W32/Looked.BF Virus

 Virus Information - W32/Looked.BF Virus:

W32/Looked.BF is a virus. The virus will infect Windows systems and spreads through network shares.

Upon execution, this virus copies itself as rundl132.exe in Windows uninstall folder. It also creates RichDll.dll file in Windows folder.

It searches the computer for executable files, if found it will append itself to the file. It will also create _desktop.ini file in various folders of the infected computer.

It will copy itself to all the remote network shares of the Infected computer.

The virus modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run