Internet Optimizer, grrrrrr!

[Demented]

Does anyone know anything about this? We have had it appearing on our computer for a few months now, basically when you click to open something on the internet if it takes slightly too long we are taken to a page headed up Internet Optimizer, it looks like some sort of directory of subjects, parenting, gardening and rude things also, I assume if you click on one of these subjects it will take you to one of their sites (haven't actually tried it). My DH has tried a number of times to remove this from our computer but can't find anything to remove, he thinks it is something that has installed itself although I have had suspicions that it has something to do with the host company for his website (cheap company that are having problems with hackers just now). Anyway as Mumsnetters know everything I thought I would ask if anyone knew anything about this and how to get rid of it? It is very annoying, especially when it interupts my Mumsnet time. TIA.

when i type in an address it happens to me...no idea what its about though sorry just thought id let you know your not alone!

Thanks charliecat, nice to know we're not alone, it just happened again a few minutes ago and I had a proper look at the subjects, I don't actually see any rude ones, don't know if they are just a figment of my imagination or there are no rude ones today! Plenty of choice when it comes to prescription medications, Viagra etc.

[pie's husband]

Internet Optimizer is a bit of spyware that automatically installs on your pc when you go to certain websites. Like most of these automatic installs, they are very difficult to uninstall...

What it does is if you go to a website that is no longer at that URL (a 404 error) it'll hijack the page and redirect it to the page you are seeing. It also will hijack some online searches so instead of using MSN/Yahoo/Google, it will use its own search engine.

You can try this to uninstall it and I hope it works for you.

##########################

There are two ways to remove this, the easier of the two can be done this way. Check the Control Panel's Add/Remove Programs feature for 'Active Alert' and 'Internet Optimizer'. If these entries are there, using both should result in InternetOptimizer's correct removal. Afterwards, ensure MoneyTree/DyFuCA is no longer loaded.

The second and more difficult way to get rid of it is also very dangerous so make sure you follow the directions to the letter, else you may screw up your machine.

For the Crmrest installer variant, open the Downloaded Program Files folder (inside the Windows folder) and remove the 'Media Manager' entry.

For other variants, open the Windows folder. You should be able to see a file 'ioptiXXX.dll' (Iopti variant), 'nemXXX.dll' (Nem variant) or 'wsemXXX.dll' (Wsem variant). The XXX differs for different versions; common versions are 'iopti130.dll', 'nem207.dll' and 'wsem210.dll'.

Open the registry (click 'Start', choose 'Run' and enter 'regedit' and find the key HKEYLOCALMACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the entries 'DyFuCA' and 'DyFuCA Active Alerts'.

Now open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands (for the Iopti variant):

cd "%WinDir%\System"
regsvr32 /u ..\iopti130.dll
Or, for the Nem variant:

cd "%WinDir%\System"
regsvr32 /u ..\nem207.dll
Or, for the Wsem variant:

cd "%WinDir%\System"
regsvr32 /u ..\wsem210.dll
Restart the computer and you should be able to delete the DLL from the Windows folder, and the 'DyFuCA' and/or 'Internet Optimizer' folders you may have inside Program Files. You can also delete the subkey 'FCI' in HKEYLOCALMACHINE\Software and HKEYCURRENTUSER\Software to clean up if you like.

##########################

Finally, if you do not want to try the above... There is one thing you can do, but it's not 100% and you may still have to do the above. But, this method is much more user friendly.

First, download this . After installing, first press Online, and search for, put a check mark at, and install all updates. Next, close all Internet Explorer windows, hit 'Check for Problems', and have SpyBot remove/fix all it finds.

That ought to get rid of most of your spyware.

Then, download \linkwww.spywareinfo.com/~merijn/files/hijackthis.zip/this{}. Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log somewhere, and then, copy and paste the contents of the log here so I can have a look at it. DO NOT fix anything yet. This scan will find things both good and bad for your system and if you remove the wrong thing, it'll screw something else up.

Once you've posted the results of the scan here, I'll go through the results and then get back to you and tell you which ones to 'fix'... With luck, this will sort you out. But, please be aware that you still may have to get into your registry and that's not a place for the feeble hearted.

[/pie's husband]

Pie's DH thank you very much for taking the time to reply I will show your post to my DH in the morning and get him to give your suggestions a go. I will let you know how we get on, thanks again!

If you have Windows XP, you can run "System Restore" (under System Tools in the Accessories folder). This will restore your system to the way it was before a certain date- you choose a date before the Internet Optimiser appeared. You will lose any progeams installed since then but not any saved files, such as emails. This was the only way to remove just such a program for me...I tried Spybot with no effect.

[pie's husband]

System Restore isn't meant to be used to 'fix' things like this... It is meant to be used as a last resort or to rollback system drivers.

It is very selective to what 'rolls back' otherwise, each system 'restore point' would be the same size as your current partition. If System Restore was meant to be used like this, there'd be no need for antivirus software.

As to Spybot not working, it's not supposed to be a catch all. Spybot (and Adaware and loads of others) can't remove ALL spyware/adware programs, but by using Spybot as I suggested, it could remove some malicious code or executables. Then, by using Hack This it will show me what is still in the registry that needs to be removed. At the end of the day, you can delete the program itself as often as you want, but if you do not remove its entries from the registry, it'll just autoinstall itself again and again and again.

If System Restore did solve your problem, consider yourself lucky, but DO NOT become complacent on using that facility because it will not always be the saving grace.

[/pie's husband]

A big thankyou to Pie's DH I showed my DH your posts and he tried the first things you suggested but could not find some of the files etc so in the end downloaded the software you suggested. I have just re-read your post and I think he must have just gone ahead and asked it to 'fix' the files himself, he is fairly computer literate so I am assuming he knew what files to 'fix', will ask him when he gets back. Haven't seen Internet Optimiser since and computer seems to be working.

Thanks again!

I am resurrecting this as we are having a problem with something that calls itself Flashlight, it behaves in much the same way as Internet Optimiser and it has a big dislike for Mumsnet and feels it has to keep redirecting me to the Flashlight page. My DH has tried Spybot that Pie's DH so kindly posted (thankyou as this program has been very useful for loads of other nasties that have installed themselves) but it just doesn't seem to be able to get rid of Flashlight. My DH thinks it may be something to do with Zone Alarm that we have installed but is a bit frightened to switch it off in case we get bombarded with viruses.

If anyone out there is reading this and knows how to help please let me know. TIA.

Ho hum, just giving this a wee 'bump' just in case.

Nobody? We are trying something called Spykiller 2004, doesn't seem to have specifically located Flashlight but so far no sign of it returning, fingers crossed.

No still got it, has taken me an hour to get on here tonight.

Demented - have you tried the Cool Web Search Shredder? It worked for us when we were having similar sorts of problems. Download it from this site it is called CWShredder (you will need to scroll down the page), and is from the same place as the one pie's dh suggested...if that makes sense

Oh, thanks Jessmack, I'll give that a try. I did a search on Flashlight and was given some advice from another site which seems to have solved the problem but I won't hold my breath!