Computing.Net > Forums > Windows 2000 > lop.com's new trick?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

lop.com's new trick?

Reply to Message Icon

Name: Barnaby
Date: October 24, 2002 at 03:55:07 Pacific
OS: English Win 2000 sp2
CPU/Ram: Athlon 850Mhz 256Kb Sharp
Comment:

I have just installed zone alarm and immediately found that a file in C:\Documents and Settings\user\Local Settings\Temp was trying to access the internet.

I blocked it and watched it trying to connect to lop.com along with a number of other sites.

I had previously removed the lop.com problem from my browser using the uninstaller quite succesfully, though I was always a bit dubious about the unistaller as it refused to leave my Add/Remove Programs.

What I discovered was that within E:\Documents and Settings\user\Local Settings\Temp there were 52 files, each 308kb long, each named xxxn.exe, where x is a random letter and n an integer.
It was easy to spot this because they all had the same, rather arty blue globe and sliver slash icon.

I found the process in the Task Manager and shut it down and then deleted all of these files.

I ran norton virus scanner (with the latest definitions) over the system again, which found nothing.
Checked the registry for keys associated with lop.com and found none.
Downloaded adaware and TracksEraserPro and ran both of them over my system.
Adaware found a lot of small problems, including lop.com, and cleaned them up.
However when I restarted my system a new random file was there requesting access to 65.89.42.150:1239 (one of a number of IPs it is connecting to).
(still it looked like it cleaned up a lot of things)

TracksEraserPro did nothing as far as I can tell. I downloaded the lop.com module and looked into the zip file and it seems to contain the uninstall .exe from lop itself.
I ran it anyway.

I have searched and failed to find any lop related files, including plg_ie0.dll on my system (English Win 2000 sp2 (3 causes crashing) on a Japanese Sharp Mebuis PC-GP1-C1M)

After all this, I reset my machine again and back came a new file trying to access the internet.

So, most likely I will reformat my machine and get rid of this. Possibly installing Linux instead anyway.

However I would be very interested in knowing if there is a solution to this problem.
I also find it interesting that this isn't considered a virus by Norton. Is this because they are not aware of it or because this does not count as a "virus"?

To me any software that is installed illegally on my machine and uses my resources for it's own ends should be considered a virus. Especially one so hard to kill.

Thank you for any help

Barnaby



Sponsored Link
Ads by Google

Response Number 1
Name: Rick
Date: October 24, 2002 at 05:41:31 Pacific
Reply:

Norton did not find it to be a virus because it's not. It's a type of program called spyware, it installs with your permmision when you install the regular program. Kazaa does this as well as Gator, WeatherBug, the list is endless.

These programs keep track of and report back to their masters everywhere you go on the internet, some, like Kazaa even take your spare processer time and hard drive space to be used by Kazaa for anything they please.

You agreed to let them do this when you clicked ok on the agreement during the install process. It's buried deep down in the legal language.

You will have to search the registry to find where it keeps loading and remove it there. Antother good program to download to remove these guys is SyBot Search and Destroy.


0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: lop.com's new trick?

Tinybar, Java errors, lop.com www.computing.net/answers/windows-2000/tinybar-java-errors-lopcom-/38310.html

Remove Lop.com www.computing.net/answers/windows-2000/remove-lopcom/43511.html

error page is www.lop.com www.computing.net/answers/windows-2000/error-page-is-wwwlopcom/35104.html