Spywareblaster Blocking Failure - Lop.com parasite

Lop.com (CLSID: {D44B5436-B3E4-4595-B0E9-106690E70A58})

Lop.com is a browser hijacker. It sets your start page and IE search features to lop.com (or other sites in some of the variants), adds shortcuts to advertisers, and sets your homepage and searchpage back to lop.com at startup if you change them. It can also occasionally pop up advertising windows. Lop.com is frequently installed through pop-up ads, and some sites may exploit IE security holes to install it without the normal warning.

This parasite made it past Spywareblaster 2.5.3 with lastest updates installed.

 

Hi St.Ives,

Welcome at Wilders.

Since lop.com mutates quickly and randomizes almost everything (including the CLSID) SpywareBlaster is not the best tool to stop it. SpywareGuard does a far better job regarding lop.
If you need any help getting rid of the lop infection you could post your HijackThis log
Download, Unzip and run HijackThis, Then click Scan > Save log, save the log as a .txt file and copy & paste its content into your next post.
Don´t fix anything yet. Most of what it finds is harmless.

Or try and follow the instructions I posted in this thread.

Regards,

Pieter

 

While SpywareBlaster can block most webpage ActiveX installs of Lop.com, it cannot block Lop.com if it is bundled with other software that you install. "Messenger Plus" is one of the most recent programs, I believe, that bundles Lop.com.

Best regards,

-Javacool