high
Summary
Summary
Action- More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Included in our products from | April 2008 (4.28) |
| Protection available since | 2 March 2008 15:04:43 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting PE executables.
More Information
W32/Looked-EF is an executable file virus for the Windows platform.
W32/Looked-EF includes functionality to access the internet and communicate with a remote server via HTTP.
When W32/Looked-EF is first run the following files are created:
<Windows>\Dll.dll
<Windows>\Logo1_.exe
<Windows>\rundl132.exe
The file Dll.dll is detected as W32/Looked-AB and the files Logo1_.exe and rundl132.exe are also detected as W32/Looked-EF.
The following registry entry is created to run rundl132.exe on startup:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
load
<Windows>\rundl132.exe
|
