Thanks for the heads up John.

0

same here i got it TODAY From iwon prize machine download.... sad that iwon would stoop to this crap... note aornum existed even after i removed "iwon prize machine" and "search engine - iwon" from my add remove on winXP

0

Greetings, You can delete the Registry value to stop it from startng up. Use Regedit to browse out to this key: !!! DONT DELETE THE KEY !!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] Look on the right side, and delete this value: "Aornum1"="C:\\Program Files\\Ornum\\Aornum1\\1.bin\\Aornum.exe"

0

Thanks John, I also downloaded from IWON and they also placed it on my desktop. I deleted it but retained Aornum.exe. I have denied access to it through ZoneAlarm but it just annoys me that IWON would not tell you about it in advance. I would be very interested in what IWON has to say about it. To Ptochos: thanks for the explanation, but being a newbie, I have no idea what to do after reading it. Hope it helps someone though.

0

Ptochos Thanks for the registry edit info. I was having the same problem and that took care of it. Theecmo

0

Try SpyBot Search & Destroy just click on the English flag. This freeware program will give you reason to know that all sorts of people are after YOUR information. AdAware 5.83 + , from: LavaSoft AdAware Pest Patrol from: Pest Patrol SpyBot Search & Destroy from: SpyBot Click on English flag. This is a very interesting program and very revealing. Swat-It from: SwatIt Home of the Ultimate Boot Disk

0

This did come with the iwon prize machine download. It appears to be some sort of tracking software. It happen to me also.

0

You can delete all references to it via regedit, then remove the files--once you stop it from running. Leave the directory orrum that it installs into. Change the properties to read only--this prevents if from being reinstalled, or updated...at least in Windows 2000.

0

One other note. If you are unfamiliar with regedit, ensure you make a backup copy PRIOR to editing...just to be safe! Regedit is best left to the experienced...consider yourself warned.

0

I was able to get rid of mine by simply uninstalling Iwon Prize Machine and somthing called "Iwon Plus" with add/remove programs. No, I have no idea what "Iwon Plus" actually is, must have come with prize machine. And I also took Aornum off the startup list with msconfig. Seems to have worked.

0

Aornum is Greek mythology was a hidden entrance to the underworld, that's some kind of name for a hidden tracker.

0

Mike Junkins When whoknowsagain posted a question(28123) on the same thing. I said; "don't know either it's all greek to me ;-)" :-)

0

aornum.exe is a trojan horse

0

I too have sent a message to Iwon customer service after tracing the program to the new prize machine installation. I'll also post the reponse I receive from them if/when it arrives. Personally, I'd like to see a public apology from Iwon for including this program without anyones' knowledge. I'd also like to see Iwon post an uninstall program to completely remove the program from any system that it was installed on.

0

After reading the Iwon Privacy Policy more closely, they do admit to tracking a user's web surfing activities. Below is a portion of their Privacy Policy. Notice the very last paragraph. Apparently aornum.exe was the new program that they implemented for tracking purposes. IWon Software Applications If you elect to install certain software products (the "iWon Software Products") provided by iWon to its users, such as iWon PLUS, the iWon Messenger, or iWon Co-Pilot, iWon may collect additional information about you. This happens because iWon Software Products automatically communicate over the Internet with iWon's servers and, in order to provide you with information or services, may convey to iWon certain information regarding your activities, including, for example, the URL of sites you visit. iWon Software Products may also upgrade their functionalities from time to time without further action on your part, and some of these functionalities may expand the scope of the information that is communicated to iWon's servers. For a complete list of iWon Software Products and more information on how these products work and can be uninstalled, Click here. Other data collected From time to time, iWon may collect additional personal and non-personal information about you. This may include: Credit card information to process your request for products, programs, or services. Information you provide when registering to receive goods or services from one or more of our partners. Information you provide when entering into a contest, sweepstakes or promotion sponsored by iWon and/or one of our partners. Information you provide when filling out a user survey. Information you provide if you contact our customer service center. Data related to the areas of iWon that you visit and how often you visit those areas. This includes co-branded sections of iWon that are part of our overall service. Publicly available information that we obtain from third parties. Information about your online activities, such as the websites you visit and your activities at such sites, if you have installed an iWon Software Product.

