F*****g LOP.COM (Final results)

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sun Jan 14, 2007 10:50 pm

I don't know how it happened with all the armour plating on my pc but I'm infected or should I say infested with lop. com crap. I spent most of yesterday cleaning, even removing registry files via hijack this. What ever I do I still end up with infection. Far worse with IE but still sporadic attacks on Firefox. Any information or help in removing this rubbish would be greatly appreciated Evil or Very Mad

Posted: Sun Jan 14, 2007 10:56 pm

fdisk

** SUSPENDED ** Joined: 26 Mar 2005 Posts: 1267

Ad-Aware

Spybot Search And Destroy

Posted: Sun Jan 14, 2007 11:36 pm

^^^ Spybot is supposed to be pretty good with lop. Lop sucks!

Posted: Mon Jan 15, 2007 12:59 am

Thanks for the suggestions. A2 and adaware failed and only found trace cookies. Re formatting Shocked

If all else fails. Haven't tried spybot though. I think I still have it Confused

I'll plod on for a while.

Posted: Mon Jan 15, 2007 1:04 am

May I suggest Bazooka?

butt long linky

It has a DB of all related sites.

It's not an automated process, but since you're familir with HJT you should be comfortable with the instructions they give you.

Posted: Mon Jan 15, 2007 1:07 am

Thanks GD.
I'll try anything. Napalm's next.

Baiting Guru Joined: 08 Jul 2004 Posts: 11857 Location: UK

Article on LOP here if you have not seen it, might have some ideas for you:

http://www.spywareinfo.com/articles/lop

Posted: Mon Jan 15, 2007 1:18 am

i think spybot is your best bet after reading SP's article

** SUSPENDED ** Joined: 26 Mar 2005 Posts: 1267

Quote:

What is lop.com? Lop.com is a web site owned by C2 Media. It is mainly a pay-per-click search portal where other web sites pay for each click-through to their site via lop. This isn't a terrible idea, but rather than create a quality web site to get surfers to their site and clicking those links, they instead created a program which is labeled variously as an mp3 search program, a porn search program, or some other such thing. The installer turns the user's web browser into a device with a seemingly endless supply of links to lop.com.

JEFF!!!!!!!!!!!!!!

I thought scambaiting would of taught you to search porn safely, without the use of a program.

Posted: Mon Jan 15, 2007 1:49 am

I'll be curious to see if Spybot does the job Jeff. Let me know. Just get updates before you run it. I've also head you sometimes have to run SB 4 or 5 times in a row to get it all.

Posted: Mon Jan 15, 2007 4:35 am

Spybot is redownloaded, installed,updated and running as I type. A pop up every few seconds is becoming nightmarish and no, no links to porn Radden you badden. If there were I would keep it!! I can't log on to eater thru firefox. IE just blasts with popups. I don't know where it came from. I scan my own name with avg before I do ANYTHING! Idea

I know! not Adware,Ladware.
@JT will do.
@SC. Off to read thanks.
Incidentally "Burn for free" and their tool bar seem to be to blame. I believe the burner software is OK but the tool bar is suss.
Having just read that site it would appear that lop.com are real shits. Spybot seems to be the only chance apart from reformatting. I do use emule occasionally mp3 p2p but not for a while. Pornography? Who the hell has time for that once registered at eater???

Posted: Mon Jan 15, 2007 5:58 am

Can you go back to a restore point? That would be the easy thing to do.

Wikipedia says that Spybot cleans out Lop. I just ran Spybot and saw Lop and L2.lop listed as one of the targets as SB did its thing.

There is a reference to Lop directing IE back to its homepage for additional instructions should there be a problem with the program so you might consider pulling the plug on your internet connection before you run SB.

My little one is not one to update her SB and AD-aware. We got hit with Cool Web Search last year. It did basically the same thing as what you are experiencing. I drive by their headquarters every morning. It's a 10 story glass building... no I didn't do anything but I did have some very evil thoughts.

Posted: Mon Jan 15, 2007 6:47 am

Thanks Connie. I never think of the obvious Embarassed

Spybot is finding stuff but not lop.com as far as I can see. As soon as it has finished I'll use the restore point option anyway. Thanks.
Panic ware pop up blocker is stopping about 90% of them Smile

Now I just have pop ups that tell me a pop up has been blocked Wink

I assume that once spybot has finished and listed everything I could go off line then to eradicate as just being discovered is no threat to them is it?

