March 22nd, 2002, 10:49 PM
Ok heres the deal. There is a site www.lop.com
this site takes over my screen every time a page doesnt load or an error occurs. I ran adware to see if there was a program but no ads. I deleted my cookies and removed my history and cleaned out all temp files. but this site still shows its ugly head. I first noticed it yesterday when I saw my links where changed and my home page was reset to that site. I wrote them a nasty little note and told them if they dont send me info on how to remove it I was going to report them. So if you have any Idea how to remove this portal I would be in your debt. Thanks.
March 22nd, 2002, 11:15 PM
I know this may seem stupid but did you run a virus scan?
March 23rd, 2002, 04:36 AM
i 'crawled' their site, download their page without opening it, just in case.
is this a porn site?
they have anchors for links named hardware, buissness, travel services that point the ip address for fla2.XXXSTORAGE.COM, this way cheap porn blockers can't catch it. these links are mixed in with 'normal' links on their site. certain search words also point to 22.214.171.124
i really don't tink your threats are gonna mean **** to these bozos.
C2, Media Limited
London, NW11 9ZG
meant to be confused with C2 Media.com Ny, ny <their defense is in the comma>
use an av scanner
search your reg for lop.com and 126.96.36.199
Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
March 23rd, 2002, 04:45 AM
I think i have experienced something like what you are, ghost. But it was with yahoo, and wasn't quite so obtrusive.
March 24th, 2002, 02:07 AM
OK I did do a virus scan no virii was found. also did a adware search no adware detected, did search for lop and no such thing found except for the cookie I found and deleted.
March 24th, 2002, 02:16 AM
It could be a restoritive cookie and might come back each time page is loaded. Happens alot.
March 24th, 2002, 04:29 AM
Make a Search in your Registry for "www.microsoft.com". I did a quick search in my registry and found out that a few keys under /Key_Local_Machine/Software/Microsoft/Internet Explorer/Main control the address where your browers look-up when a page doesnt load or an error occurs.
If the Key Default_Page_Url, Default_Search_Ur, Search PAge, Start Page have www.lop.com for data, then change it back to whatever you want.
Hope it help..
March 24th, 2002, 05:46 AM
Yea this happened to me as well although not with the same site. The registry can be a crual mistress when working against you. Search the registry and delete all the lop.com things and you should be fine. Also something to look for if you have NT look and see if there is a webpage in your IIS that could be loading as your default webpage for either your homepage or your 127.0.1.1. When I got the nimda virus there was for a few days a webpage in my IIS telling me that China sucked. Probly wont be anything there but worth a look.
\"Welcome to the real world...it sucks. Your gunna love it.\'\"
March 24th, 2002, 08:43 AM
I like to thank SKD, I totaly forgot to check my reg. I also sent lop.com a message warning them not to pull crap like that again or else. I even sent them there ports that where open and told them the name of there OS to scare them. But again thats to all for the help.
March 24th, 2002, 02:08 PM
LOL 'You better not mess with me Mr.188.8.131.52, You dont scare me with your fancy Windows95..... Oh, and I would close ports 21,23 and 553 '