Look2Me Removal Utility (vx2.look2me)

[SimplyTech]

Hello beautiful people of HijackThis.de!

I would like to announce here for the first time the release of a new remedy against the Look2Me (vx2.look2me) malware.

I have spent the last 2 week working hard on this new program and it was really worth it.

SimplyTech.it has released a new freeware program called Look2Me Remover (L2MRemover) and we would love if you can test it if you have a system infected by the latest variant of the look2me trojan.

This trojan is very very dangerous and it uses a new strategy to hijack the infected system. We have got the first advises of its presence since Ruby has informed us of that.

We wish to thank the whole HijackThis.de staff and expecially Ruby for the support, the malware uploads and the friendness shown upon us day by day.

I hope the program will work well on the Windows 2000/XP infected by the look2me malware but, please, sorry us if it won't do its job on any system. We are currently under a v.1.0.0 wich is the same of saying it's a Beta version after all!

A feedback on the success of the program will be very accepted in the future.

The program can be found here:

http://www.simplytech.it/L2MRemover

All the very best for now,

Giancarlo

[Ruby]

Look2Me Remover V.1.2.0
made by Simply Tech:

the new effectively working solution to detect and clean the Systems
which are infected from the latest versions of Look2me.

As you have this new Variant of Look2me on your system,
which has been issued sometime in the last November 2005,
you may want to use the new Look2me Remover.

Instructions of use:

Load down the L2MRemover.zip.
Unzip it with a zip-tool (ZipGenius is free)
into the new to create folder C:\Program Files\Look2meRemover.
(How to create a new folder: Windows Tutorial.)

Please turn off System Restore while cleaning up your system.

1. Click onto L2MRemover.exe, to start te program.
2. Click onto "About" > "Check for updates..." in the menu of the program to update it.
3. Click onto the "Scan" Button and take care that your whole System, Memory and Registry are scanned.



(If it will find a known variant of the
malware it will detect it, make it innocue by injecting
ST-code in the malware while it is running, then it
will list the Registry keys which load the malware at
each restart of the System.)

4. Click onto the "Delete Keys" Button, to clean the Registry from the
keys which cause the infestations to run on the reboot.

(If you feel unsure about the remotion of the Registry
keys you can also check the "Save before delete"
box so a backup file *.reg will be saved just in case
you would to rebuild the deleted keys.)

Note:
Do you have an error message-box that says you need
the Msinet.ocx or Comctl32.ocx:

You can download the DLLs.zip and register the 2 ocx it via Regsvr32 (by following
the instructions in the file ReadMe.txt), or you can
download the -> Look2Me Remover Setup Kit (This last will be easiest.)

More Information: Look2Me Remover V.1.0.0

First version, issued the 20th November 2005.
This version runs only in MS Windows 2000/XP

Having cleaned up your system, turn your System Restore back on.

As your system can't be cleaned by this Remover,
of an other Operation System of an other Variant of Look2me,
you may want to post your HijackThis Logfile
(Know how - HijackThis)
in your own thread on our Board.

With many Thanks to You @ Simply Tech

- for all your hard work in the fight against this Malware
- for releasing it as a new Freeware-Tool
- for the honour that our Board was the first place to introduce your new Look2Me Remover



German - Deutsch

DE: Look2Me Remover

[Ruby]

Translation into German

Hallo ihr tollen Leute von HijackThis.de!

ich möchte gerne hier zum ersten Mal die Herausgabe eines neuen Mittels gegen die Look2me (vx2.look2me) Malware bekanntgeben.

Ich habe die letzten zwei Wochen sehr hart an diesem Programm gearbeitet, und es war diese Arbeit wirklich wert.

SimplyTech.it hat ein neues Freeware Programm herausgegeben, das Look2Me Remover (L2MRemover) heisst, und wir würden es begrüssen, wenn ihr es dann testet, wenn ihr es mit einem System zu tun habt, das mit der neuesten Variante des Look2me Trojaners infiziert ist.

Dieser Trojaner ist sehr sehr gefährlich, und er verwendet eine neue Strategie, ein infiziertes System zu hijacken.
Wir haben die ersten Hinweise über seine Existenz erhalten, als Ruby uns darüber informiert hat.

Wir möchten dem ganzen HijackThis.de Team und besonders Ruby für die Unterstützung danken, fur das Hochladen der Malware und die Freundlichkeit, die uns Tag für Tag erwiesen wird.

Ich hoffe, dass das Programm gut auf den Systemen Windows 2000/XP funktionieren wird, die mit der Look2me Malware infiziert sind, aber wir bitten um Entschuldigung, falls es seiner Aufgabe auf keinem System nachkommt. Wir haben momentan die Version a v.1.0.0, man könnte auch sagen, dass es sich dabei um eine Beta Version handelt (und das nach all der Arbeit).

Wir freuen uns von jetzt an über jede Rückmeldung zum Erfolg unseres Programmes.

Der Look2Me Remover kann von hier herunter geladen werden:

Look2Me Remover
http://www.simplytech.it/L2MRemover

Zunächst alles Gute

Giancarlo

[SimplyTech]

Thanks a lot Ruby

I have uploaded a new zip in this moment (22:21 PM) because I forgot to add the l2mdfn.dat wich is the .dat that contains the definitions that the program must use to detect and kill the malware.

Please download the program again now.

Sorry for the mistake,

All the best,

Giancarlo

[Ruby]

Don't mention - your new remover likes to be great, but

I didn't load it down yet, until now... there was still some other work to do
Take a look into your Mail-Box

Ok, now we will have the surprising moment.
I dont have the L2me Variant on my system yet, doesn't matter, I will try your Remover now.

As I'm not able to come back, you or me have done something wrong

Regards
Ruby

===> But now I have got it

Please have a look here.

FR: Look2Me Remover
EN: Look2Me Remover
DE: Look2Me Remover

All the best to you @ SimplyTech
... and to your new Remover

[Ruby]

Hello dear Users

SimplyTech, our Team-Member
and Producer of the
Look2Me Remover

asks all Users using
Windows 2000
to use his new Look2Me-Remover.

Those of you who want to use this Remover, may want to load down HijackThis, run it and have it save a logfile. Please post this HijackThis Logfile in vB Code on English Help.

We would like to see first a logfile from the infected system with the Adware Look2Me, recognizable on the changing 020 entries in your HijackThis Logfile. Then, after using the new L2Me Remover, it would be fine, to see another new HijackThis Logfile. It would be nice of you to give us a feedback with everything you think it's important to be mentioned.

As you need to use the new L2M-Remover,
please load down the
L2MRemover.zip
and use it by following these instructions.

If you need a zip-tool, we suggest ZipGenius, it is free.

Thank you very much in the name of SimplyTech.

==========================

Liebe Userinnen und User

unser Foren-Mitglied und Hersteller u.a.
des Look2Me-Removers,
SimplyTech,

ersucht
alle User, die Windows 2000
verwenden, seinen neuen Look2Me-Remover anzuwenden.

Wer von euch also eine neue Version von Look2Me auf dem Rechner hat, erkennbar an den sich ständig verändernden Einträgen unter 020 im Logfile, möchte sich bitte bei uns im Forum für HijackThis Logfiles mit einem HijackThis Logfile laut Anleitung erstellt und in dem bei uns verbindlich vorgeschriebenen vB Code gepostet, zu Wort melden.

Dieser Personenkreis wird gebeten,
das L2MRemover.zip herunterzuladen
und entsprechend dieser Anleitung anzuwenden.

Wer zum entpacken ein Zip-Tool benötigt, SIMPLYZIP ist kostenlos.

Wir freuen uns über euer Feedback und würden gerne die Ergebnisse in euren HijackThis-Logfiles sehen. Das heisst, es müsste ein HJT-Logfile aus dem infizierten Zustand des Rechners und ein Logfile nach Anwendung des Removers gepostet werden.

Dankeschön im Namen von SimplyTech

[Ruby]

SimplyTech

makes you know
that he has released today,
29th Jan. 2006,

Look2Me Remover V.1.2.0

(CRASHES and FREEZINGS fixed!)

Look2Me Remover V.1.2.0