Nibble Guru - Computing queries demystified Saturday, September 06, 2008
Home
My Account / Register
Login / Logout
Post your Problem!
Search

About Us
Contact Us



List Home > Computer Viruses >   [ Post New Problem ]

Welcome back !
TrackingID : 244
Posted : Saturday, November 22nd, 2003 11:48:15 PM
By : lamppost
Lop.com SpywareConfiguration:
Recently i had the misfortune of somehow getting the lop.com toolbar hijack my google toolbar on my IE. I've downloaded lavasoft 6.0 181 and Spybot S&D but they have both been unable to get rid of this toolbar. Today, this new search toolbar called mywebsearch.com came up and has seem to taken residence in IE. I have no clue on how to get rid of things mentioned above off my computer. Someone told me to get the "hijackthis" program. Operating System : MS Windows XP

Comments :
Re: Lop.com Spyware by bigjon on November 22nd, 2003 11:49:07 PM
I had the unfortunate problem you have.I used Spybot SnD to remove it and it still kept appearing.I used Exposed to scan zipped files and found it replicating along with weather bug and gator I then Deleted them via Exposed and used my Clean Sweep eraser to shred them. I dont know if that was the solution but I havent had a problem since. I also use Spyware Blocker to immunize myself.
Re: Lop.com Spyware by Anonymous Ghost on November 23rd, 2003 12:02:29 AM
lop is insidious. run all sorts of scans, spyware, trojan, and av. then run a registry cleaner (spybot will do some of this, although not as good as a seperate program), followed by a cleansing of your start up list.

it could very well be lurking in the yahoo or msn files.

anyway, its really time to cleanout your files. that list looks like its full of useless junk. you dont need 100 toolbars.
Re: Lop.com Spyware by Anonymous Ghost on December 18th, 2003 11:32:08 PM
The way I finally got rid of the lop.com toolbar was using HijackThis. Once that program has been run, take a look for a "BHO" entry which doesn't belong to any of your legitimate programs. As far as I could tell it had a .dll file with a random name. Also, there will most likely be a "Toolbar" entry with the same .dll listed. Make a backup just to be sure that you're not deleting something legit, but hopefully that works for you. Good luck!
Re: Lop.com Spyware by Anonymous Ghost on December 19th, 2003 02:32:34 PM
When I installed MSNPlus, i accidently installed their sponsor. It installed the Toolbar and mysearch.com was set as startpage. I got rif of them by easily uninstallin MsnPlus
Re: Lop.com Spyware by Anonymous Ghost on December 28th, 2003 08:45:40 AM
use hijackthis, is a great program to get rid of toolbars etc. Jus carefully read the file names before you delete them, and create backups just in case...
Re: Lop.com Spyware by Anonymous Ghost on January 08th, 2004 09:37:44 PM
I had the lop.com problem, I uninstalled it ok using the program on the lop.com site. Now I cannot type into any search text boxes at any site. Help.
Re: Lop.com Spyware by Anonymous Ghost on January 11th, 2004 06:02:33 AM
I had the lop.com problem, I uninstalled it ok using the program on the lop.com site. Now I cannot type into any search text boxes at any site. Help.

Did you uninstall properly?
Use HiJackThis and post your log here, someone will be happy to help.
Re: Lop.com Spyware by Anonymous Ghost on February 10th, 2004 12:33:58 AM
I've had lop invade 3 times. Go to doxdesk.com and find lop under their "parasite" listing. Problem with using off the shelf software is lop is constantly evolving and hides / blends in well with windows keys and files. manual removal is most effective.
Re: Lop.com Spyware by Anonymous Ghost on February 15th, 2004 10:37:40 AM
I used HijackThis to remove the lop.com toolbar. I did this a couple weeks ago, and today it seems to have returned.
Lop.com by Anonymous Ghost on March 15th, 2004 05:35:15 PM
Thry, from lop. com gave me malware on my system
Re: Lop.com Spyware by Anonymous Ghost on March 20th, 2004 08:10:23 AM
I seem not to be able to get rid of lop.com. I used Spybot, adaware and Hijack this. Here is my logfile of hijackthis. Can anybody tell me what I have to delete? Thnx
Logfile of HijackThis v1.97.7
Scan saved at 15:08:04, on 20-3-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Dog poll media\window regs idle.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\SysAI\SysAI.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Tom.QPQM-MI0N01CVAM\Local Settings\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe
C:\Program Files\Adaware\Spybot - Search & Destroy\SpybotSD.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
O2 - BHO: (no name) - {01C5BF6C-E699-4CD7-BEA1-786FA05C83AB} - C:\Program Files\SysAI\AproposPlugin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [TwoOwns] C:\PROGRA~1\Dog poll media\window regs idle.exe
O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37971.3870601852
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Re: Lop.com Spyware by Anonymous Ghost on April 03rd, 2004 12:43:44 AM
I experienced a similar problem exept that the toolbar was nor yet installed, I was only asked to install it everytime I started ie.

I found than when this question was coming up, the process "tbsetup.exe" was running.
I made an end task on the process and the message desapeared.
I than went in the registry to find this neme (tbsetup.exe) and deleted the branch related to this program.
Never got the "Would you like to install search toolbar" question again.

Hope this could be helpful.

Seb
Re: Lop.com Spyware by Anonymous Ghost on April 07th, 2004 09:54:47 AM
I got infected by something that kept popping up a web page advertising a casino. The web page was always generated locally and called something like "LOVE STUPID". I hate it and have managed to get rid of it (I think), but whenever it seems to be gone, it comes back! Anybody else had this LOVE STUPID thing?
Re: Lop.com Spyware by Anonymous Ghost on April 13th, 2004 07:35:57 AM
I tried all the tools for getting rid of the Lop.com tool bar from my browser, but none of them worked. What does work:

In program files there is a folder called ballbags. Delete this folder. Contained in this folder is a dll called "useratom" which IE calls on startup and this seems to run the toolbar.
Re: Lop.com Spyware by Anonymous Ghost on April 14th, 2004 03:14:46 PM
I've been dealing with this hideous program for the past two days. I used Hijackthis and finally got rid of it, but only after really digging around root files.

More generally, lop.com (or prosearching or whatever this loathsome group calls itself) is engaged in an illegal enterprise. Who wants to sue these bastards?
Re: Lop.com Spyware by Anonymous Ghost on April 14th, 2004 06:17:37 PM
i've had the lop for about 7 months now. I've successfully rid my computer of it several times using spybot and regedit only to have it return. I gave up. I wish someone would find a way to screw these f@gs!
Re: Lop.com Spyware by Anonymous Ghost on April 15th, 2004 11:33:34 PM
What this compagny is doing is clearly an invasion of privacy.

Someone need to sue theses f******
Re: Lop.com Spyware by Anonymous Ghost on April 16th, 2004 08:07:48 AM
i always use lavasoft ad-aware, get the latest version from there site and when u load it tell it to check for updates, as they release anew refernce file every now and then, ive had LOP once which ad-aware got rid of, it also gets rid of the "mywebsearch" toolbar crap as well. where i work, the users are always downloading that crap on to the pcs so we use ad-aware to rid of it, on one machine ad-aware found 121 items (for the people who use ad-aware and know what i mean). You should have seen how quick the machine was after that
Re: Lop.com Spyware by Anonymous Ghost on April 17th, 2004 09:23:01 PM
I've got the love stupid thing,,help!!
Re: Lop.com Spyware by Anonymous Ghost on May 01st, 2004 06:53:50 AM
i dont know if i have it or not but recently i had got kicked off the net b/c of this porno dialer that apeared out of no where and i couldnt get connected to the internet i right clicked it and clicked disconnect and then it disapeared and i can't find it then i was able to connect to the internet please help me if u can email me at crazy_insane_dude1080@hotmail.com with info on my problem
Re: Lop.com Spyware by Anonymous Ghost on May 01st, 2004 06:57:33 AM
i dont know if i have "lop.com" or not but recently i had got kicked off the net b/c of this porno dialer that apeared out of no where and i couldnt get connected to the internet i right clicked it and clicked disconnect and then it disapeared and i can't find it then i was able to connect to the internet please help me if u can email me at crazy_insane_dude1080@hotmail.com with info on my problem
Re: Lop.com Spyware by Anonymous Ghost on May 01st, 2004 09:39:41 PM
Yes. You've been hit by lop.com. I've just been hit as well. What's so bad about it is, that AdWare can only remove so much of it, plus I don't know which files or registeries to delete because there seems to be pages and pages.....ggrrrrrr!
Re: Lop.com Spyware by Anonymous Ghost on May 01st, 2004 10:19:02 PM
The best thing to do is go to lop.com and go to help and they will will have FAQs. They will give you uninstallments. I still have traces of the toolbar but it doesn't show up, just when I back click. I have "plandefytitle" listed as the actual toolbar, but like I said it doesn't show up. Anyone know how to get rid of it from being listed?
Re: Lop.com Spyware by Anonymous Ghost on May 10th, 2004 02:15:13 PM
I'm ready to round up all the assholes who write viruses and adware/spy programs and put them in my septic tank with their brown friends. LOP has really pissed me off with their unwanted shit. I'm redy to whip somebody's ass !!! *&^#)
Re: Lop.com Spyware by Anonymous Ghost on May 12th, 2004 06:41:02 AM
I have been infected by these !"£$$"%^ too. They have an address in London.
I live in London.
I also know how to make arson devices.
mwua ha hah ha hah ....
Re: Lop.com Spyware by Anonymous Ghost on May 19th, 2004 07:56:36 PM
Is lop.com and prosearching.com the same thing? We have a customer that got nailed by it, and even after having our tech dig in the registry prosearching keeps coming back.

