AAAAAARRRRGH!!! DEATH TO IE!!!

[ya3]

Hai

I've had this problem for quite some time now. It's the so-called 'lop' virus/adware/worm/thing and is rather annoying.

Basically, two iexplore.exe processes are always running in the background, and as soon as I quit one, another one starts. I am forced to use IE for WindowsUpdate, and whenever I do, a big ugly toolbar appears at the bottom of my screen and on the IE toolbar, and shortcuts like 'Play Online Casino' appear on my desktop.

I've got ZoneAlarm blocking IE from accessing anything when I'm not using it, so it's ok most of the time. But it's still annoying. As I said, iexplore.exe is always running, and there's also some strange folders in Program Files named stuff like "Load Pile Burn" or "third online" or (my favorite) "stop glue" (???).

I've tried:
1) Ad Aware
2) Spy Sweeper
3) Spybot S&D
4) Renaming IEXPLORE.EXE (just gets changed back after a while)
5) Renaming "Internet Explorer" folder (no use)
...and a whole lot of other stuff. Still to no avail.

Oh, and I'd like to avoid formatting. I've got about 40gb of stuff I'd need to backup (yes. it's all important). And although I've done it before, I'd like to avoid it.

Any help would be appreciated :player:

[Coppertop]

Ah yeah, I fixed this problem before. But as luck would have it I can't remember. I'll see if I can get back to you on this.

EDIT: first thing I suggest is that you download AdAware SE http://www.download.com/3000-2144-10045910.html and run that if you haven't run that EXACT version already. It's the latest and catches everything.

EDIT2: I've found a program that was built around the idea of removing lop called SpyFerret: http://www.spyferret.com/download.php Don't know how good it is.

[teet]

If you have SP2 go to tools --> manage addons and disable anything suspicious.

http://www.spychecker.com/program/hijackthis.html

Also run "Hijack this" but be careful with this program...it isn't as "click-n-go" as adaware.

-teet

[B3NKobe]

I HATE Internet Explorer!!!!!!!!!!!!!!!!!!!!!!!!!

[GreenLantern]

**** IE.

Get firefox.

life biwill be beetrer.

[Butters]

You use IE? Seriously, why dont you just go and download a whole load of adware and stuff, as IE is pretty much an open door for all that crap.

Download Firefox, no popups, no ads, no ****, no problem!

[Fact]

i beat the internet and the end guy is hard

------if you have sp2------
Tools
Options
programs
manage Addons

Disable"Browser Helper Objects" with names such as 332433254
or Online Casino
or dodgy noticable stuff like that :) or if dont have sp2
and you have Adaware , try and find AdWatch for it(addon) if blocks any things from popping up at startup , and stop i.e from making any registry editing ( e.g.. changing homepage , editing to popup annoying popups)

Edit ----- How did you get it ?
did you visit LOP.com
or did you install MsgPlus! for msn , and install the sponser program?
just curios , since i got mine from msgplus!!!!!!!

[Ψ]

i kow how to get rid of those.. same thing happened to me.... tell me do you use msn messenger??

[Ψ]

and do u use messengerplus?

[hificopymaster]

If it's from MsgPlus, the easiest way is to uninstall MsgPlus and then reinstall it. But make sure, when you reinstall, to read everything, because there's a sponsor that gets installed if you check a box that a lot of people mistake for Terms of Service. :P So just make sure not to check that box the next time and your system should be fine.

[ya3]

wow. MessengerPlus, ay? That does kinda make sense... Thanks.
and NO!!!!!!!!!!!!!!!!!! I DO NOT USE INTERNET EXPLORER!!!!!!
If you read my first post, I'm using it only for WU, firefox for everything else! :P

Thanks for the help everyone.

[Ψ]

i tried soo hard to get rid of it like 3 days then i figured it out that it was messengerplus..
u shouldve noticed some strange icons on ur desktop too.. like webhosting, online gambline etc etc those were also from messengerplus

[philler]

Never had this problem. I did get some annoying spyware thing that was redirecting my browser to blasphemy.killercarrot.co.uk which was caused by some drawing add-on for Messenger Plus 3.