Olá, percebi que depois que meu computador foi infectado pelo malware 123rede.com ficou com a internet comprometida. Consegui retirar do PC, mas a lentidão permaneceu. A abertura dos programas e inicialização do computador não está lenta, mas percebi que quando abro uma pagina na internet ela demora mais do que o normal. Já fiz o teste nos dois navegadores (IE e Google Chrome). Já passei o antivirus Avast, o CCleaner, o Windows Defender e o Malwarebytes Anti- Malware e nada foi encontrado o PC está aparentemente normal. Também encontrei em contato o pessoal de minha internet e também está tudo normal. O que pode ser que está acontecendo? não sei mais o que fazer. Alguem me ajude!!

Olá João, Já tentou o procedimento que informei anteriormente? Baixe e execute o AdwCleaner e Junkware Removal Tool , individualmente. Depois, acesse o Painel de Controle, clique em Opções da Internet, clique na guia Avançadas e depois sobre o botão Redefinir. Comente o resultado.

Anônima

Zoek.exe v5.0.0.0 Updated 04-May-2015

Tool run by EVERSON on 13/05/2015 at 18:32:33,40.

Microsoft Windows 7 Ultimate 6.1.7600 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\EVERSON\Downloads\zoek.exe [Scan all users] [Quick Scan] [Auto Clean]

==== System Restore Info ======================

13/05/2015 18:33:56 Zoek.exe System Restore Point Created Successfully.

0 comentários

Anônima

Oi Fabiana.

Faça o download do < ZHPCleaner > < > ( ... de Nicolas Coolman )

Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPCleaner para baixá-lo, tal como mostra a imagem abaixo:

Para executá-lo corretamente siga as dicas desta postagem:

**Tutorial completo do ZHPCleaner**

Após a utilização dele, copie todo o conteúdo do seu relatório ZHPCleaner.txt e poste em sua próxima resposta.

0 comentários

Anônima

Olá, Rafael Turbo.

Conforme sugerido executei o aplicativo Zoek. O malware rede123 foi eliminado de meu PC, porém minha internet continua lenta e já executei vários programas, mas o problema persiste. Segue o relatório gerado pelo Zoex: Aguardo informações e obrigada por me auxiliar na exclusão desse malware.

Zoek.exe v5.0.0.0 Updated 04-May-2015

Tool run by Hp Pavilion on 12/05/2015 at 22:19:25,84.

Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Hp Pavilion\Downloads\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-04-18-010745.log 17094 bytes

==== System Restore Info ======================

12/05/2015 22:21:48 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

Copyright (c) 1993-2006 Microsoft Corp.

#

This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

This file contains the mappings of IP addresses to host names. Each

entry should be kept on an individual line. The IP address should

be placed in the first column followed by the corresponding host name.

The IP address and the host name should be separated by at least one

space.

#

Additionally, comments (such as these) may be inserted on individual

lines or following the machine name denoted by a '#' symbol.

#

For example:

#

102.54.94.97 rhino.acme.com # source server

38.25.63.10 x.acme.com # x client host

localhost name resolution is handled within DNS itself.

127.0.0.1 localhost

::1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\HPPAVI~1\AppData\Roaming\Mozilla\Firefox\Profiles\6m7saggo.default\prefs.js:

user_pref("browser.startup.homepage", "about:home");

user_pref("browser.newtab.url", "about:newtab");

Added to C:\Users\HPPAVI~1\AppData\Roaming\Mozilla\Firefox\Profiles\6m7saggo.default\prefs.js:

user_pref("browser.startup.homepage", "about:home");

user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\Windows\System32\Tasks\avastBCLRestartS-1-5-21-1123201618-437649171-276006564-1000 deleted

C:\Windows\system32\GroupPolicy\Machine deleted

C:\Windows\system32\GroupPolicy\User deleted

C:\Windows\system32\GroupPolicy\gpt.ini deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\HPPAVI~1\AppData\Roaming\Mozilla\Firefox\Profiles\6m7saggo.default

user_pref("browser.startup.homepage", "about:home");

user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"******@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [15/10/2014 10:48]

==== Firefox Extensions ======================

ProfilePath: C:\Users\HPPAVI~1\AppData\Roaming\Mozilla\Firefox\Profiles\6m7saggo.default