It will be a cold day before we go to their website or seek their help to remove what they have done... crime victims don't go to their attackers for help, they call the cops. These people have serious issues, and it amazes me they are still in business!

Maybe the EU should worry less about Microsoft and more about the companies in their own backyard!

Oh well, sounds like a reload to me...
Re: Lop.com Spyware by Anonymous Ghost on June 04th, 2004 01:40:33 PM
They should put the LOP people in jail!
Re: Lop.com Spyware by Anonymous Ghost on June 04th, 2004 01:46:10 PM
Hijackthis removed the bar, but it still hijacks searches.
Re: Lop.com Spyware by Anonymous Ghost on June 10th, 2004 01:53:55 PM
I'd appreciate any advice- My computer at work is constantly getting reinfected with this at work. As I use mozilla as a browser and not explorer, I therefore know for a fact that another person who uses this computer is reinfecting mine with this horrible program! I get rid of it time and time again with adaware and spybot, but it keeps coming back. We use MS Outlook and WindowsXP. Since there are multiple users on this desktop, whatever changes I make do not apply to this computer when the other user is logged in. I have (or so I thought) locked her Cookies folder, but I still get it! Has anyone at all run into this same problem, with adware and multiple users on one computer? Any tips at all for security? HelP!

thanks!
Re: Lop.com Spyware by Anonymous Ghost on June 13th, 2004 06:05:38 PM
trying to get prosearching.com off my computer noting seems to work for more than a few minutes
Re: Lop.com Spyware by Anonymous Ghost on June 23rd, 2004 05:18:59 AM
Hello,
I had the same problem and sent an email to lop.com. Surprisingly, they told me how to remove the bar... and it worked!
Her you are what they told me:

"In the 'Add / Remove Programs' list, look for 'Window Search', 'Window Searching', 'Lop.com', 'LOP SEARCH', 'Browser Enhancer', or 'Ultimate Browser Enhancer' from the menu to run the uninstaller.


If you've tried the above steps and the uninstall is still unsuccessful, try disabling your anti-virus software, Ad-aware, Sophos, and other programs of that nature. Re-download the uninstaller, then run it. Ad-aware et al seem to interfere with the uninstall process. If disabling that software allows you to run our uninstaller successfully, please tell us or email the software company in question and tell them they need to fix their software.

- Additionally a separate uninstall program may be downloaded here:
http://lop.com/new_uninstall.exe

This is a new universal uninstaller and will remove any components, such as the toolbar.

If none of these suggestions solve the problem, try reinstalling the LOP software, then running the uninstall again"
Re: Lop.com Spyware by Anonymous Ghost on June 23rd, 2004 09:47:08 AM
i got lop for about a month and when i went to add and remove there's nothing to suggest that i have lop. i dont mind them but i have really annoying 'tool bar' which i want to get rid, please help
Re: Lop.com Spyware by Anonymous Ghost on June 23rd, 2004 12:58:57 PM
To the person who was given instructions on how to uninstall Lop;

They told you to disable virus and adware checkers and 'other programs of that nature' before running THEIR uninstaller!

That's like saying "Lower your shields and surrender, resistance is futile!"
Re: Lop.com Spyware by Anonymous Ghost on June 24th, 2004 04:05:55 AM
I tried that method with going to add/remove programs and I found "Window Search" one of lop's names. When i did, the window would just sit there and do nothing. No deletion or anything would occur. SOmeone really needs to rid the world of these Lop @$$holes. Any suggestions???
Re: Lop.com Spyware by Anonymous Ghost on June 24th, 2004 04:44:21 AM
I am the one that posted that... I never turned my antivirus off and I ran the uninstall. And the bar disapeared.

I also uninstalled the "window search" item at add/remove programs, and didn't work either.
That's why I tried with the uninstall, but without disabling antivirus or adaware, of course.
Re: Lop.com Spyware by Anonymous Ghost on June 24th, 2004 05:28:29 AM
I FOLLOWED INTRUCTIONS FROM 'PC WORLD' AND GOT RID OF MY LOP TOOL BAR. SOME OF IT I REMEMBER IS TO CHANGE YOUR SICURITY SETTING TO HIGH GOING TO TOOLS THEN INTERNET OPTION AND THEN SECURITY. ANOTHER THING WAS TO CHECK FOR DOWNLODED FILE WHICH ARE FOUND GOING IN TOOLS, INTERNET OPTION, SETTING-VIEW OJECT AND CHECK FOR THE DOWNLOAD AND GET RID OF THOSE FILES AND THEN AND ALSO I FOUND A BROWSER IN ADD REMOVE AND GOT RID OF. IT WORKED BUT I DONT KNOW WHICH INTRUCTION HAS ACTUALLY GOT RID OF LOP AND SEARCH.
Re: Lop.com Spyware by Anonymous Ghost on July 03rd, 2004 02:02:30 AM
Okay, I've got the annoying ass Lop,also known as prosearching on my computer and the pop ups are pissing me off. I've tryed everything and nothing works, I'm just curious if anyone has actually figured out a way to get rid of it? Microsoft or somebody must know how. Please respond and tell me how to get rid of this shit.
And yes we should sue there asses off, for pain and suffering and invasion!!!
Re: Lop.com Spyware by Anonymous Ghost on July 19th, 2004 08:06:35 AM
Lop is evil.
I've got the crap on mine too.
we should sue those fools.

Sorry, just a lop hate haiku,
but seriously, do you trust a download
from lop? There must be some other way.
Re: Lop.com Spyware by Anonymous Ghost on July 26th, 2004 06:26:52 AM
I got that stupid search bar at the top of my screen. Tried HijackThis, Spybot Search and Destroy, SpySweeper, SpywareBlaster, AdAware and PestPatrol and still it came back.
Found a folder in Program Files called 'long shim default' with several EXE files in it. I renamed this folder (put an underscore in the name) and rebooted and its been ok since.
Re: Lop.com Spyware by Anonymous Ghost on July 26th, 2004 06:44:54 AM
So have a look in Program Files for a folder you dont recognize and that may be the culprit. Delete it or rename it (safer) and it may stop it.
Re: Lop.com Spyware by Anonymous Ghost on July 28th, 2004 02:55:26 PM
Yes we are the lop.com team and all ur personal information stored on your pc is obtained, and no, we are not breaking the law, why? because none off you wankers arte reporting it, and even if you do, there are the what we call the privacy act, that doesn't allow certain people to look into our websites, you can delete the software because we have full access to your computer and if you uninstall the program, we reinstall it! love the lop.com, as if any of you wankers can do anything to us, ***** YOU ALLL you have been infected and we own you!!!!!!!!!
Re: Lop.com Spyware by Anonymous Ghost on August 03rd, 2004 03:06:55 AM
Estoy infectado por esta puta mierda de LOP. No se como invadió mi ordenador.He intentado todo y sólo he conseguido dañar algún programa y perder mucho tiempo.Ni Symantec ni Ad Aware lo solucionan. Auxilioooooo!
Re: Lop.com Spyware by Anonymous Ghost on August 03rd, 2004 02:17:59 PM
I TRIED EVERY SPYWARE REMOVER AND THE LOP.COM/HELP UNINSTALL. IT ONLY WORKED AFTER I DISABLED MY ANTIVIRUS. IF LOP UNINSTALL DOESN'T ASK YOU TO CONFIRM BY ENTERING DIGITS IT ISN'T REALLY WORKING. FYI I HATE THOSE F$$$
Re: Lop.com Spyware by jorgeart32 on August 03rd, 2004 07:20:47 PM
hola a todos, si quieren quitar la barra de lop.com tiene que hacer lo siguiente:

1.- buscar en la siguiente ruta una carpeta que tengo un nombre extraño, como esta:
C:\Documents and Settings\All Users\Datos de programa\thirdlocksjoyford
en la cual se encontrara un archivo .exe como el siguiente:

SEEKPILE.exe

2.- ejecutar regedit y buscar un registro que tenga el nombre del archivo .exe que encontramos (SEEKPILE.exe)

debe de estar en:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

en esa carpeta igual pueden encontrar otros hijacker o basura que esten afectando...

