Suspect file in temp folder

[Guest]

I have WINXP sp2 with IE6 and multiple users on my home PC.
My problem is that I try to shut down explorer which appears to close ok,
however if you look in task manager iexplore.exe is still running, if I use
task manager to stop the application it stops then restarts itself,
additionally In IE the favourites menus is not editable for some reason with
various favourites that I have had not added including a folder called "cool
links". I also have a toolbar across the bottom of the screen which looks
like a search/ad type thing which I can not close(this seems to go to
www.lop.com).
Additionally I have a file in C:\Documents and Settings\gregg\Local
Settings\Temp named ipfpnknu.exe that I can not delete (causes restart) which
is continually making a connection via IE to some web site (info via my
Nortton personal firewall software).
Does anyone have any idea how to get rid of these problems, I suspect it is
some kind of Adware etc but my Windows beta software adware, pestpatrol and
spywareguard will not detect the problem, neither will NAV.

 

[Ron Bogart]

In

I have WINXP sp2 with IE6 and multiple users on my home PC.
My problem is that I try to shut down explorer which appears to close
ok, however if you look in task manager iexplore.exe is still
running, if I use task manager to stop the application it stops then
restarts itself, additionally In IE the favourites menus is not
editable for some reason with various favourites that I have had not
added including a folder called "cool links". I also have a toolbar
across the bottom of the screen which looks like a search/ad type
thing which I can not close(this seems to go to www.lop.com).
Additionally I have a file in C:\Documents and Settings\gregg\Local
Settings\Temp named ipfpnknu.exe that I can not delete (causes
restart) which is continually making a connection via IE to some web
site (info via my Nortton personal firewall software).
Does anyone have any idea how to get rid of these problems, I suspect
it is some kind of Adware etc but my Windows beta software adware,
pestpatrol and spywareguard will not detect the problem, neither will
NAV.

Hi Gregg,
You can get removal instructions here:
http://www.spyany.com/program/article_spy_rm_Lop.html

--
Ron Bogart {} ô¿ô¬
Associate Expert
Expert Zone -
Lovin life on Mercer Island 8^)
"Life is what happens while we are making other plans."
http://www.microsoft.com/windowsxp/expertzone/meetexperts/nichol.mspx
In memory of a true friend, MVP Alex Nichol (1935-2005)

 

[Don Varnau]

Hi,
First possibility...
Has someone downloaded and installed Messenger Plus from
http://www.msgplus.net/ ? If so, you can uninstall Messenger Plus and
reinstall it (if desired) without the sponsor program. See
http://www.msgplus.net/help_faq.php for more information.

More on Messenger Plus at
http://inetexplorer.mvps.org/data/messenger_plus.htm

Additionally, Ad-aware and/or Spybot should be able to remove lop. See:
http://mvps.org/winhelp2002/unwanted.htm
Also note the security tips and other important information on that page.

If unsuccessful with those programs, start at
http://forum.aumha.org/viewtopic.php?t=4075 Then go to
http://www.aumha.org/a/quickfix.htm Work through the preliminary cleaning
steps and post a HijackThis log to the forum at
http://forum.aumha.org/viewforum.php?f=30

Additional information at:
The Parasite Fight http://www.aumha.org/a/quickfix.htm
More security tips at http://www.aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.htm
What you can do about spyware and other unwanted software:
http://www.microsoft.com/athome/security/spyware/spywarewhat.mspx

Removing lop sometimes damages Winsock and breaks the internet connection.
To fix that, log on as an administrator.
From Start> Run, type cmd, and then click OK.
At the command prompt, type the following, and then press ENTER:
netsh Winsock reset

Or try this winsock repair tool:
WinsockXP Fix- WinXP http://www.spychecker.com/program/winsockxpfix.html
Also, with instructions, at http://www.iup.edu/house/resnet/winfix.shtm

Hope this helps,
Don
[MS MVP- IE/OE]