Solved

XLime Offer Optimizer

Posted on 2004-04-20
5
32,645 Views
Last Modified: 2013-12-04
I have recently had a problem with Internet Explorer version 6.0.  Whenever I open a browser window, a slew of popup windows open up.  However, they do not "pop up" so to speak and if you click on one of them, they don't maximize.  They end up closing on their own, but it is very annoying.
When I hover my mouse over one of the windows, it says www.xlime.offeroptimizer.com....blah blah blah.  Does anyone know how to get rid of this?  I have run Adaware 6.0 with the latest updates, but to no avail.
0
Comment
Question by:almaler
  • 3
5 Comments
 
LVL 12

Expert Comment

by:trywaredk
ID: 10871853
Cleaning your computer  - and protecting it in the future -  can't be answered with one issue.

As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.

The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.

It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html

BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open
0
 
LVL 12

Accepted Solution

by:
trywaredk earned 500 total points
ID: 10871902
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10873236
:o) Glad I could help you - thank you for the points
0
 

Expert Comment

by:nomoslogos
ID: 11524828
I had a terrible time getting rid of this also.

I constantly had xlime popups and bannerfarm popups. This kind of activity these people are doing needs to be made illegal. This is tampering with someone elses property and it is immoral. I lose many wasted hours trying to get rid of these infringements.

CWshredder by itself didn't seem to work (even after running it in safe mode) I wound up using Spybot, CWShredder (in safe mode), HijackThis, and AVG antivirus and had to turn off the Windows XP system restore. Hijackthis is the only uncertain part and I think it was actually AVG anitvirus that fixed it, but it couldn't until I turned off the system restore option. I could probably turn it back on, but haven't and may not.

AVG showed three trojans:

Trojan horse Downloader.Agent
Trojan horse Downloader.Swizzor
Trojan horse Downloader.ASW.Bispy

in the following areas:

C:\Documents and Settings\OWNER\Local Settings\TEMP\POLMX3.EXE Trojan horse Downloader.Agent.AS
C:\Documents and Settings\OWNER\Local Settings\TEMP\DRPA.TMP\UPDALL3M.EXE repaired
C:\Documents and Settings\OWNER\Local Settings\Temporary Internet Files\CONTENT.IE5\R3TTLLHY\UPDALL~1.EXE repaired
C:\Program Files\four draw\GRIMPH~1.DLL repaired
C:\WINDOWS\BI.DLL repaired
C:\WINDOWS\PREINSBI.EXE repaired
C:\WINDOWS\SYSTEM32\BIU.EXE repaired
C:\WINDOWS\SYSTEM32\IQIMRQU.EXE Trojan horse Downloader.Agent.AS
0
 

Expert Comment

by:roger_paul
ID: 12358898
There is a process called nolntgf.exe that servers the popup ads. Here's what to do:
1. kill nolntgf.exe process via task manager or dos cmd
2. delete reg key. go to Start/Run/regedit
3. find folder: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. delete the key that has nolntgf.exe as a Data value
5. in windows explorer look for "nolntgf" and delete every file with that name, including the XML files that it creates.
6. restart windows.

This took care of the annoying popups.

Roger
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question