3.- borrar el registro donde aparece el .exe (SEEKPILE.exe)

4.- reiniciar la maquina a modo prueba de fallo para que puedan borrar la carpeta donde se encontro el .exe.

deben de bloquear en su navegador el sitio lop.com para seguridad, sugiero que utilizen el spybot que hace este trabajo por nosotros con muchos sitios que son porqueria.

Suerte, aunque yo ya me he vuelto un experto quitando la barra de lop.com

JAGM
jorgeart32@hotmail.com
Re: Lop.com Spyware (CURE) by Anonymous Ghost on August 04th, 2004 07:17:42 AM
Just go here.
http://lop.com/new_uninstall.exe
Worked for me... here is my hijacklog
Logfile of HijackThis v1.98.0
Scan saved at 8:17:10 AM, on 8/4/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\gearsec.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\1XConfig.exe
C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Danware Data\NetOp Remote Control\GUEST\Ngstw32.exe
C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\Printkey.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Intel\NCS\Sync\NetSvc.exe
C:\WINDOWS\System32\cmd.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\jchaney\Desktop\HijackThis321.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Piedmont Plastics
F0 - system.ini: Shell=
F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [%%DELETE_VALUE%%] CreateCD50
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Guest.lnk = C:\Program Files\Danware Data\NetOp Remote Control\GUEST\Ngstw32.exe
O4 - Global Startup: Printkey.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/3023168039b96c08f618/netzip/RdxIE601.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = piedmontplastics.com
O17 - HKLM\Software\..\Telephony: DomainName = piedmontplastics.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = piedmontplastics.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = piedmontplastics.com
Re: Lop.com Spyware by Anonymous Ghost on August 04th, 2004 08:41:19 AM
Is it possible to set the computer back to a previous restore point to get rid of lop? Or is that useless as well? Thanks!
Re: Lop.com Spyware by Anonymous Ghost on August 07th, 2004 02:10:18 AM
My name is Bhavna and This is a excellent site to recognise and remove all known 'parasites' manually including Lop.com. Please let me know if anyone is successfull removing any of the parasites using instrctions found on this website:http://www.doxdesk.com/parasite/
Re: Lop.com Spyware by Anonymous Ghost on August 17th, 2004 02:59:51 AM
The way I got rid of Lop was going on to program files and then on to the msn folder and there was spam on there and all you have to do is delete the spam KILL IT!!!
Re: Lop.com Spyware by Anonymous Ghost on August 17th, 2004 07:38:39 AM
I have a few strange folders in my program files but I can't delete them because they're exe files and the system won't purge them. I have deleted "window searching" THREE times from my add/remove programs list, have deleted Kazaa (my husband didn't believe it caused problems), and constantly run virus scans, firewall, etc. The damned thing keeps coming back just by visiting sites like yahoo and msn. How do I isolate it and kill it for good? Anyone else have it come back randomly in full force?
Re: Lop.com Spyware by Anonymous Ghost on August 17th, 2004 10:05:34 AM
Thanks for all of the input from the posts on this site.
I just got rid if the lop search bar. This is How I did it:

*Ran Ad-Aware
*Rebooted in safe mode rerun Ad-Aware
*Uninstalled "Windows Searchs"
*Rerun Ad-Aware I found file that it could not delete, ask to delete next time machine was rebooted.
*Rebooted in the process, Ad-Aware rerun
When everthing came up i opened brouser, it opened quiker and without the tool bar or any popups

In the process, don't open your broweser untill you are done.

I hope this help some
Re: Lop.com Spyware by Anonymous Ghost on August 21st, 2004 12:14:58 AM
Ok, that doesnt work ad aware is totally useless in getting rid of lop.com
I just got rid of it using Spy Sweeper 3.0
that is the only successful application i could find that totally removed it. they even suggest a manual editing of files to do it, but the program did a wonderful job.
Re: Lop.com Spyware by Anonymous Ghost on August 24th, 2004 01:41:22 AM
i found an add/remove called window searching, deleted it, and i'm lop free, if i got ahold of those f_ckers, i'd kill them and hang them to be eaten by beasts
Re: Lop.com Spyware by Anonymous Ghost on August 25th, 2004 09:07:32 PM
Ref Post 8/24/04, I found the in the add/remove window searching, deleted it, and I am lop free. These guys are not funny. They are no better people who infect computers with a virus. I also installed spy sweeper 3.0 - works great.
Re: Lop.com Spyware by Anonymous Ghost on August 25th, 2004 09:11:31 PM
Ref Post 8/24/04, I found the in my add/remove, window searching, deleted it, and I am lop free. Thanks... These guys are not funny. They are no better than people who infect computers with a virus. I also installed spy sweeper 3.0 - works great. I doubt if you can sue them since they state that they can install the program. So read those agreements carefully. It may be boring but hey, think of the time you and I have spent trying to get rid of spyware.
Re: Lop.com Spyware by Anonymous Ghost on August 25th, 2004 11:53:39 PM
I found the in my add/remove, window searching, deleted it, and I am lop free. Thanks...

I have now made it my mission to add any email adress for Lop.com to my Spamer...I will now begin spaming the heck out of them...Lop prepair for an e-mail bomb....hahaha
Re: Lop.com Spyware by Anonymous Ghost on August 31st, 2004 05:34:17 PM
I just got their UK address of their website. I'm just ***** angry and legally it would take a monumental amount of time to actually bring them to justice, let alone a huge amount of money and probably very little consequence. I'm thinking of more guerilla methods. ¬_¬
Re: Lop.com Spyware by Anonymous Ghost on September 03rd, 2004 04:01:18 PM
Having tried Ad-aware for a few days to get rid of this crap .. I finally did as recommended above and go to the www.lop.com site ... drill down to the help - at the bottom and you get to this page;

http://lop.com/help.html#how

if you save the "new_uninstall.exe" and run it it seems to work - have run lop free for a couple of days now ....

So maybe the Ba***rds at lop.com have some sort of conscious after all !! Yeah !!
Re: Lop.com Spyware by Anonymous Ghost on September 08th, 2004 11:10:55 AM
Are you crazy? Do you really trust in this guys and will download other file from then? PLEASE, do not download the "new_uninstall.exe".

I used Ad-Aware, Spybot, etc. but the only one that really works to remove the LOP bar was the Spy Sweeper. It also found other spywares that the other softwares didn't find. So... I recommend it!

Hugs for all.
Darci

Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper Spy Sweeper
Re: Lop.com Spyware by Anonymous Ghost on September 08th, 2004 01:55:23 PM
I found lop on my system after downloading msn, nothing i can find will get rid of it, it has installed a search engine toolbars taken to putting rubbish in my favourties folder and on my desk top, some of the material can be offensive.it takes over my internet default setting and sets it,s self as my home page, it won,t let me use the search engine of my choice, and i feel it has something to do with the micro soft corporation, i feel they are spying on me , as it came at the same time as one of their products, you cannot find it,s files it is well hidden like a virus or worm but this is smart it changes and suspect files that you try to get rid of it denies you access, it has caused serious shit, i have got to the stage now when i think wiping the whole system will be needed, any bright ideas welcome
Re: Lop.com Spyware by Anonymous Ghost on September 08th, 2004 05:03:17 PM
LOP REMOVAL, lop hides it,s self in msn messenger, to uninstall lop, totally delete msn,it hides it,s self as a sponsor which you accidently instal with msn,wonder if it is a new way for mr gates to spy on us cheap market research for him and his corporation, no programs can get at it, so delete messenger your system won,t like it much but it does work .
Re: Lop.com Spyware by Anonymous Ghost on September 09th, 2004 09:48:36 AM
ok i just remove all the lop.com toolbar.. to remove the toolbar right under ur address bar ..just right click on the bar n choose disable it..then u'll to manually key in the number to disable it...then use spy spysweeper latest version to remove the annoying pop-up search bar at the bottom of ur IE browser..
Re: Lop.com Spyware by Anonymous Ghost on September 10th, 2004 07:16:02 AM
We are obviously in need of protection from these LOP people...Who is there who could take some action? Police? ...or do we do a vigilante thing and employ some clever hacker to dismantle their network?
Re: Lop.com Spyware by Anonymous Ghost on September 12th, 2004 08:37:49 AM
Lop.com the end of IE for me. The thing goes on in milliseconds and it takes a 20 minute scan to find it -bad equation. I use Mozilla Firefox. Try it.
Defeatist? yes but the lop.com timewasters can have their moment of glory.
I like to use my computer.
Who pays lop.coms bills? Why are they and their s***** ilk legal?
Re: Lop.com Spyware by Anonymous Ghost on September 14th, 2004 05:09:02 AM
I use Opera and Firefox (opera preferred) and LOP as yet doesn't touch them (I daresay it won't be too long). Spybot, AdAware, HijackThis and Spywareshredder all failed to eliminate Lop (which was put on my PC by a work collegue) and several manual removal instructions I found to be fake. I've had enough of spammers and spyware creators - surely some revenge is in order. Politicians please LEGISLATE AGAINST THESE A$$H0!E5 NOW!
Lop.com Spyware Manual Removal Instructions by scorpio on September 15th, 2004 12:53:02 AM
You can go to your Start Menu--Control Panel, then choose the 'Add / Remove Programs' option. Depending on which version of the software you have installed locate 'Lop.com' or 'LOP SEARCH' or 'Window Searching' or ‘'Window Active' or "Browser Enhancer" or "Ultimate Browser Enhancer" from the menu to run the uninstaller.

