C2.LOP
LOP, or Live Online Portal, is malware that is installed on Microsoft Windows.
Lop.com is a web site owned by C2Media LTD. It is a pay-per-click search portal where other websites will pay for each click to their sites via LOP. A method they used to get people to their site was to install a browser hijacker component on people's computers which would advertise their site through pop-ups. The installer could turn the user's web browser into a device with different links to lop.com.
Older variants of LOP were quite predictable and installed Browser Helper Objects and startup entries with known names. Lately, LOP variants have been using random English words strung together in a phrase as their executable names and have been placing these executables in the user's application data directory. For example, there are LOP variants which call their file "meal dog house bone.exe".
Known programs that bundle LOP
- Patchou's Messenger Plus
- Warez P2P Client
References
- Healan, M. (2004). Lop.com. Retrieved Jun. 13, 2005, from SpywareInfo Web site: www.spywareinfo.com/articles/lop/. (site is no longer available)
- Clover, A. (n.d.). lop. Retrieved Jun. 13, 2005, from doxdesk.com Web site: http://www.doxdesk.com/parasite/lop.html.