Hi there TeddyYeo.
First please use 'F-Look2Me to remove Look2Me.
1. Download
f-look2me.zip
2. Unzip f-look2me.zip
3. Run f-look2me.exe
4. Reboot the machine
After that uninstall Messenger Plus to get rid of the Lop infection that comes with it:
1. Go to Add/Remove programs. Double click on "Messenger Plus!" (or click on Remove)
(See quote below!)
2. The "Messenger Plus! - Setup" is now displayed. Click on the Uninstall button. Note: options displayed on the first screen are not related to the sponsor program.
3. The sponsor screen is now displayed (if you don't see it, search for it in your Task Bar). To prove that someone is currently reading the screen, you have to type the code that is displayed. Once you enter the code, press Uninstall.
4. If you entered the code properly, the program will ask you to confirm that you want to uninstall. You must answer "Yes" to this question, else, you won't have another chance of uninstalling.
5. To complete the uninstallation, follow the instructions that are displayed (the first one is to close all your Internet Explorer windows, that's very important). When everything is complete, restart your computer and, hopefully one nasty infection is gone.
When removing Lop.com from the Add/Remove screen it may not show up as Messenger Plus instead also look for these and remove them:
Window Search
Window Searching
Lop.com
LOP SEARCH
Browser Enhancer
Ultimate Browser Enhancer
L.O P. Un insta11
L O.P. Un instal1
Live 0n line Portal
Live.0nli ne Porta1
Window Active
Finally there is a step in the removal process of Messneger Plus where the sponsor asks if you want to uninstall that aswell, You have to click YES to this part of the removal process
If you dont do this corretly then you will have no other choice but to reinstall Messenger Plus and then go through the whole removal process again from the start.
Download Brute Force Uninstaller
http://www.merijn.org/files/bfu.zip and unzip it to it’s own folder (c:\BFU).
Run the program and click the Web button located on the top right corner.
Copy and paste the below web address into the address bar of the Download script window:
http://metallica.geekstogo.com/alcanshorty.bfu
Checkmark the following boxes:
Use settings specified in script for the above option.
Show log after script ends.
Execute the script by clicking the Execute button.
When it finishes running, click the Save button for a copy of the log. Post the log created by the script when you have completed the fix.
When done with that , please post the BFU log , a new ewido log , and a new
HJT log.