Mis Piggy said her computer was running slow ...so I checked it and so far have removed about 130 trojans and viruses :eek: but I have now come across the dreaded LOP malware and for some reason I can't download the uninstaller ...XP just wont have it and AVG keeps telling me it's a trojan (which it isn't) so can some one with a bit more knowledge on these things tell me how to download it or can some one dowload it and send it to me as an attachment to an e-mail and I will try it that way( but if you are not sure don't risk it)

/Link removed...see below.

Thanks

Rob

:eek: What's she been doing on it? No offence, but do you not have AVG running in the background of all your PCs? Its a lifesaver and I've been burned once, so wouldn't not have AVG on any machine of mine.

That link is contaminated....do not click it.

It has the Swizzor.ck trojan embedded in it (as told by Nod32)

If anybody wishes to help please do so from advice either professionally gained or your own personal experince.

Personally I'd be putting a CD in the drive and starting over...but then I do that each month for fun.

I removed the link based on comments above, I have a habit of just clicking links, glad I have a big screen now.

Format c:

teh win.

It wasn't me

Get yourself some good free protection.

Avast home is a good free anti virus; download TDS3, its not free but you get a trial period and its one of the very best at anti trojan; Microsoft anitspyware, Spybot SnD and Adaware SE for spyware and such crap removal; and a good temp files cleaner to clear out your cache and temp stuff...invaluable. I use Tracks Eraser Pro, but a good free one is http://www.ccleaner.com/.

Hope this helps.

OK - I got to the same uninstaller via another route (VNUNET forum) and have in zipped in a mail message ready to send - would you like to PM your email address?

Scrap that - AVAST quarantined it in silent mode so the zip file is empty. Says that the uninstaller contains a Trojan.

:eek: What's she been doing on it? No offence, but do you not have AVG running in the background of all your PCs? Its a lifesaver and I've been burned once, so wouldn't not have AVG on any machine of mine.

ALL the pcs have AVG running all the time but this LOP thing was downloaded with messenger plus and AVG doesn't know it's there and won't even find it let alone delete it....also tried pest patrol and adaware...plus a few others I have never heard of so I may have to spend a couple of hours somewhen and go through the registry and all the files to delete it manually.

Comes up with Swissor trojan on my AVG but the bods at PC advisor have said that it's not a trojan.....:(

Oh and have now tried MS antispyware ....still no good

My Nods32 got rid, but you also have to clear the temp files as it (the trojan) is also put into your temp files so unless you wipe (temp files) the trojan remains to reappear.

Hope thats not too confusing

If it was downloaded with MSN plus, then it's probably my fault, blame me. And I've got it too.

*walks away looking sheepish*

If it was downloaded with MSN plus' date=' then it's probably my fault, blame me. And I've got it too.

*walks away looking sheepish*[/quote']

You may need this explanation then

this is from the PC advisor help forum

What browser are you using? It downloads fine in Firefox.

Just for "fun" I downloaded and ran the tool after my last post.I use AntiVir av and it pounced on the file.So I overrode my av and downloaded it.What you get is a box with numbers in it.You enter the numbers in to the remova tool and press the button to remove Lop.I don't have it on my computer so it told me Lop was not there.If that happens you can force a scan to look for any lop folder etc on your system.

Try this....Switch off AVG and try the download again.The reason it gets picked up is that when you ask for the download Lop puts a small downloader on your pc in order to transmit the program to you. Your avg av will detect this as the Lop installer or trojan.Once you get it enter the number and run it...this will remove Lop for you.Once done delete the downloaded program and switch avg back on.Run a scan which will no doubt find the deleted removal tool and the download agent.....remove both with avg and your pc should be free of lop completely.

I could be safe then, Firefox is ok, phew. Thankyou.

Hmmm I have MSN, but I seem to have got away with it.

Seems it's mainly a browser hijacker - have you tried hijackthis?

Edit: overtaken by events, it seems

Hmmm I have MSN' date=' but I seem to have got away with it.

Seems it's mainly a browser hijacker - have you tried hijackthis?

Edit: overtaken by events, it seems [/quote']

Hi Nick

Tried hijackthis but to be honest although it did detect everthing I wasn't sure what to remove....so as a lot of her work is on the PC I decided to leave that as a last resort.

Apparently you have the oppertunity to not install this software when the "plus" software goes on ...but it comes up so quickly you can get caught out

OK - if you want to take this offline, we can go through the results of hijackthis and I can probably tell you what to remove, if you like. No obligation. PM, email or phone - whichever you like.

OK - if you want to take this offline, we can go through the results of hijackthis and I can probably tell you what to remove, if you like. No obligation. PM, email or phone - whichever you like.

Hi Nick

I may well do that if that's OK but it will have to be Thursday or Friday night as a certain person has gone to bed (it's so quiet you could hear a pin drop at the moment) and the pc is under her cabin bed with all the scan results in it :(

I'll give you a shout tommorrow evening somewhen and see if it's OK

Thanks

Rob

Sure thang.

Hijack this you need to understand what you're doing or you'll end up killing your box.

LOP sux, plain and simple.

A lot of Messenger Plus and AOL IM, ICQ type add-ons and clients have spyware in them if you install the defaults - MSN+ doesn't imho add much of any use and is a massive security risk. Just stick with the MS-produced junk, at least you know if it has spyware in it it wont be sending much more than windowz already does

At the risk of sounding like a stuck record....

Why don't you just ditch Windows and use Linux? It's a lot more secure, it's free, and distributions like Ubuntu are fully featured, user-friendly, and ridiculously easy to install. If you want to try it out without actually installing it, you can download a free "live" CD image from their website; it boots and runs off the CD, without touching your hard disk at all.

Oh, did I mention that it's free?

Rob, found this link with some useful info: http://www.doxdesk.com/parasite/lop.html

IIRC, I was once LOPed and struggled immensly to remove it - the version I had was via a dll file. Of course, I couldn't delete the file as it was always in use. Instead of unregistering it, I booted into another OS installation on the hard drive and deleted it that way.

Off topic, but have you looked at Trillian? Maybe you could convince Lorna to swap over to that - would save me having to close trillian and load up msn each time your chatty daughter wants to talk to me :P

Off topic, but have you looked at Trillian? Maybe you could convince Lorna to swap over to that - would save me having to close trillian and load up msn each time your chatty daughter wants to talk to me :P

Lorna on dads account thingy (my computer is doing a virus scan a mo!!)

I deleted/uninstalled Triallian and yahoo messenger last night! got told i had too many messengers! But the search bar came from messenger plus which i got rid of ages ago!

I really can't see what the issue is here - Trillian is a multi-messenger client - why would you need to close it in order to use MSN? Just add your MSN details into Trillian ... :confused:

Nick, you can't be logged onto MSN network via Trillian and then connect using MSN messenger.

When the above is commanded upon me ( ), I just disconnect from the MSN network in Trillian (but stay connected on irc, yahoo, icq)

Seriously though, I rate it quite highly. It works with all of the major chat protocols and is spyware / adware free unlike MSN :P

Trillian still has severe bugs in it which annoy the hell out of me - I keep trying it in the hope it will finally work properly for MSN, but it just doesn't. Works fine for AIM.

As for the windows/linux more secure thing - there are ways to secure windows and there are linux distros that are not as secure, or do not get patched... Makes them wide-open too.. I don't buy into that.

I use linux as it's good for some things, and Windows as it's good for other things. The purchase cost of linux tends to be lower (or free) however, which is an advantage