- Depending on your version You may also be able to locate a globe type icon in the bottom right hand corner of your screen (near the clock), right click on it then click Menu. From the main menu you will see a help button on the top right hand corner. Click the help button then choose 'uninstall'.
Re: Lop.com Spyware by Anonymous Ghost on September 16th, 2004 01:00:03 AM
this Lop.com is more an act of piracy. We don't want them but can't fight them off so why not launch a private war. We could petition the government, FBI, to issue an order to cease their practice or find some upset programmers and hackers who want them out as much as we do and fight them on their own level.
John
Re: Lop.com Spyware by Anonymous Ghost on September 16th, 2004 04:48:28 PM
My Daugther downloaded a desktop theme and since then we have the Lop.com toolbar come up I use Spybot and Adware but wish to reradicate it from my PC any ideas? Or is it going to be a re-intall of Windows XP?
Re: Lop.com Spyware by Anonymous Ghost on September 30th, 2004 05:03:25 AM
Working my way through removal, usual get rid of Messenger Plus and other 'freeware' that the kids downloaded. Cleaned out various registry entries, nothing specific and the '..run' entries were clean, so the version I got is sneaky. Only solution for the tool bar was the 'new_unistall' from lop.com. Did not have to switch off the AV. Adaware reports all clear, I do not believe it as there is a flicker on the address status in IE before hitting my home page. Intend to sniff the traffic and will no doubt have to clean further; expect I will also change browser. As I did not agree to this software installation, once I have finished removal, I will turn my full attention to retribution against C2Media
Re: Lop.com Spyware by Anonymous Ghost on September 30th, 2004 05:47:01 AM
Arrrgg... need I say more, Lop.com is terrible. I can't get the 'new_uninstall' thing, and my spyware programs just seem to be replicating it instead of deleting it. Any advice.. My husband is a techie, but he's at work... so feel free to go into as much detail as necessary to get rid of lop from my machine and I'll pass it on to him.

Many thanks

Suisho
Re: Lop.com Spyware by Anonymous Ghost on September 30th, 2004 11:10:11 PM
how do i get rid of infected regisrty keys and files. i need something done before my computer crashes. on me but i dont have the money to pay for anything. please help.
Re: Lop.com Spyware by tjdevs on October 01st, 2004 10:05:11 AM
Removal of LOP.COM
TJTech (Scotland) solution (30th Sept 2004)


Symptoms...
Gobbles up memory ~ 1MB/sec
Slows down computer to point where can't even reboot properly.
Spurious programs seem to use ever increasing memory (CTRL-ALT-DEL> TaskManager,Memory Processes)
Seems to clear after reboot.
Reappears after running I.E. or other browsers.
When you save a file in Explorer machine reboots instantly (very annoying).
Spyware tool, such as ParetoLogic's XoftSpy 3.45, detects then removes (only to be reinfected again)
Hides itself and morphs around so hard to detect.

So what can you do?...

GET SECURITY ON...
Download Vcleaner from Grisoft (removes PSW.Bisby etc...) and run in safe mode, reboot to normal.
Download SpyBot SnD + XoftSpy, update and run remove all trojans and diallers!
Download AVG 6 or some other AV program, update and run to remove all virus.
Download memory monitor FreeRAM XPPro1.4 (Freeware)
Ensure I.E./browser security/firewall is on, delete Temp Internet Files
Ensure Firewall installed such as ZoneAlarm (my preference), McAfee, Norton etc.
Look at Add-Remove programs in ControlPanel and remove any suspicious programs!
Install Pop-Up blocker such as Google's free one (very-good).
Avoid visiting dodgy gaming and sites from abroad that offer temting promo's!
Ensure WinXP up to date (e.g. WinXP SP2 select auto-update configuration)
Obtain and run a registry clean program such as PC Privacysoftware's
RegistryRescue.

Still got LOP.COM? (most likely, or youll still get it back)...
XoftSpy Log shows willful entry>
Lop.com
Name: F:\Documents and Settings\Administrator\Favorites\computers

but search their showed no visible/hidden entry? Remove malware anyway with XoftSpy.

Logged on as Administrator (usually default user in single user logon, if not sure try following anyway)?
Backup registry (System Tools/ Backup etc. see Windows Help on this)
Disable System Restore...(START>My Computer (right-click) Properties, System Restore)
RESTART IN SAFE MODE NOW...
Run regedit from START>Run command.
. Expand item:My Computer\HKEY_CURRENT_USER\SOFTWARE now right-click and
. choose Find
. enter 'lop.com' without the quotes in search-field then find these keys...
. delete any key that obviously is related to this malware, continue through
. the finds and delete them.

Restart computer normally now...
Remember to switch SystemResore back on again (Accessories>System Tools> System Restore)
Thats it, LOP.COM gone for now!
Re: Lop.com Spyware by Anonymous Ghost on October 01st, 2004 10:22:53 AM
There are a few ways to bombard the lop.com website but that is illegals and chances of getting caught are good.
Yet, LOP can invade and disdable our home based computers, cause fiancial hardships in paying techies to tryu and fix, and I might say, no fix can get rid of it completely. It is time for government intervention with the war on LOP.
Re: Lop.com Spyware by tjdevs on October 01st, 2004 10:37:12 AM
I personally have no intention of going
within 1000 light years of the Lop.com
website. There is one solution though that will definitely work, use Linux as op-sys and return your WinXP licence
for a refund to Bill.
Re: Lop.com Spyware by tjdevs on October 01st, 2004 04:13:58 PM
I found an unrecognised program in my Add-Remove list (via Control Panel) called 'Media Motor':
Apparently host for webHancer and roing etc.
{see..http://forums.majorgeeks.com/archive/index.php/t-40177}
Deleted the program.
Re: Lop.com Spyware by Anonymous Ghost on October 06th, 2004 07:13:21 PM
Que tal, veo que son tercos ya una vez escribir en este mismo foro como quitar la barra de lop.com, lo unico que se me paso escribir es que la carpeta C:\Documents and Settings\All Users\Datos de programa\'\thirdlocksjoyford' este cambia casi siempre y adentro solo tiene un archivo exe que siempre cambia de nombre, si quiene mas informacion busquen mi mensaje un poco mas arriba de la pagina saludos
jorgeart32@hotmail.com
Re: Lop.com Spyware by Anonymous Ghost on October 06th, 2004 07:20:55 PM
Re: Lop.com Spyware by jorgeart32 on August 03rd, 2004 08:20:47 PM
hola a todos, si quieren quitar la barra de lop.com tiene que hacer lo siguiente:

1.- buscar en la siguiente ruta una carpeta que tengo un nombre extraño, como esta:
C:\Documents and Settings\All Users\Datos de programa\thirdlocksjoyford
en la cual se encontrara un archivo .exe como el siguiente:

SEEKPILE.exe

2.- ejecutar regedit y buscar un registro que tenga el nombre del archivo .exe que encontramos (SEEKPILE.exe)

debe de estar en:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

en esa carpeta igual pueden encontrar otros hijacker o basura que esten afectando...

