Grrrrr

kharmini91

kharmini91

New Member
I've had this stupid Adware trojan on my computer for weeks now, I can't stand it anymore! AVG says its Downloader.Agent.AS everytime I open IE, so I run an AVG and I quarantine and delete it. I restart and it's back. There's these internet shortcut icons on my desktop: casino, internet dating, etc. Delete them and launch IE- they're back. Adware says it's MySearchBar or something search. Spyware detects a whole bunch of crap. SpywareGuard pops up every time I open IE: Your search page has been changed, change it back? HijackThis, well, I can post a log if necessary. I've tried EVERYTHING in my power- even deleted reg keys and it's ALWAYS BACK!!! Praetor and Ian this question is mainly for you- you're the only people I know who might fix this (you're household names here lol you've helped alot in the past). Thanks...
 
kharmini91

kharmini91

New Member
SORRY, I forgot one more thing. Certain words in webpages are being highlighted in orange... when you click it takes you to Begin2Search. By the way it's not MySearchBar it's Begin2Search. Lol I'm so angry I could kill.....
 
kharmini91

kharmini91

New Member
LOL One more thing.... I've booted in safe mode to delete Cookies, TIF's, History, Temps, etc. cause thats where AVG reports it but STILL NO LUCK!!!
ps. thanks lorand. but I've already cleaned the reg...
 
kharmini91

kharmini91

New Member
Actually one more thing... btw thanks lorand again but no luck; Something called MyDailyHoroscope keeps installing itself and popping up in IE. Have to uninstall but reinstalls. thanks
 
Ace1627

Ace1627

New Member
Spy Sweeper is your best bet. It costs money so it is up to you. They do have a trial version but it does not delete as many spywares as the paid version. Hope this helps.
 
kharmini91

kharmini91

New Member
Zerox- Thank you for your reply (and Ace1627) but as I've said, I already have Adaware and Spybot AND cleaned my registry... don't get me wrong, thanks for trying to help but I think I'll need alot more than those programs as the malware keeps regenerating...
 
varfer

varfer

New Member
Ad-Aware SE will help you, just marke the "Activate In-Depth Scan" in your "Use Custom scanning Options.
 
kharmini91

kharmini91

New Member
Lol. Actually, I'm the one coming out like an idiot in this case. IT turned out I had an outdated version of Ad-aware. I installed SE and it fixed EVERYthing (hopefully). Thank you all who helped me. :confused:
 
Z

ZER0X

VIP Member
kharmini91 said:
Plus that reg. cleaner isn't free...
Click to expand...

Oops sorry, I just searched for freeware registry mechanic in google and that came up so I gave u tha link.... :eek: I should of really checked, ateast it's fixed now :D
 
varfer

varfer

New Member
Webhelper Alert: Messenger Plus is Lop.com

As I was going thru listings to generate a new file list, I found an enteresting thing about the messenger plus:

On the outside and the standard whois shows really nothing but it is the IP that gives them away. msgplus.net:66.220.17.175, This is one of the NetRanges for C2Media aka lop.com.


MsgPlus lop com
Quebec
Quebec, Quebec H0H0H0
Canada
Registered through: GoDaddy.com
Domain Name: MSGPLUS.NET
Created on: 14-Dec-02
Expires on: 14-Dec-05
Last Updated on: 15-May-03
Administrative Contact:
P., Cyril [email protected]
Domain servers in listed order:
NS1.RACKSHACK.NET
NS2.RACKSHACK.NET

IP:
msgplus.net:66.220.17.175
CustName: C2 Media Ltd
Address: P.O. Box 1113
City: Shalimar
StateProv: FL

C2Media NetRange: 66.220.17.0 - 66.220.17.255

Also installs Ad Intelligence
http://www.msgpluszone.com/forums/misc.php...ion=help&hid=10

QUOTE

Messenger Plus! comes with an optional sponsor program. Installing it will help keep your favorite MSN Messenger add-on alive. If you do not wish to support the developer, you are allowed to refuse and proceed without installing the sponsor. PLEASE READ THIS END USER LICENSE AGREEMENT AND PRIVACY POLICY CAREFULLY AND MAKE SURE YOU UNDERSTAND THEM. THIS IS A CONTRACT AND BY INDICATING YOUR ACCEPTANCE, YOU ACCEPT ALL THE TERMS AND CONDITIONS OF THIS END USER LICENSE AGREEMENT AND THE APPLICABLE PRIVACY POLICY AND WILL BE PERMITTED TO DOWNLOAD THE SOFTWARE. IF YOU DO NOT ACCEPT THE TERMS AND CONDITIONS OF THIS END USER LICENSE AGREEMENT AND THE PRIVACY POLICY, YOU WILL NOT BE PERMITTED TO DOWNLOAD THE SOFTWARE. End User License Agreement This End User License Agreement ("Agreement") governs use of C2 Media Ltd.'s ("C2") software product known as lop.com


msgpluszone.com:66.98.252.17 (Support forum for msgplus)
What really links them also is the ending of the EULA:

QUOTE

For general support please email [email protected]. For comments or concerns about a website that is promoting this software please email [email protected] with all pertinent information

wrn.net is the lop.com site for affiliate members.

Creators Profile:
http://msgplus.mybboard.com/member.php?action=profile&uid=10
patchou.com:66.98.198.21 (Creator of Msgplus)


So anyone who installs msgplus will get lopped!

Additional Reading:
http://www.geeknewz.com/board/index.php?showtopic=1413
 
You must log in or register to reply here.
Top