Spywareblaster Blocking Failure - Lop.com parasite

Discussion in 'SpywareBlaster & Other Forum' started by St.Ives, Jun 15, 2003.

Thread Status:
Not open for further replies.
  1. St.Ives

    St.Ives Registered Member

    Jun 14, 2003
    Lop.com (CLSID: {D44B5436-B3E4-4595-B0E9-106690E70A58})

    Lop.com is a browser hijacker. It sets your start page and IE search features to lop.com (or other sites in some of the variants), adds shortcuts to advertisers, and sets your homepage and searchpage back to lop.com at startup if you change them. It can also occasionally pop up advertising windows. Lop.com is frequently installed through pop-up ads, and some sites may exploit IE security holes to install it without the normal warning.

    This parasite made it past Spywareblaster 2.5.3 with lastest updates installed.
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Apr 27, 2002
    Hi St.Ives,

    Welcome at Wilders. :)

    Since lop.com mutates quickly and randomizes almost everything (including the CLSID) SpywareBlaster is not the best tool to stop it. SpywareGuard does a far better job regarding lop.
    If you need any help getting rid of the lop infection you could post your HijackThis log
    Download, Unzip and run HijackThis, Then click Scan > Save log, save the log as a .txt file and copy & paste its content into your next post.
    Don´t fix anything yet. Most of what it finds is harmless.

    Or try and follow the instructions I posted in this thread.


  3. javacool

    javacool BrightFort Moderator

    Feb 10, 2002
    While SpywareBlaster can block most webpage ActiveX installs of Lop.com, it cannot block Lop.com if it is bundled with other software that you install. "Messenger Plus" is one of the most recent programs, I believe, that bundles Lop.com.

    Best regards,

Thread Status:
Not open for further replies.