3.- borrar el registro donde aparece el .exe (SEEKPILE.exe)

4.- reiniciar la maquina a modo prueba de fallo para que puedan borrar la carpeta donde se encontro el .exe.

deben de bloquear en su navegador el sitio lop.com para seguridad, sugiero que utilizen el spybot que hace este trabajo por nosotros con muchos sitios que son porqueria.

Suerte, aunque yo ya me he vuelto un experto quitando la barra de lop.com

JAGM
jorgeart32@hotmail.com
_______________________________________
THIS GUY KNOWS HOW TO DO IT!!!! THE DAMN TOOLBAR IS GONE!!!!!!!!!!!!!
diablorojoescarlata@hotmail.com
MIL GRACIAS JORGE :D
Re: Lop.com Spyware by Anonymous Ghost on October 08th, 2004 08:00:27 AM
Webroot's Spy Sweeper took care of it the lop problem for me. Not a trace left.

Find it here: http://www.webroot.com/download/trial/347/ssfsetup347.exe
Re: Lop.com Spyware by Anonymous Ghost on October 11th, 2004 12:29:48 PM
I got it as well after installed MSN PLUS! Webroot SpySweeter cleaned it out.
Re: Lop.com Spyware by Anonymous Ghost on October 13th, 2004 09:02:00 PM
I'd say half of the posts on this board appear to be coming from the a@@holes at Lop.com. Especially the one about going to their site for help. go to http://www.lop.reallysucksass.com/wantoff.htm and you'll see what i mean.
i've run every freaking software tool in the book and i'm still not lop free
Need help getting rid of LOP... by Anonymous Ghost on October 14th, 2004 06:25:08 PM
HELP

Logfile of HijackThis v1.98.2
Scan saved at 7:24:20 PM, on 14/10/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\00THotkey.exe
C:\WINDOWS\system32\TFNF5.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\MSN Video Enhanced\MSNVE.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Google\ggviewer81-91.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RAMASST.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Adam\Desktop\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://jmymqpqrenkcphsom.com/gFe2EfxgTTR_UqRftwP1e_KlDtpW0mI1fQVC/YbaRLU.jpg
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.jcsdsywqvvycsqpobsabzx.net/gFe2EfxgTTTDy3/ycfKHMJpR/S5kcEeYkC0pmrrCYaqK3sMvenhFo1HzyzZqQQlO.cgi
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {4CEE6ABE-EBB6-BA77-642A-97E69196AFB6} - C:\PROGRA~1\MP3ARM~1\Time obj.exe
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MSN Video Enhanced] "C:\Program Files\MSN Video Enhanced\MSNVE.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [bendstart] C:\PROGRA~1\ISOFAS~1\FREE LOG.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [Surf flap base trust] C:\Documents and Settings\All Users\Application Data\namewebsurfflap\corn bird.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\IEExtension.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\IEExtension.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
Re: Lop.com Spyware by Anonymous Ghost on October 21st, 2004 10:18:50 AM
Re: Lop.com Spyware by jorgeart32 on August 03rd, 2004 08:20:47 PM
hola a todos, si quieren quitar la barra de lop.com tiene que hacer lo siguiente:

1.- buscar en la siguiente ruta una carpeta que tengo un nombre extraño, como esta:
C:\Documents and Settings\All Users\Datos de programa\thirdlocksjoyford
en la cual se encontrara un archivo .exe como el siguiente:

SEEKPILE.exe

2.- ejecutar regedit y buscar un registro que tenga el nombre del archivo .exe que encontramos (SEEKPILE.exe)

debe de estar en:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

en esa carpeta igual pueden encontrar otros hijacker o basura que esten afectando...

3.- borrar el registro donde aparece el .exe (SEEKPILE.exe)

4.- reiniciar la maquina a modo prueba de fallo para que puedan borrar la carpeta donde se encontro el .exe.

deben de bloquear en su navegador el sitio lop.com para seguridad, sugiero que utilizen el spybot que hace este trabajo por nosotros con muchos sitios que son porqueria.

Suerte, aunque yo ya me he vuelto un experto quitando la barra de lop.com

JAGM
jorgeart32@hotmail.com


Mil millones de gracias Jorge
Touny
Re: Lop.com Spyware by Anonymous Ghost on October 23rd, 2004 09:58:52 AM
Gosh, what the **** can i say about this ****ed up software! I've read all the posted messages and I'm currently trying to remove this annoying thing. Going to their site by using the uninstall.exe thing seems like a very very BAD IDEA. I'm sure they're the ones who are writing most of these messages encouring you to visit their site. Mark my words, IT'S TROUBLE! So how do you remove this thing? Try using SpySweeper. Good luck!
Re: Lop.com Spyware by Anonymous Ghost on October 26th, 2004 02:07:34 PM
Well sirs, i had the same problem... I used the NoAdware software and i deleted the bar, but in a few days it returned. I tried everything but it always returned. Then I tried looking for the open ports i had in my firewall and I find one that I couldn't remember i had cofigured, the 4092 TCP port. I closed that port and then used NoAdware again. I resolve the problem althoug i don't really know if it was a casuality. Only thing i can tell is that you can try this as one of the multiple choices that are appearing... Hope it's useful...
Re: Lop.com Spyware by Anonymous Ghost on October 27th, 2004 09:58:03 PM
I have the f'n "http://lop.com/passthrough/newpass2.htmlklk" (purposely messed up ending). What should I do to remove this?
Re: Lop.com Spyware by Anonymous Ghost on November 01st, 2004 04:03:42 AM
Now it's sure. Just close the 4092 TCP port and clean with NoAdware software. I have used it in my other PC. I happenned the same and now the bars are gone.
Ricardo
Re: Lop.com Spyware by Anonymous Ghost on November 05th, 2004 04:26:45 AM
I've read everyone's comments and unforunately nothing has worked for me..

- i downloaded the uninstalled (and yes it had the number thing but it didnt do much)

- i removed something lop-related from add/remove programs

- i ran SPYSWEEPER, Spybot SND, Ad-Aware SE and Norton 2005 .. all to no avail.

- i've also restricted access to the lop.com site whatsoever (Tools -> Internet Opetions -> Security -> restricted sites)

I dont have the bar anymore *thank goodness*, but i stll have traces of it: It hijacks my "Page not Found" page with petty adds for casinos, health, the lot, as well as being in my "Allowed pop up blocker sites" (default with windows serice pack2)

I've also caught a nasty virus that i believe has something to do with this spyware that restarts my computer and leads to me seeing an ugly blue screen :(

Also, i happen to have multiple iexplorer.exe running in my windows task manager...

***** i hate those people at lop.
go to hell and die!
Re: Lop.com Spyware by Anonymous Ghost on November 05th, 2004 05:16:23 PM
i dun seem to be able to remove it...i hav a toolbar at the bottom of the page...and it seems to be lop.com as well...
Re: Lop.com Spyware by Anonymous Ghost on November 07th, 2004 06:16:55 AM
I have tried everything too, the task bar is gone, but still have traces of the F**r in my comp. Nothing will get rid of this as I have tried everything in the last three weeks.
Re: Lop.com Spyware by Anonymous Ghost on November 09th, 2004 01:35:16 PM
Does the lop.com bar show up at the bottom of the screen once we enter IE? and is it a large, blue bar? becaue i have a bar that keeps appearing everytime i open up IE and im sure its lop...
Re: Lop.com Spyware by Anonymous Ghost on November 10th, 2004 06:17:13 PM
"Re: Lop.com Spyware by Anonymous Ghost on November 09th, 2004 02:35:16 PM
Does the lop.com bar show up at the bottom of the screen once we enter IE? and is it a large, blue bar? becaue i have a bar that keeps appearing everytime i open up IE and im sure its lop..."

Right click the blue part and click on propeties ... that will tell you the address it is routed at
Re: Lop.com Spyware by Anonymous Ghost on November 12th, 2004 06:50:01 AM
Nice to know others are screaming at the inanimate object on their desk.

new-unistall works fine - for about 10 minutes at the moment. Spybot detects the invasion, but by the time you deny changes it has already reloaded.

