LookingLink

[irtech]

I just discovered this on my work PC. Note that we run ePO 5.1 at work and Virusscan dats etc are up to date. However, this was not detected on my PC, even though it is known malware/adware etc. A Getsusp scan classified it as OK.

Can anyone explain why this is not being detected?

regards

G

[catdaddy]

This basically is classified as a (PUP).  Usually is obtained by installing other software,and is either offered optionally, or "Bundled" with the software you chose to install. Here are ways to remove it.

See this Link

Hope this helps,

CatDaddy

Message was edited by: Ex_Brit on 07/02/14 9:05:57 EST AM

[irtech]

Thanks CatDaddy

But to advise, I did not install any software on my PC when this installed itself. It maybe classified as a PUP, but from what it did to my PC, causing freezes and crashes and attempting to link to malicious sites (at least those were blocked by Site Advisor), it is more than potentially unwanted *grin*. Thankfully, it is now uninstalled.

regards,

G:)

[catdaddy · Accepted solution]

Glad all is OK...  If you feel that this is Assumed Answered, please apprise the Moderators so they can mark appropiately.

Kind Regard,

CatDaddy

[exbrit]

See also https://community.mcafee.com/thread/64223?tstart=0

[exbrit]

Although many regard it as malware LookingLink is really just another adware pest that probably came loaded with something else and the option was overlooked.

There is an excellent removal guide here:  http://malwaretips.com/blogs/lookinglink-virus-removal/

[catdaddy]

Thanks Ex_Brit for the reassurance. This was the same Site I suggested irteck use for removal.

It seems to have worked....

Regards,

CatDaddy

[exbrit]

I didn't know that as your link was broken...I fixed it.

[catdaddy]

Like me, almost broken. Thanks Ex_Brit    I think it was due to my trying to insert the link opposed to posting the sometimes "Goobly-Gobbley" I get from Yahoo, after "Copying Short cut" For it looks alot neater,

Anyway,As always...

Kind Regards,

CatDaddy

[Hayton]

ePO is an Enterprise product, the detection rules and methods are different from those in the Consumer product.

Moving this to Malware Discussion / Corporate User Assistance for attention.