21. by Rob K. 2004-05-24 14:05:28
Look2Me is using up all my machines resources and I have to restart every 15 minutes cause I am warned via a pop-up that "The system is dangerously low in resources!" This is wasting great amounts of my time and many other peoples.
If anybody is in the area would they PLEASE deliver a severe beating to this FUCKWAD, here is the address again:
Corp Headquarters
14551 Europa Way
Apple Valley, Minnesota 55124
22. by Gabriel. 2004-05-19 22:05:19
I got the latest variant of this Look2Me spyware and I couldn't get rid of it.
I finally found out how the damned thing worked and got removal instructions which absolutely cleaned my system. The cleansing routine is here:
http://www.computerelvis.com/SquashingBugs.htm
23. by Hunch. 2004-05-19 13:05:03
Look2Me hosts at Rackspace. So does one of my clients that got this nasty stuff. I would be interested in knowing if anyone else who got it either hosts at Rackspace or visits sites hosted at Rackspace. I ask this because I fear Rackspace may have an internal issue that allowed these nuts to spread this via other sites.
24. by Rick. 2004-05-18 18:05:51
This outfit is hosted by Rackspace. I have written to them to complain about the scum they do business with. If they get enough complaints, maybe they would drop these people, although I know they will just go somewhere else. Write to abuse@rackspace.com
25. by anonymous. 2004-05-17 00:05:44
If anyone lives in Minneapolis, stop by and pay this fucker a visit!
Corp Headquarters
14551 Europa Way
Apple Valley, Minnesota 55124
26. by Derek Small. 2004-05-16 23:05:30
I still haven't gotten rid of this bastard POS, look2me, but here is a quick and dirty way to defeat it. Edit your hosts file and add the following line
127.0.0.1 www.look2me.com
it doesn't get rid of it, but at least when the pop-up launches it doesn't do anything.
DIE TIM NICHOLS YOU FUCKING BASTARD!!!!
27. by Pissed!. 2004-05-11 13:05:00
This stupid look2me crap is eating up all my resources, and I have to reboot like every 10 minutes. This is ridiculous. I hope Tim Nichols burns in hell!
28. by Cheng. 2004-05-11 03:05:18
I think I got a new version of look2me on my PC. I found activeds.dll in my system directory (win2k). Now the problem is, somehow this junk managed to have many more services other than winlogon running it such as services.exe and lsass.exe. And in the registry there is no gaurdian under winlogon->notify so I guess it must changed the name of the process. Anybody has had the same problem and knows how to identify the morphed guardian?
29. by Ken. 2004-05-10 23:05:02
This is a clear invasion of privacy. I was able to delete previous look2me versions (msg118, msg121) in XP by going to recovery on bootup, then to Windows (3rd choice), and finally use DOS prompts. However, with their newer junk, it doesn't work. I can temporarily kill them by ending the rundll32 process and then deleting them in Ad-Aware, but when I re-boot, it's back and usually with a different name. I wonder how this Nichols guy would like it if I installed a hidden camera in his house to spy on him? I guess he never learned "Do unto others as you would have them do unto you."
30. by robin. 2004-05-10 02:05:31
Thanks,dude! That seems to have done it! :)
Before, the only way to stop it per WinXP session was to closeRUNDLL32 with Taskkiller and delete the 309 Kb a****s.dll in /SYSTEM32. Had none of the msg***.dlls or DDFF reg entries at all..?
Will be sending NicTech some 5Mb emails now...
