tumri.net

Avast Free Antivirus / Premium Security
1

Hi I am an AOL cusomer. I have recently found that when I am using AOL desk top software a new AOL webpage opens up from tumri.net. I could not find out any information on this but it appears to be spyware. I recently formatted my hard disk and installed windows and AOL and it came back.

Any information on this would be apreciated

Desmond.

2

this should have been posted in the virus and worms section

anyway try this

follow the guide here and run the two first programs AdwCleaner and Malwarebytes quick scan http://forum.avast.com/index.php?topic=53253.0

then post the logs here

3

I reckon it not be good…

Collective provides comprehensive display advertising solutions for advertisers and publishers. Our AMP® Data and Media Management platform leverages the ...

McAfee site advisor likes it though http://www.siteadvisor.com/sites/tumri.net

4

Hi This takes me to a french website. There is a french and english section. Downloading adwcleaner.exe causes zone alarm to pop up with the message Security scan has found this file malicious

Downloaded from
http://general-changelog-team.fr/en/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner

5

but these dont like tumri.net
http://www.urlvoid.com/scan/tumri.net/

hpHosts list it as

ATS - Ad/tracking servers This classification is assigned for domains being used for advert or tracking purposes

and at WOT they say tumri.net is listed at openDNS http://www.mywot.com/en/scorecard/tumri.net

6

It is a safe programme, although yesterday avast was flagging it. But after an upload it was cleared and is no longer detected

Could you disable ZA whilst you download it please. The programme is safe I have used it

7

Ok this is the Log from AdwCleaner

8

Are you still getting tumri.net ?

If so then :

Download OTL to your Desktop

[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

https://dl.dropbox.com/u/73555776/OTL_Main_Tutorial.gif

[*]Select All Users
[*]Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
qmgr.dll
/md5stop
%systemdrive%$Recycle.Bin|@;true;true;true
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS /s
CREATERESTOREPOINT
[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Post both logs

9

Can’t say i am getting tumri.net as it only occasionaly pops up.
The http://forum.avast.com/index.php?topic=53253.0 goes on to say after AdwCleaner download and install MalwareBytes
It is says
•Make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

But it never asked me to tick a box. It is running though.

I will run OTR anyway.

I looked at the file Adwware created and googled AxMetaStream. This is what I came up with.
http://www.fbmsoftware.com/spyware-net/process/AXMetaStream_dll/783/

graphics operating system, and has been reported to be installed without user knowledge or permission. Viewpoint periodically sends your personal information to its servers through a Customer Unique Identifier (CUID), an alphanumeric identifier embedded in the software. Viewpoint Media Player is bundled with AOL, AOL Instant Messenger, Netscape 7, etc., and is sometimes not mentioned in the license agreement.

Shurley this is ilegal in the UK?

10

Not really as if the eula was read (which no one ever does ) it states what it will do there and by installing you agree to the terms

11

Ok I think I will uninstall AOL and install again and look at this more closly. Anyway I fave run OTL and it created a very long meaningless file. Is this supposed to be good or not? attached.

12

Hi essexboy & otuatail,

But others also had tab opening problems through wXw.tumri.net → http://community.norton.com/t5/Norton-Internet-Security-Norton/Http-www-tumri-net-als-als-invasion/td-p/717754
It could be classified as tracking adware, in that sense legit, but not always desirable from a user’s point of view. I would like to block it from my machine…

polonus

13

Also as I stated above using
http://www.fbmsoftware.com/spyware-net/process/AXMetaStream_dll/783/

Viewpoint periodically sends your personal information to its servers

Are we talking back account numbers sort codes etc.

14
Anyway I fave run OTL and it created a very long meaningless file.
it is a diagnosis of your PC....not meaningless to the malware remover ;)
Is this supposed to be good or not?
depends what he see in there
15

It is good, no apparent malware. So it seems as though AOL is trying to make a few bob on the side

You can add it to your host file so that it never gets to that location

http://www.howtogeek.com/howto/27350/beginner-geek-how-to-edit-your-hosts-file/

16

Hi I tried that in the above link to edit the host file in Windows 7

C:\Windows\System32\drivers\etc\hosts

0.0.0.0 www.facebook.com

I can still get to www.facebook.com

I thought I would have a go

17

Add this line to your Host file then see if it re-appears

127.0.0.1 tumri.net