PC utilities: WinPatrol and GLB1A2B.exe

No WinPatrol Cannot make This ERROR

Hi,
I have used winPatrol [aka Scotty] for over 10 years.
Scotty has save my rear end many times. I google of GLB1A2B.EXE would have helped.
I got GLB1A2B.EXE after downloading Opera. I knew something was up big time because MRU blaster was finding 4 entries after a clean upp and reboot. I uninstalled Opera and Scotty Popped Up with the file delete on reboot window with these entries: [Rename]NUL=C:\WINDOWS\TEMPOR~1\CONTENT.IE5\
INDEX.DATNUL=C:\WINDOWS\COOKIES\INDEX.DATNUL=C:
\WINDOWS\TEMPOR~1\CONTENT.IE5\INDEX.DATNUL=C:\
WINDOWS\COOKIES\INDEX.DATNUL=C:\WINDOWS\TEMP\GLB1A2B.EXE
ANYTIME YOU SEE ANY EXE IN Scooty`s Warnning You HAVE A BUG of some type. Now the problem. It Is Comming back because i is HARD to get rid of!!!
Try This:
HAVE FUN Bill




glb1a2b.exe is a file extension related to Lopcom.
Below are step by step instructions to remove Lopcom from your computer.
Note: This process is difficult and is not recommend unless you are an expert in this field. The manual process is also dangerous as the removal process requires you to access and edit sensitive files in the registry of your machine and run the risk of totally destroying your computer.

An important point to remember when removing Lopcom is to delete all parts of the Lopcom code. This is a must as Lopcom will rebuild itself and will result in further spreading of the spyware parasite.

Lopcom Description
Lop.com is a search program that may change your browser settings and redirect your search queries to its parent server. Lop.com may also automatically update itself, and gather standard web log information and computer settings, such as your IP address, operating system, web browser type and version, screen resolution, time zone selected, and the version numbers of some of the software installed on your computer.

www.Lop.com

Lop Removal Instructions

Open the Application Data folder. This can be found inside the Windows folder on Windows 95/98/Me; on Windows 2000 and XP it is inside your user folder in 'Documents and Settings', but it's hidden, so go to Tools->Folder Options->View and turn on 'Show hidden files and folders' to see it. In Windows NT 4.0 it is in the user folder inside 'WinNT\Profiles'.

The filenames of Lop Uninstall files can vary for each different installation, but usually under Windows there should not be any files inside Application Data (only folders), so it's generally easy to pick out the culprits. Known filenames for the toolbar DLL (Lop /Toolbar, Lop Uninstall/Rnd) or ayb: protocol DLL (Lop /AYB) include:

blztstull[letter 'a', 'c', 'j', 'p', 's', 't' or 'y'].dll
blztstull['pr', 'tr' or 'oo'].dll
chksbdrlya.dll
dmvcrthl.exe
eaeeishllblc.dll
eelykofrllfrpr.dll
eelykofrllfrj.dll
ealymfrprwch.dll
epllkeeoopr.dll
freabrlaouw.dll
gldqumssfrie.dll
hglllyxrxw.dll
icdrhwno.dll
heeachmstll.dll
meepajlr.dll
ousszidrta.dll
plg_ie[any digit].dll
prxzoustustgr.dll
prnouestssstx.dll
quizbt[any digit].dll
quglwachfs.dll
sstroallhqch.dll
tblchepruprgr.dll
trdzhtxf.exe
trstshcrscksr.dll
ukfroigl.dll
upckeetoutw.dll
veaeyglckr.dll
woafrquzn.dll
yeecrsoustoull.dll
ziebaeeoaeepr.dll

Known filenames for the system tray task and hijacker file include:

asshuktr.exe
bilyooas.exe
byb_save.exe
crgbeaoa.exe
eaymulyl.exe
eeublidc.exe
glxshmcr.exe
ijlysseb.exe
jqumysto.exe
kfriegbs.exe
llfggrdr.exe
lltckiey.exe
Lop Uninstallsearc.exe
meemnckyqbr.exe
meepajlr.exe
mprcouie.exe
oofrkxpe.exe
peebqusz.exe
quveioot.exe
shoucrck.exe
ssmeeibl.exe
tchpeatr.exe
tglblrll.exe
trstdris.exe
ulyuiexeechp.exe
vestufck.exe
vfthrcbr.exe
xogyfhp.exe
ykphmbre.exe
ylynfste.exe

