Once executed, Looksky.g silently installs itself to the system and runs a spreading routine. The worm sends e-mail messages with attached infected files to all the contacts in the Windows Address Book and to some addresses harvested from local web (.htm) files.
acc_info9.exe, ebay_info.exe, sachostb.exe, sachostc.exe, sachostp.exe, sachosts.exe, sachostw.exe, sachostx.exe, tmx[X].exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunhostsrv