C2.Lop...

[Bronco Billy]

Did a scan with Windows Defender and it identified....C2.Lop....as an infection. Defender could not remove it...!

Any body come across this and know of a simple way of removing it?

All help appreciated.................BB

 

[Aidan1150]

Did you run your scanning utility in Safe Mode BB?

 

[Bronco Billy]

Aidan,

Have run Spyware Doctor in safe mode and C2.Lop is not even detected. Have run Spybot Search and destroy in safe with the same result.

Windows Defender (Beta 2) is the only one that detects it but cannot remove it. I have run this programme in safe as well but it just comes up with....Error...0x80501001 when I click on remove.

It is showing as a high threat but only Defender has picked it up...any Ideas mate?
BB

 

[redcastle]

Go and get adware from here
http://www.lavasoft.de/
scroll down and get the free version from the download.com link
update the definitions and then run it.
that should do it for you

 

[Macca2321]

The people behind C2.lop need LOCKING UP no... scratch that HANGING!

Like Aidan says - Try booting in safe mode then running Windows Defender... it may be unable to be deleted because it's running. Booting in safe mode will cause it to not run and allow you to nuke it.

You could try Hijack this

Macca

 

[Bronco Billy]

Redcastle,

Thanks for the link but still no joy.

I ran No adware but it didn`t pick it up or remove it mate....


Macca,
Hijack this may be a bit advanced for me but thinking about trying it as nothing else seems to work.

Have run all anti-spyware programmes in safe mode by the way.

 

[redcastle]

heres a link for you with manual instructions,
http://www.securemost.com/articles/trou_3_remove_c2_lop.htm

it involves using the registry
editor, once in there do a backup of the registry (file>export to wherever you fancy)
go start > run
now type regedit in the box and hit enter
just go very gently and measure twice cut once

There are two keys to negotiate to, this is the first one (just follow the path)
HKEY_CLASSES_ROOT\clsid\{7b49a2a5-b45f-46f3-ac60-2578477671ee}
the element your removing is this one in the first key (right click and delete)
{7b49a2a5-b45f-46f3-ac60-2578477671ee}

then the second one
HKEY_USERS\s-1-5-21-796845957-842925246-1060284298-500\software\trinityayb
remove this element in the second key
trinityayb

heres the site I got the keys from, they suggest etrust pest patrol but I dont think thats a freebie but yu can check


Its a good plan to turn off system restore first. (control panel>system>system restore and check the box)

Hope it works for you ok