Home Malware Programs Worms W32/Autorun.worm.h

W32/Autorun.worm.h

Posted: October 28, 2009

W32/Autorun.worm.h is a worm that copies itself to the root of any accessible disk drives on the corrupted computer. W32/Autorun.worm.h will also create an 'autorun.inf' file on the root directory of the volume in order that it is accomplished the next time the volume is mounted. W32/Autorun.worm.h spreads to removable drives by creating an 'autorun.inf' file, which will run the worm automatically, if the systems which use the removable drive are set to Autorun.

Aliases

Mal/VB-F (Sophos)
Mal/AutoInf-A
W32.SillyFDC (Symantec)
PE_ABI.A (Trend Micro) IM-Worm.Win32.VB.gd (Kaspersky Lab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 c:\Autorun.inf

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Options
Loading...