*wipes brow* whew! took me 5 days to figure out how to get rid of the SAME problem you have.. I ran ad-aware and spy bot it wouldn't get rid of the 'filename.cpy.dll' file.. the filename is randomly generated.. mine was 'amctres.dll' and 'amctres.cpy.dll'.. the 'filename.dll' is what uses winlogon.exe to connect to the internet to download more ads/etc...
Here's how to remove the spyware/adware for GOOD!
Try this first:
The UnInstaller for the Look2Me application can be found at:
http://www.look2me.com/cgi-bin/UnInstaller
After using that run the spy bot or ad-aware programs. If it STILL finds the 'filename.cpy.dll' then you'll have to manually remove it using the following (these are instructions from Look2Me and they worked!):
Windows 2000, XP, 2003
1.) First thing we need to do is get the actual file name;
Version 1.22: which can be done by using the Search - for files and
folders type in *.cpy.dll and look in the System32 directory.
'whatever filename you get, you'll need to write that down because
you'll
need to enter that in the command prompt a little later on.
ex: if you found aabbcc.cpy.dll then you will also have the file
aabbcc.dll.
you will always have 2 files, one is the copy, the other is the one
that
loads with Winlogon.-and both must be deleted.
Version 1.21: msg121.dll and msg121.cpy.dll
Version 1.20: msg120.dll and msg120.cpy.dll
Version 1.18: msg118.dll and msguard.dll
Version 1.17: msg117.dll
Version 1.16: msg116.dll
Version 1.15 and less: msg{********-****-****-****-************}###.dll
-
where the '*' are either capitals or numbers and the #### equals to a
zero
and the version; for example '0115'. An example filename for version
1.15
would be: msg{DDFFA75A-E81D-4454-89FC-B9FD0631E726}0115.dll
One the above files should be present in the System directory of
Windows;I.E. 'C:\Windows\System32\', if this is not the case then the
Look2Me application is not present (anymore).
Write down the filename you've found in your Windows System directory,
we'll reference that particular filename below by '<filename.dll>'
2.) You'll need your Windows XP or 2000 cd now, and put it in the CD
rom
tray. then restart your computer
'this should cause your computer to boot from the CD instead of the
hard
drive..(if not your you'll need to enter the BIOS and set the boot
order so
the CD rom is first in the list.)
---Booting off the Windows CD rom into recovery console---
Quote
-You should get a "press any key to boot from Cd" message, so do that.
-It will load a bunch of files and eventually give you a menu where you
can
select the "Recovery Console" by pressing R
-You'll see your Windows Installation like "C:\Windows", type the
number 1
and press enter.
-Administrator password is next: is probably blank so just press enter,
unless you set one in which case enter it.
-With all that done you'll end up with a C:\Windows>
If this simply does not work for you and you cannot get this far
From Windows put your WindowsXP CD in the tray and cancel out of any
autorun setups etc. that may popup.
From the Start button >> Run >> type D:\i386\winnt32.exe /cmdcons hit
[Ok]
and follow the prompts to add recovery console as a boot option.
*which goes without saying, edit that command to match the drive letter
of
your CD rom, I used D: as an example.
3.) Once we are at a working C:\> prompt from the recovery console, you
will type the following:(your going to use that name you wrote down of
the
file we searched for at the start of all this, not my example
"aabbcc.dll")
del C:\Windows\System32\<filename.dll>
and then (versions 1.20 and above)
del C:\Windows\System32\<filename.cpy.dll>
and then type
Exit
Eject the CD from the tray and reboot to Normal windows mode.
Now those files are removed and programs like Ad-aware with an updated
reference file can clean up the rest of the third party applications
that
might be on your PC.
Notes:
-Remember your pathnames.
Typical WindowsXP = C:\Windows\System32\<filename.dll>
Typical Windows2K = C:\WINNT\System32\<filename.dll>
and edit the drive letter if needed as all NT systems are not
necessarily
installed on C:\
**end**
This is how I got rid of it..
Since I have a eMachine laptop my Windows XP cd didn't have the correct file paths/etc so instead i used START >> RUN >> then typed:
C:\windows\i386\winnt32.exe /cmdcons
Installed the Windows Recovery Console (it downloads from Microsofts servers).. restart your computer.. it'll ask if you want to start up 'Windows XP' or 'Windows Recovery Console'.. select Recovery.. when you get to the command prompt just use the:
del C:\Windows\System32\filename.dll
del C:\Windows\System32\filename.cpy.dll
then type:
Exit
It'll be gone and your "Loading Personal Settings" when you start your computer loads fast again! And no more annoying pop up ads! (To remove Windows Recovery Console when you're finished visit: http://support.microsoft.com/default.aspx?scid=kb;en-us;555032)
Let me know if this helps you! :)
jonnyboyca@yahoo.com