Can Ricardo tell this ignoramus how to shut my 4092 TCP port? I'd like to try that before uninstalling IE in favour of Firefox.
Re: Lop.com Spyware by Anonymous Ghost on November 17th, 2004 12:09:57 AM
i am now lop free after 2 weeks of trying everything i could think of i went to tomcoyote website forum -hijackthis logs and problems- posted my hijackthis log and waited for a reply, 1st reply took about a day but next replies were quicker.
they helped me out in about 2 days and i have no trace of it anywhere.
highly recomend it to anyone with this crap on their pc
Re: Lop.com Spyware by Anonymous Ghost on November 23rd, 2004 12:36:30 PM
DON'T EVER TRY THIS F*** SPYWARE NUKER!!! THIS IS SAME SHIT!
Re: Lop.com Spyware by Anonymous Ghost on November 25th, 2004 01:45:44 PM
Bien ! gracias a jorgeart32 pude sacar el odioso lop.com , con tansolo urgando en algunos registros..
Fantástico =P se agradece bastante.
Re: Lop.com Spyware by Anonymous Ghost on November 29th, 2004 11:31:29 PM
I once had the lop toolbar and thought I got rid of it months ago...now I am having a "Casino Toolbar" in memory and as a .ocx file in my windows/sys folder... No matter how much I delete it, it reinstalls... Are Lop and Casino related?
If so can I post my Hijack this log for help.
If not can I get an idea of where I can go for Casino Toolbar
I appreciate any help in advance.
Re: Lop.com Spyware by Anonymous Ghost on November 30th, 2004 02:46:07 PM
I have been infected with that LOP pest several times. This last time was the worst, as it just came once and again even after each reboot or whatever it felt right for it to invade my privacy. Their uninstaller is pure bullshit. I found that they somehow got a downloader called something like "A0009081.exe" into a Restore location placed in my [System Volume Information] folder:

C:\System Volume Information\_restore{C1692405-567E-4285-B9BE-CBBB0CCE76BB}\RP22\A0009081.exe

...from where obviously no one can access it.

I have erased whole folders full of their shit from different locations in [My Documents and Settings] and [Program Files] folders:

C:\Program Files\C2Media\Setup.exe

and a whole load of crap placed at:

C:\Documents and Settings\[username]\Application Data\Scr 16 Date

For now its ok... I hope the damn downloader does not get this nasty nuisance again or I guess I'll have to clean format my disk after trying to access the System Volume Information folder by booting from a rescue boot disk or something. This guys are really nasty, I hope they shove their LOP crap up theirs!
Re: Lop.com Spyware by Anonymous Ghost on December 02nd, 2004 09:17:05 AM
Try everything!:
AdAware - download SE 1.05 - use this.
Any other like SpyBot S&D
Install SpywareBlaster 3.2 (from Javacool; this wil help prevent a lot of spyware from getting on your PC in the first place).
Run HiJack This - and remove suspect entry. see link for info on HJT:
http://www.spywareinfo.com/~merijn/htlogtutorial.html

Try using a different browser - FireFox 1.0 is much safer than IE.

BTW - if anyone wants to know, lop.com are part of C2 Media UK Ltd, Media Park, 40b, River Rd, Barking, Essex IG11 0DW Tel: 020 8594 3867
Re: Lop.com Spyware by Anonymous Ghost on December 02nd, 2004 09:30:18 AM
Sorry - forgot one thing in above post.

If you get persistant malware that does not seem to want to go - I have found through experience that switching off system restore works - Turn off System Restore, run your spyware removal tool,
Reboot.
Re: Lop.com Spyware by Anonymous Ghost on December 02nd, 2004 09:34:06 AM
Sorry - forgot one thing in above post.

If you get persistant malware that does not seem to want to go - I have found through experience that switching off system restore works - Turn off System Restore, run your spyware removal tool,
Reboot. Switch System Restore on after rebooting.
Re: Lop.com Spyware by Anonymous Ghost on December 03rd, 2004 12:08:09 PM
I'm not sure if this has been mentioned yet, but the first thing is to make sure that you do not have messenger plus downloaded onto your computer. Took me a couple hundred bucks to pay tech to save my crashed computer because it's loaded with lop spyware. After deleting msplus, try the two freebies, adaware and spybot. I used about a half dozen other spyware removers but these two seem to have done the trick. Messengerplus sucks the big one. They say you can "opt out" of their trojan virus spyware but who the hell would want to "opt in" to this money driven spyware which is rated as the absolute worst on the internet today. Delete messenger plus because if you don't, prepare for endless computer problems with lop!
Re: Lop.com Spyware by Anonymous Ghost on December 08th, 2004 04:50:29 AM
Hello all. What i'm about to tell you might benefits some of you guys. Lop.com just forced me to clean Install my computer. Lucky for me that I have external and several others Hard drive wich do not interfere in my system (if you have HD with more than 20 gig do not hesitate to split it and use one part only for system processing). However, know that spyware, malware and adware such as Lop.com are generally not attacking you personal files. They will mostly attack everything that allow them to control through Active X console. If you have a lot of game, even the ones that you bought, you are simply exposing yourself to malwares since they do have some Alexa Keys that set the doors wide open too shity ass malware such as lop.com. For all of you who own a firewall, and I mean a real one, not the one provided with Windows, should you all clean install your system and before reinstalling anything, even before accessing the net install right away your Firewall and block access to lop.com by entering its webrange IPs 66.220.17.0 - 66.220.17.255, not over install right away a spyware such as spysweeper (it is a good one) or giantspyblocker since those to are monitoring your system and they really do). Next, should you also install your antivirus, your track eliminator, I use window washer 5 that clean at startup and shut down any traces. It is not only for porn material. Cookies are full of spyware too.Than when you'll install your application you can than control what is coming in and going out of your system.I am a tech and a programmer and I've got infected so, prevent before healing. That my tech advice.
Re: Lop.com Spyware by Anonymous Ghost on December 09th, 2004 02:55:44 PM
I would like to Blow the M$%#@^ F&*()&^% out of the internet. This is the most disgusting organization I have ever dealt with. How can we come together and take action(s) against this fraudulent company. Evetytime I see the toolbar I go Nuts. This is the worst form of terrorism!!! Yes Terrorism!!!!!
Re: Lop.com Spyware by Anonymous Ghost on December 09th, 2004 05:21:06 PM
I am not sure how come after dealing with the god damn lop toolbar the whole week I haven't smashed my laptop on my cat! Next thing I am planning to fing any "search the web" people, where ever they are, and trigger a ***** bazooka right on their teeth..
Re: Lop.com Spyware by Anonymous Ghost on December 10th, 2004 05:42:50 PM
the aderss of the lop bar that the bar is routed to in my computer is http://searchweb2.com/passthrough/newpass2.html
how can i remove the lop bar
Re: Lop.com Spyware by Anonymous Ghost on December 11th, 2004 09:57:19 AM
Go to www.lop.com, click on help and take a look through the FAQ. One entry there will direct you to either run or DL a uninstaller. I chose run and it seems to have worked.

No Toolbar, no extra IEXPLORER.EXE processes running..

*shrugs*
Re: Lop.com Spyware by Anonymous Ghost on December 13th, 2004 11:12:03 AM
I used the Lop.com uninstaller yesterday it removed it all and i was so happy, turned my pc on today and its all back!!
Re: Lop.com Spyware by Anonymous Ghost on December 14th, 2004 03:15:47 PM
Messanger Plus is where this tool bar comes from, and Plus has nothing at all to do with Microsoft. Its a third party add-on
Re: Lop.com Spyware by Anonymous Ghost on December 16th, 2004 01:35:05 AM
DEFINITIVE SOLUTION!

It is definitely a program that comes with messanger plus.

You can uninstall m. plus; then reinstall it.

When it asks you to install the sponsor software SAY NOOOOOOOO!!!!!!!

most people flick past that part because it looks like its asking you if you agree to the terms and conditions.

