C2Lop and Omega browser hi jacker

[Paul Johnson]

Hi, I'm new to this forum.

Whenever I run a scan with AntiSpyware Beta it always
identifies C2Lop, but removes it ok. Now I found Ohmega
browser hi jacker, which it says is a relation to C2Lop.
Does anyone know how I can get rid of these permanently
or block them ?
Also, although I have my Explorer set to block all pop
ups, I still get some, mostly game pop ups.

Thanks

Paul

 

[Andre Da Costa]

Send a suspected spyware report from the tools menu. Run a scan with these:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://www.intermute.com/products/cwshredder.html
Spy Sweeper - www.webroot.com

 

[AndyManchesta]

Hi Paul


Lop.com (Live Online Portal) is owned by C2Media,Lop is
distributed by sites such as MP3Search.com,

Lops very difficult to detect and remove due to random
filenames and so many different variants,you may need to
use programs like Microworlds Escan or Hijack this to
find the entries for this then you can manually remove
them.

Omegasearch like you say is affiliated to
lop.com .Omega's entries will be obvious in hijack this
so maybe use that if the scanners below dont clear it up.




Here's some info from Lop's site :

----------------------------------------------------------
----------------------------------------------------------


How do I uninstall one of your software products?


There are several methods available to you should you
wish to uninstall any of our software products you had
previously chosen to install:

- You can go to your Start Menu--Control Panel, then
choose the 'Add / Remove Programs' option. Depending on
which version of the software you have installed
locate 'Lop.com' or 'LOP SEARCH' or 'Window Searching'
or ''Window Active' or "Browser Enhancer" or "Ultimate
Browser Enhancer" or "Search Plugin" from the menu to run
the uninstaller.

- Depending on your version You may also be able to
locate a globe type icon in the bottom right hand corner
of your screen (near the clock), right click on it then
click Menu. From the main menu you will see a help button
on the top right hand corner. Click the help button then
choose 'uninstall'.

- Additionally a separate universal uninstall program may
be downloaded here

http://l(Modified)new_uninstall.exe (DO NOT USE
THIS !!!!)

----------------------------------------------------------
----------------------------------------------------------


I downloaded the uninstaller to test it before posting it
but its infected with a trojan downloader so this is just
going to add to the problems,it may remove lop but will
download a trojan that will try to download more crap,
and with it being infected i dont think its worth the
hassle.

Here's the results of the unistaller after being scanned
at Jordi's site (http://virusscan.jotti.org/)



AntiVir Found TR/Dldr.Swizzor.CK
Avast Found Win32:Trojan-gen. {Other}
AVG Antivirus Found Downloader.Swizzor.4.C
BitDefender Found Trojan.Downloader.Swizzor.CK
ClamAV Found Trojan.Downloader.Swizzor-17
Dr.Web Found Trojan.Swizzor
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-
Downloader.Win32.Swizzor.ck
mks_vir Found Trojan.Downloader.Swizzor.Ck
NOD32 Found Win32/TrojanDownloader.Swizzor.CK
Norman Virus Control Found W32/Swizzor.BO
VBA32 Found Trojan-Downloader.Win32.Swizzor.ck




First steps are Try these other Adware removers



Spybot Search & Destroy

http://ejrs.com/spybot/spybot.exe



Adaware SE

http://www.download.com/3000-2144-10045910.html?
part=69274&subj=dlpage&tag=button


Also download Ccleaner and use on all three settings to
clear any temp or unused files

Ccleaner

http://download.ccleaner.com/download119bin.asp



Run a Online Virus Scan at any of these sites:


Trend Micro http://housecall.antivirus.com/


Panda http://www.pandasoftware.com/activescan/

Bitdefender
http://www.bitdefender.com/scan/Msie/index.php



If the problems are still there after using these
download Microworlds Escan & Hijack This and post the
results.


Download Microworlds Escan :

ftp://ftp.microworldsystems.com/download/tools/mwav.exe


There's nothing to install, Save to your desktop

Double click to run eScan's Mwav scan
It will self extract

Select all local drives & make sure you scan all files,
press 'SCAN' and when it is completed, anything found
will be displayed in the lower pane.


This may take awhile, let it finish

In the Virus Log Information Pane

Left click and Highlight all the info in the Lower pane---
Use "CTRL and the C" keys on your Keyboard to copy all
found in the lower pane and Paste it back here


****If prompted that a Virus was found and you need to
purchase the product to remove the malware, just close
out the prompt and let it continue scanning*****



Download Hijack This

http://www.spywareinfo.com/~merijn/files/hijackthis.zip


Unpack it to its own folder(either c/drive or desktop)Run
Hijack this and choose scan & save logfile

when hijack this finishes scanning it will open the
results page in notepad.Copy all the text and paste it
here




Here's abit more info on lop and the swizzer trojan they
provide



http://securityresponse.symantec.com/avcenter/venc/data/ad
ware.lop.html

http://securityresponse.symantec.com/avcenter/venc/data/do
wnload.adware.lop.html

http://www.doxdesk.com/parasite/lop.html




Regards Andy

 

[Guest]

I may be wrong about the unistaller,F


About the unistaller (Adware.Lop used to be referred to
as Trojan.swizz)



This trojan discovered by Norton is in fact LOP a well
known spyware, advertising spawning parasite.

The way to normally remove it is by running a combination
of Adaware & spybot. One or the other will normally
remove it


If it is not removed by adaware or spybot then please
post a hijackthis log so one of the techs here can advise
you what to manually remove

 

[Guest]

I may be wrong about the unistaller,F


About the unistaller (Adware.Lop used to be referred to
as Trojan.swizz)



This trojan discovered by Norton is in fact LOP a well
known spyware, advertising spawning parasite.

The way to normally remove it is by running a combination
of Adaware & spybot. One or the other will normally
remove it


If it is not removed by adaware or spybot then please
post a hijackthis log so one of the techs here can advise
you what to manually remove

 

[AndyManc]

Sorry i sent the last one by mistake ,I meant to say i
may be wrong about the unistaller,To enable it to remove
Lop it must have the adware patterns in the unistaller
and maybe this is what is being detected by the online
scanners.

Trojan Swizzer is Adware.Lop but just referred to as a
trojan so maybe the unistaller on lop's site isnt as
malicious as i said originally,id still be cautious of
using it but if you have the lop parasite it's another
option

I think Adaware,Spybot & Online Scanners would be my
first try and only use the unistaller as a last resort in
case it drops something else which is malicious into your
system.


Andy

 

[Guest]

Thanks for your help on this. I'll certainly try this.

Thanks

Paul