Mensagem teimosa

[tuga]

Olá Pessoal, meti-me numa "alhada" e não sei como sair dela.

Executei um crack de um programa e agora está sempre a aparecer a seguinte mensagem:

Winsecure
Triall software registred! Remember to install correct version before to patch or crack will not woks correctly.

Esta mensasem teima em aparecer mesmo clicando no ok. Já desinstalei o programa em causa,passei o antivirus fiz o restauro do sistema e nada resulta.

O que mais posso fazer para isto deixar de me "atormentar"

[pagc]

isso é daqueles truques para te levar a comprar um programa que supostamente te resolve o problema, mas apenas te alivia a carteira.

Solução:
http://www.bleepingcomputer.com/forums/ ... 16980.html
http://www.greatis.com/appdata/d/w/winsecure.exe.htm

Cumps

[tuga]

Experimentei com o syboot mas não funcionou

[tuga]

Perdão, queria dizer Spybot

[pagc]

Não metas duas mensagens seguidas, podes fazer edit à tua mensagem anterior.

No primeiro link está lá uma solução alternativa, para o caso do Spybot não funcionar, mas ficam aqui:

If problem will come back than:
1. Close all open Internet Explorer windows.
2. Make registry backup.
3. Delete the value that was added to the registry (if they exists):

START>>RUN>>REGEDIT
Navigate to following the key:
CODE
KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

And In the right pane, delete the values:
CODE
"Microsoft Cab Manager" = "c:\exec.exe"
"Windows Security Manager" = "c:\winsecure.exe"
"Windows Security Update" = "%Windir%\security32.exe"


Navigate to following the key:
CODE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

And In the right pane, delete the values:
CODE
"WinTask" = "c:\wintask.exe"
"Userinit" = "%System%\userinit.exe,"


Navigate to following the key:
CODE
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\load

And In the right pane, delete the values:
CODE
"Memory Manager" = "%System%\memorymanager.pif"


Navigate to and delete the following subkeys:
CODE
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{77566C2A-2987-44BC-AC81-A02D19EE271B}
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{C0DADD7E-D3F1-430D-B735-39DC6033592C}
HKEY_CLASSES_ROOT\CLSID\{1BB87441-6B7F-4B60-885C-B7AF9F9AFDE3}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1BB87441-6B7F-4B60-885C-B7AF9F9AFDE3}


4. Exit the Registry Editor.
5. Delete files (if exists):
CODE
%System%\comnt32.dll
C:\cab.exe
C:\winsecure.exe
%Windir%\msupdate.exe
%System%\security32.exe
%System%\iProtect.exe
%System%\axe.exe
%System%\memorymanager.pif

6. Restart the computer in Safe mode.
7. Run Spybot S&D and then give to check hijackthis1.99.1 log.
8. Remove entries from the Hosts file:

Click Start > Search.
Click All files and folders.
In the "All or part of the file name" box, type: hosts
Then open this file with Notepad and delete this entries:
CODE
127.0.0.1 www.1-online-coupons.com
127.0.0.1 www.smartqpon.com
127.0.0.1 www.jumpondeals.com
127.0.0.1 www.1-coupon.com
127.0.0.1 www.ahugedeal.com
127.0.0.1 www.1st-in-mens-clothing.com
127.0.0.1 www.discounts-coupons.com
127.0.0.1 www.shoppersresource.com
127.0.0.1 www.1-free-coupons.com
127.0.0.1 www.coupon-coupon.com
127.0.0.1 www.online-coupons-discounts.com
127.0.0.1 www.ebates.com
127.0.0.1 www.247coupon.com
127.0.0.1 www.couponmountain.com
127.0.0.1 www.coupon-deals.com
127.0.0.1 www.coupon-codes.us
127.0.0.1 www.coupons-coupon-codes.com
127.0.0.1 www.coupons-coupons-codes.com
127.0.0.1 www.ahugedeal.com
127.0.0.1 www.findsavings.com
127.0.0.1 www.xpcoupons.com
127.0.0.1 www.xpbargains.com
127.0.0.1 www.best-cards.com
127.0.0.1 www.voucherfreebies.co.uk
127.0.0.1 www.ukshops.co.uk
127.0.0.1 www.247ukshopping.com
127.0.0.1 www.somucheasier.co.uk
127.0.0.1 www.uk-online-store.co.uk
127.0.0.1 www.deals-coupons.com
127.0.0.1 www.shopping.net
127.0.0.1 www.eshops.co.uk
127.0.0.1 www.247ukshopping.com
127.0.0.1 www.ukfrenzy.co.uk
127.0.0.1 www.asmartshop.com
127.0.0.1 www.couponmountain.co.uk
127.0.0.1 www.redtagdeals.com
127.0.0.1 www.freecoupons.co.uk
127.0.0.1 www.shop-uk-online.co.uk
127.0.0.1 www.best-online-coupons.com
127.0.0.1 www.rather-be-shopping.com
127.0.0.1 www.clothes-coupons.com
127.0.0.1 www.online-coupons-coupons.com
127.0.0.1 www.momsview.com
127.0.0.1 www.pricezilla.com
127.0.0.1 www.mygo.com
127.0.0.1 www.ultimatecoupons.com
127.0.0.1 www.specialoffers.com
127.0.0.1 www.galacticgalaxy.com
127.0.0.1 www.thewinnersclub.net

And remove other ones witch you think are bad.

[tuga]

Ok, a mensagem teimosa desapareceu depois de ter feito um scan com o Hijackhis, e mandar reparar todos os problemas encontrados, o unico senão é que també os icones junto do relogio,entre os quais o do volume também foram á vida.