 Remove Looksky.d. Description and removal instructions
Once executed, Looksky.d silently installs itself to the system and runs a spreading routine. The worm sends e-mail messages with attached infected files to all the contacts in Windows Address Book and The Bat! mail client. Letters have the following subject: "Account # 394875948JNO Wed, 28" and the following body: "Hello, We sent you an email a while ago, because you now qualify for a much lower rate based on the biggest rate drop in years. You can now get $756,000 for as little as $909 a month! Bad credit? Doesn't matter, ^low rates are fixed no matter what! Follow this link to process your application and a 24 hour approval: [web link] Best Regards, Bernadine Guy" The parasite's payload is comprised of several harmful functions. Looksky.d opens a back door that gives the attacker unauthorized remote access to a compromised computer. The worm logs all user keystrokes, collects system information and steals local login names and passwords. Then it sends gathered data to a predetermined e-mail address or transfers it to a predefined web server. Looksky.d is able to automatically update itself via the Internet and bypass the Windows Firewall. The worm secretly runs on every Windows startup. Looksky.d properties: • Allows remote user connection • Sends out logs by FTP or email • Logs keystrokes • Connects itself to the internet • Hides from the user • Stays resident in background Automatic Looksky.d removal:remover for Looksky.d
Looksky.d manual removal:Kill processes:main_23_c.exe, sachostb.exe, sachostc.exe, sachostp.exe, sachosts.exe, sachostw.exe, sachostx.exe, tmx[X].exe Delete registry values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hotsrv=%Windir%\sachostx.exe Delete files: main_23_c.exe, sachostb.exe, sachostc.exe, sachostp.exe, sachosts.exe, sachostw.exe, sachostx.exe, tmx[X].exe, msvcrl.dll, attrib.ini Misc: [X] is a set of random characters. The main_23_c.exe file arrives attached to Looksky.d e-mail messages. Exact file location: sachostx.exe - C:\Windows or C:\Winnt tmx[X].exe - C:\Windows\Temp or C:\Winnt\Temp sachostb.exe, sachostc.exe, sachostp.exe, sachostw.exe, sachostx.exe, msvcrl.dll, attrib.ini - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32 Other programs to remove Looksky.d:• SUPERAntiSpyware - Review - Download• CounterSpy - Review - Download • Windows Defender - Review - Download Information added: 01/12/05 Information updated: 01/12/05 Additional resources related to Looksky.d:Attention: If you know or you have a website or page about Looksky.d removal, feel free to add a link to this list: add url
more resources Post Comment:Attention: Use this form only if you have additional information about Looksky.d parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
|
Latest spyware news:
 Malware statistics of August 2008 by Kaspersky Security Network Computers at International Space Station got infected Memory vulnerability found on Windows Vista Two reporters banned from Black Hats conference for hacking Microblogging website exploited by Brazilian hackers Phishers biting their own baits Cyber criminals start working faster 75 percent of online banking websites are insecure Malware rates keep rising up Switzerland is the most spammed country in a worldSubscribe to news 
Similar parasites:
|
FORUM:
HELP:
