Ok, I found this board and it looks good. I'm hoping like hell somebody can help me out with this god-forsaken Look2me crap.

This is my first major virus and i have no idea what to do. I ahve tried what seems like everything to get rid of it. I have Norton Internet Security 2004, but somehow it shut itself down while I was on the internet and let in this Look2me thing.

I am getting pop ups and hijacking like you wouldn't believe. If anybody can help me from the beginning to get rid of this thing it would be most appreciated. Thankyou in advance.

Manual Remove

Merijn page, Kill2Me

Direct download of Kill2ME ZIP

None of those worked. The files are still there.

Look2Me supplies two sites for uninstalling instructions:

http://www.look2me.com/app/UnInstaller.php
http://www.look2me.com/app/UnInstall.php

ThatInfoCameFromHere
MrC

BTW, I was able to download and run the uninstaller without having to give up my e-mail address as it states on the spyware site.

flamehead24

If none of the above work...

Try this link:

Msg121Fix!

Make sure you grab the one for your operating system and are offline when you run it...or it will not work.
I infected my xp machine with that crap on purpose...yes I study this crud. It worked for me.
You will also need to clean up the junk that comes with look2me; Ad-aware and spybot will clean out most.
Ad-aware and Spybot will need updating before scans, do scans while offline and all other programs closed including your antivirus to prevent conflicts.
Reboot between each scan/clean.

Ad-aware

Spybot

Tweak ad-aware for best results

Once cleaned up...Prevention:

Spywareblaster

SpywareGuard
_______________________________________

I never give up!

Windows Update

thanks so far guys but still noluck in removing this beast.

i'm still having probs deleting what i thing is the problem file,
msg
msg121.cpy.dll
msg121.dll

and i'm getting popups from,
azjmp - i think

any other things i can try other than a formating of the HD?

flamehead24

Are you logged on as at least user with admin privlidges?
Mabye something else was installed that is reinstalling L2M.
That removal tool should work unless you are getting re-infected.

You downloaded Msg121Fix.zip?
Then...
unzipped file to msg121fix folder?
*All parts should remain as they are in the unzipped folder! !

--Restart computer afresh, as 'Administrator' only,
Remain offline with most programs, unused windows and tasks closed.

--DoubleClick on "!START!.bat" file.
Your computer should restart within 15 seconds.
(Don't touch the screen's prompt box!)
--On next restart,
DoubleClick on "!CLEAN!.bat" file included in the folder.

---=***Done!!!***=---

-Delete the 'Msg121Fix' folder(s)
-Find and clean the hosts file.
Located in Windows/-or- Winnt..\System32\drivers\etc...
Open as text and delete :

----------------------
auto.search.msn.com
search.netscape.com
ieautosearch
----------------------
---these lines if exist.
-Save the file.
-Clear the contents of Temp Internet Files And Temp folders
In %WinDir%\Temp, %User%\*Local Settings\Temp (*hidden folder)
As much as possible.
You will need to show hidden files/folders to find C:\documents and settings\your name\local settings\temp
To do...

Start> settings> control panel> folder options> view.
Check "show hidden files and folders"
Uncheck "hide file extensions for known file types."

Do all your cleaning up once you get the files you need while offline or it does not work.

There is a couple other ways...
Follow instructions carefully on this page:

Fix msg121 Old

I would print out the page....it is kinda techie and you won't have it available offline, and if a step is missed....re-infection results.
Again....make sure you are logged in as user with admin privlidges.

Good luck
___________________________________

I never give up!

Windows Update

Ok. that did it. i'm finally free of look2me. Thanks to everybody who helped.

I did find another one that doesn't want to be deleted too, Huntbar/BTIEIN. Have any ideas on that one?

flamehead24

Glad you got rid of look2me.

Try these links for BTIEN

http://www.pestpatrol.com/PestInfo/i/ibis_toolbar.asp

http://www.kephyr.com/spywarescanner/library/huntbar/index.phtml

If its problems removing entries in the registry..(error deleting key) try this:
http://www.lavahelp.com/articles/v6/04/02/0302.html
_______________________________________

I never give up!

Windows Update

I would like to use the brinkster fix for msg121.cpy.dll, but it says to 'log in as administrator' and I don't know how to do that. Can anyone explain..in detail, please? I have win2000.

Thanks.

I had the look2me problem and used all of the fixes to rid myself of the problem but nothing worked until now. The uninstall from look2me worked. There is a difference that you should be aware of though. I did not encounter the msg121.dll files but instead they were named ajledit.dll and ajledit.cpy.dll. I was able to delte these files but the first would just reappear. After running the uninstall from look2me, it still left the ajledit.dll but I could delete it and it hasn't come back.
Thanks for the link and spread the word about the different file names.
God bless,
Carlos