looool.exe, fo.exe

Harmful - EXE

Files with the names looool.exe, fo.exe are created by a computer virus program that affects computers running on Microsoft windows operating systems. It's analysis report is given below.

Files and folders found - view
%AppData%\addons.dat
C:\Program Files\loooooooool\looool.exe
C:\Program Files\loooooooool\logg.dat
%Temp%\IXP000.TMP\AA79~1.EXE
%Temp%\IXP000.TMP\fo.exe

Folders
C:\Program Files\loooooooool
%Temp%\IXP000.TMP

This virus is identified as trojan Bifrost. Please read more about this virus on this page.


Files with the name fo.exe are also created by several computer virus programs. Their analysis reports are given below. These virus programs are bundled with downloadable documents or power-point presentations. 

Files and folders found - view
C:\Userpre\user\docs\fo.exe
C:\Userpre\user\docs\dhclient.exe
C:\Userpre\user\docs\Ministry of Foreign Affairs (MOFA) ARMS PICS.pps
Folders
C:\Userpre
C:\Userpre\user
C:\Userpre\user\docs

(the virus program below is similar to the one above)

Files and folders found - view
C:\Userpre\user\docs\Top 10 terrorists on FBI most wanted list.doc

Files and folders found - view
C:\Usermoc\userck\docs\fo.exe
C:\Usermoc\userck\docs\vSendEx.exe
C:\Usermoc\userck\docs\123.doc
C:\windows\WORDPAD.INI

Folders
C:\Usermoc
C:\Usermoc\userck
C:\Usermoc\userck\docs

(Full path for the short folder names)

There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of looool.exe or fo.exe and after that, search the hard disk for other files created on that date or onward. See image.

Necessary steps to remove this virus program

  • To remove processes created by the virus program from the Task Manager.
  • To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found.
  • To remove obsolete registry keys using CCleaner.

Detailed instructions and free Tools.

Preventive steps to avoid virus programs.

Reprinted with permission from Threatexpert.com

Disclaimer



 Vocabulary of the technical terms used in this article.


FAQ

Subscribe to me on YouTube