Download YouTube Videos as MP4 - %ProfilePath%\extensions{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi

AppDir: C:\Program Files\Mozilla Firefox

Skype Click to Call - %AppDir%\browser\extensions{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Hp Pavilion\AppData\Roaming\Mozilla\Firefox\Profiles\6m7saggo.default

0806948270D853B709CCBBF38AF167E4

C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat

9DF0C4F0CEF60158614EDD1B3AB441EE

C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat

==== Chromium Look ======================

Google Chrome Version: 42.0.2311.135

Google Slides - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek

Google Docs - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

selector is not a valid CSS selector - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb

Google Search - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Google Sheets - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap

Radio Mix FM - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplcdefcpicaefbmkjedpppmpjkeplob

Bookmark Manager - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik

Chrome Hotword Shared Module - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg

Google Wallet - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

GBBD Caixa Economica Federal - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi

Gmail - Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chromium Startpages ======================

C:\Users\Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Preferences

"startup_urls": [ "http://hotmail.com/", "http://www.hotmail.com/", "http://www.msn.com/?PC=AV01" ],

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"

==== Reset Google Chrome ======================

C:\Users\Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully

C:\Users\Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully

C:\Users\Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

C:\Users\Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

==== shortcuts in Users Start Menu ======================

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dispositivos Bluetooth\GT-S7560M.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTWUIExt.exe /deviceAddr=103b59b796d5

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Inicializador de aplicativos do Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk - C:\Program Files\Microsoft Security Client\msseces.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk - C:\Windows\system32\mstsc.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configurar Java.lnk - C:\Program Files\Java\jre1.8.0_45\bin\javacpl.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Obter Ajuda.lnk -

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Sobre o Java.lnk - C:\Program Files\Java\jre1.8.0_45\bin\javacpl.exe -tab about

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Verificar Atualizações.lnk -

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visite Java.com.lnk -

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Excel 2013.lnk - C:\Windows\Installer{90150000-0011-0000-0000-0000000FF1CE}\xlicons.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Outlook 2013.lnk - C:\Windows\Installer{90150000-0011-0000-0000-0000000FF1CE}\outicon.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\PowerPoint 2013.lnk - C:\Windows\Installer{90150000-0011-0000-0000-0000000FF1CE}\pptico.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013\Word 2013.lnk - C:\Windows\Installer{90150000-0011-0000-0000-0000000FF1CE}\wordicon.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explore.lnk - C:\Program Files\Internet Explorer\iexplore.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Word 2013.lnk - C:\Windows\Installer{90150000-0011-0000-0000-0000000FF1CE}\wordicon.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk - C:\Program Files\Google\Chrome\Application\chrome.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe www.123rede.com?oem=ver1&uid=5WR13C5M\_ST9500423AS&tm=1431394692

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1

C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== shortcuts After Repair ======================

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Inicializador de aplicativos do Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explore.lnk - C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Users\Hp Pavilion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

==== Reset IE Proxy ======================

Value(s) before fix:

"ProxyEnable"=dword:00000000

Value(s) after fix:

"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Users\Hp Pavilion\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Hp Pavilion\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Hp Pavilion\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=48 folders=61 16784394 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Users\Hp Pavilion\AppData\Local\Temp will be emptied at reboot

C:\Users\USURIO~1\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\HPPAVI~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on 12/05/2015 at 23:21:28,39 ======================

Segue o relatório geradado

0 comentários

Anônima

Deixo aqui meu muito obrigado! Eu já estava ficando irritado com esse tal de "123rede", dá até raiva de ver essa sequencia de números. Obrigado pela solução.

0 comentários

Internet lenta - Vírus 123.rede.com

106 respostas adicionais

Copyright (c) 1993-2006 Microsoft Corp.

This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

This file contains the mappings of IP addresses to host names. Each

entry should be kept on an individual line. The IP address should

be placed in the first column followed by the corresponding host name.

The IP address and the host name should be separated by at least one

space.

Additionally, comments (such as these) may be inserted on individual

lines or following the machine name denoted by a '#' symbol.

For example:

102.54.94.97 rhino.acme.com # source server

38.25.63.10 x.acme.com # x client host

localhost name resolution is handled within DNS itself.