W32/Looked

description-logoAnalysis

  • Drops the following files:
    • RichDll.dll
    • Logo1_.exe
    • arcldr.exe
    • arcsetup.exe
  • Infects files under the Program Files folder that have the EXE extension.
  • recommended-action-logoRecommended Action

      FortiGate Systems
    • Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the 'Allow Push Update' option.
      FortiClient Systems
    • Quarantine/delete files that are detected and replace infected files with clean backup copies.

    Telemetry logoTelemetry

    Detection Availability

    FortiGate
    Extended
    FortiClient
    FortiMail
    FortiSandbox
    FortiWeb
    Web Application Firewall
    FortiIsolator
    FortiDeceptor
    FortiEDR

    Version Updates

    Date Version Detail
    2023-02-22 91.00810
    2023-02-16 91.00640
    2023-02-14 91.00583
    2023-01-30 91.00125
    2023-01-23 90.09917
    2023-01-23 90.09916
    2023-01-17 90.09734
    2023-01-12 90.09587
    2023-01-10 90.09530
    2022-12-20 90.08903