Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cant remove Link Bucks - Tried Everything :(


  • Please log in to reply
14 replies to this topic

#1 danbee

danbee

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:23 PM

Posted 01 November 2014 - 10:40 PM

Ive had linkbucks on my computer for weeks now (on my firefox browser), I've tried spybot search and destroy, Ad-Aware, ADWCleaner, Microsoft Security, Malware Bytes - basically all of them find pretty much nothing, or just harmless tracking cookies, it takes hours, I restart, and Link Bucks is still there :(
 
I found another thread about it and the user was advised to run Junk Removal Tool and AdwCleaner and post the logs - So I've just ran these, and after 10 minutes using the internet again now after the restarts, then I definitely do just still have Link Bucks on my Firefox browser.
 
Here are the logs in full:
 
ADWCLEANER:
 
# AdwCleaner v3.311 - Report created 02/11/2014 at 09:48:37
# Updated 30/09/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Dan - DAN-THINK
# Running from : C:\Users\Dan\Downloads\AdwCleaner(1).exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\AppDataLow\Software\adawarebp

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Mozilla Firefox v33.0.2 (x86 en-US)

[ File : C:\Users\Dan\AppData\Roaming\Mozilla\Firefox\Profiles\d11li5f9.default-1410270542838\prefs.js ]


-\\ Google Chrome v38.0.2125.111

[ File : C:\Users\Dan\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={4EE16B1D-A20A-424F-BD3C-9482CAAD37B0}&mid=2ae3682cc3a847d0a844d1688a22ac59-60de28269bd953e7e2ff7616f02b10eff27a1331&lang=en&ds=st011&pr=sa&d=2012-07-20 17:55:59&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms}
Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}

[ File : C:\Users\Keith\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [8692 octets] - [09/09/2014 19:37:47]
AdwCleaner[R1].txt - [941 octets] - [18/10/2014 10:32:41]
AdwCleaner[R2].txt - [1338 octets] - [02/11/2014 09:33:30]
AdwCleaner[S0].txt - [8473 octets] - [09/09/2014 19:41:48]
AdwCleaner[S1].txt - [1067 octets] - [18/10/2014 10:36:28]
AdwCleaner[S2].txt - [1602 octets] - [02/11/2014 09:48:37]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1662 octets] ##########
 
 
 
