Hello,
Go to start > controlpanel > software > add/remove programs and look if you have one or more of next programs installed and uninstall them:
Bitroll
Bitgrabber
Bitdownload
CiD Help / CiD Manager
Download Plugin for Internet Explorer
Netpumper
Search Plugin
Torrent101
WinZix
W3player
Zone Media
This because they are bundled with the malware you are dealing with (swizzor aka lop).
This will uninstall the malware application.
In case, during uninstall, when asked for the uninstall Verification, please enter the numbers that will appear in the window.
In case it says that the file was not found, doublecheck again if you entered the exact command. If still the same, proceed with next steps.
In case you can't find them,
* Go to start > run and copy and paste next command below in the field:
(Please make sure you copy and paste it exactly as you'll find below)
"C:\DOCUME~1\DANTHE~1\APPLIC~1\TRUSTB~1\BODY BLEH.exe" -uninstall
Hit enter.
Then reboot. Important!
After reboot,
* Download Deljob.exe and save it on your desktop.
Doubleclick Deljob.exe.
Deljob is a tool to remove LOP jobs.
Usage:
Download Deljob.exe and save it on your desktop.
Doubleclick Deljob.exe.
A log, (logit.txt) should open afterwards. This log will be present on your desktop
The logfile of deljob.exe might look like this:
--------------------------------------------------------
BACKUPS CREATED in C:\DELJOB
AD57FF8091C4736C.job
--------------------------------------------------------
FILES IN TASKS FOLDER
XoftSpySE.job
--------------------------------------------------------
EXPORT APP DATA FOLDERS
--------------------------------------------------------
Volume in drive C is Casao
Volume Serial Number is 84C4-C2A9
Directory of C:\Documents and Settings\User\Application Data
02/05/2006 06:04 PM
Adobe
12/18/2006 09:51 AM AdobeUM
01/11/2007 08:00 AM AVG7
01/03/2007 05:27 PM GRAMDR~1 Gram Drv
06/22/2006 06:20 PM Help
01/28/2006 04:37 PM IDENTI~1 Identities
02/01/2006 06:15 PM INTERV~1 InterVideo
02/03/2006 04:10 PM Lavasoft
02/28/2006 06:49 PM MACROM~1 Macromedia
02/01/2006 05:10 PM MICROS~2 Microsoft Web Folders
02/05/2006 05:10 PM Mozilla
02/04/2006 06:06 PM MSNINS~1 MSNInstaller
01/05/2007 10:22 PM REGIST~1 Registry Cleaner
02/21/2006 08:37 PM Roxio
12/25/2006 12:35 PM ScanSoft
12/25/2006 12:49 PM SOLIDD~1 SolidDocuments
02/21/2006 10:16 PM Sun
12/30/2006 10:27 AM Symantec
02/02/2006 09:09 PM Talkback
03/08/2006 05:46 PM Template
02/05/2006 05:10 PM THUNDE~1 Thunderbird
12/30/2006 09:44 PM uTorrent
01/04/2007 04:46 PM WHOLES~1 WholeSecurity
12/25/2006 12:10 PM Zeon
0 File(s) 0 bytes
24 Dir(s) 51,799,048,192 bytes free
Volume in drive C is Casao
Volume Serial Number is 84C4-C2A9
Directory of C:\Documents and Settings\All Users\Application Data
06/13/2006 01:18 PM Adobe
12/30/2006 04:06 PM avg7
01/06/2007 11:29 AM 4 DRAGTO~1.TXT DragToDiscUserNameE.txt
12/30/2006 04:02 PM Grisoft
12/25/2006 12:06 PM INSTAL~1 InstallShield
07/04/2006 08:23 AM INTERV~1 InterVideo
01/03/2007 04:21 PM MAPIID~1 mapiidleamokaudio
02/05/2006 08:24 PM QUICKT~1 QuickTime
03/05/2006 04:49 PM Roxio
12/25/2006 12:37 PM ScanSoft
12/25/2006 11:55 AM SOLIDD~1 SolidDocuments
01/07/2007 07:30 PM SPYBOT~1 Spybot - Search & Destroy
12/30/2006 10:27 AM Symantec
11/23/2006 10:52 AM WHOLES~1 WholeSecurity
02/04/2006 11:28 AM WINDOW~1 Windows Genuine Advantage
12/25/2006 12:05 PM zeon
1 File(s) 4 bytes
15 Dir(s) 51,799,048,192 bytes free
--------------------------------------------------------
These folders belong to LOP and can be removed:
C:\Documents and Settings\All Users\Application Data\mapiidleamokaudio\
C:\Documents and Settings\User\Application Data\Gram Drv\
More info about LOP aka Trojan Swizzor:
Adware, also known as advertising software, displays third-party advertising on the computer. The ads can take several forms, including pop-ups, pop-unders, banners, or links embedded within web pages or parts of the Windows interface. Some adware advertising might consists of text ads shown within the application itself or within side bars, search bars, and search results. Adware is often contextually or behaviorally based and tracks browsing habits in order to display ads that are meant to be relevant to the user.