Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic of your own. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!
How to remove Outerinfo pop-ups (aka PurityScan or OIN), updated 1-17-08
MrCharlie
post Oct 14 2006, 07:17 PM
Post #1


Visiting Staff
Group Icon
Posts: 113
From: So. Plainfield, NJ, USA
OS: 98, ME XP



QUOTE
Outerinfo is now being installed with other nasty malware (Vundo) that this procedure may not fix, so after following it I strongly suggest you post your HiJackThis log as well as the other logs on the forum and we'll clean up the rest of it.


Thank You MrCharlie.. biggrin.gif

If you are infected with Outerinfo pop-ups (aka PurityScan, Oinadserver or OIN) - please start here:

First....

Go to Start > Control Panel > Add/Remove Programs and look for any of these and uninstall them:
(May also be listed in the Programs menu of Windows (Start button > Programs)
    Oin
    Yazzle by Oin
    Purityscan by Oin
    Snowballwars by Oin
    or anything similar with Oin or Outerinfo in it.
    Zolero
    Tizzletalk
    MediaTickets
    Cowabanga
    and any other programs you didn't install or don't recognize - if your not sure please ask first
If not listed....

Download and run this uninstaller: (The uninstaller is safe to run)
http://www.outerinfo.com/OiUninstaller.exe

Tutorial for the uninstaller if needed

Important Note: Some antivirus and antimalware scanners will flag the uninstaller from outerinfo.com as malicious. Similar to how a vaccine must contain parts of the virus to be effective, uninstallers will contain file names, registry locations, etc. that may set off notifications. This uninstaller has been tested by our experts and determined safe. However, it's always wise to use caution when using an uninstaller that originates from the same source as the malware.

Don't reboot!

Next.........

Download and run ComboFix.

Note:
You may not need to run ComboFix....try the rest of the fix first and if you still have a problem follow the instructions to run ComboFix including installing the Recovery Console.

Please Check Here for information on running ComboFix......Follow ALL instructions!!

When finished, it should produce a log, ComboFix.txt.
Post this log in your next reply together with a fresh HiJackThis log.

Note: ComboFix will make some changes to your computer such as create a new system restore point, back up your registry, reset your clock, these will all be reversed when you uninstall ComboFix.

To uninstall ComboFix:
Go to start > run and copy and paste next command in the field:

ComboFix /u

Make sure there's a space between Combofix and /
Then hit enter.
This will uninstall Combofix, delete its related folders and files, reset your clock settings, hide file extensions, hide the system/hidden files and resets System Restore again.


Next---------

Please download SUPERAntiSpyware Home Edition (free) (SAS)

Install it and double-click the icon on your desktop to run it.
It will ask if you want to update the program definitions, click Yes, Let it through your firewall!
Under Configuration and Preferences, click the Preferences button.
Click the Scanning Control tab.
Under Scanner Options make sure the following are checked:
  • Close browsers before scanning
  • Scan for tracking cookies
  • Terminate memory threats before quarantining.
  • Ignore System Restore/Volume Information on ME and XP
  • Please leave the others unchecked.
  • Click the Close button to leave the control center screen.
On the main screen, under Scan for Harmful Software click Scan your computer.
On the left check C:\Fixed Drive.
On the right, under Complete Scan, choose Perform Complete Scan.
Click Next to start the scan. Please be patient while it scans your computer.
After the scan is complete a summary box will appear. Click OK.
Make sure everything in the white box has a check next to it, then click Next.
It will quarantine what it found and if it asks if you want to reboot, click
Yes.

To retrieve the removal information - please do the following:
  • After reboot, double-click the SUPERAntispyware icon on your desktop.
  • Click Preferences . Click the Statistics/Logs tab .
  • Under Scanner Logs , double-click SUPERAntiSpyware Scan Log .
  • It will open in your default text editor (such as Notepad/Wordpad).
  • Please highlight everything , then right-click and choose copy.
  • Click close and close again to exit the program.
___________________

Reboot, your pop-ups should be gone, but at this point I would suggest that you post a HiJackThis log of your system on the forum, this is because this infection is often installed with other malware and we want to make sure that your system is clean.
Follow step #5 on This Page to post your HiJackThis log.
Along with your HiJackThis log - post the logs from SUPERAntiSpyware and ComboFix.

