Help with removing Lop.com & search 200.com

[Guest]

My son's computer has the spyware listed above. I have run both Spybot &
Adaware and but I cannot remove Lop & search 200. They seem to have taken
over his IE browser. How do I get rid of this?
Thanks,
Bob

 

[Guest]

My son's computer has the spyware listed above. I have run both Spybot &
Adaware and but I cannot remove Lop & search 200. They seem to have taken
over his IE browser. How do I get rid of this?
Thanks,
Bob

LOP
http://www.pestpatrol.com/zks/pestinfo/l/lop.asp

Try scanning while in safe mode
Also use CWShedder

Sometimes,when you remove malware it will stop your TCP/IP
stack from working (Internet connection).
Winsock or LSP-fix will correct the problem,Download first.
Note to anyone using NOD32 Anti-Virus software,Do Not delete the
"imon.dll" this fix reports,That is your e/mail scanning engine.

YES-You need more than 1 malware program,the one's below are all free
and work well.
LSP-fix- http://www.cexx.org/lspfix.htm
Spybot S&D - http://www.safer-networking.org/en/index.html
CWS Smart Killer- http://www.safer-networking.org/minifiles.html

About Buster- http://www.spychecker.com/program/aboutbuster.html
Ad-Aware SE - http://www.lavasoftusa.com/software/adaware/
CWShredder - http://www.majorgeeks.com/download4086.html
Hijack this - http://www.majorgeeks.com/download3155.html\
Hijackthis tutorial - http://forums.maddoktor2.com/index.php?showtopic=165
SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html
SpywareGuard - http://www.javacoolsoftware.com/spywareguard.html
WinPatrol - http://winpatrol.com
BHODemon - http://pcworld.com/downloads/file_download.asp?fid=23611&fileidx=1
Bazooka -http://www.kephyr.com/spywarescanner/index.html
asquared2 "Trojan Remover" - http://www.emsisoft.com/en/
Socklock- http://nsclean.com/socklock.html
A nice site -
http://groups.msn.com/TeMercInternetSecuritySite/malwarecountermeasures.msnw
NOD32Anti-Virus Free 30 day trial
http://nod32.com/download/trial.htm
Process Guard-
http://www.diamondcs.com.au/processguard/index.php?page=download
A link for free online virus and trojan scanners.
http://virusall.com/downscan.html

A listing of BHO's
http://www.spywaredata.com/bho.php?current_page=0

To see if that freeware program you are about to inststall
is infested with spyware check it out first at this link.
http://www.spychecker.com/


To help stop unauthorized downloads via your activex controls change your
default settings.
These settings are good for XP. The wording should be close for other systems
as well.
Go to control panel and open "internet options.
Click on the security tab then custom level.
make sure these settings are as follows.

Download signed active x controls>set to prompt
Download unsigned active x controls>set to disable
Initialize and script active x controls not marked as safe>set to disable
Run active x controls and pluggins>set to enable
Script active x controls marked safe for scripting>set to enable
Java permissions>set to high
Launching programs and files in a IFRAME" > Prompt
Installation of Desktop items"> Prompt
Navigate sub-frames across different domains>prompt

 

[Carey Frisch [MVP]]

Download Noadware to safely uninstall Mirar, Hotbar, I-lookup, Gator, Lop, Xupiter etc.
http://www.free-web-browsers.com/browser_extensions.shtml

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

-------------------------------------------------------------------------------

:

| My son's computer has the spyware listed above. I have run both Spybot &
| Adaware and but I cannot remove Lop & search 200. They seem to have taken
| over his IE browser. How do I get rid of this?
| Thanks,
| Bob

 

[Malke]

Download Noadware to safely uninstall Mirar, Hotbar, I-lookup, Gator,
Lop, Xupiter etc.
http://www.free-web-browsers.com/browser_extensions.shtml

Do *not* download Noadware. Ever. It is betrayalware. See information on
MVP Eric Howes' site about rogue anti-spyware tools here:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

To remove malware, run through these steps (links follow the steps):

1) Scan in Safe Mode with current version (not earlier than 2003)
antivirus using updated definitions.

2) Remove spyware with Spybot Search & Destroy and Ad-aware. These
programs are free, so use them both since they complement each other.
There is a new version of CWShredder from Intermute. I would not
install the other Intermute programs, however. Alternately, there are
CoolWebSearch malware removal steps at SilentRunners.

Be sure to update these programs before running, and it is a good idea
to do virus/spyware scans in Safe Mode. Make sure you are able to see
all hidden files and extensions (View tab in Folder Options).

HijackThis is an excellent tool to discover and disable hijackers, but
it requires expert skill. See below for HijackThis links. A combination
of HijackThis and About:Buster works well in removing the About:Blank
homepage hijacker. Again, this is an expert tool and novices should get
help with it.

3) If you are running Windows ME or XP, you should disable/enable System
Restore because malware will be in the Restore Points. With ME, you
must disable System Restore completely. With XP, you can delete all but
the most recent (presumably clean) System Restore point from the More
Options section of Disk Cleanup (Run>cleanmgr).

4) Make sure you've visited Windows Update and applied all security
patches. Do not install driver updates from Windows Update.

5) Run a firewall.

Links to help with malware:

Software/Methods:
http://www.safer-networking.org - Spybot Search & Destroy
http://www.lavasoftusa.com - Ad-aware
http://www.majorgeeks.com - good download site
http://www.intermute.com/spysubtract/cwshredder_download.html
http://www.silentrunners.org/sr_cwsremoval.html. - SilentRunners

HijackThis:
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
Eshelman
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://www.lavasoftsupport.com/index.php?showforum=44
http://www.wilderssecurity.com/
http://forums.tomcoyote.org/
http://www.spywareinfo.com/forums/

General:
http://www.doxdesk.com/parasite/
http://mvps.org/winhelp2002/unwanted.htm
http://forum.aumha.org/ - look under "Security" for various forums
http://www.pchell.com/
http://www.spywareguide.com/index.php
http://scumware.com/
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://www.spywarewarrior.com/rogue_anti-spyware.htm
http://rgharper.mvps.org/cleanit.htm

Malke

 

[Torgeir Bakken \(MVP\)]

Do *not* download Noadware. Ever. It is betrayalware. See information on
MVP Eric Howes' site about rogue anti-spyware tools here:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

Hi

It looks like Noadware has cleaned up it's act somewhat,
from http://www.spywarewarrior.com/rogue_anti-spyware.htm

<quote>
Over the past few months, NoAdware has taken aggressive steps to
reign in its affiliates (who were primarily responsible for the
unsavory advertising) and released a new version of NoAdware
(version 3.0) that addresses our concerns with false positves.
Given these changes we can no longer regard NoAdware as
"rogue/suspect" anti-spyware.
</quote>

 

[Malke]

Hi

It looks like Noadware has cleaned up it's act somewhat,
from http://www.spywarewarrior.com/rogue_anti-spyware.htm

<quote>
Over the past few months, NoAdware has taken aggressive steps to
reign in its affiliates (who were primarily responsible for the
unsavory advertising) and released a new version of NoAdware
(version 3.0) that addresses our concerns with false positves.
Given these changes we can no longer regard NoAdware as
"rogue/suspect" anti-spyware.
</quote>

Thanks, Torgeir. I personally still wouldn't use it, but I won't say it
is betrayalware any more.

Malke