Messenger Plus 3 installs Omegasearch / Lop

[Dexter]

Just in case some of you were not aware, Messenger Plus 3 installs the Omegasearch variants of C2 Media's Lop.com. Users who do not read the EULA in the installer, and who do not pay attention to where they click, are installing this on their computer out of haste or ignorance.

There is an option to install without the sponsor program. One click of the mouse would save a user hours of frustration.....


http://www.short-media.com/forum/attachment.php?attachmentid=11716&stc=1


If you have already installed Messenger Plus 3 with the spyware option, you can use the OmegakillerSM program to remove that portion. OmegakillerSM was specifically designed to remove C2 Media's Omegasearch / Lop variants. Learn more about OmegakillerSM here:

http://www.short-media.com/review.php?r=252&p=1

or just download it here:

http://www.short-media.com/download.php?dc=69


Dexter...

[mmonnin]

Yep I made that mistake with one of their versions. I think they did that one v2 as well.

[mcwc]

Whew. I use Messenger Plus 3 but I always refuse to install the sponsor program.
Didn't bother reading the EULA. No wonder when I tried out OmegaKiller and it removes registry entries for Messenger Plus 3.

OmegaKiller also removes the registry entry for FillaZilla Server :wtf:.

[snowbetty]

thankyou so much for your help , your truely a god send!!!!!! everything that was on my computer before is now gone because of omegakiller. thanks so much.

how often should i use omegakiller on my computer?
jana

[Dexter]

thankyou so much for your help , your truely a god send!!!!!! everything that was on my computer before is now gone because of omegakiller. thanks so much.

how often should i use omegakiller on my computer?
jana


Whenever you have a problem with their toolbars or hijacks :)

Dexter...

[Elaine_uk43]

Hi All,
Omg I installed messenger plus, and have all those things you have mentioned, ive tried running Omega Killer and it has deleted them but they have come back, but this time, omega killer has come up with this.
- This is an automatically created log of OmegaKillers output
- Please visit http://www.short-media.com/forum/forumdisplay.php?f=57
- for further assistance.


Running pass number: 1

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\docume~1\elaine\locals~1\temp\aniextuq.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars


Running pass number: 2

- killing Internet Explorer

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\docume~1\elaine\locals~1\temp\vyjopigm.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars


Running pass number: 3

- killing Internet Explorer

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\docume~1\elaine\locals~1\temp\xxmnjuol.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars


Running pass number: 4

- killing Internet Explorer

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\docume~1\elaine\locals~1\temp\hxazydjt.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars


Running pass number: 5

- killing Internet Explorer

- enumerating modules
- scanning bookmarks
- scanning desktop icons
- scanning and deleting browser hijacks

- scanning running processes..
- infection in memory: c:\docume~1\elaine\locals~1\temp\pivfoeke.exe
- process terminated.
- file removed.
- removing process startup key
- scanning startup processes
- scanning executable variants

- scanning BHO's
- scanning toolbars

- no infections found, system clean on pass number: 5 ...
- all done ...

And all those things are back but this time much worse, and omega killer does not seem to be able to clear it,
Could someone please help me
Thank You
Elaine

[Dexter]

Ok, first read this post:

http://www.short-media.com/forum/showpost.php?p=172584&postcount=2

That will show you how to download a program called Hijack This, and run it. Do that, and save the log file it generates. Then, see the link in the log file?

http://www.short-media.com/forum/forumdisplay.php?f=57

Make a new thread there, and post the log there, make sure you repeat what you said above about having run OmegakillerSM and are still having trouble.

With the HJT log, one of our members will be able to help you out.

Dexter...