Solved

XLime Offer Optimizer

Posted on 2004-04-20
5
32,637 Views
Last Modified: 2013-12-04
I have recently had a problem with Internet Explorer version 6.0.  Whenever I open a browser window, a slew of popup windows open up.  However, they do not "pop up" so to speak and if you click on one of them, they don't maximize.  They end up closing on their own, but it is very annoying.
When I hover my mouse over one of the windows, it says www.xlime.offeroptimizer.com....blah blah blah.  Does anyone know how to get rid of this?  I have run Adaware 6.0 with the latest updates, but to no avail.
0
Comment
Question by:almaler
  • 3
5 Comments
 
LVL 12

Expert Comment

by:trywaredk
ID: 10871853
Cleaning your computer  - and protecting it in the future -  can't be answered with one issue.

As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.

The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.

It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html

BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open
0
 
LVL 12

Accepted Solution

by:
trywaredk earned 500 total points
ID: 10871902
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10873236
:o) Glad I could help you - thank you for the points
0
 

Expert Comment

by:nomoslogos
ID: 11524828
I had a terrible time getting rid of this also.

I constantly had xlime popups and bannerfarm popups. This kind of activity these people are doing needs to be made illegal. This is tampering with someone elses property and it is immoral. I lose many wasted hours trying to get rid of these infringements.

CWshredder by itself didn't seem to work (even after running it in safe mode) I wound up using Spybot, CWShredder (in safe mode), HijackThis, and AVG antivirus and had to turn off the Windows XP system restore. Hijackthis is the only uncertain part and I think it was actually AVG anitvirus that fixed it, but it couldn't until I turned off the system restore option. I could probably turn it back on, but haven't and may not.

AVG showed three trojans:

Trojan horse Downloader.Agent
Trojan horse Downloader.Swizzor
Trojan horse Downloader.ASW.Bispy

in the following areas:

C:\Documents and Settings\OWNER\Local Settings\TEMP\POLMX3.EXE Trojan horse Downloader.Agent.AS
C:\Documents and Settings\OWNER\Local Settings\TEMP\DRPA.TMP\UPDALL3M.EXE repaired
C:\Documents and Settings\OWNER\Local Settings\Temporary Internet Files\CONTENT.IE5\R3TTLLHY\UPDALL~1.EXE repaired
C:\Program Files\four draw\GRIMPH~1.DLL repaired
C:\WINDOWS\BI.DLL repaired
C:\WINDOWS\PREINSBI.EXE repaired
C:\WINDOWS\SYSTEM32\BIU.EXE repaired
C:\WINDOWS\SYSTEM32\IQIMRQU.EXE Trojan horse Downloader.Agent.AS
0
 

Expert Comment

by:roger_paul
ID: 12358898
There is a process called nolntgf.exe that servers the popup ads. Here's what to do:
1. kill nolntgf.exe process via task manager or dos cmd
2. delete reg key. go to Start/Run/regedit
3. find folder: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. delete the key that has nolntgf.exe as a Data value
5. in windows explorer look for "nolntgf" and delete every file with that name, including the XML files that it creates.
6. restart windows.

This took care of the annoying popups.

Roger
0

Featured Post

Free camera licenses with purchase of My Cloud NAS

Milestone Arcus software is compatible with thousands of industry-leading cameras for added flexibility. Upon installation on your My Cloud NAS, you will receive two (2) camera licenses already enabled in the software. And for a limited time, get additional camera licenses FREE.

Join & Write a Comment

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now