A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows 7 » Windows 7 Forum
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Getting rid of InfoAtoms Ads



 
 
Thread Tools Rate Thread Display Modes
  #1  
Old December 15th 12, 10:46 PM posted to alt.windows7.general
W. eWatson[_2_]
external usenet poster
 
Posts: 700
Default Getting rid of InfoAtoms Ads

I seemed to have gotten, accidentally, into receiving InfAtoms ads. I
found their site, and they have an uninstall mechanism. What experience
has anyone here had with it?
  #2  
Old December 16th 12, 11:34 AM posted to alt.windows7.general
Paul
external usenet poster
 
Posts: 18,275
Default Getting rid of InfoAtoms Ads

W. eWatson wrote:
I seemed to have gotten, accidentally, into receiving InfAtoms ads. I
found their site, and they have an uninstall mechanism. What experience
has anyone here had with it?


If you run out of ideas, you get some hints here as to how it works.

http://forum.avast.com/index.php?topic=110607.0

*******
:OTL
FF - prefs.js..extensions.enabledAddons: infoatoms%40infoatoms.com:1.4.0.0
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extens :
C:\Program Files (x86)\Mozilla
[2012/12/01 12:35:56 | 000,000,000 | ---D | M]
[2012/12/01 12:35:56 | 000,000,000 | ---D | M]
(InfoAtoms) -- C:\Program Files (x86)\Mozilla
O2 - BHO: (InfoAtoms) - {103089DA-0F31-4A8B-843F-7D24A7FE8345} -
C:\Program Files (x86)\InfoAtoms\IE32\InfoAtomsClientIE.dll (InfoAtoms Inc.)

:Files
C:\Program Files (x86)\InfoAtoms

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
*******

So it appears as an extension on a Firefox folder (and perhaps can be managed
from a Firefox menu). Notice how the prefs.js has "enabledAddons" set for
the InfoAtoms. That means the extension is loaded and enabled. Using the
Firefox menu, you can set it to disabled. As long as the InfoAtoms has
no further code, to jam its stuff in the next time, you're done. (More
malicious software of this types, keeps other code running, to undo
any repairs a user might attempt to do. That's how you get a hint
of a more malicious package, if it resists all attempts to remove it.)

And in Internet Explorer, it installs a browser helper object (BHO).
See if there is a menu in IE, to display any BHOs (as add-ons, extensions,
or whatever terminology they use).

The above code snippet, is the script you apparently feed to OTL, to
remove that crap. The evidence would suggest, that just maybe, it
can be removed without using any special tools.

Try the InfoAtoms uninstaller first. If you can't find it, look for
an "uninstaller.exe" type of application, in C:\Program Files (x86)\InfoAtoms .
Maybe it is in there. Or, if you've given up on a "proper" cleanup,
you can try using the menus in the browsers, to tame the thing.

This might be classed as a PUP, rather than malware. The companies who
make PUPs, tread a fine line between malware and goodware. And if
a person makes a comment about them, they're respond on any forum
(their tech support will), giving the impression the support
staff are related to St. Francis of Assisi. They will hotly deny
their software is crap, a Klingon, and only exists as a money making
exercise, and the end-users are just along for the ride (to help
function as click-monkey and make them some money).

(A tech support person, from one of the PUP software companies...
"we're the good guys" they'll mutter :-) Um, OK. )

http://upload.wikimedia.org/wikipedi..._de_Ribera.jpg

Paul
  #3  
Old December 16th 12, 07:42 PM posted to alt.windows7.general
W. eWatson[_2_]
external usenet poster
 
Posts: 700
Default Getting rid of InfoAtoms Ads

On 12/16/2012 2:34 AM, Paul wrote:
W. eWatson wrote:
I seemed to have gotten, accidentally, into receiving InfAtoms ads. I
found their site, and they have an uninstall mechanism. What
experience has anyone here had with it?


If you run out of ideas, you get some hints here as to how it works.

http://forum.avast.com/index.php?topic=110607.0

*******
:OTL
FF - prefs.js..extensions.enabledAddons: infoatoms%40infoatoms.com:1.4.0.0
FF -
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extens :

C:\Program Files (x86)\Mozilla

[2012/12/01 12:35:56 | 000,000,000 | ---D | M]
[2012/12/01 12:35:56 | 000,000,000 | ---D | M]
(InfoAtoms) -- C:\Program Files (x86)\Mozilla

O2 - BHO: (InfoAtoms) - {103089DA-0F31-4A8B-843F-7D24A7FE8345} -
C:\Program Files (x86)\InfoAtoms\IE32\InfoAtomsClientIE.dll
(InfoAtoms Inc.)

:Files
C:\Program Files (x86)\InfoAtoms

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
*******

So it appears as an extension on a Firefox folder (and perhaps can be
managed
from a Firefox menu). Notice how the prefs.js has "enabledAddons" set for
the InfoAtoms. That means the extension is loaded and enabled. Using the
Firefox menu, you can set it to disabled. As long as the InfoAtoms has
no further code, to jam its stuff in the next time, you're done. (More
malicious software of this types, keeps other code running, to undo
any repairs a user might attempt to do. That's how you get a hint
of a more malicious package, if it resists all attempts to remove it.)

And in Internet Explorer, it installs a browser helper object (BHO).
See if there is a menu in IE, to display any BHOs (as add-ons, extensions,
or whatever terminology they use).

The above code snippet, is the script you apparently feed to OTL, to
remove that crap. The evidence would suggest, that just maybe, it
can be removed without using any special tools.

Try the InfoAtoms uninstaller first. If you can't find it, look for
an "uninstaller.exe" type of application, in C:\Program Files
(x86)\InfoAtoms .
Maybe it is in there. Or, if you've given up on a "proper" cleanup,
you can try using the menus in the browsers, to tame the thing.

This might be classed as a PUP, rather than malware. The companies who
make PUPs, tread a fine line between malware and goodware. And if
a person makes a comment about them, they're respond on any forum
(their tech support will), giving the impression the support
staff are related to St. Francis of Assisi. They will hotly deny
their software is crap, a Klingon, and only exists as a money making
exercise, and the end-users are just along for the ride (to help
function as click-monkey and make them some money).

(A tech support person, from one of the PUP software companies...
"we're the good guys" they'll mutter :-) Um, OK. )

http://upload.wikimedia.org/wikipedi..._de_Ribera.jpg


Paul

Thanks for the reply. I've been wary of their uninstall. I'll look at
the forum; however, I went back to FFox and noticed Add-on mgr had IA
there. I disabled it and rebooted. After playing around on Amazon and a
few other sites, I see neither InfoAtoms or the Banner appear anywhere.
 




Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off






All times are GMT +1. The time now is 03:25 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.