Need a geek? You've come to the right place! Geeks to Go offers free, quality technical support, in a non-technical way. Volunteers are waiting to help. Friendly, technology experts who have knowledge to share, and find reward in helping others. Feel free to browse the site as a guest. However, to reply to a topic, or start a new one, you'll need to register (also removes advertising). New here? Visit our Welcome Guide. Infected with a Virus, Spyware, or Trojan? Read our Malware and Spyware Cleaning Guide.
   
9 Pages V   1 2 3 > »   
Reply to this topicStart new topic
How to remove trojan.w32.looksky (removal instructions)
admin
post Jul 29 2007, 11:37 AM
Post #1


Site Administrator
Group Icon
Posts: 18,263
From: 127.0.0.1
OS: Windows 7 Build 7100
MVP


Trojan.w32.looksky is another name for the Smitfraud/zlob trojan. SmitFraudFix removes trojan.w32.looksky, but you should also check your system for other malware, and use ATF cleaner to clean your temp files when finished.

Instructions to remove Trojan.w32.looksky using SmitFraudFix (by S!Ri)

SmitFraudFix only works with Windows XP or 2000

Download SmitfraudFix:

Use this URL to download the latest version (the file contains both English and French versions):
http://siri.geekstogo.com/SmitfraudFix.exe

Use:
  • Search:
    • Double-click SmitfraudFix.exe
    • Select 1 and hit Enter to create a report of the infected files. The report can be found at the root of the system drive, usually at C:\rapport.txt


  • Clean:
    • Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
    • Double-click SmitfraudFix.exe
    • Select 2 and hit Enter to delete infect files.
    • You will be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
    • The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
    • A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt


  • Optional:
    • To restore Trusted and Restricted site zone, select 3 and hit Enter.
    • You will be prompted: Restore Trusted Zone ? answer Y (yes) and hit Enter to delete trusted zone.
Note:
process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool". It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm

Has SmitFraudFix helped you? A tool like this takes a lot of time to keep updated. Please consider a donation to S!Ri so he can continue his hard work. thumbsup.gif

Are you still having problems with trojan.w32.looksky, or other malware on your system? Please start a new topic in our Malware Removal Forum, after following these instructions.

Other references:
trojan.w32.looksky activity @ Symantec | SmitFraudFix
Go to the top of the page
 
+Quote Post
arson982
post Aug 8 2007, 11:24 AM
Post #2


New Member
*
Posts: 4
OS: XP



I down load software Smitfraudfix. Can I install this prgram from the save mode
Go to the top of the page
 
+Quote Post
don77
post Aug 8 2007, 11:45 AM
Post #3


Malware Expert
Group Icon
Posts: 18,682
From: Boston Ma.
OS: XP Pro,ME, 98



Right click on the link
http://siri.geekstogo.com/SmitfraudFix.exe

choose "save target as " save it to your desktop then proceed with the above instructions
Go to the top of the page
 
+Quote Post
arson982
post Aug 10 2007, 11:06 AM
Post #4


New Member
*
Posts: 4
OS: XP



Thank you for your help it fix the problem. I have a question for you. I have have a a dell computer and I do not have the restore Cd how can I make a restore CD?
Go to the top of the page
 
+Quote Post
roosterCOF
post Aug 16 2007, 04:59 PM
Post #5


New Member
*
Posts: 3
OS: xp pro



well i want to thank you guys for the info,it was pure luck that i stumbled upon your site,it was very helpfull. thanks again,God Bless and be Safe!
Go to the top of the page
 
+Quote Post
don77
post Aug 16 2007, 06:33 PM
Post #6


Malware Expert
Group Icon
Posts: 18,682
From: Boston Ma.
OS: XP Pro,ME, 98



Hello and welcome roosterCOF
Thanks for taking the time to let us know everything worked out for you smile.gif
Go to the top of the page
 
+Quote Post
Fourthings
post Aug 19 2007, 07:57 AM
Post #7


New Member
*
Posts: 1
OS: Windows xp



Well, all seems well. Thank you guys SO much for providing me with much needed help!!!
Go to the top of the page
 
+Quote Post
don77
post Aug 19 2007, 10:54 AM
Post #8


Malware Expert
Group Icon
Posts: 18,682
From: Boston Ma.
OS: XP Pro,ME, 98



Your very welcome Fourthings
Thanks for taking the time to lets us know

Go to the top of the page
 
+Quote Post
sirles
post Aug 19 2007, 01:14 PM
Post #9


New Member
*
Posts: 3
From: uk
OS: vista



Hi can you please help?

