Security Stronghold security made easy

How to remove Look2Me (ads, banners, deals)


* What is Look2Me

* Download WiperSoft Antispyware Malware Remediation Tool

* Remove Look2Me manually

* Uninstall Look2Me from Windows 10

* Uninstall Look2Me from Windows 8/8.1

* Uninstall Look2Me from Windows 7

* Get Professional Support

* Read Comments


Threat indicator: MEDIUM

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Affected browsers:

Look2Me

dw.exe

Badware

Win32 (Windows XP, Vista/7, 8/8.1, Windows 10)

Google Chrome, Mozilla Firefox, Internet Explorer, Safari


Computers where IE is the primary browser program are particularly vulnerable to Look2Me assails even if there's a seemly Look2Me removal tool on PC as this browser application is tightly wholistic with operating system that lets Look2Me to admission to crucial system parts, so it is needful to remove Look2Me just now. 92 percentage of questioned consumers reported they didn't know about Look2Me existance on their machines. Some Look2Me authors infest platform through security holes in the site or in other applications (even Look2Me removal tools), so it's urgently obligatory to remove Look2Me or at the least try to perform Look2Me removal action. Look2Me that meddles with net programs causes obstacle with WAD spreading the dure necessity in Look2Me removal tools. Look2Me removal tool can remove Look2Me which is already in your machine that is the most notorious method when performing Look2Me removal operation. Look2Me removal tools inspect the information contents of the Windows registry, computer computer files and setup applications and remove Look2Me that uncovers itself.


Look2Me intrusion method

Look2Me installs on your PC along with free software. This method is called "bundled installation". Freeware offers you to install additional module (Look2Me). Then if you fail to decline the offer it starts hidden installation. Look2Me copies its file(s) to your hard disk. Its typical file name is dw.exe. Sometimes it creates new startup key with name Look2Me and value dw.exe. You can also find it in your processes list with name dw.exe or Look2Me. Also, it can create folder with name Look2Me under C:\Program Files\ or C:\ProgramData. After installation Look2Me starts displaying ads, pop-ups, banners on your PC or in browsers. It is recommended to remove Look2Me immediately.


Download Wipersoft Antispyware

Download this advanced removal tool and solve problems with Look2Me and dw.exe (download of fix will start immediately):

Download WiperSoft Antispyware to remove Look2Me

* WiperSoft Antispyware was developed to remove threats like Look2Me in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

Features of WiperSoft Antispyware

* Removes all files created by viruses.

* Removes all registry entries created by viruses.

* You can activate System and Network Guards and forget about malware.

* Can fix browser problems and protect browser settings.

* Removal is guaranteed - if Wipersoft fails ask for FREE support.

* 24/7 Spyware Helpdesk Support included into the package.


Download Stronghold AntiMalware by Security Stronghold LLC

Download antimalware designed specifically to remove threats like Look2Me and dw.exe (download of fix will start immediately):

Download AntiMalware to remove Look2Me

Features of Stronghold Antimalware

* Removes all files created by Look2Me.

* Removes all registry entries created by Look2Me.

* Fixes browser redirection and hijack if needed.

* "Toolbar Remover" tool will help you get rid of unwanted browser extensions.

* Removal is guaranteed - if Stronghold AntiMalware fails ask for FREE support.

* 24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Let our support team solve your problem with Look2Me and remove Look2Me right now!

support person

Submit support ticket below and describe your problem with Look2Me. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Look2Me. Trouble-free tech support with over 10 years experience removing malware.


Submit support ticket

Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

* Technical details of Look2Me threat.

* Manual Look2Me removal.

* Download Look2Me Removal Tool.


How to remove Look2Me manually

This problem can be solved manually by deleting all registry keys and files connected with Look2Me, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Look2Me.

To get rid of Look2Me, you should:


1. Kill the following processes and delete the appropriate files:


  • no.exe
  • allui.dll
  • msg{1e253d5d-6add-4fe9-829c-f51038158be5}0110.dll
  • msg{1e253d5d-6add-4fe9-829c-f51038158be5}0111.dll
  • msg{46b08877-2be4-4f35-8e77-034c2142321c}0115.dll
  • msg{5bef546a-e3c1-489c-996a-c9688d985ae0}0110.dll
  • msg{5bef546a-e3c1-489c-996a-c9688d985ae0}0111.dll
  • msg{63de1ad9-f0c6-4dac-886a-5a9707b0d23c}0110.dll
  • msg{63de1ad9-f0c6-4dac-886a-5a9707b0d23c}0111.dll
  • msg{93396c3f-aea3-4ac0-bb55-81f0f0414a24}0113.dll
  • msg{9d4f5b7c-2a4b-46c5-99a7-4c775b688d45}0110.dll
  • msg{9d4f5b7c-2a4b-46c5-99a7-4c775b688d45}0111.dll
  • msg{aac5700f-954a-47b7-9746-871ae8e634e4}0115.dll
  • msg{b9a9ac6a-2cc9-4a24-a250-bea974703ff8}0110.dll
  • msg{b9a9ac6a-2cc9-4a24-a250-bea974703ff8}0111.dll
  • msg{d331b768-d6da-41e8-a7b6-78ed724126c0}0115.dll
  • msg{e01b47a7-a499-4fee-83c2-b0684ca28e6b}0115.dll
  • msg{e8d8ffef-30a4-4df1-a618-e0599a0d0a15}0110.dll
  • msg{e8d8ffef-30a4-4df1-a618-e0599a0d0a15}0111.dll
  • msg{15dd85c0-1b81-11d8-a1e4-00a0cc251329}0113.dll
  • atifile.dll
  • zppfldr.dll
  • 3dsdpi.dll
  • adctres.dll
  • avsetupc.dll
  • l68mlgl116q.dll
  • msg{????????-????-????-????-????????????}????.dll
  • msg116.dll
  • msg117.dll
  • msg118.dll
  • msg119.dll
  • msg120.dll
  • msg122.dll