JUNK REMOVAL TOOL
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.5 (10.31.2014:1)
OS: Windows 7 Professional x64
Ran by Dan on 02/11/2014 at  9:43:13.67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{07F4B501-5254-4997-B3E0-D550E029A1B9}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{0E35012F-582E-4ECB-AED7-EA0D01BE756A}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{54A13963-DEA6-410A-953E-9F47544A80D9}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{568F943C-80A8-4D9D-8BE3-72F39531F60D}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{68AF398B-D5F9-4811-B074-D84BF831D133}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{7C49EBF7-DED9-4309-8DCC-A4364BD55AD9}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{85B06716-F4CF-49A8-8ADC-121B8141E90A}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{88BE4984-8B44-44F0-854C-95C2A6793F0A}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{8992B2F7-BBD6-4633-A7E5-6F29B5DC1363}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{A85366A4-CF05-4DD0-8701-3A957BEC1583}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{AA9A4DF7-65AE-4AD4-A135-BD85FE42DB45}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{BD164038-D85E-4925-BEC2-A0D2B44306C6}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{CA45C831-E7CA-4873-9806-B22EB6A84B53}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{CBB4AA6C-D840-4BC2-94D0-DCBACA816ECB}
Successfully deleted: [Empty Folder] C:\Users\Dan\appdata\local\{CDFDE099-910D-4BC6-AB63-AAAC2A475CB2}



~~~ FireFox

Emptied folder: C:\Users\Dan\AppData\Roaming\mozilla\firefox\profiles\d11li5f9.default-1410270542838\minidumps [9 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02/11/2014 at  9:47:42.91
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
Any help would be appreciated!

Edited by Queen-Evie, 01 November 2014 - 11:29 PM.
moved from MRL to Am I Infected


BC AdBot (Login to Remove)

 


#2 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 6,107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:23 PM

Posted 01 November 2014 - 11:43 PM

G'day danbee, and Welsome to BC !!

Click on the menu Icon (three horizontal lines) in the upper right hand corner of your Firefox browser and select Add Ons.

The select Extensions. Look for the link bucks extension and click on Remove

 

Post back with the result
 


Condobloke ...Outback Australian  fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

“A man travels the world in search of what he needs and returns home to find it."

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

 GcnI1aH.jpg

 

 


#3 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 6,107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:23 PM

Posted 01 November 2014 - 11:49 PM

Also.....i failed to notice you have Chrome browser as well

 

  • Start Google Chrome and click the Wrench or Three-bars icon on top-left portion of the browser.
  • Next, select Settings from the dropdownlist.
  • Once it opens a new window or tab, click on the Extensions located on left side of this window.
  • Usually, Google Chrome has empty Extension, unless if you install base on your preference.
  • Also on this window, you can remove the malicious item as well.

chrome-extensions.png

  • Remove the unwanted entry, by clicking on the trashcan.
  • If in case it is not present, you need to find and remove relevant extensions or other extensions you don’t install your self.
  • Now restart Google Chrome.

 

Sorry about the foreign language in the pic box !!


Edited by Condobloke, 01 November 2014 - 11:50 PM.

Condobloke ...Outback Australian  fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

“A man travels the world in search of what he needs and returns home to find it."

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

 GcnI1aH.jpg

 

 


#4 danbee

danbee
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:23 PM

Posted 02 November 2014 - 12:04 AM

Hey Condobloke, Thanks!

 

I cant see it in my list in Firefox - here's what I do have - is it any of these? Or can you tell me which I should delete?:

zjv1jp.jpg

 

In Chrome I dont have it either, I only have:

Nimbus Screen Capture Web 2.0.1
Nimbus Screenshot: Capture & Annotate 6.0.2


#5 danbee

danbee
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:23 PM

Posted 02 November 2014 - 12:08 AM

Ah sorry ^ that is my firefox plugins - here are my extensions also:

 

jkk4kg.jpg



#6 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 6,107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:23 PM

Posted 02 November 2014 - 12:15 AM

ok....go to the Firefox menu again and select help..(?)     the select 'Restart with Add - Ons Disabled '

 

Is link bucks still there ??


Condobloke ...Outback Australian  fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

“A man travels the world in search of what he needs and returns home to find it."

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

 GcnI1aH.jpg

 

 


#7 danbee

danbee
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:23 PM

Posted 02 November 2014 - 12:22 AM

ill do so now, it can take a while though, it doesnt appear every time, might not show for 20-30 page opens but then will really stick and not let me open something without a few retrys... ill try this now and really try and click around and report back in 20 minutes (or as soon as i see it...)..



#8 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 6,107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:23 PM

Posted 02 November 2014 - 12:29 AM

OR....you can RESET Firefox..........be SURE to read a little further down the page ....

What does the reset feature do?

 

All of your Firefox settings and personal information are stored in a profile folder. The reset feature works by creating a new profile folder for you while saving your important data.

Firefox will save these things:

  • Bookmarks
  • Browsing history
  • Passwords
  • Open windows, tabs and tab groups
  • Cookies
  • Web form auto-fill information
  • Personal dictionary

These items and settings will be removed:

