Looksky (computer worm)

Computer virus | Fullname = Looksky
Common name = Looksky
Technical name = W32/Looksky-mm (family)
Family = Looksky
Aliases = MultiDropper.Looksky
Classification = Worm
Type = Windows
Subtype = E-mail worm
IsolationDate = October 2005
Isolation = Unknown
Origin = Unknown
Author = Unknown

Looksky is a mass-mailing computer worm that will, once a computer has been infected, send itself by e-mail using the system's contact list, using the title "Your account has been suspended". It will also lower the security settings on the infected computer. In some cases, it will change the background picture and block access to properties, and will restart the computer every few minutes.

There are several variants of Looksky, the most notable of which are A, D, and E. This is a general family description, and the details of individual variants will vary.

External links

* [http://securityresponse.symantec.com/avcenter/venc/data/[e-mail] W32.Looksky.A@mm] , by Symantec
* [http://securityresponse.symantec.com/avcenter/venc/data/[e-mail] W32.Looksky.D@mm] , by Symantec
* [http://securityresponse.symantec.com/avcenter/venc/data/[e-mail] W32.Looksky.E@mm] , by Symantec
* [http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_LOOKSKY.A WORM_LOOKSKY.A] , by TrendMicro
* [http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_LOOKSKY.D WORM_LOOKSKY.D] , by TrendMicro
* [http://secunia.com/virus_information/24306/looksky.d/ Malware:Looksky.D Variations] , by Prex1
* [http://www.exploits.co.in/Article2189.html W32.Looksky.E@mm] , by Exploits Portal