Home Malware Programs Worms W32.Aemrant

W32.Aemrant

Posted: June 14, 2010

Threat Metric

Threat Level: 5/10
Infected PCs: 61
First Seen: December 1, 2010
OS(es) Affected: Windows

W32.Aemrant is a malicious autorun worm that will propagate by creating a duplicate on removable USB drives. W32.Aemrant has the ability to lower the security settings on infected computers to operate undetected. Use an effective malware remover to detect and terminate W32.Aemrant immediately.

Aliases

Trj/CI.A [Panda]Trojan.Win32.AutoHK [Ikarus]Worm:AutoIt/Aemrant.A [Microsoft]Win32/ASuspect.HABFD [eTrust-Vet]Heuristic.BehavesLike.Win32.ModifiedUPX.C!87 [McAfee-GW-Edition]W32.Aemrant [Symantec]Win32/AutoRun.AutoHK.J [NOD32]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\AppPatch\smss.exe File name: smss.exe
Size: 235.88 KB (235880 bytes)
MD5: 7eaa2b828b61c8a09acb82f7797625db
Detection count: 90
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\AppPatch
Group: Malware file
Last Updated: December 1, 2010
Loading...