0

Aornum was installed on my system running windows 2000. Tradition spyware removal such as as-aware will not remove this. IF you have this on your system your machine security is really compromised. Even with traditional hacking of the registry Aornum(ornum) remains on the infected computer. I have determined that like many back door programs such as subseven this is a very pesky little program. I was able to delete the command line in the dos prompt, then finally was able to delete the follow-up folder(ornum) after about 2 hours work. It is finally off the system. No more IWON for me!

0

I received the following message back from Iwon support regarding the insertion of the aornum.exe program. It seems like a P.R. form letter that I'm sure they had prepared in case people started questioning them. I'll never play the Prize Machine again or trust Iwon privacy. Here is the reply along with my original message to them. Hello: Thank you for writing to iWon. The "aornum" file that you have mentioned is a part of the iWon Plus program. iWon Plus is helpful software that is downloaded for free and lets you increase your opportunities to win. iWon Plus also allows you to receive timely prize alerts, news, updates, special offers, related search results, new sweepstakes announcements and more - all while you surf the Web. This program was recently included with the new Prize Machine 3, which we indicated at the time you conducted the download. However, if after installing and using this software you decide it's not for you, follow these steps to uninstall: 1) Click the Windows "Start" button (typically appearing in the lower-left corner of your computer's screen). A pull-up menu will appear. 2) Highlight "Settings" within the pull-up menu. 3) Open the "Control Panel" folder. 4) Double-click on "Add/Remove Programs". A list of all installed programs running on your computer will appear. 5) Highlight the name of the program. 6) Click the "Change/Remove" button to uninstall the selected program. If you are experiencing technical difficulties with this program, please get back to us with as much detail as possible, so that we may investigate any potential issues on our end. We regret any inconvenience that this might have caused. Thanks again for writing. Regards, Kelly S iWon Member Services http://www.iwon.com ------ iWon.com http://www.iwon.com why wouldn't you? This was a response to the 08/10/02 2:27:21 PM message we received from (wayne_matthews@iwon.com) Original Message Follows: ------------------------- Since installing the new Iwon prize machine I have been experiencing the program called aornum.exe trying to access the internet. Upon checking my system, and verifying my findings with others over the internet, it seems that this is tracking software which was installed without my knowledge by your prize machine download. I do not want this program on my system and I want the instructions on how to COMPLETELY DELETE it off of my system even if it means that the prize machine will no longer be accessible. Will you be posting instructions or an uninstall program to COMPLETELY remove this program ? I am very disappointed that Iwon has gone to this extent to use a stealth program to track its members internet activities. Is this practice in accordance with TRUSTe certification criteria ? Wayne Matthews

0

FYI - using Ad-Aware 5.83 with signatures refreshed August 16 identifies for removal the pieces of this Iwon junk.

0

Thought I would add this. I have also been having this issue only running windows '98 SE. Before I found your lovely responses I uninstalled the prize machine. I have since found that yes AORNUM.exe does change. On my system it changed to TENSOFT.exe. The TENSOFT folder entry mimics that of ORNUM and now under the SearchAssistant folder under IWON it lists TENSOFT.exe not AORNUM.exe. I have have a run and a run- entry in my registry and both have two entries one for AORNUM and one for TENSOFT. Both entries mimic each other. I don't know if this was wise or not but I also notified Symantec so maybe they can investigate it and come up with a solution more easily obtained for the non-techie.

0

What a relief! Since June I have been searching the internet for answers. I have so far been unable to find out what TENSoft.exe is and how it mysteriosly showed up in the program files of my computer! Ever since this nuisance showed up on my computer I have had nothing but trouble. My computer runs extremely slow, the screen freezes up constantly and I receive nonstop alerts from my personal firewall program that this program is attempting to access the internet. I get these alerts at least every fifteen minutes while I am online. Now I am furious to find out that this whole mess started when I began to download the IWon prize machine then thought better of it. I never even finished the download! I cancelled it before it completed. I have tried deleting TENSoft.exe from my computer, but it won't let me. It just gives me a message saying that this file cannot be deleted because Windows is using it. I use Windows 98 and could really use some help getting rid of this. I have deleted any file, folder or anything else that looks like it came from IWON. Will never use them again!

0