Outerinfo is now being installed with other nasty malware (Vundo) that this procedure may not fix, so after following it I strongly suggest you post your HiJackThis log as well as the other logs on the forum and we'll clean up the rest of it. ----->UPDATED 1-17-08<-----
This is a self-help guide. Use at your own risk. Make sure you have a good system restore point created:
I can not take responsibility for any outcome by following these directions. Every computer is different. If you are apprehensive, please post a HijackThis log on the forum and let us take a look and guide you to a clean system.
Welcome to the forum.
If you are infected with Outerinfo pop-ups - please start here:
(It will also work for Vundo/Virtumonde/Winfixer....ComboFix required)
This is for XP and 2K (98 and ME see below)
Look in your control panels add/remove programs or Start>Programs menu of Windows for any of these and uninstall them:
Yazzle by Oin
Purityscan by Oin
Snowballwars by Oin
or anything similar with Oin or Outerinfo in it.
and any other programs you didn't install or don't recognize - if your not sure please ask first
If not listed....
If any of your anti-malware programs alert you about running this uninstaller, please allow it to run...it's safe.
Download and run this uninstaller:
Tutorial for the uninstaller if needed
Reboot when done and.......
Download and run ComboFix:
You may not need to run ComboFix....try the rest of the fix first and if you still have a problem follow the instructions to run ComboFix including installing the Recovery Console.
Please Check Here for information on running ComboFix......Follow ALL instructions!!
ComboFix will create a log called "C:\ComboFix.txt", please post it.
Note: ComboFix will make some changes to your computer such as create a new system restore point, back up your registry, reset your clock, these will all be reversed when you uninstall ComboFix.
To uninstall ComboFix:
Go to start > run and copy and paste next command in the field:
Make sure there's a space between Combofix and /
Then hit enter.
This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the system/hidden files and resets System Restore again.
Clean out temporary and TIF files. Go to Start > Run and type in the box: cleanmgr. Let it scan your system for files to remove. Make sure these 3 are checked and then press *ok* to remove:
- Temporary Files
- Temporary Internet Files
- Recycle Bin
Please download SUPERAntiSpyware Home Edition (free) (SAS)
Install it and double-click the icon on your desktop to run it.
It will ask if you want to update the program definitions, click Yes
, Let it through your firewall!
Under Configuration and Preferences
, click the Preferences
Click the Scanning Control
Under Scanner Options
make sure the following are checked:
- Close browsers before scanning
- Scan for tracking cookies
- Terminate memory threats before quarantining.
- Ignore System Restore/Volume Information on ME and XP
- Please leave the others unchecked.
- Click the Close button to leave the control center screen.
On the main screen, under Scan for Harmful Software
click Scan your computer
On the left check C:\Fixed Drive
On the right, under Complete Scan
, choose Perform Complete Scan
to start the scan. Please be patient while it scans your computer.
After the scan is complete a summary box will appear. Click OK
Make sure everything in the white box has a check next to it, then click Next
It will quarantine what it found and if it asks if you want to reboot, click Yes
To retrieve the removal information - please do the following:
- After reboot, double-click the SUPERAntispyware icon on your desktop.
- Click Preferences . Click the Statistics/Logs tab .
- Under Scanner Logs , double-click SUPERAntiSpyware Scan Log .
- It will open in your default text editor (such as Notepad/Wordpad).
- Please highlight everything , then right-click and choose copy.
- Click close and close again to exit the program.
and post a fresh HJT log, the log from ComboFix and the log from SAS Free.(please let us know that you already have followed these instructions)
--------------------------------------Here's how to post a HiJackThis log:
First please Register
Please download HiJackThis
into its own permanent folder,
example: C:\HJT\HiJackThis.exe, C:\Program Files\HJT\HijackThis.exe or C:\MyDocuments\HJT\HijackThis.exe
Double click on it to open it up, hit the Do a system scan and save log
button, WordPad or NotePad will open and it will be saved in the folder, copy and paste the entire log into your New Post
. (use edit > select all > copy > paste it into a New Post
<===><===><===><===><===><===><===><===><===><===><=<===>For Windows 98 and ME
1> Look in add/remove programs and/or run the uninstaller
2> Download and run SUPERAntiSpyware Free
3> Post the HiJackThis log and the log from SAS Free on the forum.
Good Luck, MrC[/b]