Need Spyware help...

[Paris Hilton]

FFS, Why isn't there a law that causes C2Media (Lop.com) to be shut down for good? I'm so sick of this shit. I have Adaware, Spybot S&D and Microsoft AntiSpyware Beta, none of them show anything. I have had lop before, and have successfully destroyed it (I have reformatted since then), but this time, nothing works. Reformatting is really a last resort option, I want to try everything before I go down that path. Here are some shots of what this shit is doing to my machine. I have Hi-Jack This! logs if anyone wants them. It was that bloody smily central crap that you see anywhere that allowed lop onto this machine, and No, I wasn't the one who was stupid enough to press "Yes". I guess it's taught me a lesson, don't let people touch your stuff.











Also tried it in Safe Mode, same results :(

Anyone have any ideas?

[M14A-Mclaren]

Someone is going to tell you to format I bet.

[Laminge]

You installed MSN Plus didnt you?

[Feathers]

Try this forum. They may have some answers there already.
http://www.windowsbbs.com/forumdisplay.php?f=9

[FordFan86]

Originally Posted by Laminge

You installed MSN Plus didnt you?

bing bing bing whatta we have for her johhny? lol
i had the same thing selekta, i eventually removed it thru HKeys and reading a few forums that told me wher ei got it from, and how not to get it etc.

[V8 Ghia]

Have you tried running "msconfig", and unticking the program in startup? (Or "regedit" if it isn't in msconfig)

[Feathers]

Yeah I read once that MSN Pluswas bad, and I wouldn't have touched it. I did think it was odd that you said you installed it in the MSN thread.

[5speedeb]

sorry to go off track people but ne 1 know of a good spyware program that works

[Perana]

Originally Posted by M14A-Mclaren

Someone is going to tell you to format I bet.

Already suggested it :P... I CBF stuffing around with spyware so thats what i do if my normal programs dont get rid of it :P

Yeah it could be MSN Plus... try installing it without the sponsor software...

[Laminge]

Mate

Uninstall Plus

Re install it and tick the box where it says you dont support the 3rd party sponsors!

I had this issue too!

[LuvinmyEB]

Try Registry Mechanic it should get rid of the lingering spyware.

http://www.pctools.com/registry-mechanic/

[Paris Hilton]

I've been using MSN Plus for ages, without the sponsor program...please, i'm not that stupid :P

[outside]

what OS do you use ?
if XP you can use systerm restore to undo any changes that you have done

[Paris Hilton]

Originally Posted by outside

what OS do you use ?
if XP you can use systerm restore to undo any changes that you have done

every time i've used it in the past it's proven to not work, so I have it disabled so that if I get a virus it won't hide in the _RESTORE area and be skipped by AVG

[Paris Hilton]

Alright, a bit more..."investigation" ?




I think lop is randomly generating filenames?

[b2tf]

I had issues like this with a program called iSearch toolbar not long ago. Cant remember where i got it from (and no it wasnt porn) but it was the most painful and annoying experience of my computer-based life getting rid of the damn thing, it was EVERYWHERE and in everything. And the worst bit was once you thought you had killed it, it would come back. and back. and back.

I used the Microsoft AntiSpyware program to kill it, took me about 10 attempts but it worked in the end - just didnt come back. I also used registry editor and the search functions to find the locations of files related to it, and deleted them myself. It helped a lot because sometimes the programs say they delete it but they either can't or dont. If you do it yourself it's gone for good.

Another good tip is to get rid of any programs you're not sure of. Of course, check what they are before you get rid of them, but there are nonessential ones associated with Windows which most people never use (stuff like Fax software etc), and they clog things up.

[M14A-Mclaren]

I really easy to no install the plus sponsors, it actually quite good I reckon that he give you the option rather than just doing it automatically, you just have to read that pages before you click the next button instead of flying through it until you get to the install part.

[Paris Hilton]

Well it's all cleaned up now This is what I did:

Boot into safemode, run Microsoft Antispyware and Ad-Aware (Spybot S&D did sfa) then do the following. Lop names it files using random words in the the english language (My folder name was "Trans Bleh" and the other one is in the screenshots - take note of them) and it is just a matter of finding them. Mine were in C:/Documents and Settings/Julie/Application Data/ and C:/Documents and Settings/All Users/Application Data. Delete these folders, then search the registry for the random words (Trans Bleh) and delete all keys associated with them - and there, no more lop