lop.as solution?
I recently installed AVG antivirus and anti-spyware and started getting the Lop.as threat warnings. After a lot of internet searching and downloading and trying a few different things, it seems to be gone (fingers crossed!).
I downloaded and installed spysweeper trial version, which informed me that the computer was repeatedly trying to connect to IP 82.98.235.63, apparently a known spyware site. Spyware sweeper also found a I suspected that lop.as was being repeatedly downloaded as fast as AVG put it into the virus vault.
When I ran hijackthis, one item that seemed suspect was a Browser Helper (BHO) which on my machine was called vtuvtu.dll. This appears to be a randomly generated file name, because I couldn't find it anywhere on the internet, but I've noticed similar files in some of the hijack.this logs that people have been putting on the internet about lop.as. When I went into the system32 folder, the properties for this file suggested that it had been created very recently. Unfortunately I couldn't delete it, because windows told me the file was being used by a running process. I used a program called Unlocker, which told me that the file was tied in to winlogon.exe, explorer.exe, and Apoint.exe. Because it was stuck to winlogon.exe safe mode wouldn't work to delete it.
After a bit more reading on the internet (
http://www.aquezada.com/staff/julian/journal/?p=109) I used my windows XP setup CD to boot into the recovery console and delete the bastard. Since then, I've had no further messages from AVG about lop.as, and my computer seems to be running quite a lot faster.
HopefullyI've killed the right dll & not something vital, but things seem to be fine so far...
Hope this is helpful!