My friend as Windows xp and seems to have this Malware, Spybot recognises it as Smitfraud, and the pop ups mention Looksky, and he has a bright red wallpaper now, with an evil looking logo that looks a bit like the Quake symbol!

Is this the Looksky trojan?

Sorry to be vauge as I have only had a quick look while I was round there going to set about it tomorrow after work

Any help gratefully received!

Go to the top of the page
 
+Quote Post
MoNsTeReNeRgY22
post Aug 19 2007, 04:22 PM
Post #10


GeekU Junior
Group Icon
Posts: 2,428
From: California
OS: Windows XP Media Center Editon SP3



Hello and welcome to G2G!

Please have him post a HiJackThis log at the following link and an expert will help him with his problem.

http://www.geekstogo.com/forum/Malware-Rem...o-Here-f37.html
Go to the top of the page
 
+Quote Post
sirles
post Aug 19 2007, 04:34 PM
Post #11


New Member
*
Posts: 3
From: uk
OS: vista



Many thanks Mons will do tomorrow when I go round. smile.gif
Go to the top of the page
 
+Quote Post
webnetincome
post Aug 20 2007, 07:28 PM
Post #12


New Member
*
Posts: 1
OS: XP



That's it???? I used the SmitFraudFix for XP, all seems to be working now. If that is all, then all I can say is "THANK YOU VERY MUCH!"
Probably not the place for it , but while I am here, just wondering, do the free programs (anti-virus, firewalls, etc.i signatures of some of you experts) work as well as say something like Norton Internet Security? My trial period is over, it either pay up or do something else.-LOL
Sorry if second part of post in wrong place (if no answer to this --I will post in another part of forum.) It was quick in and a quick fix---I think.--LOL Seems tooooooooo easy.--lol

Thanks,
Glenn
Go to the top of the page
 
+Quote Post
don77
post Aug 20 2007, 08:02 PM
Post #13


Malware Expert
Group Icon
Posts: 18,682
From: Boston Ma.
OS: XP Pro,ME, 98



QUOTE
but while I am here, just wondering, do the free programs (anti-virus, firewalls, etc.i signatures of some of you experts) work as well as say something like Norton Internet Security? My trial period is over, it either pay up or do something else.-LOL


Yes the free programs suggested work as well they vary in opinion whats best but they are work nicely, There are many topics about it one can be found here
http://www.geekstogo.com/forum/Free-Antivi...ftware-t38.html
that needs updating

Glad to hear everything worked out with getting rid of w32.looksky
Go to the top of the page
 
+Quote Post
aralius
post Aug 21 2007, 05:49 AM
Post #14


New Member
*
Posts: 1
OS: xp



thankyou. it was extremely easy, and it seems to have worked. don't know if i have other crap in my system, but it got rid of the trojan. thankyou so much. i'm probably not suposed to put this here, but what can i do to keep this from hapenning again?
Go to the top of the page
 
+Quote Post
don77
post Aug 21 2007, 06:00 AM
Post #15


Malware Expert
Group Icon
Posts: 18,682
From: Boston Ma.
OS: XP Pro,ME, 98



Hello and welcome aralius

Read Here pay close attention to 6. How did I get infected?

Thanks for letting us know it worked out for you

If your concerned that you still have issues have a read Here

Good luck smile.gif
Go to the top of the page
 
+Quote Post

9 Pages V   1 2 3 > » 
Reply to this topicStart new topic
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:

 

Collapse

> Similar Topics

    Topic Title Replies / Views Topic Information
No New Posts   4 / 2,550 25th July 2007 - 11:31 PM
kosba1 started - last by ourwilly
No New Posts   1 / 3,592 12th August 2007 - 04:46 PM
ngogood started - last by Noviciate
No New Posts   12 / 5,573 11th September 2007 - 02:29 PM
theheartstripe started - last by miekiemoes
No New Posts   0 / 338 17th June 2009 - 08:35 AM
Tim89 started - last by Tim89

RSS Time is now: 4th July 2009 - 09:03 AM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.