Worm.AutoRun!sd6

Posted: January 13, 2010
Threat Metric
Threat Level: 9/10
Infected PCs 27,677

Worm.AutoRun!sd6 Description

Worm.AutoRun!sd6 is a network-aware Worm that infects a system and then attempts to replicate across a network. Worm.AutoRun!sd6 produces outbound traffic and also illegally downloads unknown files from the Internet. Worm.AutoRun!sd6 can create a startup registry entry and possesses all the characteristics of a severe security risk and should be terminated from the infected system immediately to prevent further damage.

Aliases


Trj/Passtealer.FZ [Panda]Worm/Delf.GOD [AVG]W32/AutoRun.LW!worm [Fortinet]Trojan.Win32.Generic.122E5DEEWin-Trojan/Autorun.59392.B [AhnLab-V3]Trojan.Win32.AutoRun.59392Trojan/DiskAutorun.axlW32/SillyFDC-BP [Sophos]TR/Agent.AGBR [AntiVir]Win32.HLLW.Autoruner.1773 [DrWeb]Worm.Win32.AutoRun.EY [Comodo]Trojan.Agent.AGBR [BitDefender]Worm.Win32.AutoRun.lw [Kaspersky]Trojan.Autorun-220 [ClamAV]Win32:AutoRun-QM [Wrm] [Avast]
More aliases (2804)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Worm.AutoRun!sd6 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\users\scaner\documents\database.mdb File name: database.mdb
Size: 8.43 KB (8432 bytes)
MD5: 0a456ffff1d3fd522457c187ebcf41e4
Detection count: 3,876
Mime Type: unknown/mdb
Path: %SYSTEMDRIVE%\users\scaner\documents\
Group: Malware file
Last Updated: September 27, 2020
Boomer.exe File name: Boomer.exe
Size: 36.86 KB (36864 bytes)
MD5: 2ca27551e11bf054f7c5cb98eac11408
Detection count: 96
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
D:doc01 .scr File name: doc01 .scr
Size: 114.68 KB (114688 bytes)
MD5: d3dd17b567bdc7e7daa1ab36495d1bcb
Detection count: 92
Mime Type: unknown/scr
Path: D:
Group: Malware file
Last Updated: October 5, 2017
Prolin.exe File name: Prolin.exe
Size: 36.86 KB (36864 bytes)
MD5: 65eeb8a0fce412d7f236f8348357d1c0
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
naked.exe File name: naked.exe
Size: 73.73 KB (73732 bytes)
MD5: da4371bc7347d3633c0eea308c9cb444
Detection count: 90
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
D:LAPTOP DATA .scr File name: LAPTOP DATA .scr
Size: 47.61 KB (47612 bytes)
MD5: 349752fc724199059603073bacfa429e
Detection count: 74
Mime Type: unknown/scr
Path: D:
Group: Malware file
Last Updated: October 5, 2017
gip3.exe File name: gip3.exe
Size: 82.84 KB (82848 bytes)
MD5: 644814aa418a3ae1716daa7fb484a539
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
gip1.exe File name: gip1.exe
Size: 45.05 KB (45056 bytes)
MD5: dbea1cc228c9353851e06599788a5a5e
Detection count: 70
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%SystemDrive%FOUND.039 .scr File name: FOUND.039 .scr
Size: 118.78 KB (118784 bytes)
MD5: e64e104bd27c0e0c7eb7d1b528f45b06
Detection count: 56
Mime Type: unknown/scr
Path: %SystemDrive%
Group: Malware file
Last Updated: October 5, 2017
magistr.exe File name: magistr.exe
Size: 77.82 KB (77824 bytes)
MD5: a8cfcfa06303168b5f94e0696882a3c8
Detection count: 54
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: May 27, 2020
%ALLUSERSPROFILE%Local Settings .scr File name: Local Settings .scr
Size: 204.8 KB (204800 bytes)
MD5: 6b6ec76eb7dd73effd7850563b4846e8
Detection count: 45
Mime Type: unknown/scr
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: October 5, 2017
K:kop .scr File name: kop .scr
Size: 40.96 KB (40960 bytes)
MD5: 7a0b5674ec20b6455559ca1d70dc2c55
Detection count: 44
Mime Type: unknown/scr
Path: K:
Group: Malware file
Last Updated: October 5, 2017
badtrans.exe File name: badtrans.exe
Size: 40.96 KB (40960 bytes)
MD5: 15c2f7ece2c6647c5e45608e39b08e34
Detection count: 41
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
paukor.exe File name: paukor.exe
Size: 416.25 KB (416256 bytes)
MD5: 7e20359dfc0b2291487f1a45c4471988
Detection count: 34
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
fintas.exe File name: fintas.exe
Size: 36.86 KB (36864 bytes)
MD5: 42b1eb959ce76f9013e8e9922305ca29
Detection count: 32
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
leave.exe File name: leave.exe
Size: 76.8 KB (76800 bytes)
MD5: 0eb3cca824da735aa040caa012450748
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%USERPROFILE%\Desktop\????\عععع .scr File name: عععع .scr
Size: 76.28 KB (76284 bytes)
MD5: 7ab70d44ec07d076ea7dc7e8aff6a011
Detection count: 22
Mime Type: unknown/scr
Path: %USERPROFILE%\Desktop\????\
Group: Malware file
Last Updated: October 5, 2017
%SYSTEMDRIVE%\users\islam\appdata\roaming\musallat.exe File name: musallat.exe
Size: 226.05 KB (226051 bytes)
MD5: 5176a58244391519e1adb48221377b58
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\users\islam\appdata\roaming\
Group: Malware file
Last Updated: July 10, 2019
toil.exe File name: toil.exe
Size: 8.19 KB (8192 bytes)
MD5: ec8a1659c7d67a3859d515130bae3c4c
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: March 11, 2020
%USERPROFILE%\Desktop\111\ADORER AVEC NOUS .scr File name: ADORER AVEC NOUS .scr
Size: 3.37 MB (3373568 bytes)
MD5: 5421ad3e8fbe0f8a04e617224f4abbf0
Detection count: 5
Mime Type: unknown/scr
Path: %USERPROFILE%\Desktop\111\
Group: Malware file
Last Updated: October 5, 2017

More files

Registry Modifications


The following newly produced Registry Values are:

Directory%PROGRAMFILES%\windows common files%PROGRAMFILES(x86)%\windows common files%TEMP%\E_4%TEMP%\E_N4File name without path! My Picutre.SCR!new.scrimages.scrNew Folder.exeThumbs .dbwindows vista setup .scrRegexp file mask%ALLUSERSPROFILE%\Adobe .scr%APPDATA%\Microsoft\winlog.exe%APPDATA%\MusaLLaT.exe%APPDATA%\readere_lm.com%SystemRoot%\System32\XP-[RANDOM CHARACTERS].exe%WINDIR%\dc.exe
Home Malware Programs Worms Worm.AutoRun!sd6

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.