Link to home
Start Free TrialLog in
Avatar of almaler
almaler

asked on

XLime Offer Optimizer

I have recently had a problem with Internet Explorer version 6.0.  Whenever I open a browser window, a slew of popup windows open up.  However, they do not "pop up" so to speak and if you click on one of them, they don't maximize.  They end up closing on their own, but it is very annoying.
When I hover my mouse over one of the windows, it says www.xlime.offeroptimizer.com....blah blah blah.  Does anyone know how to get rid of this?  I have run Adaware 6.0 with the latest updates, but to no avail.
Avatar of trywaredk
trywaredk
Flag of Denmark image

Cleaning your computer  - and protecting it in the future -  can't be answered with one issue.

As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.

The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.

It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html

BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open
ASKER CERTIFIED SOLUTION
Avatar of trywaredk
trywaredk
Flag of Denmark image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
:o) Glad I could help you - thank you for the points
Avatar of nomoslogos
nomoslogos

I had a terrible time getting rid of this also.

I constantly had xlime popups and bannerfarm popups. This kind of activity these people are doing needs to be made illegal. This is tampering with someone elses property and it is immoral. I lose many wasted hours trying to get rid of these infringements.

CWshredder by itself didn't seem to work (even after running it in safe mode) I wound up using Spybot, CWShredder (in safe mode), HijackThis, and AVG antivirus and had to turn off the Windows XP system restore. Hijackthis is the only uncertain part and I think it was actually AVG anitvirus that fixed it, but it couldn't until I turned off the system restore option. I could probably turn it back on, but haven't and may not.

AVG showed three trojans:

Trojan horse Downloader.Agent
Trojan horse Downloader.Swizzor
Trojan horse Downloader.ASW.Bispy

in the following areas:

C:\Documents and Settings\OWNER\Local Settings\TEMP\POLMX3.EXE Trojan horse Downloader.Agent.AS
C:\Documents and Settings\OWNER\Local Settings\TEMP\DRPA.TMP\UPDALL3M.EXE repaired
C:\Documents and Settings\OWNER\Local Settings\Temporary Internet Files\CONTENT.IE5\R3TTLLHY\UPDALL~1.EXE repaired
C:\Program Files\four draw\GRIMPH~1.DLL repaired
C:\WINDOWS\BI.DLL repaired
C:\WINDOWS\PREINSBI.EXE repaired
C:\WINDOWS\SYSTEM32\BIU.EXE repaired
C:\WINDOWS\SYSTEM32\IQIMRQU.EXE Trojan horse Downloader.Agent.AS
There is a process called nolntgf.exe that servers the popup ads. Here's what to do:
1. kill nolntgf.exe process via task manager or dos cmd
2. delete reg key. go to Start/Run/regedit
3. find folder: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. delete the key that has nolntgf.exe as a Data value
5. in windows explorer look for "nolntgf" and delete every file with that name, including the XML files that it creates.
6. restart windows.

This took care of the annoying popups.

Roger