Download WiperSoft Antispyware Malware Remediation Tool

Uninstall Look2Me from Windows 8/8.1

Uninstall Look2Me from Windows 7

Get Professional Support

Read Comments

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Affected browsers:

Look2Me

dw.exe

Badware

Win32 (Windows XP, Vista/7, 8/8.1, Windows 10)

Google Chrome, Mozilla Firefox, Internet Explorer, Safari

Computers where IE is the primary browser program are particularly vulnerable to Look2Me assails even if there's a seemly Look2Me removal tool on PC as this browser application is tightly wholistic with operating system that lets Look2Me to admission to crucial system parts, so it is needful to remove Look2Me just now. 92 percentage of questioned consumers reported they didn't know about Look2Me existance on their machines. Some Look2Me authors infest platform through security holes in the site or in other applications (even Look2Me removal tools), so it's urgently obligatory to remove Look2Me or at the least try to perform Look2Me removal action. Look2Me that meddles with net programs causes obstacle with WAD spreading the dure necessity in Look2Me removal tools. Look2Me removal tool can remove Look2Me which is already in your machine that is the most notorious method when performing Look2Me removal operation. Look2Me removal tools inspect the information contents of the Windows registry, computer computer files and setup applications and remove Look2Me that uncovers itself.

Look2Me intrusion method

Look2Me installs on your PC along with free software. This method is called "bundled installation". Freeware offers you to install additional module (Look2Me). Then if you fail to decline the offer it starts hidden installation. Look2Me copies its file(s) to your hard disk. Its typical file name is dw.exe. Sometimes it creates new startup key with name Look2Me and value dw.exe. You can also find it in your processes list with name dw.exe or Look2Me. Also, it can create folder with name Look2Me under C:\Program Files\ or C:\ProgramData. After installation Look2Me starts displaying ads, pop-ups, banners on your PC or in browsers. It is recommended to remove Look2Me immediately.

Download Wipersoft Antispyware

Download this advanced removal tool and solve problems with Look2Me and dw.exe (download of fix will start immediately):

Download WiperSoft Antispyware to remove Look2Me

* WiperSoft Antispyware was developed to remove threats like Look2Me in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

Features of WiperSoft Antispyware

Removes all files created by viruses.

Removes all registry entries created by viruses.

You can activate System and Network Guards and forget about malware.

Can fix browser problems and protect browser settings.

Removal is guaranteed - if Wipersoft fails ask for FREE support.

24/7 Spyware Helpdesk Support included into the package.

Try MalwareBytes Premium

Download antimalware designed specifically to remove threats like Look2Me and dw.exe (download of fix will start immediately):

Download AntiMalware to remove Look2Me

Features of MALWAREBYTES PREMIUM

Removes all files created by Look2Me.

Removes all registry entries created by Look2Me.

Fixes browser redirection and hijack if needed.

"Toolbar Remover" tool will help you get rid of unwanted browser extensions.

Removal is guaranteed - if MALWAREBYTES PREMIUM fails ask for FREE support.

24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Let our support team solve your problem with Look2Me and remove Look2Me right now!

Submit support ticket below and describe your problem with Look2Me. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Look2Me. Trouble-free tech support with over 10 years experience removing malware.

Submit support ticket

Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

Technical details of Look2Me threat.

Manual Look2Me removal.

Download Look2Me Removal Tool.

How to remove Look2Me manually

This problem can be solved manually by deleting all registry keys and files connected with Look2Me, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Look2Me.

To get rid of Look2Me, you should:

1. Kill the following processes and delete the appropriate files:

no.exe

allui.dll

msg{1e253d5d-6add-4fe9-829c-f51038158be5}0110.dll

msg{1e253d5d-6add-4fe9-829c-f51038158be5}0111.dll

msg{46b08877-2be4-4f35-8e77-034c2142321c}0115.dll

msg{5bef546a-e3c1-489c-996a-c9688d985ae0}0110.dll

msg{5bef546a-e3c1-489c-996a-c9688d985ae0}0111.dll

msg{63de1ad9-f0c6-4dac-886a-5a9707b0d23c}0110.dll

msg{63de1ad9-f0c6-4dac-886a-5a9707b0d23c}0111.dll

msg{93396c3f-aea3-4ac0-bb55-81f0f0414a24}0113.dll

msg{9d4f5b7c-2a4b-46c5-99a7-4c775b688d45}0110.dll

msg{9d4f5b7c-2a4b-46c5-99a7-4c775b688d45}0111.dll

msg{aac5700f-954a-47b7-9746-871ae8e634e4}0115.dll

msg{b9a9ac6a-2cc9-4a24-a250-bea974703ff8}0110.dll

msg{b9a9ac6a-2cc9-4a24-a250-bea974703ff8}0111.dll

msg{d331b768-d6da-41e8-a7b6-78ed724126c0}0115.dll

msg{e01b47a7-a499-4fee-83c2-b0684ca28e6b}0115.dll

msg{e8d8ffef-30a4-4df1-a618-e0599a0d0a15}0110.dll

msg{e8d8ffef-30a4-4df1-a618-e0599a0d0a15}0111.dll

msg{15dd85c0-1b81-11d8-a1e4-00a0cc251329}0113.dll

atifile.dll

zppfldr.dll

3dsdpi.dll

adctres.dll

avsetupc.dll

l68mlgl116q.dll

msg{????????-????-????-????-????????????}????.dll

msg116.dll

msg117.dll

msg118.dll

msg119.dll

msg120.dll

msg122.dll

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

**Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

2. Delete the following malicious folders:

no information

3. Delete the following malicious registry entries and\or values:

Key: software\look2me

Key: SOFTWARE\Classes\CLSID\{DDFFA75A-E81D-4454-89FC-B9FD0631E726}

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Guardian
Value: ID

Key:
software\microsoft\windows nt\currentversion\winlogon\notify\guardianorvcb
Value: @