31. by ZSport292. 2004-05-10 00:05:25
here is url with more detailed instructions on how to get rid of this pest... its not exactly how i did it but works all the same.
http://computercops.biz/postt31253.html
its about half way down the page, and just use it for your .dll good luck
32. by Amy. 2004-05-09 14:05:55
I got rid of it! (Well, from what I can see) I was having trouble deleting the msg118.dll and the reg file. Everytime I tried to delete the msg118 file I was told "Access Denied," so I know that meant the file was using one of the running processes. I tried ending explorer.exe but that did no good, the reg value kept reinstalling itself and I think I tried every program known to man to get rid of msg118. It turns out that the msg118 and the reg value {DDFFA75A-E81D-4454-89FC-B9FD0631E726} were using the process winlogon.exe. When I ended the process I was able to delete both files and they haven't reinstalled themselves. Now if you try and end winlogon.exe, the task manager will tell you that it is a critical process and will not be ended. To terminate the process I used a program called TuneUp Utilities 2004, which you can download at download.com, just type TuneUp in search box and it will come up. When you get to the menu for the program, click on Administer Control. Then go to TuneUp Process Manager. It will then show you a list of all your running processes and you can end winlogon.exe. The TuneUp program is also useful because it allows you to see what files the processes are using, which is how I figured out where that evil msg118 file was running from (at the top of the process manager window there should be three tabs, Process, Open Files and Performance, go to Open Files) Did anyone else have this problem? If so, I hope I helped!
33. by Robin. 2004-05-09 07:05:54
Hey zsport, could you be a bit more er...exact?
34. by Amy. 2004-05-08 20:05:08
This virus is such a pain in the butt to remove. I can't even delete the registry value {DDFFA75A-E81D-4454-89FC-B9FD0631E726} I keeps reinstalling itself (Yes, I ended explorer.exe). The website for the uninstaller won't let me on, stating that my IP has already accessed the site twice (I have never, to my knowledge, been on their website). It was detected by Bazooka Spyware Scanner (which is a nice program but you have to delete everything manually). I am so frustrated. Timothy Nichols and anyone else associated with this program now have a reserved place in hell.
35. by robin. 2004-05-08 20:05:55
Even after doing all the uninstalls (couldn't find any msg***.dlls or those registry values, Sygate Firewall detected Rundll32.exe connecting to look2me using various dlls on first run of IE, with rundll32 running. In the system32 folder - sorted by modification date -there were several new a****eds.dlls all 309Kb in size, but only aativeds.dll was in the dllcache. Deleting them didn't hurt, I left aativeds alone. Trouble is, it'll probably reload next reboot. But where from?
36. by ZSport292. 2004-05-07 06:05:57
alrite guys i got rid of mine and this is how i did it....
i closed expoler.exe and the rundel stuff... then i went in an deleted all the reg keys for the program, and then i was able to delete the .cpy of the bad dll then i restarted my comp and could delete the other dll hope it works for you
37. by i hate spyware. 2004-05-05 09:05:16
NicTech Networks, Inc.
General Information
Contact: Timothy Nichols
Phone: 612-720-4674
Email: tim@nictechnetworks.com
http://quickstart.clari.net/qs_se/webnews/wed/bl/Bprofile_mn-nictech.RzY7_DSC.html
I did a reverse look up by address & found this phone number-
(952) 997-6502
So what if the number was disconnected. Here's another.
38. by J. 2004-05-04 16:05:01
The "uninstaller" is bullsh*t. It just d/l's the latest version and renames its dll's/relocates its reg keys.
I have yet to successfully remove this POS. I consider it a trojan as it executes code and programs independent of the will of the user. I've been advising my clients (who've paid dearly for its removal) to pursue legal action.
Ad-aware, Spybot and McAfee are able to ID the software (McAfee spots it when it tries to launch a popup ad) but none have been able to eradicate it completely. Disabling "System Restore" in XP before running the above software seems to have helped to some degree as spybot and AA no longer spot the offending reg keys, but McAfee still catches the popups. It claims to move/clean the virus each time, but i still get popups.
Does anyone know where this came from? Kazaa spyware bundle?
PS - Look2me sucks balls.
39. by John. 2004-05-04 16:05:19
I download an unstaller from their site to get rid of it: www.look2me.com/cgi-bin/UnInstaller
40. by ZSport292. 2004-04-29 18:04:06
Bastard made an add.cpy.dll its hard to get rid of... can we sue
Look2Me is using up all my machines resources and I have to restart every 15 minutes cause I am warned via a pop-up that "The system is dangerously low in resources!" This is wasting great amounts of my time and many other peoples.
