Wilders Security Forums  

Go Back   Wilders Security Forums > Privacy Related Topics > privacy problems
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old January 17th, 2004, 10:09 AM
nadirah nadirah is offline
Massive Poster
 
Join Date: Oct 2003
Posts: 3,647
Default Messenger Plus is MALWARE!

Here's a news article from spywareinfoforum.com to prove it:

Messenger Plus Bundling Lop.com

Many of you may have heard of a program called Patchou's "Messenger Plus". I used it myself once, before I discovered Trillian. Similar to the many front end programs for Internet Explorer (Avant browser, MyIE2, etc), Messenger Plus adds a user interface to Microsoft's MSN Messenger that contains extra features.

Patchou has brought in C2Media as a sponsor and is now bundling their lop.com software into Messenger Plus. For those of you who have never heard of it, lop.com software is classified as a trojan by antivirus vendors and as a browser hijacker by antispyware vendors. You can find plenty of information about it by doing a Google search for lop.com. Just be warned - some of the language used by lop victims will melt your monitor.

No single parasite has caused as many support threads at our message boards as lop.com (although Xupiter comes close). Ad-aware, Spybot, and all other spyware removal programs target several older variants of lop.com. It now comes in a version that is nearly impossible to detect automatically. It uses randomly named files, randomly generated CLSID identifiers, and uses activex installation methods that let them update all of their installers at once.

Before this change, the number of lop.com complaints actually had gone down because it was so easy to remove and could even be blocked beforehand. Since C2Media introduced these new versions that mutate randomly, the number of infections has become larger than ever. The only sure way to be rid of it is to ask for help at the SWI support forums.

Patchou, the developer of Messenger Plus, has issued a statement regarding the complaints he's been receiving due to his new "sponsor". To all of the people who are saying that they won't use his program because of lop.com, he has this to say, "I don't want to be rude but if you boycot version 2.10.36, you're an idiot."

<sarcasm>
Rude? Well gee, what could possibly be "rude" about being called an "idiot" for refusing to install software that sets off trojan alarms in antivirus programs?
</sarcasm>

Whether it makes you an idiot or not, I strongly recommend that everyone stay as far away from Patchou's Messenger Plus as possible. If you have installed it already and now have lop.com's software all over your system, uninstalling Messenger Plus supposedly will also remove lop. If that doesn't work, then please read this FAQ and follow the instructions. We are very experienced at removing this thing and can easily walk you through it.


Javacool, I request that Patchou's Messenger Plus software be added as a malware target, thanks.
  #2  
Old January 17th, 2004, 10:29 AM
Kulsar Kulsar is offline
Infrequent Poster
 
Join Date: Dec 2003
Posts: 17
Default Re:Messenger Plus is MALWARE!

Messenger Plus has come with C2media for a long time. When you install Messenger plus, C2Media will try to install itself. You can stop it with your firewall and remove it by deleting the C2Media folder from Program Files.

However it will reappear everytime you update
  #3  
Old January 21st, 2004, 11:16 PM
NeonWizard NeonWizard is offline
Regular Poster
 
Join Date: Jan 2004
Location: Vancouver,Canada
Posts: 64
Default Re:Messenger Plus is MALWARE!

The worst thing is, many people download this program as thinking it'as really cool, but they just end up with slower PC's.
__________________
NeonComputing - Security, Anti Spyware, Anti Virus

It's time to put an end to malicious code & black hat hackers - Use a firewall and anti virus!
  #4  
Old February 21st, 2004, 10:38 PM
nameless's Avatar
nameless nameless is offline
Very Frequent Poster
 
Join Date: Feb 2003
Posts: 1,122
Default Re:Messenger Plus is MALWARE!

Skip that crapware, forget Trillian, and get Miranda IM. It is free and open source, has a slew of plugins available for it (over 200 actually, which are also all free and open source), and it supports the ICQ, MSN, Yahoo, Jabber, Gadu-Gadu, Tlen, netsend, IRC, and other protocols.
__________________
They say the only totally secure PC is one that is turned off. So, I showed my PC a photo of my wife! [ba-dum-bum-tsss]
 

Wilders Security Forums > Privacy Related Topics > privacy problems « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 12:20 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums