Solved

XLime Offer Optimizer

Posted on 2004-04-20
5
32,641 Views
Last Modified: 2013-12-04
I have recently had a problem with Internet Explorer version 6.0.  Whenever I open a browser window, a slew of popup windows open up.  However, they do not "pop up" so to speak and if you click on one of them, they don't maximize.  They end up closing on their own, but it is very annoying.
When I hover my mouse over one of the windows, it says www.xlime.offeroptimizer.com....blah blah blah.  Does anyone know how to get rid of this?  I have run Adaware 6.0 with the latest updates, but to no avail.
0
Comment
Question by:almaler
  • 3
5 Comments
 
LVL 12

Expert Comment

by:trywaredk
ID: 10871853
Cleaning your computer  - and protecting it in the future -  can't be answered with one issue.

As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.

The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.

It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html

BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open
0
 
LVL 12

Accepted Solution

by:
trywaredk earned 500 total points
ID: 10871902
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10873236
:o) Glad I could help you - thank you for the points
0
 

Expert Comment

by:nomoslogos
ID: 11524828
I had a terrible time getting rid of this also.

I constantly had xlime popups and bannerfarm popups. This kind of activity these people are doing needs to be made illegal. This is tampering with someone elses property and it is immoral. I lose many wasted hours trying to get rid of these infringements.

CWshredder by itself didn't seem to work (even after running it in safe mode) I wound up using Spybot, CWShredder (in safe mode), HijackThis, and AVG antivirus and had to turn off the Windows XP system restore. Hijackthis is the only uncertain part and I think it was actually AVG anitvirus that fixed it, but it couldn't until I turned off the system restore option. I could probably turn it back on, but haven't and may not.

AVG showed three trojans:

Trojan horse Downloader.Agent
Trojan horse Downloader.Swizzor
Trojan horse Downloader.ASW.Bispy

in the following areas:

C:\Documents and Settings\OWNER\Local Settings\TEMP\POLMX3.EXE Trojan horse Downloader.Agent.AS
C:\Documents and Settings\OWNER\Local Settings\TEMP\DRPA.TMP\UPDALL3M.EXE repaired
C:\Documents and Settings\OWNER\Local Settings\Temporary Internet Files\CONTENT.IE5\R3TTLLHY\UPDALL~1.EXE repaired
C:\Program Files\four draw\GRIMPH~1.DLL repaired
C:\WINDOWS\BI.DLL repaired
C:\WINDOWS\PREINSBI.EXE repaired
C:\WINDOWS\SYSTEM32\BIU.EXE repaired
C:\WINDOWS\SYSTEM32\IQIMRQU.EXE Trojan horse Downloader.Agent.AS
0
 

Expert Comment

by:roger_paul
ID: 12358898
There is a process called nolntgf.exe that servers the popup ads. Here's what to do:
1. kill nolntgf.exe process via task manager or dos cmd
2. delete reg key. go to Start/Run/regedit
3. find folder: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. delete the key that has nolntgf.exe as a Data value
5. in windows explorer look for "nolntgf" and delete every file with that name, including the XML files that it creates.
6. restart windows.

This took care of the annoying popups.

Roger
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question