If anybody is in the area would they PLEASE deliver a severe beating to this FUCKWAD, here is the address again:
Corp Headquarters
14551 Europa Way
Apple Valley, Minnesota 55124
Private Residence
Tim Nichols
(952) 884-5664 - 9149
Colfax Ave S, Minneapolis, MN 55420
22. by Gabriel. 2004-05-19 22:05:19
I got the latest variant of this Look2Me spyware and I couldn't get rid of it.
I finally found out how the damned thing worked and got removal instructions which absolutely cleaned my system. The cleansing routine is here:
http://www.computerelvis.com/SquashingBugs.htm
23. by Hunch. 2004-05-19 13:05:03
Look2Me hosts at Rackspace. So does one of my clients that got this nasty stuff. I would be interested in knowing if anyone else who got it either hosts at Rackspace or visits sites hosted at Rackspace. I ask this because I fear Rackspace may have an internal issue that allowed these nuts to spread this via other sites.
24. by Rick. 2004-05-18 18:05:51
This outfit is hosted by Rackspace. I have written to them to complain about the scum they do business with. If they get enough complaints, maybe they would drop these people, although I know they will just go somewhere else. Write to abuse@rackspace.com
25. by anonymous. 2004-05-17 00:05:44
If anyone lives in Minneapolis, stop by and pay this fucker a visit!
Corp Headquarters
14551 Europa Way
Apple Valley, Minnesota 55124
Private Residence
Tim Nichols
(952) 884-5664 - 9149
Colfax Ave S, Minneapolis, MN 55420
26. by Derek Small. 2004-05-16 23:05:30
I still haven't gotten rid of this bastard POS, look2me, but here is a quick and dirty way to defeat it. Edit your hosts file and add the following line
127.0.0.1 www.look2me.com
it doesn't get rid of it, but at least when the pop-up launches it doesn't do anything.
DIE TIM NICHOLS YOU FUCKING BASTARD!!!!
27. by Pissed!. 2004-05-11 13:05:00
This stupid look2me crap is eating up all my resources, and I have to reboot like every 10 minutes. This is ridiculous. I hope Tim Nichols burns in hell!
28. by Cheng. 2004-05-11 03:05:18
I think I got a new version of look2me on my PC. I found activeds.dll in my system directory (win2k). Now the problem is, somehow this junk managed to have many more services other than winlogon running it such as services.exe and lsass.exe. And in the registry there is no gaurdian under winlogon->notify so I guess it must changed the name of the process. Anybody has had the same problem and knows how to identify the morphed guardian?
29. by Ken. 2004-05-10 23:05:02
This is a clear invasion of privacy. I was able to delete previous look2me versions (msg118, msg121) in XP by going to recovery on bootup, then to Windows (3rd choice), and finally use DOS prompts. However, with their newer junk, it doesn't work. I can temporarily kill them by ending the rundll32 process and then deleting them in Ad-Aware, but when I re-boot, it's back and usually with a different name. I wonder how this Nichols guy would like it if I installed a hidden camera in his house to spy on him? I guess he never learned "Do unto others as you would have them do unto you."
30. by robin. 2004-05-10 02:05:31
Thanks,dude! That seems to have done it! :)
Before, the only way to stop it per WinXP session was to closeRUNDLL32 with Taskkiller and delete the 309 Kb a****s.dll in /SYSTEM32. Had none of the msg***.dlls or DDFF reg entries at all..?
Will be sending NicTech some 5Mb emails now...
