Messenger Plus is MALWARE!

Discussion in 'privacy problems' started by nadirah, Jan 17, 2004.

Thread Status:
Not open for further replies.
  1. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Here's a news article from spywareinfoforum.com to prove it:

    Messenger Plus Bundling Lop.com

    Many of you may have heard of a program called Patchou's "Messenger Plus". I used it myself once, before I discovered Trillian. Similar to the many front end programs for Internet Explorer (Avant browser, MyIE2, etc), Messenger Plus adds a user interface to Microsoft's MSN Messenger that contains extra features.

    Patchou has brought in C2Media as a sponsor and is now bundling their lop.com software into Messenger Plus. For those of you who have never heard of it, lop.com software is classified as a trojan by antivirus vendors and as a browser hijacker by antispyware vendors. You can find plenty of information about it by doing a Google search for lop.com. Just be warned - some of the language used by lop victims will melt your monitor.

    No single parasite has caused as many support threads at our message boards as lop.com (although Xupiter comes close). Ad-aware, Spybot, and all other spyware removal programs target several older variants of lop.com. It now comes in a version that is nearly impossible to detect automatically. It uses randomly named files, randomly generated CLSID identifiers, and uses activex installation methods that let them update all of their installers at once.

    Before this change, the number of lop.com complaints actually had gone down because it was so easy to remove and could even be blocked beforehand. Since C2Media introduced these new versions that mutate randomly, the number of infections has become larger than ever. The only sure way to be rid of it is to ask for help at the SWI support forums.

    Patchou, the developer of Messenger Plus, has issued a statement regarding the complaints he's been receiving due to his new "sponsor". To all of the people who are saying that they won't use his program because of lop.com, he has this to say, "I don't want to be rude but if you boycot version 2.10.36, you're an idiot."

    <sarcasm>
    Rude? Well gee, what could possibly be "rude" about being called an "idiot" for refusing to install software that sets off trojan alarms in antivirus programs?
    </sarcasm>

    Whether it makes you an idiot or not, I strongly recommend that everyone stay as far away from Patchou's Messenger Plus as possible. If you have installed it already and now have lop.com's software all over your system, uninstalling Messenger Plus supposedly will also remove lop. If that doesn't work, then please read this FAQ and follow the instructions. We are very experienced at removing this thing and can easily walk you through it.


    Javacool, I request that Patchou's Messenger Plus software be added as a malware target, thanks.
     
  2. Kulsar

    Kulsar Registered Member

    Joined:
    Dec 10, 2003
    Posts:
    17
    Messenger Plus has come with C2media for a long time. When you install Messenger plus, C2Media will try to install itself. You can stop it with your firewall and remove it by deleting the C2Media folder from Program Files.

    However it will reappear everytime you update :oops:
     
  3. NeonWizard

    NeonWizard Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    64
    Location:
    Vancouver,Canada
    The worst thing is, many people download this program as thinking it'as really cool, but they just end up with slower PC's.
     
  4. nameless

    nameless Registered Member

    Joined:
    Feb 23, 2003
    Posts:
    1,184
    Skip that crapware, forget Trillian, and get Miranda IM. It is free and open source, has a slew of plugins available for it (over 200 actually, which are also all free and open source), and it supports the ICQ, MSN, Yahoo, Jabber, Gadu-Gadu, Tlen, netsend, IRC, and other protocols.
     
Thread Status:
Not open for further replies.