Home Malware Programs Worms Looksky.h

Looksky.h

Posted: March 28, 2006

Looksky.h is a rapidly spreading Internet worm that propagates by e-mail. The spyware arrives in infected executable files attached to bogus e-mail messages.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 attrib.ini
    2 download.exe
    3 ebay_info.exe
    4 msvcrl.dll
    5 sachostb.exe
    6 sachostc.exe
    7 sachostm.exe
    8 sachostp.exe
    9 sachosts.exe
    10 sachostw.exe
    11 sachostx.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunhostsrv
Loading...