Definitely part of msn messanger plus; definitely removable IF you remove mger plus!!!!! good luck all hope this helps :)
Re: Lop.com Spyware by Anonymous Ghost on December 16th, 2004 07:51:34 PM
i hate lop! like what the hell is wrong with them... and i've got a new variant... at least that's what it says on a web guide. i have a search bar at the bottom of my ie page. urgh. anyone knows how to get this *toot*ing thing off??!?!
Re: Lop.com Spyware by Anonymous Ghost on December 17th, 2004 12:07:35 AM
erm yes. Uninstall messanger plus.

run adaware if not rid.

then reinstall messanger plus if needed; making sure not to install the sponsor software. The web guide search bar is part of it and its all to do with messanger plus.
Re: Lop.com Spyware by Anonymous Ghost on December 17th, 2004 06:57:28 PM
What do you mean "Reinstall messenger plus if needed". If these B*st**ds hadnt got into bed withC2Media then we wouldnt have the problem in the first place. I hope evryone can do without Messenger plus, why give them the business.
And just in case anyone missed it above... lop.com are part of C2 Media UK Ltd, Media Park, 40b, River Rd, Barking, Essex IG11 0DW Tel: 020 8594 3867. (Go on... give em a call, you know you want to).
Re: Lop.com Spyware by Anonymous Ghost on December 28th, 2004 07:00:48 PM
in program files there is sometimes a c2media folder that is bad because lop also has c2media.com and and another .com with c2 and media in it just not in the same order they have mroe than that thats just all i know my friend knows more email me at idioos@gmail.com with anti-lop stuff im going to try and make a faq to help people get rid of lop
Re: Lop.com Spyware by Anonymous Ghost on December 30th, 2004 10:59:59 AM
this is my log could someone e-mail me what to delete shycho(@)gmail.com remove the (). Thanks

Logfile of HijackThis v1.99.0
Scan saved at 4:57:33 PM, on 12/30/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\Program Files\Alias\Maya6.0\docs\Wrapper.exe
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\system32\E_S00RP2.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Alias\Maya6.0\docs\jre\bin\java.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H2.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
C:\Program Files\Rainlendar\Rainlendar.exe
C:\Program Files\Mozilla Firefox\firefox.exe
c:\progra~1\intern~1\iexplore.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\notepad.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Shane\Local Settings\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.uihrhhdaayrrtjxafyu.info/_8yft64WxIBPbg6V0Wjf9G9hG_5hN2h6cjNjKbZ8hnGwXlTFeiPZJUsRjJjSf97w.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.stnjmdsuwnzaliwzhu.com/_8yft64WxIAa77UVYDcb2xIMsl7RM0i3_iXt9ryyduw.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.broadband.blueyonder.co.uk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by blueyonder
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {E0A5E6E3-FA07-0A75-EA96-2E5447B83C2B} - C:\DOCUME~1\Shane\APPLIC~1\BOOBSC~1\Once Delete.exe
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H2.EXE /P30 "EPSON Stylus Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=010205 serial=DR12WRS-8796594-FHE lang=EN
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [updmgr] C:\Program Files\Common files\updmgr\updmgr.exe
O4 - HKLM\..\Run: [Readme the cdrom window] C:\Documents and Settings\All Users\Application Data\JUMPSTYLEREADMETHE\Grid the.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Closemultiwipeone] C:\Documents and Settings\All Users\Application Data\Bind Balm Close Multi\Shim Open.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [hold less] C:\DOCUME~1\Shane\APPLIC~1\exitbore\plan view.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - Startup: Rainlendar.exe
O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab30149.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O23 - Service: Alias Documentation Server - Unknown - C:\Program Files\Alias\Maya6.0\docs\Wrapper.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Proxy Service - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPxySvc.exe
O23 - Service: EPSON V3 Service2(02) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP2.EXE
O23 - Service: Macromedia Licensing Service - Unknown - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Internet Security Accounts Manager - Symantec Corporation - C:\Program Files\Norton Internet Security\NISUM.EXE
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: StyleXPService - Unknown - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
Re: Lop.com Spyware by Anonymous Ghost on December 31st, 2004 08:17:19 PM
i hate this lop crap, i've had it for a few days and it's a f**kin pain in the butt, is there anyway to get rid of this?
Re: Lop.com Spyware by Anonymous Ghost on January 03rd, 2005 10:11:40 PM
As anyone invested the time to track down contact information for advertisers using lop.com? I'd love to direct a mail saturation compaign to their clients like Dell & HP asking how they can align themselves with a bottom feeder like lop.com. And while the momentum is hot...a home reference page of ihatelop.com would make a catchy call to arms.
- Bruce
Re: Lop.com Spyware by Anonymous Ghost on January 06th, 2005 10:48:28 AM
I have found a temporary cure if you use internet explorerer and have it running press CTRL+ALT+DEL then go to processes then there should be 2 internet explorers delete one and it should disappear (I think its the smallest one)
Re: Lop.com Spyware by Anonymous Ghost on January 07th, 2005 02:00:21 AM
Here's how I've gotten rid of it:
Uninstall MSN+!, then SB-S&D the computer, ADaware the computer (in other words...run scans with them both), then use HJT to kill anything that is suspicous (or if you are paranoid like me...anything that isn't neccessary). After you do this, go to Programs and delete the folders C2Media. Then goto "C:\Documents and Settings\All Users\Application Data" and delete a folder with a really weird name starting with "b" and no capitols or numbers (if it exists...if it doesn't, then woops on my part). All while having System Restore off.

Mind you...you may need an expert to do this because when killing processes and deleting suspicious files, you need to know the right file to delete.
Re: Lop.com Spyware by Anonymous Ghost on January 08th, 2005 02:30:31 AM
I've had lop.com for about 6 months and tried everything to get it off. I used ad adware, spybot and I even bought spy sweeper which didn't get rid of it. I downloaded the uninstall bar off lop.com which only gets rid of it for about 2 minutes! I think I've got rid of it (prays) by deleting any files (not folders) in the application data folder in my C drive. I also uninstalled msn plus. I hope this helps other people that have been driven insane by these f*ckers. *eye twitches*
Re: Lop.com Spyware by Anonymous Ghost on January 09th, 2005 11:36:20 AM
Is Window Active also a part of Lop?? I find it in my 'Add / Remove Programs' list.
Re: Lop.com Spyware by Anonymous Ghost on January 12th, 2005 07:35:54 PM
The easiest way to remove any toolbar at all is to download BHOdeamon 2.0

It shows all BHO's (browser helper objects) installed and lets you choose which to remove i.e. any stoopid toolbars
Re: Lop.com Spyware by Anonymous Ghost on January 16th, 2005 11:12:02 AM
Rite i no i havent installed msn+'s sponsor ive dot spybot s and d i uninstalled spy sweeper cuz it jus lost all effectiveness after it got rid of a rather dodgy plugin (porn dialler) an ad aware helps a lil. I have a firewall an mi security settings are high with lop.com dissalowed but i still get 2 toolbars grey 1 an blue big 1 an a loda crap in mi favorites. I HATE THEESE LOP.COM @$$H()LES. everybody spam them jus send them emails of crap
Re: Lop.com Spyware by Anonymous Ghost on January 23rd, 2005 02:29:28 PM
Thats funny I NEVER HAVE THESE PROBS
Re: Lop.com Spyware by Anonymous Ghost on January 23rd, 2005 02:35:53 PM
U have to turn off some Shyt in admin tools and run adwar b4 ur opperating sytem even hits the Inet and stop going to the porn sites where all this shyt is waiting for ya and most of this shyt is from msn how do u think u get those adver
Re: Lop.com Spyware by Anonymous Ghost on January 23rd, 2005 09:40:44 PM
I heeded all the advices above. But sadly nth worked.
Re: Lop.com Spyware by Anonymous Ghost on January 24th, 2005 03:42:23 AM
It is increadible how many persons have problem with Lop. Together we are able to do something against those idots. Unfortunately i am living in Holland, so I would be glad to meet some people from the UK, to help me to do something against LOP. Why do people do this to our computers? Why? Just for marketing purpose? If I want a toolbar, i will installed it myself. I am not using IE anymore but I use Avant Browser. but everytime i look at my running processes i see that iexplore is still running. Can't get ride of it. I will try to erase manually.
But again, are there people in the UK which are interested to do something againt lop?
This is the adres of the company hidding behind LOP:

C2 Media Ltd.
Unit 12, 571 Finchley Road
Hampstead, London, NW3 7BN
United Kingdom

I hope to hear from some people.