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

**Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.


2. Delete the following malicious folders:


no information


3. Delete the following malicious registry entries and\or values:


  • Key: software\look2me
  • Key: SOFTWARE\Classes\CLSID\{DDFFA75A-E81D-4454-89FC-B9FD0631E726}
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Guardian
    Value: ID
  • Key:
    software\microsoft\windows nt\currentversion\winlogon\notify\guardianorvcb

    Value: @
  • Key: SOFTWARE\Classes\CLSID\{A7CD5137-D2D6-4E2F-8279-4E7631159712}
  • Key:
    SOFTWARE\Microsoft\Windows\CurrentVersion\ShellExtensions\Approved\{DDFFA-E81D-4454-89FC-B9FD0631E726}
  • Key:
    SOFTWARE\Microsoft\Windows\CurrentVersion\ShellExtensions\Approved\{DDFFA75A-E81D-4454-89FC-B9FD0631E726}
  • Key: CLSID\{423F0AEB-59E6-4190-A39E-03755D01B235}\InprocServer32
    Value: ThreadingModel
  • Key:
    CLSID\{423F0AEB-59E6-4190-A39E-03755D01B235}\Implemented Categories\{00021492-0000-0000-C000-000000000046}
  • Key: CLSID\{423F0AEB-59E6-4190-A39E-03755D01B235}\Implemented Categories
  • Key: CLSID\{423F0AEB-59E6-4190-A39E-03755D01B235}
    Value: IDEx
  • Key: CLSID\{BE1409B6-E26D-4492-B262-2983A670F9F2}
    Value: IDEx
  • Key: CLSID\{BE1409B6-E26D-4492-B262-2983A670F9F2}\Implemented Categories
  • Key:
    CLSID\{BE1409B6-E26D-4492-B262-2983A670F9F2}\Implemented Categories\{00021492-0000-0000-C000-000000000046}
  • Key: CLSID\{BE1409B6-E26D-4492-B262-2983A670F9F2}\InprocServer32
    Value: ThreadingModel
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Guardian
    Value: Idex
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Urls
    Value: DllName
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winm32
    Value: Startup
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winm32
    Value: Impersonate
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winm32
    Value: Asynchronous
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winm32
    Value: MaxWait
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Control Panel

    Value: DllName
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\CSCSettings

    Value: DllName
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Uninstall
    Value: DllName
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
    Value: DllName
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Asynchronous
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: DllName
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Impersonate
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Logon
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Logoff
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Shutdown
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Asynchronous
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: DllName
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Impersonate
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Logon
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Logoff
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Shutdown
  • Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Asynchronous
  • Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: DllName
  • Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Impersonate
  • Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Logon
  • Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Logoff
  • Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
    Value: Shutdown
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Asynchronous
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: DllName
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Impersonate
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Logon
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Logoff
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout

    Value: Shutdown
  • Key: Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    Value: {423F0AEB-59E6-4190-A39E-03755D01B235}
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RunOnce
    Value: DllName
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: DllName
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Asynchronous
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Impersonate
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Logon
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Logoff
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Shutdown
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Asynchronous
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: DllName
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Impersonate
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Logon
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Logoff
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex

    Value: Shutdown
  • Key:
    Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ThemeManager

    Value: DllName
  • Key:
    SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Internet Settings

    Value: DllName
  • Key: Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    Value: {BE1409B6-E26D-4492-B262-2983A670F9F2}
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
    Value: Asynchronous
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
    Value: DllName
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
    Value: Impersonate
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
    Value: Logon
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
    Value: Logoff
  • Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
    Value: Shutdown

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.


Uninstall Look2Me related programs from Control Panel

We recommend you to check list of installed programs and search for Look2Me entry or other unknown and suspicious programs. Below are instructions for different version if Windows. In some cases adware programs are protected by malicious service or process and it will not allow you to uninstall it. If Look2Me won't uninstall or gives you error message that you do not have sufficient rights to do this perform below instructions in Safe Mode or Safe Mode with Networking or use WiperSoft Antispyware Malware Remediation Tool.


Windows 10


  • Click on the Start menu and choose Settings

  • Then click on System and choose Apps & Features in the left column

  • Find Look2Me under in the list and click Uninstall button near it.

  • Confirm by clicking Uninstall button in opened window if necessary.



Windows 8/8.1


  • Right click on the bottom left corner of the screen (while on your desktop)

  • In the menu choose Control Panel

  • Click Uninstall a program under Programs and Features.

  • Locate Look2Me or other related suspicious program.

  • Click Uninstall button.

  • Wait until uninstall process is complete.


Windows 7/Vista


  • Click Start and choose Control Panel.

  • Choose Programs and Features and Uninstall a program.

  • In the list of installed programs find Look2Me

  • Click Uninstall button.


Windows XP


  • Click Start

  • In the menu choose Control Panel

  • Choose Add / Remove Programs.

  • Find Look2Me related entries.

  • Click Remove button.


Protect computer and browsers from infection

Adware threats like Look2Me are very wide-spread, and unfortunatelly many antiviruses fail to detect it. To protect your computer from future infection we recommend you to use SpyHunter, it has active protection module and browser settings guard. It does not conflict with any antiviruses and creates additional shield against threats like Look2Me.

Information provided by:

Most wanted threat: downloader zlob

Next threat: LookQuick »

« Back to catalog

Home | Partners | Shop | Support | Terms of use | Contact Us | Privacy Policy | Sitemap

Copyright © 2019 Security Stronghold. All Rights Reserved. All content on this website is protected and belongs to Security Stronghold LLC.