Home Malware Programs Worms Worm.AutoRun!sd5

Worm.AutoRun!sd5

Posted: January 18, 2011

Worm.AutoRun!sd5 is a network-aware Worm that infects a system and then attempts to replicate across a network. Worm.AutoRun!sd5 produces outbound traffic and also illegally downloads unknown files from the Internet. Worm.AutoRun!sd5 then has the ability to download additional forms of malware onto the compromised machine. Worm.AutoRun!sd5 is capable of modifying other files by infecting, prepending, or overwriting them with its own body. Worm.AutoRun!sd5 can create a startup registry entry and possesses all the characteristics of a severe security risk and should be terminated from the infected system immediately to prevent further damage.

Aliases

Worm.BAT.Autorun.y (Kaspersky Lab)
PWS-Banker (McAfee)
Mal/Generic-A (Sophos)
Worm:Win32/Reglo.A (Microsoft)
Worm.BAT.Autorun (Ikarus)
Win32/Autorun.worm.74240 (AhnLab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Temp%\bt66152.bat
Loading...