Gr. lugo
lugolux@hotmail.com
Re: Lop.com Spyware by Anonymous Ghost on January 26th, 2005 01:00:02 AM
I just managed to remove the toolbar and everything related to it. =)
Firstly I scanned my computer with ad-aware and spybot and microsoft antispyware and spysweeper version 3.5. After that, I rebooted my computer and then did all the scanning in safe mode. Then, I restarted my comp again in normal mode and then scanned it with a lopremoval program that a friend sent to me which is really good. http://www.able2know.com/go/?a2kjump=http://www.thespykiller.co.uk/files/lopremover.exe
Hope it helps. =)
Re: Lop.com Spyware by Anonymous Ghost on January 26th, 2005 01:03:06 AM
sry, this is to add on the the above msg. I rebooted my comp again after i finished the scanning with the lopremover program and something went wrong with my taskbar and my friend sent me a taskbar repair tool to rectify the problem. At the same time, I installed the norton personal firewall and I've been free from everything that has to do with the toolbar and all other spyware for 3days. =)
Re: Lop.com Spyware by Anonymous Ghost on February 14th, 2005 04:13:55 AM
I think i no where lop.com is on my computer!
C:\windows\temp
It keeps changing its name tho
I have ad-aware and lop apears on it but it cannot delete it. It just stays on deleting. It says where it is and guess what, its the same name as the thingy in C:\windows\temp. Ive tryed deleting it but it says the application is in use by windows. Ive managed to delete it by pressing ctrl alt and delete and selecting iexplore. It says the program isnt responding. in that few seconds where its off your computer delete the file.
I figured all this out and im only 13!!
Re: Lop.com Spyware by Anonymous Ghost on February 14th, 2005 04:23:48 AM
This is my logfile by the way.
Sorry i didnt put it in my previous post
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\3CMLNKW.EXE
C:\PROGRAM FILES\MESSENGER PLUS! 3\MSGPLUS.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\KEYBOARD\SPEEDKEY.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\MSN APPS\UPDATER\01.02.3000.1001\EN-GB\MSNAPPAU.EXE
C:\PROGRAM FILES\WEBSURF POPUP KILLER\POPUPKILLER.EXE
C:\PROGRAM FILES\ATI MULTIMEDIA\MAIN\LAUNCHPD.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\BHODEMON 2\BHODEMON.EXE
C:\PROGRAM FILES\BELKIN\BELKIN WIRELESS USB ADAPTER MANAGER\WLANMONITOR.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\TEMP\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.gsljurdapjtqj.com/40O40eZWp6PftMJ1KHx_zmytrlNIXsv6aulEnWSpb1hY9zwWGqAtc480haA_FfeU.jpg
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R3 - Default URLSearchHook is missing
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [ATIGART] c:\ati\gart\atigart.exe
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
O4 - HKLM\..\Run: [Microsoft IntelliType Pro] "C:\Program Files\Microsoft Hardware\Keyboard\speedkey.exe"
O4 - HKLM\..\Run: [CPROGRAMFILE0] C:\PROGRAM FILES\VIAVOICE\BIN\prtStart.exe 22 03 3 09 2000 "C:\PROGRAM FILES\VIAVOICE\BIN\PRT0771432.exe" /splashDelay=3
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [msnappau] "c:\program files\MSN Apps\Updater\01.02.3000.1001\en-gb\msnappau.exe"
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Games toolbar] rundll32.exe "C:\PROGRA~1\GAMES\tbGame.dll" DllShowTB
O4 - HKLM\..\Run: [Internet about draw keep] C:\WINDOWS\Profiles\Jordan\Application Data\blah funk internet about\tons camp.exe
O4 - HKLM\..\Run: [Error Nuker] C:\Program Files\Error Nuker\bin\ErrorNuker.exe autostart
O4 - HKLM\..\Run: [sureshotpopupkiller] "C:\PROGRAM FILES\WEBSURF POPUP KILLER\POPUPKILLER.EXE" -minimized
O4 - HKLM\..\RunServices: [3Cmlink] c:\windows\SYSTEM\3cmlnkW.exe
O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\SYSTEM\mstask.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\PROGRAM FILES\ATI MULTIMEDIA\MAIN\LAUNCHPD.EXE"
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [iso jump] C:\WINDOWS\PROFILES\JORDAN\APPLIC~1\BENDIT~1\Great Else.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [Spyware Vanisher] C:\SPYWAREVANISHER-FREE\FREESCANNER.EXE -FastScan
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - Startup: BHODemon 2.0.lnk = C:\Program Files\BHODemon 2\BHODemon.exe
O4 - Startup: USB Manager.lnk = C:\Program Files\Belkin\Belkin Wireless USB Adapter Manager\WlanMonitor.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxuk01947GB
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O15 - Trusted IP range: (HKLM)
O16 - DPF: {4063B398-3FC7-433E-B23B-0460CE7EDC27} (MaxisMakinMagicTeleX Control) - http://thesims.ea.com/teleport/makinmagic/MaxisMakinMagicTeleX.cab
O16 - DPF: {2DAE59A1-B355-4653-8D33-33A3A8F8C078} (MaxisVacationTeleX Control) - http://thesims.ea.com/teleport/vacation/MaxisVacationTeleX.cab
O16 - DPF: {8629CFEB-C31A-4429-9BB0-8765A8A24FDA} (MaxisUnleashedLotTeleX Control) - http://thesims.ea.com/teleport/unleashed/LOT/MaxisUnleashedLotTeleX.cab
O16 - DPF: {A44B714B-EE0F-453E-9300-A69B321FEF6C} (MaxisSimsFamilyTeleX Control) - http://thesims.ea.com/teleport/families/MaxisSimsFamilyTeleX.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {91433D86-9F27-402C-B5E3-DEBDD122C339} - http://www.netvenda.com/sites/gampr-gb/gbp/games4.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by14fd.bay14.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=34738&clcid=0x409
Re: Lop.com Spyware by Anonymous Ghost on February 17th, 2005 10:44:10 AM
I have the toolbar that sits at the bottom of my internet explorer,i know its part of the messenger plus sponsors.i deleted messenger plus yet the toolbar still exists,i found out from adaware-SE that the exe file responsible for the said toolbar resides in the TEMP folder.this exe file i can be deleted by adaware-SE yet everytime i reboot the exe file mutates itself therefor making the toolbar reappear & attach itself yet again to IE.i have tried closing the toolbar by closing the red X but the damn thing wont go away!!! can anybody PLEASE help!!!???
Re: Lop.com Spyware by Anonymous Ghost on April 18th, 2005 10:38:36 AM
Look for Search relavancy in remove/uninstall via the control pannel programs, this got rid of lop com, also, when uninstalling it was pleasing to see it wanted me not remove Lop.Com because it was offering me a free service....All curses and the pox on your company and your people.. eat s**t and die
love you all happy surffing
Re: Lop.com Spyware by Anonymous Ghost on June 17th, 2005 11:13:44 AM
Please help? I need to get rid of this parasite because it's throwing up porn pop-ups which I can't stop in front of my 10 year old daughter. Tried spyware removers, uninstalled msn+ but nothing working!!
Re: Lop.com Spyware by Anonymous Ghost on June 22nd, 2005 05:59:30 AM
Well, not only have I uninstalled messenger plus, I have used ad-aware, spybot S&D, norton anti-virus, tried deleting infected registry keys....blah blah blah blah blah...and I am STILL infected with this *beep* lop toolbar and all the stuff that comes with it. I have resorted to using mozilla firefox for the moment so that I don't have to open IE and be stuck with that flippin toolbar on my desktop until I shut down the pc.
I really don't know what to do, I think I have the variant that can't be uninstalled. This pc was brand-new in October of last year; within a month, bloody lop had infected it.
If anyone has anymore suggestion, couild you please email me at vanessa_fisci@hotmail.co.uk because I am not a member of this site.
Thanks
Re: Lop.com Spyware by Anonymous Ghost on July 02nd, 2005 05:36:07 AM
I managed to get rid of it for a while with a pop up blocker called 'super pop up blocker V4.4' If you type www.lop.com into the blacklist it will cut it off. Once its blacklisted if you right click 'translate into english' on the bar it disappears. However, I the blocker deactivates after a couple of months and you have to pay. It doesnt seem the most authentic blocker but it worked while i had it.
Re: Lop.com Spyware by Anonymous Ghost on July 17th, 2005 11:03:04 AM
I FINALLY GOT RID OF THIS !
i am so happy to say that i finally god rid of the lop passthrough thingo (the blue thing that pops up wen u open ie)
and koz im soo happy i got rid of it ima tell u ppl how i did it =D
i just simply deleted the file found in this directory:
C:\Documents and Settings\All Users\Application Data\Thunk64ModeGrid\sectstop.exe
just so you all know i am on windows xp, im not sure if it will work for you's but it sure wrkd for me =D
Anyways, lataz !
Nick..
www.NickzPlace.tk
Re: Lop.com Spyware by Anonymous Ghost on July 22nd, 2005 08:20:50 AM
Ahhhhhh
Thank you VERY MUCH, "Anonymous Ghost"
With yours messages I think that this damn LOP has been killed on my computer
Michel (France)
Re: Lop.com Spyware by Anonymous Ghost on August 11th, 2005 12:33:19 AM
Ya I have a question though. Is it illegal for lop to change my settings and add stuff to my computer without consent? I never downloaded messenger plus, and i never EVER accepted anything which would let lop activate on my computer.. I would so love to shut those bastards down.
Post a Note :
UserName (not required in anonymous posts)
Password (not required in anonymous posts)
Post Anonymous (check this only if you wish to post anonymously.)
Subject
Comment (limited HTML allowed)



List Home > Computer Viruses >   [ Post New Problem ]
Copyright © 2001-2008, Nibble Guru