l.yimg.com virus

Page 1 of 2 12 LastLast

  1. Posts : 7
    Windows 7 Home Premium 32 bit
       #1

    l.yimg.com virus


    How do I get rid of l.yimg.com virus? There is no l.yimg in Add or Remove programs. A search for it takes me to an update of Yahoo email client. So far it is only on one of my machines and is really slowing down that machine. I do not find any trace of it in the Registry although I may be looking in the wrong key. I did a repair reinstall of Windows 7 Home Premium SP1 32 bit and it is still there.

    I switched to Chrome and do not have a problem.
      My Computer


  2. Posts : 1,413
    Windows 7 Home Premium 64Bit
       #2

    This is virus is known as a browser hijacker, these programs specialize in removing these as well as other goodies that can be on your system.

    Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.

    download AdwCleaner by Xplode and save to your Desktop.

    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator.
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

    Using AdwCleaner v3: Scan & Clean:
    Double click on AdwCleaner.exe to run the tool again.
    Click on the Scan button.
    AdwCleaner will begin to scan your computer like it did before.
    After the scan has finished...

    This time click on the Clean button.
    Press OK when asked to close all programs and follow the onscreen prompts.
    Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
    Copy and paste the contents of that logfile in your next reply.
    A copy of that logfile will also be saved in the C:\AdwCleaner folder
      My Computer


  3. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #3

    Flash Cookie?


    Suggest following the advice already given but in addition you could check your Flash Cookies folder and sub-folders for a l.yimg.com flash cookie. If it's present, delete it and then set your browser to clean flash cookies on exit.

    C:\Users\Username\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys

    l.yimg.com virus-betterprivacy.jpg

    You'd need to set folder options to show hidden files/ folders in order to check.

    Some security software might flag this cookie up as unwanted.

    From an Explorer window click Organize > Folder Options > View

    l.yimg.com virus-folder-options.jpg

    Re-hide afterwards.
      My Computer


  4. Posts : 7
    Windows 7 Home Premium 32 bit
    Thread Starter
       #4

    Thanks for your reply. I don't use Firefox and don't see have a problem with Chrome. I am still evaluating whether Devlin's suggestion solved the problem.
      My Computer


  5. Posts : 1,413
    Windows 7 Home Premium 64Bit
       #5

    Firefox is my personal preference, but each to their own, Let us know how you get on mate, have you ran the programs suggested?
      My Computer


  6. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #6

    Firefox?


    Hi,

    Yes, stick with Devlin1888's suggestions. You should also know that the flash cookies are common to and available across any installed browser that you use with the exception of Chrome because Chrome has it's own version of flash player.

    Chrome still stores flash cookies - just not in the location given.

    For almost every other browser they're found here:

    C:\Users\Username\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys

    The screenshot was just an example of setting clearing flash cookies to be cleared automatically. The actual method depends on the browser used. Clearing those cookies isn't specific to Firefox. (I don't actually use Firefox).
      My Computer


  7. Posts : 7
    Windows 7 Home Premium 32 bit
    Thread Starter
       #7

    The only thing at that location is Settings.sol which I cannot open.
      My Computer


  8. Posts : 7
    Windows 7 Home Premium 32 bit
    Thread Starter
       #8

    To Devlin1888: I ran those programs and I did not see l.yimg anywhere in the results but they did remove NCH Software, Paretlogic programs, and Ashampoo. IE is still so slow that I have been using Chrome to get on with my work. Thanks again.
      My Computer


  9. Posts : 1,413
    Windows 7 Home Premium 64Bit
       #9

    Could you post the logs if you still have them please? There might be a few other things that you might not pick up on that some of our members might!

    Try this Download RogueKiller - MajorGeeks
      My Computer


  10. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #10

    Another way


    Another way to remove all flash cookies stored by flash player:

    How to Manage Cookies, Disable, Enable, Delete a Cookie - All about Cookies

    Question: What is detecting it as a virus?

    I see yimg.com cookie gets stored in any browser that I use every time I have visited certain websites. It can be used for tracking what sites you've visited or go on to visit.

    http://info.yahoo.com/privacy/uk/yahoo/cookies/

    Edit: Sorry but I posted the wrong folder to check. Just browsed to a page to get myself a fresh cookie and it's found here:

    C:\Users\Chris\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\

    Check the sub folders.

    You can leave settings.sol alone. It stores your flash player settings - the ones that you have chosen from the settings panel. But of you see another settings.sol in a sub-folder named yimg.com or similar you can delete it.

    Quote from web:

    yimg.com is a domain used by Yahoo Buzz which is an widget company that is part of a network of sites, cookies, and other technologies used to track you, what you do and what you click on, as you go from site to site, surfing the Web. Over time, sites like yimg.com can help make an online profile of you usually including the sites you visit, your searches, purchases, and other behavior. Your profile can then be exchanged and sold between various companies like yimg.com as well as being sold to other advertisers and marketers.

    We are not actually allowed to discuss ways of blocking this as it's falls under the forum rules on advert blocking but the cookies can be deleted.
    Last edited by Callender; 29 Jan 2014 at 20:50. Reason: Add info
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:07.
Find Us