Posted: Mon Jan 15, 2007 8:08 am

One time I got some spyware that was so bad that I had to DL a program that was specialy designed just to get rid of it. Try googling any file names that the spyware uses and the name of the website, maybe you will be able to find something that will get rid of it.

Posted: Mon Jan 15, 2007 2:28 pm

This may be an obvious solution, but one I overlooked in a malware battle last week. Turn off system restore, and delete all restore points before cleaning the registry entries. System restore is quite often the place where these programs live and resurrect themselves from after being cleaned. You spend hours cleaning reg entries, and then reboot and BOOM, you are infected again.

I finally remembered this after the third reboot, and it worked. Also, remember to empty all of your temp and temp internet files, since the re-infection can come from these as well.

Finally, ditto on the Spybot. I am a sysadmin, and all of the computers I manage have this installed. Works better than the expensive AV suite we paid for.

Posted: Mon Jan 15, 2007 4:48 pm

^^^Great advice on dumping the ALL the temp files and folders. Crap live there too. I use CCleaner that I DL'ed from Download.com and it does a very good job. Extremely quick, cleans out the traces when I go surfing for images of hot middle aged women to send to the lads. Embarassed

Did I say that? It also does a wonderful job in fixing registry issues.

Posted: Mon Jan 15, 2007 7:41 pm

Have you tried running Spybot in safe mode ?

Altenatively try http://forum.malwareremoval.com/ for help with removing Lop,

Master Baiter Joined: 18 Dec 2006 Posts: 123 Location: UK

I've managed to remove Lop with Spybot before now, it has to run at least twice (ie. when computer restarts but before windows starts) and after a couple of runs its fine.

Make sure that you get the newest version from a place like filehippo, some of the older versions aren't that good at getting rid of Lop.

If you run AdAware alongside SpyBot I've found that 99% of spyware is blocked (the latter has an "immunisation" section, which is great, as well as access to BHO's, startup files, active x lists and browser pages, so all can be thoroughly scruitinised to make sure that there are only the things you want running on. CCleaner rounds the trio of programs up perfectly for me.

Interestingly there is a Lop removal tool on the Lop home page - but judging by the blatant disrespect for customers wishes with the spyware, I wouldn't touch the remover with a hundred foot barge pole.

Please let us know whether Spybot worked, thanks!

Posted: Tue Jan 16, 2007 1:14 am

I've only used AdAware and Spybot.
I was using them once a week until I met the likes of all of you. Confused

Now I have to use them every couple of days. Shocked

Posted: Tue Jan 16, 2007 1:53 am

Thank you all good people for your advice. Some has been tried and failed, some has yet to be attempted. I had system restore off but had not deleted restore points. System restore refused to restore to an earlier point. I threatened it but it still refused. Files "torpig" were found and anihilated. Temp files $_2341233.TMP +2341234.TMP were found and destroyed. Still the pop ups mount offensives and I am thinking of a tactical nuclear shell. Don's reformat is looming Crying or Very sad

Stay tuned for the next thrilling episode of Jeff and the Poplops Smile

Posted: Tue Jan 16, 2007 2:58 am

I don't know if this site has anything to do with it. I assumed that the more sites you go to, the more you have to use. Someone correct me if I am wrong. I was just told to do this when PC slows. Hell, I don't even know what they do. I just do!
I am taking PAIN PILLS and think I'm in the right thread. I think AdAware and Spybot. I do know that my bed is to the right. Goodnight! Cool

Posted: Tue Jan 16, 2007 3:02 am

^^^ Yeah, hit the sack Corona, don't want to loose track of where the bed is. You'll sleep well. Good old Vicodin!

Posted: Tue Jan 16, 2007 3:20 am

Sack, Sack, Sack, OK! Wink

Posted: Tue Jan 16, 2007 7:58 am

Don't delete system restore points until you have at least tried them. Once you have gone back to the very last save point and are still infected, then there's no point in keeping any.

I've had malware play with the index.dat files. They are very hard to remove as Windows thinks that the file is being used. CCleaner does a great job of dumping it or at least marking them for dumping on the next boot.

One last thing to consider. If you have another system, just let this one rest for a week. There's a possibility that a fix is being developed.

F*****g LOP.COM (Final results)	View next topic View previous topic