Home Malware Programs Worms Worm.Win32.AutoIt.vi

Worm.Win32.AutoIt.vi

Posted: April 28, 2011

Worm.Win32.AutoIt.vi is a malicious network-aware computer worm that has the ability to replicate itself, then circulate on the Internet through Windows networking or email clients, such as Microsoft Outlook. Worm.Win32.AutoIt.vi shows numerous advertisements on your computer desktop. Worm.Win32.AutoIt.vi disables some recently used application, as well as remove them at once. It is strongly recommended to eliminate Worm.Win32.AutoIt.vi instantly from your PC on detecting it; otherwise it could harm your computer.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\regsvr.exe
    2 %System%\rundll.exe
    3 %System%\setup.ini
    4 %System%\ssdata\Apps.dat
    5 %System%\ssdata\lgstat.ini
    6 %System%\winhelp.exe
    7 %Windir%\regsvr.exe
    8 %Windir%\Tasks\At1.job
    9 %Windir%\Tasks\At2.job
    10 %Windir%\winhelp.ini

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
Loading...