Content

Adware-Lop

Type
Program
SubType
Adware
Discovery Date
09/08/2004
Length
varies
Minimum DAT
4299 (10/22/2003)
Updated DAT
5306 (05/29/2008)
Minimum Engine
5.1.00
Description Added
04/21/2004
Description Modified
10/06/2004 12:16 AM (PT)
Risk Assessment
Corporate User
N/A
Home User
N/A

Tab Navigation

Characteristics

This is not a virus or trojan. It is a direct-marketing adware application. This application generates extra pop-up ads while using Internet Explorer. Many versions of this application exists and this description may not cover all.

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported. Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

However, this application is not known to come bundled with another program at the moment.

Installation

Upon execution the following Registry keys are added:

HKEY_CURRENT_USER\Software\tonspartlistfind

HKEY_CURRENT_USER\Software\tonspartlistfind
\antetool

This application injects itself into Internet Explorer, and launches Internet Explorer in the background. It then connects to various URLs to retrieve information for display:

  • ayb.lop.com
  • d4308.upd.lop.com
  • ayb.maximumexperience.com
  • ayb.trinityacquisitions.com
  • r25407.upd.lop.com

Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).

    Symptoms

    N/A This is not a virus or trojan

    Method of Infection

    N/A This is not a virus or trojan

    Variants

    Variants

      N/A

    All Information

    Overview -

    This is a Potentially Unwanted Program (PUP) detection. It is not a virus or trojan. PUPs are any piece of software which a reasonably security-or privacy-minded computer user may want to be informed of.

    Characteristics

    Characteristics -

    This is not a virus or trojan. It is a direct-marketing adware application. This application generates extra pop-up ads while using Internet Explorer. Many versions of this application exists and this description may not cover all.

    This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported. Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

    However, this application is not known to come bundled with another program at the moment.

    Installation

    Upon execution the following Registry keys are added:

    HKEY_CURRENT_USER\Software\tonspartlistfind

    HKEY_CURRENT_USER\Software\tonspartlistfind
    \antetool

    This application injects itself into Internet Explorer, and launches Internet Explorer in the background. It then connects to various URLs to retrieve information for display:

    • ayb.lop.com
    • d4308.upd.lop.com
    • ayb.maximumexperience.com
    • ayb.trinityacquisitions.com
    • r25407.upd.lop.com

    Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch.
    Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).

      Symptoms

      Symptoms -

      N/A This is not a virus or trojan

      Method of Infection

      Method of Infection -

      N/A This is not a virus or trojan

      Removal -

      Removal -

      Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

      Variants

      Variants -

        N/A