Comprolive.com offers free remote tech support using Google Chrome Remote Desktop. Contact sanjayrajure(at)gmail.com by GMail/ GTalk/ Audio/ Video.

Space.exe, Look.exe, Activity.exe

Trojan - W32.Bancos

The files names Space.exe, look.exe, Activity.exe are created by a computer virus program that affects computers running on Microsoft windows operating systems. This virus has different versions. It's analysis reports are given below

Files  - view
C:\Windows\System32\Activity.exe
C:\Windows\System32\look.exe
C:\Windows\System32\Space.exe

Files  - view
C:\windows\system32\Activity..exe
C:\windows\system32\look..exe
C:\windows\system32\Space..exe
%UserProfile%\IE\MegaLar..exe
(notice the two dots in the name)

(Full path for the short folder names)

There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of one of these files Space.exe, Look.exe, Activity.exe, and after that, search the hard disk for other files created on that date or onward. See image

Necessary steps to remove this virus program

  • To remove processes created by the virus program from the Task Manager
  • To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found
  • To remove obsolete registry keys using CCleaner

Detailed instructions and free Tools

Preventive steps to avoid virus programs

Reprinted with permission from Threatexpert.com

Disclaimer



 Vocabulary of the technical terms used in this article


FAQ

Subscribe to me on YouTube