Solved

XLime Offer Optimizer

Posted on 2004-04-20
5
32,638 Views
Last Modified: 2013-12-04
I have recently had a problem with Internet Explorer version 6.0.  Whenever I open a browser window, a slew of popup windows open up.  However, they do not "pop up" so to speak and if you click on one of them, they don't maximize.  They end up closing on their own, but it is very annoying.
When I hover my mouse over one of the windows, it says www.xlime.offeroptimizer.com....blah blah blah.  Does anyone know how to get rid of this?  I have run Adaware 6.0 with the latest updates, but to no avail.
0
Comment
Question by:almaler
  • 3
5 Comments
 
LVL 12

Expert Comment

by:trywaredk
ID: 10871853
Cleaning your computer  - and protecting it in the future -  can't be answered with one issue.

As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.

The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.

It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html

BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open
0
 
LVL 12

Accepted Solution

by:
trywaredk earned 500 total points
ID: 10871902
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10873236
:o) Glad I could help you - thank you for the points
0
 

Expert Comment

by:nomoslogos
ID: 11524828
I had a terrible time getting rid of this also.

I constantly had xlime popups and bannerfarm popups. This kind of activity these people are doing needs to be made illegal. This is tampering with someone elses property and it is immoral. I lose many wasted hours trying to get rid of these infringements.

CWshredder by itself didn't seem to work (even after running it in safe mode) I wound up using Spybot, CWShredder (in safe mode), HijackThis, and AVG antivirus and had to turn off the Windows XP system restore. Hijackthis is the only uncertain part and I think it was actually AVG anitvirus that fixed it, but it couldn't until I turned off the system restore option. I could probably turn it back on, but haven't and may not.

AVG showed three trojans:

Trojan horse Downloader.Agent
Trojan horse Downloader.Swizzor
Trojan horse Downloader.ASW.Bispy

in the following areas:

C:\Documents and Settings\OWNER\Local Settings\TEMP\POLMX3.EXE Trojan horse Downloader.Agent.AS
C:\Documents and Settings\OWNER\Local Settings\TEMP\DRPA.TMP\UPDALL3M.EXE repaired
C:\Documents and Settings\OWNER\Local Settings\Temporary Internet Files\CONTENT.IE5\R3TTLLHY\UPDALL~1.EXE repaired
C:\Program Files\four draw\GRIMPH~1.DLL repaired
C:\WINDOWS\BI.DLL repaired
C:\WINDOWS\PREINSBI.EXE repaired
C:\WINDOWS\SYSTEM32\BIU.EXE repaired
C:\WINDOWS\SYSTEM32\IQIMRQU.EXE Trojan horse Downloader.Agent.AS
0
 

Expert Comment

by:roger_paul
ID: 12358898
There is a process called nolntgf.exe that servers the popup ads. Here's what to do:
1. kill nolntgf.exe process via task manager or dos cmd
2. delete reg key. go to Start/Run/regedit
3. find folder: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. delete the key that has nolntgf.exe as a Data value
5. in windows explorer look for "nolntgf" and delete every file with that name, including the XML files that it creates.
6. restart windows.

This took care of the annoying popups.

Roger
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now