Home Malware Programs Worms VBS.AutoRun.ag

VBS.AutoRun.ag

Posted: September 21, 2010

Threat Metric

Threat Level: 5/10
Infected PCs: 112
First Seen: November 30, 2010
Last Seen: November 18, 2021
OS(es) Affected: Windows

VBS.AutoRun.ag is a malicious computer worm which runs silently and loads of copies of itself all over a targeted system. VBS.AutoRun.ag also creates an extra registry entry to ensure the worm is executed automatically each time the system boots up. VBS.AutoRun.ag has the ability to copy itself all over the compromised computer while infecting other files and folders. Users may find that files have appeared, been modified or disappeared. If an unknown file appears on the desktop this is a sign that your computer is infected with VBS.AutoRun.ag.

VBS.AutoRun.ag

Aliases

JS/Heur [AVG]Virus.JS.Heur [Ikarus]Trojan.Script.Suspic.gen [Kaspersky]VBS.SSIWG.a [eSafe]VBS/Autorun.KOC [Panda]VBS/VirusProtection.I!worm [Fortinet]Worm.Win32.VBS.VirusProtection.i [Ikarus]W32/Autorun-BHN [Sophos]VBS/Autorun.rdc [AntiVir]VBS.Autoruner.63 [DrWeb]Worm.VBS.Autorun.ll [Kaspersky]VBS/AutoRun.EJ [NOD32]Trojan [K7AntiVirus]Worm/AutoRun [AVG]Worm.VBS.VirusProtection.i [Kaspersky]
More aliases (121)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\sheila-keith-uy.vbs File name: sheila-keith-uy.vbs
Size: 3.06 KB (3068 bytes)
MD5: d1ac63d34cec314fef829e6a55da971a
Detection count: 61
Mime Type: unknown/vbs
Path: %WINDIR%
Group: Malware file
Last Updated: January 14, 2013
%WINDIR%\M2K1H4A7.vbs File name: M2K1H4A7.vbs
Size: 30.38 KB (30384 bytes)
MD5: 306d03d12fa07c86ab45f134c08fc141
Detection count: 44
Mime Type: unknown/vbs
Path: %WINDIR%
Group: Malware file
Last Updated: June 11, 2012
%WINDIR%\system32\killVBS.vbs File name: killVBS.vbs
Size: 8.15 KB (8158 bytes)
MD5: 7f00b0c530251007d27c261bead1932d
Detection count: 33
Mime Type: unknown/vbs
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010
%WINDIR%\solution.vbs File name: solution.vbs
Size: 3.67 KB (3672 bytes)
MD5: d1fa70ed56e6a13843f8d4d017d12068
Detection count: 15
Mime Type: unknown/vbs
Path: %WINDIR%
Group: Malware file
Last Updated: March 24, 2011
%WINDIR%\M1K4H5A7.vbs File name: M1K4H5A7.vbs
Size: 32.99 KB (32994 bytes)
MD5: b29af41285bb1dcdaee44e90c6a0088c
Detection count: 9
Mime Type: unknown/vbs
Path: %WINDIR%
Group: Malware file
Last Updated: July 15, 2019
%WINDIR%\janka.vbs File name: janka.vbs
Size: 3.04 KB (3040 bytes)
MD5: 9c13797a5457ab7b49166d1497d82501
Detection count: 7
Mime Type: unknown/vbs
Path: %WINDIR%
Group: Malware file
Last Updated: August 25, 2011
%USERPROFILE%\Mes documents\moz.vbs File name: moz.vbs
Size: 1.87 KB (1872 bytes)
MD5: f85367b72d565a4ea34938b6dccbde58
Detection count: 7
Mime Type: unknown/vbs
Path: %USERPROFILE%\Mes documents
Group: Malware file
Last Updated: April 22, 2020
%WINDIR%\tumauini.vbs File name: tumauini.vbs
Size: 2.99 KB (2993 bytes)
MD5: 7f3bc36cf7204a5c2af70ab9dc53f28f
Detection count: 7
Mime Type: unknown/vbs
Path: %WINDIR%
Group: Malware file
Last Updated: January 9, 2011
%WINDIR%\system32\VirusRemoval_PERO.vbs File name: VirusRemoval_PERO.vbs
Size: 11.5 KB (11506 bytes)
MD5: 2032a79cda8302b3c54f34b78c80f42a
Detection count: 5
Mime Type: unknown/vbs
Path: %WINDIR%\system32
Group: Malware file
Last Updated: July 31, 2018
%WINDIR%\RJN_Burner.vbs File name: RJN_Burner.vbs
Size: 6.55 KB (6559 bytes)
MD5: 547cbe6d83fa1b62e18365f056e7df8d
Detection count: 4
Mime Type: unknown/vbs
Path: %WINDIR%
Group: Malware file
Last Updated: December 8, 2010
%USERPROFILE%\Mes documents\meg.vbs File name: meg.vbs
Size: 1.6 KB (1600 bytes)
MD5: 8d01e3dab8b3e8dc3c7c640be46c83e8
Detection count: 4
Mime Type: unknown/vbs
Path: %USERPROFILE%\Mes documents
Group: Malware file
Last Updated: March 19, 2012
Loading...