HTTP LOP Toolbar Activity

Hi,

My Norton Internet Security Firewall keeps telling me IP 127.0.0.1 is attempting to send typical HTTP LOP Toolbar Activity information.

I’m using Avast! 4.7 Home and I ran Avast!Cleaner 1.0.209 to no result.

How can I get rid of that HTTP LOP thing?

Thanks for your help.

The problem is probably Norton Firewall. the IP 127.0.0.1 is localhost, e.g. your computer localhost proxy

I get firefox outbound connection to localhost (127.0.0.1) 12080
The web shield uses localhost 127.0.0.1 port 12080 to intercept http traffic so that it may be scanned.

What application does the Norton firewall say is the process name ?

HTTP LOP Toolbar Activity
Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

Description

This signature detects Adware.Lop communicating and requesting information from its controlling server.

Additional Information

Adware.Lop adds its own toolbar and search button to Internet Explorer.

Adware:
Programs that facilitate delivery of advertising content to the user through their own window, or by utilizing another program’s interface. In some cases, these programs may gather information from the user’s computer, including information related to Internet browser usage or other computing habits, and relay this information back to a remote computer or other location in cyber-space.

Adware can be downloaded from Web sites (typically in shareware or freeware), email messages, and instant messengers. Additionally, a user may unknowingly receive and/or trigger adware by accepting an End User License Agreement from a software program linked to the adware, or from visiting a Web site that downloads the adware with or without an End User License Agreement.

Affected:

Microsoft Windows 2000 Advanced Server SP1, SP2, SP3, SP4
Microsoft Windows 2000 Datacenter Server SP1, SP2, SP3, SP4
Microsoft Windows 2000 Professional SP1, SP2, SP3, SP4
Microsoft Windows 2000 Resource Kit
Microsoft Windows 2000 Server SP1, SP2, SP3, SP4
Microsoft Windows 2000 Server Japanese Edition
Microsoft Windows 2000 Terminal Services SP1, SP2, SP3, SP4
Microsoft Windows 2000 Workstation rev.2031, rev.2072, rev.2195, SP1, SP2, SP3
Microsoft Windows 95 Build 490.R6, j, SP1, SR2
Microsoft Windows 98 a, b, j, SP1
Microsoft Windows 98 With Plus! Pack
Microsoft Windows 98SE
Microsoft Windows CE 2.0, 3.0, 4.2
Microsoft Windows ME
Microsoft Windows NT 3.5, 3.5.1, 3.5.1 SP1, 3.5.1 SP2, 3.5.1 SP3, 3.5.1 SP4, 3.5.1 SP5, 3.5.1 SP5 alpha, 4.0, 4.0 alpha, 4.0 SP1, 4.0 SP1 alpha, 4.0 SP2, 4.0 SP2 alpha, 4.0 SP3, 4.0 SP3 alpha, 4.0 SP3 alpha, 4.0 SP4, 4.0 SP4 alpha, 4.0 SP5, 4.0 SP5 alpha, 4.0 SP6, 4.0 SP6 alpha, 4.0 SP6a, 4.0 SP6a alpha
Microsoft Windows NT 4.0 Option Pack
Microsoft Windows NT Enterprise Server 4.0, 4.0 SP1, 4.0 SP2, 4.0 SP3, 4.0 SP4, 4.0 SP5, 4.0 SP6, 4.0 SP6a
Microsoft Windows NT Server 4.0, 4.0 SP1, 4.0 SP2, 4.0 SP3, 4.0 SP4, 4.0 SP5, 4.0 SP6, 4.0 SP6a
Microsoft Windows NT Terminal Server 4.0, 4.0 alpha, 4.0 SP1, 4.0 SP2, 4.0 SP3, 4.0 SP4, 4.0 SP5, 4.0 SP6, 4.0 SP6a, 4.0 SP6a
Microsoft Windows NT Workstation 4.0, 4.0 SP1, 4.0 SP2, 4.0 SP3, 4.0 SP4, 4.0 SP5, 4.0 SP6, 4.0 SP6a
Microsoft Windows Server 2003 Datacenter Edition SP1, SP1 Beta 1
Microsoft Windows Server 2003 Datacenter Edition 64-bit SP1, SP1 Beta 1
Microsoft Windows Server 2003 Datacenter x64 Edition
Microsoft Windows Server 2003 Enterprise Edition SP1, SP1 Beta 1
Microsoft Windows Server 2003 Enterprise Edition 64-bit SP1, SP1 Beta 1
Microsoft Windows Server 2003 Enterprise x64 Edition
Microsoft Windows Server 2003 Standard Edition SP1, SP1 Beta 1
Microsoft Windows Server 2003 Standard x64 Edition
Microsoft Windows Server 2003 Web Edition SP1, SP1 Beta 1
Microsoft Windows Vista Beta
Microsoft Windows XP
Microsoft Windows XP 64-bit Edition SP1
Microsoft Windows XP 64-bit Edition Version 2003 SP1
Microsoft Windows XP Embedded SP1
Microsoft Windows XP Home SP1, SP2
Microsoft Windows XP Media Center Edition SP1, SP2
Microsoft Windows XP Professional SP1, SP2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Tablet PC Edition SP1, SP2

Lop Dot Com is adware and you usually see either browser redirects and or pop-up adverts so are you seeing any thing like this.

See this search, http://www.google.com/search?num=50&q="lop+dot"+com

If you haven’t already got this software (freeware), download, install, update and run it.

  1. Ewido, a.k.a. avg anti-spyware If using winXP. or a-Squared free if using win98/ME.
  2. Ad-Aware SE Personal Edition

OK I installed and ran AVG. It found a bunch of trakingCookies, Adware.Generic and Trojan.Galapoper

Hopefully it has resolved the issue. I’ll let you know in a week or so.

Thanks much for the help.

No problem, welcome to the forums.

A google search for Trojan.Galapoper returns many hits this is just one, Trojan.Galapoper, it may be related as it does try to connect.

Trojan.Galapoper.A is a Trojan horse contacts a remote Web site and downloads other risks onto the compromised computer.

You will have to see it its removal stops the outbound connection attempts.