XBlock By Actiance - Home
Someone Spying on You? Fight Back!
Currently Notice: Undefined variable: incprefix in /data/www/xblock/product_show.php on line 123 25,860,543 Spy Software Busted!
Full Name:
Roimoi
Type: Adware
Also Known As: jimmy limmy roings.com
Danger Level: 4
Category Description: Program that delivers advertisements on your PC.

Note that many websites have their own advertising, unrelated to adware.

Adware is any software application in which advertising is displayed while the program is running. The authors of these applications include additional code that delivers the ads, which can be viewed through pop-up windows or through a bar that appears on a computer screen and sometimes through text links or in integrated search results. Adware may or may not track personal information. It may also gather information anonymously or in aggregate only. Users should check the EULA and Privacy policy to ensure if the adware on their machines conforms to their standards.
Official Description: Roimoi is a randomly-named adware .exe, and downloader ActiveX object, controlled by roings.com.

Roimoi is closely related to Roings's SearchSprint toolbar, which is often bundled with it. Other parasites Roimoi has been seen to install include Wink/EasyDates, InternetOptimizer/Active, ISTbar/XXXToolbar, DownloadPlus/PowerScan, nCase, SaveNow/Search, ShopAtHomeSelect and Webhancer.
   
Information URL: http://www.media-motor.net/
Properties:
Manual Removal: Some variants may include a 'Media Motor' entry in the Control Panel's Add/Remove Programs list. Using this, then deleting the Downloaded Program Files entry (see below) should remove the software. (Though you should also check for SearchSprint and other adware that it might have installed.

Open the registry (click 'Start', choose 'Run', enter 'regedit') and find the key 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run'. There should be an entry inside this key with a randomly-generated-nonsense name, pointing to a .exe file with a different randonly-generated-nonsense name in the Windows folder. Delete this key.

Restart the computer, open the Windows folder and delete the .exe file with the name seen in the registry. You can also delete usta32.inf or usta32a.inf in this folder if you have it.

Next, open the Downloaded Program Files folder and remove the entry with the name "Project1.UserControl1", "ddm_download.ddm_control", "jimmyloader.jimmyform", "jimmyload.jimmycont", "limmyloader.limmyform" or "IObjSafety.DemoCtl"

Back to the list of products removed by X-Cleaner

© Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy