[Fury]

OK, case is this:
My friend visited me few days ago, he wanted to download something from internet. He used my computer because he doesn't have internet connection, of course I was stupid enough to approve the use of my PC...

I don't know what he downloaded, or what sites he visited... but now I have this.. "program" on my hard drive that wants to visit www.lop.com frequently. When I booted my PC, I saw that my desktop was changed, displaying some sort of www.lop.com search engine, I've gotten rid of it since, or so I think.

But still, it directs my browser to www.lop.com pages by force frequently, not always but sometimes. I have searched all my files and system registry for www.lop.com references, deleted them if there was any and booted. Didn't help...

Can you please help me to got rid of this? I just formatted my system few weeks ago, and not very interested to do it again...

Help...

Edit: I have also searched my Add/Remove programs if there is any new stuff installed, found nothing suspicious. Also tried Ad-Aware spyware remover with newest reference list... found nothing. It must be a program that starts with windows, looked at starup folder and system registry for suspicious files and nothing...

Edit2: I will kill my friend for this...

[an0n]

Ask him what he downloaded. If he doesn't know or won't tell you, kick the **** out of him.

I take it that you've changed your homepage to something non-lop? Try doing ctrl-alt-del and seeing if anything suspicious is running. Then goto http://www.mcafee.com and look through the virus lists for yer symptoms.

[Fury]

Thanks for reply... I will ask that in tomorrow.
I searched f-secure and mcafee sites for "lop" and found nothing that is like this, so it's not virus... only spyware/pain in the ass.

Also, there's nothing suspicious in running processes...

[Darkage]

Thats why i never let anybody els besides my on my PC....my parents aren't even allowed to touch it. So if something go's wrong i am the one to blame.

[KillMeNow]

got to www.lop.com and threaten to sue them unless theyt ell you how to get rid of it all

[Fury]

I finally made on extensive search on my hard drive, took some time but I found this: C:\Documents and Settings\User\Application Data\lopsearch.exe

No references to this file in system registry and in any other files I found... strange, there must be something else left... one file without something that runs it can't do anything.

[Fury]

Originally posted by KillMeNow
got to www.lop.com and threaten to sue them unless theyt ell you how to get rid of it all

Perhaps I will wait a little bit longer, that site is now in restricted sites list in my browser and firewall...

[Stunaep]

Try using Lavasoft Ad-Aware. Its a program that locates registry entries for certain annoying programs (spyware), such as my comet cursor, and eliminates them. I recently had a problem, and ran the Ad-Aware. It found 32 entries.
www.lavasoft.de

[Fury]

Originally posted by Stunaep
Try using Lavasoft Ad-Aware. Its a program that locates registry entries for certain annoying programs (spyware), such as my comet cursor, and eliminates them. I recently had a problem, and ran the Ad-Aware. It found 32 entries.
www.lavasoft.de

Originally posted by Mr. Fury
Also tried Ad-Aware spyware remover with newest reference list... found nothing.

[JR2000Z]

This sort of thing reminded me of this. It may not help but I'm sure you guys seen this a million of times....

[Nico]

[HeX]

I had the exact problem with another page. Found out that there was a file in windows/system, a temp file, that edits the registry each time. Took me forever to find it. Be careful as the one I had also had a trojan virus in it.

[Setekh]

[Darkage]

Originally posted by Setekh

[LtNarol]

*falls out of chair laughing*

[CP5670]

LOL :D:D

[CODEDOG ND]

Originally posted by LtNarol

*falls out of chair laughing*

[aldo_14]

Originally posted by LtNarol

*falls out of chair laughing*

Ow!

*picks self up and dusts off*

[Styxx]

Lynx rulez!!

[Fury]

Nice pics.

I still haven't got rid of it entirely, I can't find any suspicious files or registry entries. I have noticed that it has replaced normal MSN search page with www.lop.com one.

You know the MSN search page (IE6) when you have typed wrong address and MSN search page opens telling that website you typed cannot be reached or something. Well, that is gone now and replaced by www.lop.com search page...

Now, does anyone here know how I can get the old search page back? It cannot be hard to do once you know how to and most importantly where to change it...