Sophos

W32/Looked-Gen

Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Network shares
  • Infected files
Affected operating systems Windows
Protection available since 7 September 2006 20:16:13 (GMT)
Last updated 8 January 2009 06:40:03 (GMT)
Detected by All Sophos products
  • Endpoint Security and Control 9.0
  • Small business solutions 4.0

Action

More Information

W32/Looked-Gen is a family of viruses for the Windows platform.

W32/Looked-Gen may copy itself to <Windows>\rundl132.exe and create a file <Windows>\vDll.dll.

The virus infects EXE files found on the infected computer. The virus also attempts to copy itself to remote network shares.

Many files with the name "_desktop.ini" are created, in various folders on the infected computer. These files are harmless text files.

The following registry entry may be created in order to run the virus on startup:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
load
<Windows>\rundl132.exe

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer