LOP is most often transmitted by the program Messenger
Plus! 3. Do you have Messenger Plus installed?
If you still do have it installed, please uninstall it
completely from Start -> Control Panel -> Add/Remove
Programs and remove Messenger Plus and include the
Sponser program , restart your computer.
LOP do make a uninstaller on thier site which has removed
the infection for users in the past but it's not a common
practice to use tools to remove infections, created by
the people who created the infection. Can we really trust
a Lop uninstaller made by the people that stealthly
installed lop on the computer in the first place??
Obviously people's opinions on this will differ slightly,
but the majority of us will not use it.
If you have problems and dont want to use thier
uninstaller then use Hijack This
LOP variants can be difficult to remove without seeing a
Hijack This log because each install is different and
they make random names up so you can never predict what
the files will be called on a system, If needed download
Hijack This and post the log and I will let you know what
needs removing to get rid of this infection.
Save to desktop or c:drive
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Choose to run a scan and save the log and then copy and
paste that back.
LOP also Lop likes to "write" to the Enumerating Task
Scheduler jobs.
That's easy enough to see in a Startuplist log from HJT.
To get a Startuplist log from HJT:
Open Hijackthis, click "Open the Misc Tools section"
Next to "Generate StartupList log", place a check next
to "List also minor sections" (full) and "List empty
sections (complete).
Then click "Generate StartupList log"
Click "Yes" to the box that pops-up.
Then copy and paste the notepad text that appears to this
topic or my email address.
Regards Andy