Home Malware Programs Worms Worm.Win32.AutoRun.cyvc

Worm.Win32.AutoRun.cyvc

Posted: November 11, 2011

Threat Metric

Ranking: 16,735
Threat Level: 5/10
Infected PCs: 105
First Seen: November 11, 2011
Last Seen: August 27, 2023
OS(es) Affected: Windows

Worm.Win32.AutoRun.cyvc is a dangerous computer worm. Worm.Win32.AutoRun.cyvc utilizes devious methods enabling it to slip onto a PC without any indication to the computer user. Moreover, Worm.Win32.AutoRun.cyvc is known to spread through a network where it can replicate infecting other systems connected to the same network. Worm.Win32.AutoRun.cyvc usually runs in the background remaining hidden from many virus detection tools. Removing Worm.Win32.AutoRun.cyvc can be accomplished by utilizing a spyware removal application that has been updated with the latest detection definitions.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%Windir%\InstallDir File name: %Windir%\InstallDir
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKEY_CURRENT_USER\Software\Enigma Protector\8834CB8F26BE43F9-C7BB3EEC8F013020\CE178002F8F93C27-EC95C4C36805C42BHKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\XtremeRATHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{381M7EV5-147K-W66H-8V04-8MD7EM38YWEO} HKEY_CURRENT_USER\Software\DYjM4Mhpr0
Loading...