How to remove trojan.w32.looksky (removal instructions)

#106 RatHat

Group: Expert
Posts: 7,826
Joined: 26-October 06

Posted 16 October 2007 - 10:57 PM

Hi there Hurricane Rain,

Welcome to Geekstogo! Please have a look at this post above, and follow the same steps. When you post a HijackThis log in the Malware forum, one of our staff will pick it up and help you out.

Regards,
RatHat

#107 nmp134

Group: Member
Posts: 6
Joined: 18-October 07

Posted 18 October 2007 - 11:17 PM

I WANT TO GET RID OF THE tROJAN.W32 LOOKSKY AND i READ THE DIRECTIONS TO GET RID OF IT BUT i JUST WANT TO KNOW IF THAT IS GOING TO GET RID OF MY FILES SAVED ON MY COMPUTER? plEASE HELP!!!!!

#108 don77

Group: Retired Staff
Posts: 18,526
Joined: 05-July 04

Posted 19 October 2007 - 04:08 PM

Hello and welcome nmp134
You did the right thing by starting a topic in the malware forum, you should not lose any information on your machine by using smitfraudfix

I m sure someone will be along shortly to help you out

#109 nmp134

Group: Member
Posts: 6
Joined: 18-October 07

Posted 19 October 2007 - 04:11 PM

Thanks... I actually used that but all I got was my desktop back and now I am having a pop up when I start my computer that it can not open a file called 2041.qit and I have no idea what that is and when I click on my remove pop ups on my internet page privacy guard page pops up like several times. I hope someone can help me fix my problem.

#110 LynnM

Group: Member
Posts: 1
Joined: 25-October 07

Posted 25 October 2007 - 01:40 PM

Have trojan win.32 virus on computer. Have used the smitfraud link to clean the computer with success however this only seems to last for one day before the virus is back on the computer. We have Norton Antivirus but this doesnt block the virus. Have now downloaded the free AVG version. Will this stop this continual problem or is there something that can be suggested?
Thank you!
Lynn

#111 don77

Group: Retired Staff
Posts: 18,526
Joined: 05-July 04

Posted 25 October 2007 - 08:29 PM

Hello and welocme LynnM

Please run through the steps outlined in this Topic
Post back a fresh log in the Malware forum please

#112 Sirus23

Group: Member
Posts: 1
Joined: 02-November 07

Posted 02 November 2007 - 01:00 PM

Hey, every time I try to remove this thing I get a window that comes up during the first question. I follow the instructions exaclty, and then it says it is done. But I go to restart the computer and when I get back its still there.

Edit: Nevermind I got it, thanks for this fix that thing has been bugging me for months now, you guys rock

#113 don77

Group: Retired Staff
Posts: 18,526
Joined: 05-July 04

Posted 02 November 2007 - 05:52 PM

Glad to hear it Sirus23

should you have any issues go ahead and post a HJT log in the malware forum and staff member will be glad to help you out

#114 Raiders757

Group: Member
Posts: 1
Joined: 07-November 07

Posted 08 November 2007 - 06:03 AM

Hello, and thanks for the help that is provided here in this forum. The information shared here is beyond helpfull.

The other day, this trojan poped up on my PC , and the instructions provided in this thread helped me remove it. THe thing is, I am not sure it got rid of everything.

I keep getting constant pop-ups blocked on every page I go to, and I am getting a bar at the top of every few pages proclaiming this...

Quote

Warning: possible spyware or adware infection! Click here to scan your computer for spyware and adware...

This statement was present when the looksky trojan showed up. It seems ot have a link to one of three spyware programs that showed up without my asking, when I go infected with looksky.

I ran the SmitfraudFix, as suggested, to get rid of the looksky trojan, and it worked to remove it. I ran it again to see if it missed anything, yet this bar keeps showing up. Not only does the bar show up, but if I leave a web page idle for too long, the page will redirect.. To where, I do not know, as I get the "IE can't find this page" message. Also, I keep getting a message from Real Player, telling me to update security. THis message has never poped up before, and I don't even use Real Player very often. I don't want t ofollow it's directions, because I am afraid this message is a fraud.

So far I have tried to fix this problem with...

SmitfraudFix
SpyBot
Ad-Aware SE
Hijack This (but on my own, as I have used this program many times before.)

Is there anything else I can do, or have you heard of such problems associated with removing the looksky trojan?

THanks again.

#115 wberry

Group: Member
Posts: 2
Joined: 05-November 07

Posted 08 November 2007 - 12:27 PM

I have tried all the suggested fixes. Combofix seems to find the problem and erase it, but once I reboot the computer, the problem comes back. I have a post already with all the HJT logs, if someone could please help, I would greatly appreciate it.

#116 don77

Group: Retired Staff
Posts: 18,526
Joined: 05-July 04

Posted 09 November 2007 - 06:20 PM

Hello and welcome Raiders757

Please run through the steps outlined in this Topic
Post back a fresh log in the Malware forum please

Hello and welcome wberry
I m having a look at your topic now

#117 skramer

Group: Member
Posts: 1
Joined: 11-November 07

Posted 11 November 2007 - 07:26 PM

You Guys (and maybe gals) ARE AMAZING. I have been fighting trojan.w32.looksky for over 1 month.
I have used Norton and XSpySE. I had also followed manual removal instructions from the Symantec website
all to NO avail.

Then I found your site and within 10 minutes my machine was working properly again.

Please tell me how I can make a donation.

Thank you again!
Best to all!

#118 don77

Group: Retired Staff
Posts: 18,526
Joined: 05-July 04

Posted 11 November 2007 - 08:23 PM

Thanks for taking the time to let us know skramer
Glad to hear everything worked out

Quote

Please tell me how I can make a donation.

You can donate directly to the author of the tool Here scroll down towards the bottom of the page

S!Ri works hard keeping this tool updated on a daily bases