W32/Looked disinfection instructions
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Windows 95/98/Me and Windows NT/2000/XP/2003
W32/Looked-AB, W32/Looked-AF and W32/Looked-DR can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.
Note: When disinfecting variants not listed above, use the recovery instructions in the appropriate virus analysis.
Windows disinfector
LOOKDGUI is a disinfector for standalone Windows computers
- open LOOKDGUI
- run it
- then click GO.
- when the tool disinfects the virus, a message is generated:
You may need to run this tool again to clean your computer completely. - run the tool repeatedly until the message is no longer displayed.
If you are disinfecting several computers; download it, save it to floppy disk, write-protect the floppy disk and run it from there.
Command line disinfector
LOOKDSFX.EXE is a self-extracting archive containing LOOKDCLI, a Resolve command line disinfector for use by system administrators on Windows networks. Read the notes enclosed in the self-extractor for details on running this program.
Note: when the tool disinfects the virus, a message is generated: You may need to run this tool again to clean your computer completely. Run the tool repeatedly until the message is no longer displayed.Other platforms
To remove W32/Looked-AB, W32/Looked-AF and W32/Looked-DR on other platforms, please follow the instructions for removing PE executable viruses.