Good Luck, MrC

=====================================================================
This is a self-help guide. Use at your own risk.

Important Note: If you need assistance with Outerinfo/PurityScan, please start a new topic in our Malware Removal Forum.

This post has been edited by MrCharlie: Oct 11 2008, 07:28 AM
Reason for edit: added note about uninstaller
Go to the top of the page
 
+Quote Post
 
Start new topic
Replies
BlizzardSlayer
post Nov 12 2007, 09:33 AM
Post #2


New Member
*
Posts: 1
OS: Windows XP



I just wanted to say thank you guys so much! you've been very helpful and i have removed 2 annoying and possibly harmful viruses with your help! smile.gif
Go to the top of the page
 
+Quote Post

Posts in this topic
- MrCharlie   How to remove Outerinfo pop-ups (aka PurityScan or OIN)   Oct 14 2006, 07:17 PM
- - admin   This topic has been left open to allow specific qu...   Jul 12 2007, 04:13 PM
- - s2pids2pid   first off, thx for this guide., it was really help...   Aug 6 2007, 09:53 PM
- - MoNsTeReNeRgY22   Hello and Welcome to G2G! QUOTEafter i run ...   Aug 7 2007, 03:10 AM
- - Aileen Delahunty   Sorry for probably stating the obvious, but I...   Aug 13 2007, 02:52 PM
- - don77   Hello Aileen Delahunty Start here http://www.gee...   Aug 14 2007, 07:18 PM
- - Molatoks   QUOTE(MrCharlie @ Oct 14 2006, 07:17 PM) ...   Aug 15 2007, 04:55 PM
- - MrCharlie   For starters if something was removed by mistake i...   Aug 18 2007, 04:54 PM
- - beliza1981   I followed all of the steps to get rid of the Oute...   Aug 24 2007, 06:44 PM
- - MrCharlie   You should post a HiJackThis log of the system as ...   Aug 24 2007, 06:53 PM
- - famen   Hi, outerinfo has blocked all of my privileges (?)...   Aug 25 2007, 04:27 PM
- - MrCharlie   See if you can post a HiJackThis log of the system...   Aug 25 2007, 06:29 PM
- - Ryan   SmartyChic1: I have split your log from this threa...   Sep 2 2007, 09:17 PM
- - MATALICOUS   thanks it was heaps helpful   Oct 13 2007, 07:56 AM
- - don77   Hello and welcome MATALICOUS Thanks for taking th...   Oct 13 2007, 08:22 AM
- - piroteknix   My sister is a very unsafe internet user, going to...   Nov 11 2007, 07:12 PM
- - Selinay   Hi, I'm new and really a dummy when it comes t...   Nov 12 2007, 02:16 AM
- - don77   Hello and welcome piroteknix. Selinay I would su...   Nov 12 2007, 09:30 AM
- - don77   Hello and welcome BlizzardSlayer Glad to hear eve...   Nov 12 2007, 07:10 PM
- - doctorkc   The ComboFix.exe link no longer works. Says it is...   Nov 19 2007, 07:50 PM
- - don77   Hello and welcome doctorkc Yes the tool needs att...   Nov 19 2007, 09:23 PM
|- - don77   Hello and welcome qrushjohnson Please run throug...   Dec 17 2007, 08:25 PM
|- - don77   Hello and welcome GreenGambler Please run throug...   Dec 19 2007, 02:59 PM
- - Damian981   How long does combofix.exe usually take to run? I ...   Dec 5 2007, 07:56 AM
- - Damian981   Disregard, I must have overlooked the previous 2 p...   Dec 5 2007, 07:58 AM
- - hudel19   Hello, First time in this or any forum. Thank you ...   Dec 7 2007, 03:43 PM
- - admin   QUOTENote: process.exe is detected by some antivir...   Dec 7 2007, 05:10 PM
- - don77   Hello and welcome hudel19 Admin answered your fir...   Dec 7 2007, 07:22 PM
- - hudel19   Hello Admin and Don77 , I ran OiUninstaller and ...   Dec 9 2007, 01:12 AM
- - admin   While these removal guide topics are left open for...   Dec 9 2007, 01:19 AM
