Looking for some help!

infinitevalence · Post by **infinitevalence** » Sat Oct 01, 2005 5:43 pm

I am trying to clean spyware and adware off a computer for a friend from school and i have gotten everything except Look2Me. I just cant find a way to get this damn thing off, if anyone knows anything let me know! im getting desporate.

sbohdan · Post by **sbohdan** » Sat Oct 01, 2005 6:41 pm

the best one I found so ar is spyware nuker 2005. it found en extra 25 after seatrching with ad-aware, spysubtract, spybot search and destroy. now whatever u used found one you couldn't remove? here is how you should do it: right click my computer --> properties -->automatic system restore tab--> disable system restore (uncheck the box and apply). the reason you have to do this is that windows might restore the spyware after a reboot. when you are done --> reboot computer and go to safe mode (usually F8) when you in safe mode run the scan and when you found the sucker delete it. --> reboot and switch back system restore. try getting spyware nuker 2005

http://www.nuker.com I tried lots of other things and this was the best.

infinitevalence · Post by **infinitevalence** » Sat Oct 01, 2005 6:47 pm

damn site is down

sbohdan · Post by **sbohdan** » Sat Oct 01, 2005 7:06 pm

I just tried. it works.

infinitevalence · Post by **infinitevalence** » Sat Oct 01, 2005 7:08 pm

its refusing my connection ?!?

sbohdan · Post by **sbohdan** » Sat Oct 01, 2005 7:13 pm

must be something wrong with your browser. it works. get in. its worthed. there is free scan. you will be surprised to see that there is more than one left on the computer that other ones couldn't detect... I'm using firefox, but I guess it shouldn't matter what browser.

infinitevalence · Post by **infinitevalence** » Sat Oct 01, 2005 7:20 pm

ahha found it, i had it set to my loop back in my host file

sbohdan · Post by **sbohdan** » Sat Oct 01, 2005 8:12 pm

let us know how it went

infinitevalence · Post by **infinitevalence** » Sun Oct 02, 2005 12:41 am

no good, the program found a bunch of stuff but was not able to clear what i needed. look2me is still on there and i still dont know how to get it off, at this point i think im going to just format the drive for her.

stereo55 · Post by **stereo55** » Sun Oct 02, 2005 11:58 am

Found this on google ... http://www.pchell.com/support/look2me.shtml and this .. http://www.spywareguide.com/product_show.php?id=723 .

Try x-cleaner , worked well for me on other such programs . http://www.xblock.com/
FREE version here : http://www.xblock.com/download-freeware.php ( * NOTE: it does REMOVALS , not just searches*)

sbohdan · Post by **sbohdan** » Sun Oct 02, 2005 1:39 pm

I found this guide on how to remove look2me:

http://www.pchell.com/support/look2me.shtml

try before formating. also because once you format and reinstall it could still come back so would be better to learn how to nuke the sucker (less work also)

also symantec has a lttle app to remove it developed too:

http://securityresponse.symantec.com/av ... SpL2Me.exe

found at this page:

http://securityresponse.symantec.com/av ... ok2me.html

OgreMustCrush · Post by **OgreMustCrush** » Sun Oct 02, 2005 1:47 pm

Have you scanned in safe mode with any of the antispyware programs. That usually does it.

sbohdan · Post by **sbohdan** » Sun Oct 02, 2005 1:50 pm

no , it looks like it is a nasty sucker just like coolwebsearch that requires a separate app. specially designed to remove it.

OgreMustCrush · Post by **OgreMustCrush** » Sun Oct 02, 2005 1:53 pm

Hmm, I was sure I've taken it out with spybot before though.

-mogwai · Post by **-mogwai** » Sun Oct 02, 2005 1:57 pm

i like microsoft's spyware remover

sbohdan · Post by **sbohdan** » Sun Oct 02, 2005 2:03 pm

OgreMustCrush wrote:Hmm, I was sure I've taken it out with spybot before though.

he said, he tried that and didn't work

Post by **Apoptosis** » Sun Oct 02, 2005 2:15 pm

Follow the instructions below to manually remove Look2Me

1. Click on Start, Run, and type REGEDIT and click Ok to start the Registry Editor
2. Now open the Windows Task Manager

On Windows 95/98/ME, Press CTRL+ATL+DEL
On Windows NT/2000/XP, Press CTRL+ALT+DEL, Select the Task Manager if needed, and click on the Processes tab

3. In the list of programs, click on EXPLORER.EXE and select End Task or End Process. Repeat this procedure until no explorer.exe process is running (The Start Menu, Task Bar, and System Tray will disappear)
4. Select the Registry Editor (you may have to press ALT + Tab)
5. Delete the following registry keys if they exist

HKEY_LOCAL_MACHINE \SOFTWARE\Classes\CLSID\{DDFFA75A-E81D-4454-89FC-B9FD0631E726}

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ ShellExtensions \ Approved \ {DDFFA75A-E81D-4454-89FC-B9FD0631E726}

6. Close the Registry Editor
7. Restart your computer
9. Now open My Computer and Drive C, open the Windows directory, and then the System directory
Note: %SystemDir% is a variable. By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

9. Delete all files that look similar to the following, where * represents a letter or number

msg{********-****-****-****-************}****.dll

The known variants of Look2Me are associated with the following files:

msg{*.dll
msg116.dll
msg117.dll
msg118.dll
msg119.dll
msg120.dll
msg121.dll
msg122.dll

10. Open Internet Explorer
11. Click Tools, Internet Options
12. Click the Programs tab and then click Reset Web Settings to restore default settings for home page, search page, and other settings.

Post by **Apoptosis** » Sun Oct 02, 2005 2:25 pm

heck... try the automatic remover first:

Automatic Removal Program from Look2Me

OgreMustCrush · Post by **OgreMustCrush** » Sun Oct 02, 2005 4:33 pm

I installed that spyware in a virutal machine. I'll tell what it takes me to remove it.

infinitevalence · Post by **infinitevalence** » Sun Oct 02, 2005 4:52 pm

well its looking like i got it using all of these progs... now the problem is i cant get this system on to a network. nothing i try to do works. Every time i try a ipconfig -release -renew its just erros out and i dont know how to fix this yet.