cancel
Showing results for 
Search instead for 
Did you mean: 

Help needed - Adware infection.

N/A

Help needed - Adware infection.

Hi all,

I need some help here.
I have been infected by some really anoying adware. I (usually) keep a clean system and run Adaware, Spybot and antivirus. This time though these are not getting rid of these IE toolbars.

Have a look at this screeshot and someone please recognise this and tell me how to get it off my system.

http://www.woooshuk.plus.com/screen.jpg

Note the toolbars at top and bottom of the page and also the page IE defaulted to.

Many thanks

I have hunted round in circles in Google with little sucess. Appears to relate to lop.com.
9 REPLIES
N/A

Help needed - Adware infection.

Have you hunted though add/remove programs?
Community Veteran
Posts: 14,469
Registered: 30-07-2007

Help needed - Adware infection.

Try hijackthis and CWShreader apps - links can be found in here.

If your not sure what to delete in hijackthis, post what it finds.
N/A

Help needed - Adware infection.

Nothing showing in Add/Remove Programs.

I have added my Hijackthis log to the link below.

http://www.woooshuk.plus.com/hijackthis.log

I can see entries R0 and N3 are a problem.

Edit: CWshredder found nothing.
Community Veteran
Posts: 14,469
Registered: 30-07-2007

Help needed - Adware infection.

Delete R0, R3 and both N3 entries and see if that helps.
N/A

Help needed - Adware infection.

Thanks Peter but no luck.

Also getting pop-ups when IE is running.

Looks like IE will have to be confined to the bin.

Tried Avant Browser and everything is fine.

System restore to an earlier time didn't help either.
Community Veteran
Posts: 14,469
Registered: 30-07-2007

Help needed - Adware infection.

I assume you have updated the defs for adaware & spybot and that your running the latest version of both - adaware released a new version recently called adaware SE personal @ v1.05, and spybot is 1.3.1).

Also are you running the google toolbar for IE which has a very good pop-up stopper included.
N/A

Help needed - Adware infection.

Yup,

Latest versions with updates.

Spybot found 103 entries relating to this problem when first run after infection which removed a lot of links it placed on my desktop. However the main problem remained.

I'm just hoping someone else hit with this one reads this.

I would rather remove it than hide it with a pop-up stopper as I understand it likes to try and 'phone home'

EDIT: Got it sorted. I managed to get a specific uninstaller for 'LOP'.
Thanks for your help.
N/A

Help needed - Adware infection.

You could have prevented this nasty spyware if you had installed the free startup Monitor.

http://www.mlin.net/StartupMonitor.shtml

Most of these spyware change the startup and add themselves to it this monitors all the startup and wont let anything change it without permision.

It take little or no memory and its FREE
N/A

Help needed - Adware infection.

I've had this, spybot removes most it but it reinfects the machine during startup, so hijack this is the required tool.

1. Turn off system restore
2. Run Spybot and remove any remaining entries.

In addition to the entries highlighted by Peter, delete the following two:
(Use the backup option to ensure all entries you delete can be restored)

O4 - HKLM\..\Run: [Comp junk] C:\PROGRA~1\GLUEVI~1\BoldPhone.exe
O4 - HKLM\..\Run: [roam funk spam creative] C:\Documents and Settings\All Users\Application Data\bend 1 roam funk\Pollfast.exe

Is Spybot listing this as CWS.Small?
From memory when I removed this, it created two entries in the start up with strange names which is how I knew which ones to remove.

Aaron