Key: SOFTWARE\Classes\CLSID\{A7CD5137-D2D6-4E2F-8279-4E7631159712}

Key:
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellExtensions\Approved\{DDFFA-E81D-4454-89FC-B9FD0631E726}

Key:
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellExtensions\Approved\{DDFFA75A-E81D-4454-89FC-B9FD0631E726}

Key: CLSID\{423F0AEB-59E6-4190-A39E-03755D01B235}\InprocServer32
Value: ThreadingModel

Key:
CLSID\{423F0AEB-59E6-4190-A39E-03755D01B235}\Implemented Categories\{00021492-0000-0000-C000-000000000046}

Key: CLSID\{423F0AEB-59E6-4190-A39E-03755D01B235}\Implemented Categories

Key: CLSID\{423F0AEB-59E6-4190-A39E-03755D01B235}
Value: IDEx

Key: CLSID\{BE1409B6-E26D-4492-B262-2983A670F9F2}
Value: IDEx

Key: CLSID\{BE1409B6-E26D-4492-B262-2983A670F9F2}\Implemented Categories

Key:
CLSID\{BE1409B6-E26D-4492-B262-2983A670F9F2}\Implemented Categories\{00021492-0000-0000-C000-000000000046}

Key: CLSID\{BE1409B6-E26D-4492-B262-2983A670F9F2}\InprocServer32
Value: ThreadingModel

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Guardian
Value: Idex

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Urls
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winm32
Value: Startup

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winm32
Value: Impersonate

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winm32
Value: Asynchronous

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winm32
Value: MaxWait

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Control Panel
Value: DllName

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\CSCSettings
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Uninstall
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Asynchronous

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Impersonate

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Logon

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Logoff

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Shutdown

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Asynchronous

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: DllName

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Impersonate

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Logon

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Logoff

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Shutdown

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Asynchronous

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: DllName

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Impersonate

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Logon

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Logoff

Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IPConfTSP
Value: Shutdown

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Asynchronous

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: DllName

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Impersonate

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Logon

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Logoff

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OptimalLayout
Value: Shutdown

Key: Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Value: {423F0AEB-59E6-4190-A39E-03755D01B235}

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RunOnce
Value: DllName

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: DllName

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Asynchronous

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Impersonate

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Logon

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Logoff

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Shutdown

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Asynchronous

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: DllName

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Impersonate

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Logon

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Logoff

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MediaContentIndex
Value: Shutdown

Key:
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ThemeManager
Value: DllName

Key:
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Internet Settings
Value: DllName

Key: Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Value: {BE1409B6-E26D-4492-B262-2983A670F9F2}

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
Value: Asynchronous

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
Value: DllName

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
Value: Impersonate

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
Value: Logon

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
Value: Logoff

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SMDEn
Value: Shutdown

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

Uninstall Look2Me related programs from Control Panel

We recommend you to check list of installed programs and search for Look2Me entry or other unknown and suspicious programs. Below are instructions for different version if Windows. In some cases adware programs are protected by malicious service or process and it will not allow you to uninstall it. If Look2Me won't uninstall or gives you error message that you do not have sufficient rights to do this perform below instructions in Safe Mode or Safe Mode with Networking or use WiperSoft Antispyware Malware Remediation Tool.

Windows 10

Click on the Start menu and choose Settings
Then click on System and choose Apps & Features in the left column
Find Look2Me under in the list and click Uninstall button near it.
Confirm by clicking Uninstall button in opened window if necessary.

Windows 8/8.1

Right click on the bottom left corner of the screen (while on your desktop)
In the menu choose Control Panel
Click Uninstall a program under Programs and Features.
Locate Look2Me or other related suspicious program.
Click Uninstall button.
Wait until uninstall process is complete.

Windows 7/Vista

Click Start and choose Control Panel.
Choose Programs and Features and Uninstall a program.
In the list of installed programs find Look2Me
Click Uninstall button.

Windows XP

Click Start
In the menu choose Control Panel
Choose Add / Remove Programs.
Find Look2Me related entries.
Click Remove button.

Protect computer and browsers from infection

Adware threats like Look2Me are very wide-spread, and unfortunatelly many antiviruses fail to detect it. To protect your computer from future infection we recommend you to use SpyHunter, it has active protection module and browser settings guard. It does not conflict with any antiviruses and creates additional shield against threats like Look2Me.

How to remove Look2Me (ads, banners, deals)