Lop is an adware (Issuer of publicity related to the context), that is installed with Messeger Plus.

If we close all the browsers, and the process screen we will see that there are two IEXPLORE processes still active.

Although we try to close them they will keep ‘reopening.’

If we activate the real-time protections, we will activate the process activities monitor.

There we can see that EXPLORER.EXE 'reopens’ such browsers automatically.

We can also see some ‘intermediate’ processes that open in the middle of the operation.

The next step will be to select both IEXPLORE.EXE and EXPLORER.EXE with CONTROL key simultaneously and to end them up at a time.

Then, we will have to go through the different monitors removing the self-startups that were left:

• The startup monitor leaves to entries.
• In the scheduled tasks, a startup task is set up; you will have to remove it.
• On the browser monitor, a browser helper object is set up.
• On the ACTIVEX screen you can deactivate a last component