Linkbucks Redirect through Skype links.

Viruses and worms
1

Whenever I click links through skype, my browser randomly redirects me to something called linkbucks. Sometimes when I try to do a google search it says the connection is untrusted, and sometimes tumblr 404’s.

I’ve done full system scans, boot scans, and used a program called Malwarebytes to try and remedy this issue to no avail. I’ve even completely restored my computer to factory spec, and again it is still there. Any ideas? Help?

2

Follow instructions, attach (not copy and paste) OTL diagnostic logs https://forum.avast.com/index.php?topic=53253.0

Malware experts will check the logs when back online tomorrow…

3

OTL Logs

4

They are corrupt. Save it in ANSI

Save As >
http://i.imgur.com/LhlCUFT.png

5

take 2

6

Monitoring.

7

Hi,

  • Step #1 Uninstall Programs
    I want you to uninstall the following program(s) listed below due to poor reputation we receive about them. To uninstall a program, go to Start > Control Panel > Uninstall a program or Start > Control Panel > Programs and Features. Wait for the list to fill up and double-click on the items I have listed below and follow the on-screen instruction to remove/uninstall them.

[list][li]FreeRide Games- Pando Media Booster[/list][/li]

  • Step #2 Fix with AdwCleaner

      [li]Download [b]AdwCleaner[/b] by [i][b]Xplode[/b][/i] to your [i]Desktop[/i] from the following link.

[list]
[li]Download Link #1
- Download Link #2
[/li]
- Right-click on AdwCleaner.exe and choose Run as administrator;
- Click on Scan and let the program run unhindered;
- When done, click on Clean and allow the system to reboot after it is done;
- A log will be opened automatically after the restart;
- Attach the log in your reply.
[/list][/li]

  • Step #3 Fix with Junkware Removal Tool
    Download Junkware Removal Tool by thisisu to your Desktop from the link below.
    Download Link 1
    Download Link 2

      [li]Disable your anti-virus to avoid potential conflicts. For more information please acknowledge yourself [url=http://www.bleepingcomputer.com/forums/t/114351/how-to-temporarily-disable-your-anti-virus-firewall-and-anti-malware-programs/]this[/url] article;
  - Run the program either by double-clicking(Windows XP) or Right-clicking and choosing [i]Run as administrator[/i](Windows Vista and above);
  - Please be patient as the tool cleans your system;
  - After completion of the process a log named [b]JRT.txt[/b] will automatically open and is save to your Desktop;
  - Attach the log in your next reply.

    [/li]

  • Step #4 Scan with OTL

      [li]Re-run [i]OTL.exe[/i].
  - [i]Copy[/i] and [i]Paste[/i] the following code inside the [i]Custom Scans/Fixes[/i] box;

    [/li]

netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
dir "%systemdrive%\*" /S /A:L /C
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
CREATERESTOREPOINT

  •   [li]Click the [b]Quick Scan[/b] button;
  - After the scan a log will be produced;
  - Attach the log in your next reply
    [/li]

  • Required Log(s):

      [li]AdwCleaner Log
  - Junkware Removal Tool Log
  - OTL.txt

    [/li]
    Regards,
    Valinorum

8

Here you go.

9

Referring to this post, please save your OTL log as ANSI. How is your system?

10

OTL.

No redirects since I got back home. I’ll keep you updated.

EDIT: Being redirected by Demdex.com now and I get a HTTP Error: 404 when I try to use google or the connection is untrusted. Also, the redirect leads me here: http://www.adobe.com/products/audiencemanager.html

HTTP ERROR: 404

Problem accessing /. Reason:

Not Found

Powered by Jetty://

11

Does this happen to every browser?

12

I only use Firefox.

EDIT: It has stopped the new redirect since I uninstalled Trillian IM.

13

Good news. What are current issues?

14

Went a little while without the Linkbucks redirect, but it’s back now.

15

Can you reset the browser by perusing this?

16

I reset the Browser, we’ll see how it goes.

17

Report myself the result.

18

It comes and goes seemingly at random now, but when it does show up, it tries to get me to download something. It seems like I am stuck with this. Though, is it possible if another computer on the network is infected, it could affect me?