Content

Adware-Lop

Type
Program
SubType
Adware
Discovery Date
09/08/2004
Minimum DAT
4299 (10/22/2003)
Updated DAT
5306 (05/29/2008)
Minimum Engine
5.1.00
Description Added
04/21/2004
Description Modified
10/06/2004 12:16 AM (PT)

Tab Navigation

Characteristics

This is not a virus or trojan. It is a direct-marketing adware application. This application generates extra pop-up ads while using Internet Explorer. Many versions of this application exists and this description may not cover all.

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported. Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

However, this application is not known to come bundled with another program at the moment.

Installation

Upon execution the following Registry keys are added:

HKEY_CURRENT_USER\Software\tonspartlistfind

HKEY_CURRENT_USER\Software\tonspartlistfind
\antetool

This application injects itself into Internet Explorer, and launches Internet Explorer in the background. It then connects to various URLs to retrieve information for display:

  • ayb.lop.com
  • d4308.upd.lop.com
  • ayb.maximumexperience.com
  • ayb.trinityacquisitions.com
  • r25407.upd.lop.com

Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).

    Aliases

    Aliases

      N/A