Hello and welcome to the What The Tech Forum.

Use at your own risk: What The Tech Forum, does not take responsibility for any outcome of following these directions. Every computer is different, so we cannot guarante the outcome. If you are apprehensive, please post a log from HijackThis in the designated forum and let us take a look and guide you to a clean system.



hey, how about "Thanks To MrCharlie"

---------->updated 2-3-08<--------------

This is a "self help" to remove Outerinfo pop-ups (aka as PurityScan - OIN - ad.oinadserver.com)
(It will also work for Vundo/Virtumonde/Winfixer Removal....ComboFix required!)

please start here:

Look in your control panels add/remove programs for any of these and uninstall them:
(May also be listed in the Programs menu of Windows (Start button > Programs)

Oin
Yazzle by Oin
Purityscan by Oin
Snowballwars by Oin
or anything similar with Oin or Outerinfo in it.
Zolero
Tizzletalk
MediaTickets
Cowabanga
and any other programs you didn't install or don't recognize - if your not sure please ask first

If not listed.....

Download and run this uninstaller: (The uninstaller is safe to run!)
http://www.outerinfo.com/OiUninstaller.exe

Tutorial for the uninstaller if needed

Important Note: Some antivirus and antimalware scanners will flag the uninstaller from outerinfo.com as malicious. Similar to how a vaccine must contain parts of the virus to be effective, uninstallers will contain file names, registry locations, etc. that may set off notifications. This uninstaller has been tested by our experts and determined safe. However, it's always wise to use caution when using an uninstaller that originates from the same source as the malware.

Don't reboot!

---------------

Next:

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All (cookies optional)
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

---------------

Next:

Download and run ComboFix.

Note:
You may not need to run ComboFix....try the rest of the fix first and if you still have a problem follow the instructions to run ComboFix including installing the Recovery Console.

Please Check Here for information on running ComboFix......Follow ALL instructions!!

When finished, it should produce a log, ComboFix.txt.
Post this log in your next reply together with a fresh HiJackThis log.

Next.........

Please download SUPERAntiSpyware Home Edition (free) (SAS)

Install it and double-click the icon on your desktop to run it.
It will ask if you want to update the program definitions, click Yes, Let it through your firewall!
Under Configuration and Preferences, click the Preferences button.
Click the Scanning Control tab.
Under Scanner Options make sure the following are checked:

• Close browsers before scanning
• Scan for tracking cookies
• Terminate memory threats before quarantining.
• Ignore System Restore/Volume Information on ME and XP
• Please leave the others unchecked.
• Click the Close button to leave the control center screen.

On the main screen, under Scan for Harmful Software click Scan your computer.
On the left check C:\Fixed Drive.
On the right, under Complete Scan, choose Perform Complete Scan.
Click Next to start the scan. Please be patient while it scans your computer.
After the scan is complete a summary box will appear. Click OK.
Make sure everything in the white box has a check next to it, then click Next.
It will quarantine what it found and if it asks if you want to reboot, click
Yes.

To retrieve the removal information - please do the following:

• After reboot, double-click the SUPERAntispyware icon on your desktop.
• Click Preferences . Click the Statistics/Logs tab .
• Under Scanner Logs , double-click SUPERAntiSpyware Scan Log .
• It will open in your default text editor (such as Notepad/Wordpad).
• Please highlight everything , then right-click and choose copy.
• Click close and close again to exit the program.

___________________

Reboot and post a fresh HJT log, the log from ComboFix and the log from SAS Free.

(please let us know that you already have followed these instructions)

--------------------------------------

Here's how to post a HiJackThis log:

First please Register and Login.

Then......

Please download HiJackThis into its own permanent folder,
example: C:\HJT\HiJackThis.exe, C:\Program Files\HJT\HijackThis.exe or C:\MyDocuments\HJT\HijackThis.exe.

Double click on it to open it up, hit the Do a system scan and save log button, WordPad or NotePad will open and it will be saved in the folder, copy and paste the entire log into your New Post. (use edit > select all > copy > paste it into a New Post

Good Luck, MrC

This post has been edited by MrCharlie: Feb 6 2008, 08:38 PM

This topic has been left open to allow specific questions and comments related ONLY to this guide.

It's NOT for posting HJT logs, links to your logs, or any other general malware help. Replies not following these rules will be deleted. Thanks for your cooperation.