xlime.optimizer.com parasite popups How can I remove this thing?

[Joe Blo]

I am constantly getting popups in IE6 (with SP2 installed) that even
are difficult for many popup blockers to stop.
After doing some research and looking at the URLs on the popups, the
bug in question is xlime.optimizer
There seems to be a consesus that this parasite is difficult to
remove.
I tried spyblaster and adaware and both don't find or remove this
parasite.
Has anyone found a way to successfully remove this?
Thanks

 

[CalamityKen]

Joe Blo typed:

I am constantly getting popups in IE6 (with SP2 installed) that even
are difficult for many popup blockers to stop.
After doing some research and looking at the URLs on the popups, the
bug in question is xlime.optimizer
There seems to be a consesus that this parasite is difficult to
remove.
I tried spyblaster and adaware and both don't find or remove this
parasite.
Has anyone found a way to successfully remove this?
Thanks

Download the latest v1.98.2 version of HijackThis:
http://aumha.org/downloads/hijackthis.exe
or
http://tools.radiosplace.com/HijackThis.exe

Post your HijackThis log into one of the support forums.
http://forums.maddoktor2.com/index.php?showforum=17
http://boards.cexx.org/viewforum.php?f=1

 

[Black Baptist]

Joe Blo rambled on in alt.privacy.spyware:

I am constantly getting popups in IE6 (with SP2 installed) that even
are difficult for many popup blockers to stop.
After doing some research and looking at the URLs on the popups, the
bug in question is xlime.optimizer
There seems to be a consesus that this parasite is difficult to
remove.
I tried spyblaster and adaware and both don't find or remove this
parasite.
Has anyone found a way to successfully remove this?
Thanks

BHO Demon google for it.

 

[Adrian in Maryland]

After two weeks I have finally eradicated myself of that damn xlime
popup.

This worked for me. I hope it works for others:

Step 1 - Disable System Restore (Start | Settings | Control Panel |
System |System Restore)

Step 2 - Reboot in Safemode

Step 3 - Delete the three following files:

C:\WINDOWS\BTGrab.dll
C:\WINDOWS\ZServ.dll
C:\WINDOWS\SYSTEM32\TYAVUL.exe

Step 4 - Reboot in Normal Mode

Annoying popup should be a thing of the past

Step 5 - Re-enable System Restore
GOOD LUCK and let me know how it goes...

 

[Roscoe]

Just finished off killing the same slippery little slug... here's an
additional note on this guy:

Adrian wrote below to delete

C:\WINDOWS\SYSTEM32\TYAVUL.exe

However, that's probably not the filename everytime.. it seem to be a
random generated filename that's part of this bug.

Look in your
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
for whatever 6 characer .exe file is in your startup that doesn't look
right (it'll be in c:\winnt\system32), and delete out that file while
in safe mode too...
That seems to have cleaned it on our end

-Roscoe