@!#$%#^&# LOP Toolbar...

[NathanBWF]

Anyone know any free apps that will get rid of this thing...? I've installed hijackthis but when I look at what it gives me I have no idea what I'm suppose to do...

 

[Shadax]

Google some keywords that it shows. There's always a fix that takes literally 10 seconds to use.

For ex: I had an adware that always said "about:blank" I googled that and found the "about:blank software removal.

 

[Shadax]

Posted by: Barb on March 4, 2003 06:54 PM

I got rid of that f**king thing. I downloaded TRACKS ERASER PRO and ran it. It worked. There is no evidence of any file related to lop.com on my computer any longer. It however deletes your cookies. ( however i'm willing to re enter all my passwords to get rid of this damn thing,. ). hope this helps.. let me know how you made out.

Sorry but I can't remember the URL of where i got the download. If you can't find it.. email me and I'll send it your way.

Barb

----------------------

From

http://www.drivingwithdawn.com...ser_and_computer.shtml


And some other crap about LOP (including removal) but you might have a more annoying variant:

http://www.spy-bot.net/lop.asp


I'm just feelin for ya. These programs are ridiculous.

 

[Schadenfroh]

this is all best done in safe mode with system restore disabled, system restore allows some of the malware to return.

look at your hijackthis log

is there an entry called something like..

C2MEDIA

or

O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
(thanks DetroitSportsFan for reminding me of that little app[/b])

if it is, get rid of it and uninstall it via add/remove program. Messanger plus bundles this app with it.


then download toolbarcop and find the toolbar and remove it.

also, see my guide to malware removal, go through the removal steps, if it still fails, please post your log from HJT.

if you are unsure of what to remove in either the toolbarcop or the hijackthis log, let me know, post the logs in the official antispyware thread for faster review.


know your enemy

 

[DetroitSportsFan]

Just be aware that the newest LOP varient uses activeX controls to automatically replicate itself every time its deleted. It also spawns randomed generated file names, making it even tougher to trace. Its very tough to get rid of, and usually requires the help of someone that has considerable knowledge to remove it. As far as spyware removal is concerned, I'm not too bad at it .... but I'm not a pro. However, I have friends on another board to confer with that are considered security experts. If you want, we can give it a shot. Keep in mind that it could very easily be a multistep process and not a "one click fix." I'll need your HijackThis log to begin.


EDIT: Schadenfroh is on the right track with his suggestion. However, there is more to remove than just that one entry. Also, messenger plus isn't the only software bundling LOP.com with it. Give us your HJT log and Schadenfroh and I and a few of the others here (along with our resources) will help get you fixed.