Home Malware Programs Worms Autorun.XO

Autorun.XO

Posted: April 22, 2011

Threat Metric

Threat Level: 5/10
Infected PCs: 63
First Seen: April 22, 2011
OS(es) Affected: Windows

Aliases

Worm/Generic.AUBZ [AVG]Worm.Win32.AutoRun [Ikarus]Worm/Autorun.bgzr.8 [AntiVir]Trojan.Siggen.46586 [DrWeb]Worm.Win32.AutoRun.bgzr [Kaspersky]W32/Worm.BLBH [F-Prot]EmailWorm [K7AntiVirus]W32/Autorun.worm.gr [McAfee]Win-Trojan/Swisyn.197120.E [AhnLab-V3]Trojan.Win32.Searches.wf [Kaspersky]Generic.bfr!bo [McAfee]Mal/FakeAV-JO [Sophos]TR/Obfuscated.alnp [AntiVir]Trojan.Packed.21579 [DrWeb]Trojan.Generic.KD.180698 [BitDefender]
More aliases (161)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\system32\wmnxtmgr.dll File name: wmnxtmgr.dll
Size: 192 KB (192000 bytes)
MD5: f683b88478a79ae6ff3752b2fceadab5
Detection count: 96
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: March 12, 2013
%APPDATA%\eerxnideomksvirtfpux.dll File name: eerxnideomksvirtfpux.dll
Size: 117.24 KB (117248 bytes)
MD5: 0b4eeb752d57828daee7ee9daa0446c0
Detection count: 83
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%
Group: Malware file
Last Updated: April 26, 2011
%WINDIR%\system32\drivers\sysam.exe File name: sysam.exe
Size: 146.43 KB (146432 bytes)
MD5: fd4f753f6f9040481d6f7c51bb8de195
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32\drivers
Group: Malware file
Last Updated: April 26, 2011
%WINDIR%\system32\hhgwiamd.dll File name: hhgwiamd.dll
Size: 194.04 KB (194048 bytes)
MD5: d0e2fe7c431dc487e3aee43ec15ccadf
Detection count: 71
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: April 22, 2011
%WINDIR%\system32\yteryx.exe File name: yteryx.exe
Size: 18.94 KB (18944 bytes)
MD5: 7468bf62223d9014ed6788d56c2cc51e
Detection count: 45
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: April 28, 2011
%TEMP%\rundll32 .exe File name: rundll32 .exe
Size: 9.77 MB (9775616 bytes)
MD5: 896fc92240a2c845d8f176f4cd584aa7
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: April 26, 2011
%APPDATA%\SysWin\lsass.exe File name: lsass.exe
Size: 203.26 KB (203264 bytes)
MD5: d9ff9399d182dacc1ad45e27e5727235
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\SysWin
Group: Malware file
Last Updated: April 26, 2011
%APPDATA%\SysWin\lsass.exe File name: lsass.exe
Size: 197.12 KB (197120 bytes)
MD5: 62f5f6ee42fb9a56f7608c7eea331bba
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\SysWin
Group: Malware file
Last Updated: April 28, 2011
C:\Documents and Settings\<username>\Local Settings\Application Data\glovext.dll File name: glovext.dll
Size: 11.26 KB (11264 bytes)
MD5: 9b9a07f9309c641268dac867214ce20f
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Documents and Settings\<username>\Local Settings\Application Data
Group: Malware file
Last Updated: April 26, 2011
%WINDIR%\apppatch\xthvfge.dat File name: xthvfge.dat
Size: 194.56 KB (194560 bytes)
MD5: cce005daee7e301de8b81fd4ab166192
Detection count: 5
File type: Data file
Mime Type: unknown/dat
Path: %WINDIR%\apppatch
Group: Malware file
Last Updated: April 26, 2011
Loading...