Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Lop And Psyme Virus Preventing Sites Like Youtube, Facebook, Hotmail Etc?

  • This topic is locked This topic is locked
2 replies to this topic

#1 Dogfingers


  • Members
  • 17 posts
  • Local time:11:55 AM

Posted 06 March 2008 - 10:10 PM

Hello. I've encountered a problem wiht loading certain webpages through firefox. I downloaded AVG (as McAfee didn't seem to find a problem) and did a scan which resulted in it finding a Lop virus and Psyme. I tried removing them and it wouldn't do it, so I consulted a forum in which they gave advice and told me to restart in safe mode use ATF cleaner then run a scan. I did this and nothing at all showed up. Now the computer is behaving strangely by loading up at a ridiculously slow rate, telling me I need to install Microsoft Office for no reason and also either refusing to load certain websites or giving me a firefox.exe error where it shuts down. For some reason my desktop items also dissapear and re-appear. I'd be grateful for any help, cheers.

Mod Edit: Added Topic Description.~ TMacK

Edited by TMacK, 06 March 2008 - 10:35 PM.

BC AdBot (Login to Remove)


#2 boopme


    To Insanity and Beyond

  • Global Moderator
  • 73,562 posts
  • Gender:Male
  • Location:NJ USA
  • Local time:11:55 AM

Posted 06 March 2008 - 11:12 PM

Hello Dogfingers and welcome.

Start here: Remove any of these items IF they exist. If not that's OK.
Start...Settings ... Control Panel ..Add /Remove Programs
Click on any that are there, then Select it and click Remove.

Messenger Plus! Live & Sponsor (CiD)
CiD Help
CiD Manager
Download Plugin for Internet Explorer
Search Plugin
Zone Media

If you are asked for a Verification code, please enter the numbers that appear in the window.
Important! When done, be sure to reboot your computer.

If none of these programs were listed, then continue with the next step.

Please download NoLop and save it to your desktop.
alternate download link 1
alternate download link 2
  • First close any other programs you have running as this will require a reboot.
  • Double click NoLop.exe to run it.
  • Now click the button labeled "Search and Destroy"
  • When scanning is finished you will be prompted to reboot only if infected. Click OK.
  • Now click the "REBOOT" button.
  • A Message should popup from NoLop. If not, double click the program again and it will finish.
  • Please post the contents of C:\NoLop.log in your next reply.
--If you receive an error: "mscomctl.ocx or one of its dependencies are not correctly registered", please download mscomctl.ocx to your system32 folder then rerun NoLop..

Lastly Please run the Vundofix tool in our Tutorial
How To Remove Vundo/Winfixer Infection
Run As Administrator if this is a Vista machine.

After running VundoFix, a text file named vundofix.txt will have automatically been saved to the root of the system drive, usually at C:\vundofix.txt. Please copy & paste the contents of that text file into your next reply.

Edited by boopme, 07 March 2008 - 02:11 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 TMacK


  • Members
  • 4,672 posts
  • Gender:Male
  • Location:B.C. Canada
  • Local time:09:55 AM

Posted 07 March 2008 - 01:53 PM

I have moved your HijackThis log to the Misplaced HJT Logs forum.
Please follow all directions that I've posted, as a reply to your log.
By following these instruction, it will ensure, that your HJT log is taken care of, in the most timely manner.

Your log can be found at this link:

Since you have posted a HJT log, I'm going to close this topic.
From this point on, the HijackThis Team are the only members you should take advice from, until your log has been declared clean.
If you have any questions, don't hesitate to send me a PM.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users