- - qrushjohnson   Hello all. I am new to this forum. i have been hav...   Dec 17 2007, 08:23 PM
|- - Matt T   Sorry, didn't see Don's post on this page....   Dec 17 2007, 08:53 PM
- - GreenGambler   Hello, I try to run the ComboFix file and I get a...   Dec 18 2007, 06:13 PM
- - deyamag   thank U .   Dec 25 2007, 01:38 AM
|- - Matt T   QUOTE (deyamag @ Dec 25 2007, 08:38 PM) t...   Dec 25 2007, 01:41 AM
- - thehawaiidude2001   Thank you so so much!! You people are the ...   Dec 27 2007, 06:26 AM
- - don77   Hello and welcome thehawaiidude2001 Happy holidays...   Dec 27 2007, 10:23 AM
- - wolfgang3212   If you have purityscan do you use combo fix right ...   Dec 30 2007, 10:37 AM
- - don77   Not necessarly if you remove it via add/remove and...   Dec 30 2007, 02:36 PM
- - amrah08   Thank you SO much for your help! I followed t...   Jan 12 2008, 03:42 PM
- - loophole   Glad you got your issue resolved   Jan 12 2008, 06:49 PM
- - brittxradx   My computer will not wake up from hibernation. Is ...   Jan 16 2008, 07:30 PM
- - loophole   Hello and welcome brittxradx QUOTE My computer wi...   Jan 16 2008, 07:33 PM
- - kickassuperstan   I have received the outerinfo bug and i am needing...   Jan 26 2008, 07:29 PM
- - Thunderbird1988   Hello and welcome Stan, you can find the steps to...   Jan 27 2008, 04:29 AM
- - bones 5   can anyone help me get past this point, I posted m...   Jan 31 2008, 11:17 AM
- - Thunderbird1988   Hello and welcome Bones 5, Please wait until one ...   Jan 31 2008, 03:08 PM
- - bones 5   should i post the log here?   Jan 31 2008, 03:12 PM
- - Thunderbird1988   No, you have already posted your log in the right ...   Jan 31 2008, 03:20 PM
- - dangurx   When I try to run the program it says i need I nee...   Feb 2 2008, 01:15 AM
- - Essexboy   Hi dangurx if you are having problems running the ...   Feb 2 2008, 06:16 AM
- - slstevens   Hi, Where should I post my logs to?? Thanks Sean   Feb 2 2008, 12:15 PM
- - Rorschach112   In the Malware Removal forum   Feb 2 2008, 01:10 PM
- - flutter   Hey...I need some help please. When I tried to use...   Mar 11 2008, 07:36 AM
- - Rorschach112   Sounds like you have something blocking access to ...   Mar 11 2008, 07:52 AM
- - KendraK   So, as ComboFix was going through its stages, text...   Mar 19 2008, 09:07 PM
- - Rorschach112   Hello KendraK I see you have a topic in the Malwa...   Mar 20 2008, 01:18 PM
- - ekgraider   First off i have been reading all over the board a...   Apr 23 2008, 09:11 AM
- - BHowett   ekgraider, I see you have a topic in the Malwar...   Apr 23 2008, 08:08 PM
- - aether   Hi. I've done the G2G search for my particula...   Jan 29 2009, 11:26 PM
- - sari   Please go to the malware forum and follow the inst...   Jan 30 2009, 07:13 AM


Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Collapse

> Similar Topics

    Topic Title Replies / Views Topic Information
No new   50 / 15,961 2nd October 2005 - 07:52 PM
bulaklak_01 started - last by Trevuren
No New Posts   4 / 5,321 3rd February 2006 - 03:58 AM
larcal75 started - last by Crustyoldbloke
No New Posts   0 / 2,611 9th September 2007 - 01:15 PM
disuez started - last by disuez
No New Posts   0 / 2,866 8th March 2008 - 11:35 AM
Fortize started - last by Fortize

RSS Time is now: 12th March 2010 - 05:16 AM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.

© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy | Advertising