How to Uninstall the Lookfor Homepage Hijacker

Lookfor.cc is a homepage hijacker. Homepage hijackers are malware applications that change your homepage without your permission. These viruses tend to alter your web browser settings, so as to change your default homepage. Even if you change the homepage back to the original, the homepage hijacker may cancel your changes. Lookfor.cc is a variant of the Coolwebsearch homepage hijacker, and will change your homepage to res://mshp.dll/index.html#10213. While using the standard steps to remove the many variants of the Coolwebsearch should remove it, this particular homepage hijacker also appears to be a part of the Trojan horse called TROJ_IEFEATS.A. When removing the Lookfor.cc homepage hijacker, you will also need to remove this Trojan horse associated with it.

Instructions

Uninstall the Lookfor Homepage Hijacker

1. Start your computer in Safe Mode. Safe Mode is usually initiated by hitting the F8 key on your keyboard while your computer boots, then choosing "Safe Mode."

2. Click on the "Start" button once you are in Safe Mode. Click on "Run" in the Start menu. Type "regedit" and click OK. This opens the Registry Editor.

3. Use the plus signs to navigate to the following registry entry: HKEY_CURRENT_USER\Software\Microsoft\Windows \CurrentVersion\Runonce.

4. Look in the right panel and right-click the following entry: iefeats1Update = "rundll32 <path to virus>\iefeats1.dll,UpdateDlls." Click "Delete" to remove this registry entry. Once you have deleted the registry entry, close the Registry Entry.

5. Disable "System Restore" by clicking on the Start button then right-clicking on the My Computer icon. Click Properties. Select on the System Restore tab in the Properties window. Check the option labeled "Turn off System Restore." Click Apply. Click Yes to delete all saved restore points. Click OK.

6. Click on the Start button once you have disabled System Restore. Click Search. Make sure the "Look in" option is set to C:\WINDOWS. Type in each of these file names: *iefeatsl.dll *msiesh.dll *submithook.dll *uninstall.exe *uninstall.ini *mshp.dll

7. Delete the listed files. The Lookfor Homepage Hijacker is now uninstalled.

Re-set the Internet Explorer Homepage and the Search page

1. Close any open IE windows. Click on the "Start" button. Click "Settings" and then "Control Panel." Next, double-click the "Internet Options" icon, which opens the "Internet Properties" window.

2. Click on the "Program" tab. Click the "Reset Web Settings" button.

3. Click "Also reset my home page." Click "Yes." Click "OK" when you are done. Restart your computer.

Tips & Warnings

• By turning off system Restore , you will delete all your existing restore points, and won't be able to undo or track changes on your PC.