Another nasty spyware that is very difficult to remove. I found a number of tools, but only this one worked for me today in a WinXP SP2 machine.

Download here

1. Close all windows before continuing.
2. Double-click Look2Me-Destroyer.exe to run it.
3. Put a check next to Run this program as a task.
4. You will receive a message saying Look2Me-Destroyer will close and re-open in approximately 10 seconds. Click OK
5. When Look2Me-Destroyer re-opens, click the Scan for L2M button, your desktop icons will disappear, this is normal.
6. Once it's done scanning, click the Remove L2M button.
7. You will receive a Done Scanning message, click OK.
8. When completed, you will receive this message: Done removing infected files! Look2Me-Destroyer will now shutdown your computer, click OK.
9. Your computer will then shutdown.
10. Turn your computer back on.


If Look2Me-Destroyer does not reopen automatically, reboot and try again.

If you receive a message from your firewall about this program accessing the internet please allow it.

If you receive a runtime error '339' please download MSWINSCK.OCX from the link below and place it in your C:\Windows\System32 Directory.

Click Here

I found this information on this site: Go to Cookiegal's post.

Dwight,
After it shuts the computer down, what happens when it will not re-open? I've rebooted 3 times, and still nothing. LOL

chris

Here's another remover Dwight www.simplytech.it/L2MRemover/
Runs like the CWShredder scanner program
Oh And a Note on this Page...

quote:

Please turn off System Restore if it is enabled!
If you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

"Please turn off System Restore if it is enabled!" Bedstor Good point Mike and thanks for pointing that out.

Chris: I would guess that there is an additional problem with this system. Have you tried this in Safe Mode? Have you tried the diagnotic steps in MSCONFIG?

I know I tried several tools (4 or 5) that didn't clear the system before trying the look2me destroyer program. I think this spyware is very dynamic and as a result is very hard to kill. I tried several times to kill it manually by deleting the spyware files found in C:/windows/system32 and discovered that they were renamed during boot-up. I also tried to remove the Registry entrys but the renaming defeated me.

I found these tools using the Google search engine. Most of the tools I found were from reliable sources that I've used in the past. One that you might try is the trial version of Pest Patrol. I did not try that one, but I did read about it and it seems a good possibility.

Pest Patrol

pchell

More tools

Dwight