zoek e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Copie e cole as linhas em marrom no espaço do Zoek

*Feche o seu navegador e clique [Run Script]

*Caso a reinicialização do PC seja solicitada, clique [OK]

*Cole ou anexe o relatório C:\zoek-results.txt

por Márcia Secco Fernandez Ter 29 Out 2013, 23:36

Olá amigo...
o Pc está bom, finalmente consigo entrar nos sites e não aparece mais o link bucks.. ainda bem...
o Pc está um pouco lento para abrir as páginas, fora isto tudo muuito ok.. muito obrigada mesmo...valeu...vc sabe realmente tudo,... parabéns

por Wings [In Memoriam] Ter 29 Out 2013, 23:38

Faça o procedimento que solicitei acima.

remoção - Remoção de link bucks 772309

Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de Xplode) e salve-o no Desktop (Área de Trabalho)

*Salve qualquer trabalho aberto e feche o seu navegador

*Execute-o, clique [Examinar] e aguarde o término

*Clique [Limpar] e aguarde o término

*Caso seja solicitada a reinicialização do PC, clique [OK] para reiniciar.

*Cole o relatório C:\AdwCleaner\AdwCleaner[S0].txt

por Márcia Secco Fernandez Ter 29 Out 2013, 23:44

Resultado:
Zoek.exe Version 4.0.0.5 Updated 26-October-2013
Tool run by SONY on 29/10/2013 at 23:39:03,71.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\SONY\Desktop\zoek.exe [Script inserted]

==== Older Logs ======================

C:\zoek-results2013-10-30-002426.log 10476 bytes
C:\zoek-results2013-10-30-010943.log 13964 bytes

==== Batch Command(s) Run By Tool======================

Configura‡Æo de IP do Windows

Libera‡Æo do Cache do DNS Resolver bem-sucedida.

==== Deleting Files \ Folders ======================

C:\Program Files (x86)\LyricsPod not found

==== EOF on 29/10/2013 at 23:40:20,02 ======================

por Wings [In Memoriam] Ter 29 Out 2013, 23:45

Falta o relatório do AdwCleaner.

por Márcia Secco Fernandez Ter 29 Out 2013, 23:55

Relatório adwcleaner:
# AdwCleaner v3.010 - Relatório criado 29/10/2013 às 23:48:27
# Atualizado 20/10/2013 por Xplode
# Sistema Operacional : Windows 7 Home Premium Service Pack 1 (64 bits)
# Usuário : SONY - SONY-VAIO
# Executando de : C:\Users\SONY\Downloads\AdwCleaner(1).exe
# Opção : Limpar

***** [ Serviços ] *****

***** [ Arquivos / Pastas ] *****

***** [ Atalhos ] *****

***** [ Registro ] *****

Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\Softonic
Chave Deletedo : HKLM\Software\Iminent

***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16720

-\\ Mozilla Firefox v24.0 (pt-BR)

[ Arquivo : C:\Users\SONY\AppData\Roaming\Mozilla\Firefox\Profiles\pcdz1cqi.default\prefs.js ]

-\\ Google Chrome v30.0.1599.101

[ Arquivo : C:\Users\SONY\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [8060 octets] - [26/10/2013 18:48:45]
AdwCleaner[R1].txt - [1273 octets] - [29/10/2013 23:45:54]
AdwCleaner[S0].txt - [6413 octets] - [26/10/2013 18:51:33]
AdwCleaner[S1].txt - [1084 octets] - [29/10/2013 23:48:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1144 octets] ##########

por Wings [In Memoriam] Ter 29 Out 2013, 23:57

Vamos remover os programas usados.... Smile

Delete o arquivo sample_102013_2305.zip criado no Desktop

remoção - Remoção de link bucks 772309

Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de Xplode) e salve-o no Desktop (Área de Trabalho)

*Execute-o, deixe selecionadas as opções Remove disinfection tools e Purge system restore

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Clique [Run]

remoção - Remoção de link bucks 772309

Delete o DelFix e o arquivo C:\DelFix.txt

Um abraço... remoção - Remoção de link bucks 960671

por Márcia Secco Fernandez Qua 30 Out 2013, 00:05

Então!!!
Tudo ok...te passei todos os relatórios...
Falta fazer algo?

por Wings [In Memoriam] Qua 30 Out 2013, 00:06

Nada mais.

remoção - Remoção de link bucks 960671

por Wings [In Memoriam] Qua 30 Out 2013, 00:09

CASO RESOLVIDO

Caso o(a) autor(a) do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.

por Conteúdo patrocinado

Remoção de link bucks