Note: Your old Firefox profile will be placed on your desktop in a folder named "Old Firefox Data." If the reset didn't fix your problem you can restore some of the information not saved by copying files to the new profile that was created. If you don't need this folder any longer, you should delete it as it contains sensitive information

 

 

 

 

 

https://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-most-problems#w_what-does-the-reset-feature-do


Condobloke ...Outback Australian  fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

“A man travels the world in search of what he needs and returns home to find it."

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

 GcnI1aH.jpg

 

 


#9 danbee

danbee
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:23 PM

Posted 02 November 2014 - 12:45 AM

Hmm ive been looking for 5 minutes and I cant actually see how to restart without add-ons? Cant see it in any of the add-on area or in the options.... I'm so bad at this technical stuff.. havent got a clue...



#10 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 6,107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:23 PM

Posted 02 November 2014 - 12:48 AM

Click on the three horizontal lines (menu button) in Firefox.........go to the Help (?) button down the bottom......restart with addons disabled is the 7th item down


Condobloke ...Outback Australian  fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

“A man travels the world in search of what he needs and returns home to find it."

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

 GcnI1aH.jpg

 

 


#11 danbee

danbee
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:23 PM

Posted 02 November 2014 - 12:56 AM

Ok i just went for the full out reset, seemed to be logic there... but although I still have all my old same addons... so not really sure it did really reset things... and it even let me back to reply to this topic without needing to re-login...



#12 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 6,107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:23 PM

Posted 02 November 2014 - 01:06 AM

As far as I am aware the PlUG INS should still be there......but the EXTENSIONS will be gone.

 

The Plug Ins settings will have been set to default however.

 

Just keep an eye on it for a while....give it some exercise...page opens etc etc....and then let me know.

 

I am in Oz,, so am approx 3 hours later than you.....I head for noddy land in about 3+ hours (I have an early start tomorrow )......that should give it more than enough time to mess up if it is going to.


Condobloke ...Outback Australian  fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

“A man travels the world in search of what he needs and returns home to find it."

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

 GcnI1aH.jpg

 

 


#13 danbee

danbee
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:23 PM

Posted 02 November 2014 - 01:08 AM

No worries thanks for all your help, and ill repost in here later either way... so far so good.. but dont worry bout me, just do whatever you need to do :)



#14 danbee

danbee
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:01:23 PM

Posted 02 November 2014 - 06:58 AM

Doh, so all was good for another 3 hours after this... turned my computer off, then worked for another 2 or so hours and it just came back  - in firefox :(



#15 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 6,107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:23 PM

Posted 02 November 2014 - 04:52 PM

ok. Back to basics. We will start at the beginning.

 

 

Please run the following for me....in the order listed.

 

 

Download Security Check by Screen317 from HERE
* Save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Note: If a security program requests permission to access the Internet, allow it to do so.

 

 

Download MiniToolBox, save it to your desktop and run it.
    Checkmark the following checkboxes:
    Flush DNS
    Report IE Proxy Settings
    Reset IE Proxy Settings
    Report FF Proxy Settings
    Reset FF Proxy Settings
    List content of Hosts
    List IP configuration
    List Winsock Entries
    List last 10 Event Viewer log
    List Installed Programs
    List Users, Partitions and Memory size.
    Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.
    Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

 

 

Please download AdwCleaner by Xplode and save to your Desktop.
 * Double-click on AdwCleaner.exe to run the tool.
 * Vista / Windows 7 / 8 users right-click and select Run As Administrator.
 * Click on the Scan button (only once)
 * AdwCleaner will begin...be patient as the scan may take some time to complete.
 * After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
* Check the removals and see if you are OK with the list.

* Now
 * Click on the Clean button (only once)
 * Press OK when asked to close all programs and follow the onscreen prompts.
 * Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
 * After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
 * Copy and Paste the contents of that logfile in your next reply.

* A copy of all logfiles are also saved in the C:\AdwCleaner folder which was created when running the tool.

 

 

Please download Junkware Removal Toolby Thisisu

Open your browser and go to Downloads, then click on the Junkware Removal Tool to install it.

Click on Run to initiate the installation.

To avoid potential conflicts, Temporarily Disable your Antivirus

You may want to be offline when you do this.

Run the tool by double-clicking it.

If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select Run as Administrator.

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Copy and Paste this in your next post..


Condobloke ...Outback Australian  fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

“A man travels the world in search of what he needs and returns home to find it."

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

 GcnI1aH.jpg

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users