Process description:
lgfxTray
Author: |
Unknown |
Part of: |
Unknown |
Added by the W32.Takeobel worm. W32.Takeobel is a worm that copies itself to mapped network drives. It also adds an .ln3 extension to any .doc files that it finds on the compromised computer.
The lgfxTray.exe process is a known worm called 'W32.Takeobel' and should be considered a security threat.
The process is reported to copy itself to attached drives (plus any mapped network drives). It also appends the file extension .ln3 to any Word documents with a .doc file extension (E.g mydocument.doc.ln3)