Please download Look2Me-Destoyer to your desktop.
http://www.atribune.org/ccount/click.php?id=7
[*] Close all windows before continuing.
[*] Double-click
Look2Me-Destroyer.exe to run it.
[*] Put a check next to
Run this program as a task .
[*] You will receive a message saying
Look2Me-Destroyer will close and re-open in approximately 10 seconds. Click
OK[*] When Look2Me-Destroyer re-opens, click the
Scan for L2M button , your desktop icons will disappear, this is normal.
[*] Once it's done scanning, click the
Remove L2M button .
[*] You will receive a
Done Scanning message, click
OK .
[*] When completed, you will receive this message:
Done removing infected files! Look2Me-Destroyer will now shutdown your computer, click
OK .
[*] Your computer will then shutdown.
[*] Turn your computer back on.
If you receive a message from your firewall about this program accessing the internet please allow it.
If you receive a
runtime error '339'. please download MSWINSCK.OCX from the link below and place it in your
C:\Windows\System32. Directory
http://www.ascentive.com/support/new/images/lib/MSWINSCK.OCX
NEXT
Please download the trial version of Ewido Security Suite here:
http://www.ewido.net/en/
Install it, and update the definitions to the newest files.
Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.
Then please run Ewido, and run a full scan. Save the logfile from the scan.
[*] Please post the contents of
C:\Look2Me-Destroyer.txt the
Ewido log and a new
HiJackThis log.