Other files you may find with some versions include icon libraries (known filenames tchejea.lib and iCndE.lib) and loads of GIFs. These can all be deleted too. You might also have some of the following files in the Windows folder:

desktop.htm
dnserror.htm
jexpoofro.htm
i_dnserr.gif
s_dnserr.gif
r_dnserr.gif
b_dnserr.gif
tiejexpoo.gif
xiejexpoo.gif
oiejexpoo.gif
uiejexpoo.gif

Open the registry (Start->Run->regedit) and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. If you have not used the uninstall feature there should still be an entry with a value like 'C:\WINDOWS\APPLIC~1\(task name).exe -QuieT'; delete it. The name of this entry changes in different variants; known names are:

abtu
brchfgl
brfrgroo
chytrw
eeullz
eedrtss
lldrlyk
lssxsh
stoafv
oooami
oooik
oucno
phqtr
pprwly
qncu
stjlee
uaouea
trglckea
xckja
ymste
zvoah

In the Lop /Active variant, there will instead be a 'winactive' entry pointing to winactive.exe. Delete this too.

You should also delete the following entries if you have them and they are not just blank:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Telephony\DomainName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP\Domain
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{... check all interfaces ...}\Domain

Also you can remove the Lop Uninstall settings key if you can find it; it is inside HKEY_LOCAL_MACHINE\Software and has, again, a varying name; known examples are:

ckotetlllyllshz
kseateasteestoe
rhvlveasteafpr
ssaxstxoaieoagrh
TrinityAYB (Lop /Trinity variant)

Next, if you have not used the uninstall feature, open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:

cd "%WinDir%\System"
regsvr32 /u [name of DLL]

substituting the full filename of the DLL, whatever its name is, in Application Data. Tip: You can drag the DLL file from Explorer onto the DOS command prompt window to put the name in so you don't have to type it all out.

Finally, reboot Windows and you should be able to delete all the files mentioned above, along with the shortcuts added to the desktop and the favorites menu. For the Lop /Active variant you should delete the entire 'Active Window' folder inside Program Files.

You can also reset your homepage (from Internet Options->General) and search settings (Internet Options->Programs->Reset Web Settings), and delete the entries added to your Favorites menu. If you use Netscape/Mozilla you will need to reset the home page (Edit->Preferences->Navigator) and remove the Bookmarks too.

You may also wish to check your computer for diallers, as the Lop.com site has been known to include dialler installers. If you have the Lop /IMZ variant it is also possible that FavoriteMan/IMZ may have installed other parasites such as BargainBuddy , IGetNet and n-Case.



Related Files: Active Send bdex.dll bdhelper.dll bdplugin.dll bdsearch.inf bdsrhook.dll bie bos16.exe bos16.exe brpchchtrp dat25.tmp dkbrtfvz.dll download_plugin.exe download_serial.exe dul545.exe dul545.tmp eaiegrs eathouaigril.dll freemp3z.exe glb1a2b.exe glxglltooin.exe iesearch_cnwwdg.cab iethietrfrealyss.exe ige26.exe jfjsshustp.exe kstrttrfqu.dll laq1c.exe launcher.exe lop lopsearch.exe lycrtrprjwb.dll lycrtrprjwgl.dll lycrtrprjwp.dll mp3.exe mp3serch.exe mp3_plugin.exe oouktnoo.exe pgcwvlpn.exe phegzjti.exe plg_ie0.dll plg_ie1.dll plyiegro.exe pnofzqoq.exe psxoaiegrl.dll rem15.exe rem1b.exe rem1b.exe rem22e.exe rem30.exe remc.exe remf.exe rgrthdglchbl.dll rpwvuxb.dll rpwvuxdr.dll rpwvuxgl.dll rpwvuxk.dll rpwvuxll.dll rpwvuxm.dll rpwvuxn.dll rpwvuxtr.dll rpwvuxx.dll rwllouee.lib shioufrs.exe the_ultimate_browser_enhancer.exe thiugst.lib tis22f.exe trcktrblgrglwo.exe trstrgli.lib tsu1.exe ufvbriewieb.dll ufvbriewiegl.dll ujstfrprssck.dll wkz1.exe xievhpub.exe xlystqugl.lib zbyyvyxn.exe zkwlfssr.exe ztkenvup.exe