Need help
Page 1 of 2 12 LastLast
Results 1 to 10 of 16

Thread: Need help

  1. #1
    IT Specialist Ghost_25inf's Avatar
    Join Date
    Sep 2001
    Location
    Michigan
    Posts
    648

    Question Need help

    Ok heres the deal. There is a site www.lop.com
    this site takes over my screen every time a page doesnt load or an error occurs. I ran adware to see if there was a program but no ads. I deleted my cookies and removed my history and cleaned out all temp files. but this site still shows its ugly head. I first noticed it yesterday when I saw my links where changed and my home page was reset to that site. I wrote them a nasty little note and told them if they dont send me info on how to remove it I was going to report them. So if you have any Idea how to remove this portal I would be in your debt. Thanks.

  2. #2
    Senior Member
    Join Date
    Aug 2001
    Location
    Pittsburgh
    Posts
    153
    I know this may seem stupid but did you run a virus scan?

  3. #3
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    i 'crawled' their site, download their page without opening it, just in case.

    is this a porn site?

    they have anchors for links named hardware, buissness, travel services that point the ip address for fla2.XXXSTORAGE.COM, this way cheap porn blockers can't catch it. these links are mixed in with 'normal' links on their site. certain search words also point to 65.89.43.53

    i really don't tink your threats are gonna mean **** to these bozos.

    Registrant:
    C2, Media Limited
    Pobox 20317
    London, NW11 9ZG
    UK

    meant to be confused with C2 Media.com Ny, ny <their defense is in the comma>

    use an av scanner
    ad-aware
    search your reg for lop.com and 65.89.43.189
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  4. #4
    Senior Member
    Join Date
    Aug 2001
    Posts
    410
    Looks like a "Portal" site. Perhaps it is a javascript?
    I think i have experienced something like what you are, ghost. But it was with yahoo, and wasn't quite so obtrusive.
    savIRC :: The Multi-Platform IRC Client v. 1.8 [Released 9.04.02]

  5. #5
    IT Specialist Ghost_25inf's Avatar
    Join Date
    Sep 2001
    Location
    Michigan
    Posts
    648
    OK I did do a virus scan no virii was found. also did a adware search no adware detected, did search for lop and no such thing found except for the cookie I found and deleted.
    S25vd2xlZGdlIGlzIHBvd2VyIQ

  6. #6
    Banned
    Join Date
    Mar 2002
    Posts
    520
    It could be a restoritive cookie and might come back each time page is loaded. Happens alot.

  7. #7
    AO French Antique News Whore
    Join Date
    Aug 2001
    Posts
    2,126
    Make a Search in your Registry for "www.microsoft.com". I did a quick search in my registry and found out that a few keys under /Key_Local_Machine/Software/Microsoft/Internet Explorer/Main control the address where your browers look-up when a page doesnt load or an error occurs.

    If the Key Default_Page_Url, Default_Search_Ur, Search PAge, Start Page have www.lop.com for data, then change it back to whatever you want.

    Hope it help..
    -Simon \"SDK\"

  8. #8
    Member
    Join Date
    Feb 2002
    Posts
    81
    Yea this happened to me as well although not with the same site. The registry can be a crual mistress when working against you. Search the registry and delete all the lop.com things and you should be fine. Also something to look for if you have NT look and see if there is a webpage in your IIS that could be loading as your default webpage for either your homepage or your 127.0.1.1. When I got the nimda virus there was for a few days a webpage in my IIS telling me that China sucked. Probly wont be anything there but worth a look.
    \"Welcome to the real world...it sucks. Your gunna love it.\'\"

  9. #9
    IT Specialist Ghost_25inf's Avatar
    Join Date
    Sep 2001
    Location
    Michigan
    Posts
    648
    I like to thank SKD, I totaly forgot to check my reg. I also sent lop.com a message warning them not to pull crap like that again or else. I even sent them there ports that where open and told them the name of there OS to scare them. But again thats to all for the help.
    S25vd2xlZGdlIGlzIHBvd2VyIQ

  10. #10
    Banned
    Join Date
    Oct 2001
    Posts
    1,462
    LOL 'You better not mess with me Mr.65.89.43.53, You dont scare me with your fancy Windows95..... Oh, and I would close ports 21,23 and 553 '
    Hehe

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •