Page 1 of 2

Looking for some help!

Posted: Sat Oct 01, 2005 5:43 pm
by infinitevalence
I am trying to clean spyware and adware off a computer for a friend from school and i have gotten everything except Look2Me. I just cant find a way to get this damn thing off, if anyone knows anything let me know! im getting desporate.

Posted: Sat Oct 01, 2005 6:41 pm
by sbohdan
the best one I found so ar is spyware nuker 2005. it found en extra 25 after seatrching with ad-aware, spysubtract, spybot search and destroy. now whatever u used found one you couldn't remove? here is how you should do it: right click my computer --> properties -->automatic system restore tab--> disable system restore (uncheck the box and apply). the reason you have to do this is that windows might restore the spyware after a reboot. when you are done --> reboot computer and go to safe mode (usually F8) when you in safe mode run the scan and when you found the sucker delete it. --> reboot and switch back system restore. try getting spyware nuker 2005

http://www.nuker.com I tried lots of other things and this was the best.

Posted: Sat Oct 01, 2005 6:47 pm
by infinitevalence
damn site is down :(

Posted: Sat Oct 01, 2005 7:06 pm
by sbohdan
I just tried. it works.

Posted: Sat Oct 01, 2005 7:08 pm
by infinitevalence
its refusing my connection ?!?

Posted: Sat Oct 01, 2005 7:13 pm
by sbohdan
must be something wrong with your browser. it works. get in. its worthed. there is free scan. you will be surprised to see that there is more than one left on the computer that other ones couldn't detect... I'm using firefox, but I guess it shouldn't matter what browser. :shock:

Posted: Sat Oct 01, 2005 7:20 pm
by infinitevalence
ahha found it, i had it set to my loop back in my host file :)

Posted: Sat Oct 01, 2005 8:12 pm
by sbohdan
let us know how it went

Posted: Sun Oct 02, 2005 12:41 am
by infinitevalence
no good, the program found a bunch of stuff but was not able to clear what i needed. look2me is still on there and i still dont know how to get it off, at this point i think im going to just format the drive for her.

Posted: Sun Oct 02, 2005 11:58 am
by stereo55
Found this on google ... http://www.pchell.com/support/look2me.shtml and this .. http://www.spywareguide.com/product_show.php?id=723 .

Try x-cleaner , worked well for me on other such programs . http://www.xblock.com/
FREE version here : http://www.xblock.com/download-freeware.php ( * NOTE: it does REMOVALS , not just searches*)

Posted: Sun Oct 02, 2005 1:39 pm
by sbohdan
I found this guide on how to remove look2me:

http://www.pchell.com/support/look2me.shtml

try before formating. also because once you format and reinstall it could still come back so would be better to learn how to nuke the sucker (less work also)

also symantec has a lttle app to remove it developed too:

http://securityresponse.symantec.com/av ... SpL2Me.exe

found at this page:

http://securityresponse.symantec.com/av ... ok2me.html

Posted: Sun Oct 02, 2005 1:47 pm
by OgreMustCrush
Have you scanned in safe mode with any of the antispyware programs. That usually does it.

Posted: Sun Oct 02, 2005 1:50 pm
by sbohdan
no , it looks like it is a nasty sucker just like coolwebsearch that requires a separate app. specially designed to remove it.

Posted: Sun Oct 02, 2005 1:53 pm
by OgreMustCrush
Hmm, I was sure I've taken it out with spybot before though.

Posted: Sun Oct 02, 2005 1:57 pm
by -mogwai
i like microsoft's spyware remover

Posted: Sun Oct 02, 2005 2:03 pm
by sbohdan
OgreMustCrush wrote:Hmm, I was sure I've taken it out with spybot before though.
he said, he tried that and didn't work :(

Posted: Sun Oct 02, 2005 2:15 pm
by Apoptosis
Follow the instructions below to manually remove Look2Me

1. Click on Start, Run, and type REGEDIT and click Ok to start the Registry Editor
2. Now open the Windows Task Manager

On Windows 95/98/ME, Press CTRL+ATL+DEL
On Windows NT/2000/XP, Press CTRL+ALT+DEL, Select the Task Manager if needed, and click on the Processes tab

3. In the list of programs, click on EXPLORER.EXE and select End Task or End Process. Repeat this procedure until no explorer.exe process is running (The Start Menu, Task Bar, and System Tray will disappear)
4. Select the Registry Editor (you may have to press ALT + Tab)
5. Delete the following registry keys if they exist

HKEY_LOCAL_MACHINE \SOFTWARE\Classes\CLSID\{DDFFA75A-E81D-4454-89FC-B9FD0631E726}

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ ShellExtensions \ Approved \ {DDFFA75A-E81D-4454-89FC-B9FD0631E726}

6. Close the Registry Editor
7. Restart your computer
9. Now open My Computer and Drive C, open the Windows directory, and then the System directory
Note: %SystemDir% is a variable. By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

9. Delete all files that look similar to the following, where * represents a letter or number

msg{********-****-****-****-************}****.dll

The known variants of Look2Me are associated with the following files:

msg{*.dll
msg116.dll
msg117.dll
msg118.dll
msg119.dll
msg120.dll
msg121.dll
msg122.dll

10. Open Internet Explorer
11. Click Tools, Internet Options
12. Click the Programs tab and then click Reset Web Settings to restore default settings for home page, search page, and other settings.

Posted: Sun Oct 02, 2005 2:25 pm
by Apoptosis
heck... try the automatic remover first:

Automatic Removal Program from Look2Me

Posted: Sun Oct 02, 2005 4:33 pm
by OgreMustCrush
I installed that spyware in a virutal machine. I'll tell what it takes me to remove it.

Posted: Sun Oct 02, 2005 4:52 pm
by infinitevalence
well its looking like i got it using all of these progs... now the problem is i cant get this system on to a network. nothing i try to do works. Every time i try a ipconfig -release -renew its just erros out and i dont know how to fix this yet.