Home Malware Programs Worms Win32/Autorun.worm.aau

Win32/Autorun.worm.aau

Posted: February 23, 2011

The Win32/Autorun.worm.aau worm will create copies of itself on removable drives and use Autorun exploits to infect new computers easily. Once on a fresh computer, Win32/Autorun.worm.aau will run in the background through startup registry entries. Win32/Autorun.worm.aau may overwrite system files with copies of itself or drop other malware onto your computer. The presence of worms like this one is always harmful for the host system, and deleting Win32/Autorun.worm.aau should be hastily accomplished to safeguard your machine from serious damage.

Keep an Eye on Your Removable Drives

Worms like Win32/Autorun.worm.aau can spread through a multitude of ways, but the most common confirmed infection route for Win32/Autorun.worm.aau is through a removable drive. Win32/Autorun.worm.aau will create a new and hidden copy of itself in every removable drive Win32/Autorun.worm.aau detects, along with a new Autorun file. The latter will cause the drive to install Win32/Autorun.worm.aau every time the device is plugged into a machine.

Many malware will alter your registry as their first act of hostility, and Win32/Autorun.worm.aau is no different from most in that respect. The startup registry entries allow Win32/Autorun.worm.aau to run without requiring any input or awareness from you other than booting up Windows. Many infections can be tracked by noting unusual Task Manager memory processes, but some may also shut down Task Manager to prevent this.

Most security programs will be able to find and delete all infected registry entries, as well as the worm's actual files. However, Win32/Autorun.worm.aau may not be noticed by an anti-virus scanner that hasn't been updated recently, so remember to hit that update button before you get ready to scan.

The Slime Trail Win32/Autorun.worm.aau Leaves Over Your System

All worms are harmful in the bare minimum sense of propagating without the computer user's permission, taking up memory and hard drive space as well as generally adding clutter. Win32/Autorun.worm.aau has a more specific threat, however, due to being reported to copy itself right on top of already-present system files! The loss of system files can seriously impede your computer's proper functioning and may even require you to reinstall your whole operating system.

Worms are also known for other malicious behavior, such as enabling spyware, assisting remotely-located attackers, destroying security programs and generally serving as an opening portal for other malware problems. Win32/Autorun.worm.aau may not make any loud noises when Win32/Autorun.worm.aau infects your system, but the danger is still high all the same. Consider deleting Win32/Autorun.worm.aau quickly if you care about your computer's safety at all, since it may be too late to act in the future if you hesitate in the present.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %PROGRAM_FILES%\Win32/Autorun.worm.aau.
    2 c:\Documents and Settings\All Users\Start Menu\Win32/Autorun.worm.aau\ and delete it manually
    3 c:\Documents and Settings\All Users\Win32/Autorun.worm.aau\ and delete it manually

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\Win32/Autorun.worm.aau
Loading...