31. by ZSport292. 2004-05-10 00:05:25
here is url with more detailed instructions on how to get rid of this pest... its not exactly how i did it but works all the same.
http://computercops.biz/postt31253.html
its about half way down the page, and just use it for your .dll good luck
32. by Amy. 2004-05-09 14:05:55
I got rid of it! (Well, from what I can see) I was having trouble deleting the msg118.dll and the reg file. Everytime I tried to delete the msg118 file I was told "Access Denied," so I know that meant the file was using one of the running processes. I tried ending explorer.exe but that did no good, the reg value kept reinstalling itself and I think I tried every program known to man to get rid of msg118. It turns out that the msg118 and the reg value {DDFFA75A-E81D-4454-89FC-B9FD0631E726} were using the process winlogon.exe. When I ended the process I was able to delete both files and they haven't reinstalled themselves. Now if you try and end winlogon.exe, the task manager will tell you that it is a critical process and will not be ended. To terminate the process I used a program called TuneUp Utilities 2004, which you can download at download.com, just type TuneUp in search box and it will come up. When you get to the menu for the program, click on Administer Control. Then go to TuneUp Process Manager. It will then show you a list of all your running processes and you can end winlogon.exe. The TuneUp program is also useful because it allows you to see what files the processes are using, which is how I figured out where that evil msg118 file was running from (at the top of the process manager window there should be three tabs, Process, Open Files and Performance, go to Open Files) Did anyone else have this problem? If so, I hope I helped!
33. by Robin. 2004-05-09 07:05:54
Hey zsport, could you be a bit more er...exact?
34. by Amy. 2004-05-08 20:05:08
This virus is such a pain in the butt to remove. I can't even delete the registry value {DDFFA75A-E81D-4454-89FC-B9FD0631E726} I keeps reinstalling itself (Yes, I ended explorer.exe). The website for the uninstaller won't let me on, stating that my IP has already accessed the site twice (I have never, to my knowledge, been on their website). It was detected by Bazooka Spyware Scanner (which is a nice program but you have to delete everything manually). I am so frustrated. Timothy Nichols and anyone else associated with this program now have a reserved place in hell.
35. by robin. 2004-05-08 20:05:55
Even after doing all the uninstalls (couldn't find any msg***.dlls or those registry values, Sygate Firewall detected Rundll32.exe connecting to look2me using various dlls on first run of IE, with rundll32 running. In the system32 folder - sorted by modification date -there were several new a****eds.dlls all 309Kb in size, but only aativeds.dll was in the dllcache. Deleting them didn't hurt, I left aativeds alone. Trouble is, it'll probably reload next reboot. But where from?
36. by ZSport292. 2004-05-07 06:05:57
alrite guys i got rid of mine and this is how i did it....
i closed expoler.exe and the rundel stuff... then i went in an deleted all the reg keys for the program, and then i was able to delete the .cpy of the bad dll then i restarted my comp and could delete the other dll hope it works for you
37. by i hate spyware. 2004-05-05 09:05:16
NicTech Networks, Inc.
General Information
Contact: Timothy Nichols
Phone: 612-720-4674
Email: tim@nictechnetworks.com
http://quickstart.clari.net/qs_se/webnews/wed/bl/Bprofile_mn-nictech.RzY7_DSC.html
I did a reverse look up by address & found this phone number-
(952) 997-6502
So what if the number was disconnected. Here's another.
38. by J. 2004-05-04 16:05:01
The "uninstaller" is bullsh*t. It just d/l's the latest version and renames its dll's/relocates its reg keys.
I have yet to successfully remove this POS. I consider it a trojan as it executes code and programs independent of the will of the user. I've been advising my clients (who've paid dearly for its removal) to pursue legal action.
Ad-aware, Spybot and McAfee are able to ID the software (McAfee spots it when it tries to launch a popup ad) but none have been able to eradicate it completely. Disabling "System Restore" in XP before running the above software seems to have helped to some degree as spybot and AA no longer spot the offending reg keys, but McAfee still catches the popups. It claims to move/clean the virus each time, but i still get popups.
Does anyone know where this came from? Kazaa spyware bundle?
PS - Look2me sucks balls.
39. by John. 2004-05-04 16:05:19
I download an unstaller from their site to get rid of it: www.look2me.com/cgi-bin/UnInstaller
40. by ZSport292. 2004-04-29 18:04:06
Bastard made an add.cpy.dll its hard to get rid of... can we sue