Hi all,
I'm trying to help a friend out. His daughter installed the sponser on 2 PCs. In one of them the procedure worked great and it's gone. The other is a brand new PC. I have read the FAQ, watched the movie, and understand the uninstall procedure. We tried the procedure (add/remove etc) several times, without removing MSGP and with, reinstalling in between. The procedure appears to work as described, but upon restart the sponser toolbar is still there.
We didn't use any third party software, just the uninstaller.  The last thing we did was to run the procedure in safe mode , with system restore disabled, but it still comes back.
There is no indication that it came from any other installation.
Hijackthis reports this in the BHO list:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.htnpsmwxxxtgummoqgulaq.com/Qs_cgpE/_oZ...snTb40/n1GXpG.html

We haven't removed it.
Anyone have a suggestion (other theb reinstall and uninstall - we've done this a dozen times) ?

quote:

---

Originally posted by eross
watched the movie

---

Absorbation
As I have stated, we did not use any scanner, and we did re-install WITH the sponser, and uninstall, about a dozen times.
There are several realtime antispyware running in the background - but we didn't run any of the on-demand scanners.
The software installed are: Spywaregaurd, spywareblaster, spybot and MS antispyware.
Once again, we DID NOT run any of them to remove the sponser, only the dedicated uninstaller.
Do you know if any of the above software interfer with the uninstall process?

quote:

---

Originally posted by eross
Absorbation
As I have stated, we did not use any scanner, and we did re-install WITH the sponser, and uninstall, about a dozen times.
There are several realtime antispyware running in the background - but we didn't run any of the on-demand scanners.
The software installed are: Spywaregaurd, spywareblaster, spybot and MS antispyware.
Once again, we DID NOT run any of them to remove the sponser, only the dedicated uninstaller.
Do you know if any of the above software interfer with the uninstall process?

---

quote:

---

Originally posted by lp15
I know that MS Antispyware detects it.. so probably you had like a pop-up asking if you want to ignore it or stop it or delete it or wte..

---

ok. we'll try unistalling ms as.

quote:

---

Originally posted by eross
ok. we'll try unistalling ms as.

---

All antispuyware software was uninstalled, sponser reinstalled and uninstalled. After reboot - still there!!
Anyone have a miracle ??

uninstall ie as a last resort then reinstall it cookie is online he may help

Uninstal IE ???
I'd rather reinstall windows from a Ghost image, if it comes to that.
I'm hoping someone can help without a drastic step.

quote:

---

Originally posted by eross
Uninstal IE ???

---

yeah, I know what IE is....
I just don't want to uninstall it.

Are you completely sure Internet Explorer is not running in the background and you have no other programs running while uninstalling?

Does the sponsor uninstall screen (the blurred numbers) come up? Does it take the code and says it uninstalled?

You can try to use a separate uninstaller here (EXE file). Edit: for best results, use it in Safe Mode.

Nothing is running in the background. The unistall procedure appears just as it should, asking and accepting the code.  But the toolbar remains.
I tried the uninstaller from lop.com , but it's not a DL file it's an Active X, and Explorer will not run it "You internet explorer settings do not permit..." Tried setting security level to Low - still will not run.
More suggestions please?

The unisntaller from lop.com is an exe file, there is no reason your IE should prevent you from downloading it: http://lop.com/new_uninstall.exe .

Please let us know your status after running this uninstaller, sorry for the trouble.

Hi Patchou
The link doesn't work for me : I tried IE, Opera, Firefox (connection refused to lap.com) , Flashget (connection refused)
Is there another link or mirror to the exe ?
Thanks

Uploaded it here for you

Admin edit: attachment removed (Win32/TrojanDownloader.Swizzor.CK trojan)

quote:

---

Originally posted by eross
The link doesn't work for me : I tried IE, Opera, Firefox (connection refused to lap.com) , Flashget (connection refused)

---

If your running XP SP2, try this method to ensure the sponsor uninstalls successfully:

• open intenet explorer, go to the tools menu, open options, goto the programs tab, select Manage Adons, and disable all addons.
• Goto start, goto control panel, open up Add or Remove Programs, select the Set Program Access and Defaults, select Custom, and uncheck 'Enable access to this program' for internet explorer
• Goto start, goto run, goto the startup tab and uncheck everything. Goto the services tab, check 'hide all microsoft services', and uncheck all the third party services that appear
• Restart in safe mode, open up task manager, and close every process execpt for ones running in the 'SYSTEM' user (yes, including explorer.)
• With task manager still open, goto the file menu, click run, and type:

  code:

  ---

  "C:\Program Files\Messenger Plus! 3\Msgplus.exe" /remove

  ---

Ezra
Thanks for the file. Ran it, it claimed to unistall lop.com software - but the toolbar came back.
Shawnz
Followed your instructions to the letter- toolbar comes back after the changes are reversed.

Anyone have a solution other then format?

If the toolbar is from Messenger Plus!'s sponsor then all the things suggested in this thread should've worked.

- Did you make sure ALL the spyware/adware/virus programs were shut down? Including the resident and hidden ones?
- Did you make sure no other monitoring program was running (eg: registry monitors, file monitors, etc) which could prevent changes to the system?
- Did you make sure MSIE wasn't running at the time of uninstalling?
- Did you reboot after the uninstall procedure (or the uninstall program from lop itself) was done?
- etc...

If all things suggested in this thread are followed exactly and you are 500% sure the toolbar comes from the lop sponsor of Messenger Plus! then there is no reason at all why the toolbar should still be there, unless you have some other problems on your computer or are running other things which interfear with the proper uninstallment...

Just to sum this up:
We tried every step suggested here, and although the uninstall reports the software removed it's still there. I would ask you for the list of files and registry keys to manually remove it - but for now we will restore this new PC from a Ghost image,and refrain from using Messenger Plus.
Thank you all for your time and help. I greatly appreciate it.
A note for the developer: perhaps you should choose a less intrusive sponser. There are many kids using your program. They do not read Eulas. That doesn't mean they should be subjected to porn pop-ups.
Just my 2c
Have a nice weekend all.

Actually the sponser is the lease harmless c2lop product and this is a very very rare case. You still could use messenger plus! just slect install without the sponser.

Patchou will look into this case as no one wants damage to your computer and even more as it is a new one

Thanks for your friendly attitude

The sponsor program of Messenger Plus! is indeed the least intrusive and contains the least "stuff" of all the sponsor programs from LOP. It also does NOT contain any adult related materials. This is one of the major points which Patchou demanded from the sponsor program.

All the things you said considered, it indicates that the adware you're talking about is not from Messenger Plus!' sponsor at all. Mind you that there are thousands of other stuff your children can install which include truely hidden stuff and it even might not be visible that it is installed. Even browsing with a bad protected or set-up browser can cause harmfull things to be installed... (eg: clicking on certain popups which look like real security warning popups, can cause things to be installed on your computer).