Home Malware Programs Worms Worm.Win32.AutoRun.gmk

Worm.Win32.AutoRun.gmk

Posted: September 1, 2011

Worm.Win32.AutoRun.gmk is a malicious computer worm that spreads via infected email attachments and is able to distribute itself to the same local network via security exploits. Worm.Win32.AutoRun.gmk uses peer-to-peer botnets to install additional pay-per-install malware threats in an infected computer system and corrupts search results to show advertisements. Worm.Win32.AutoRun.gmk uses infected PC user's contact list in order to copy itself over the IM network and generate outbound traffic. Worm.Win32.AutoRun.gmk is a dangerous security threat and you should remove it immediately by using a decent anti-spyware application.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



c:\nIKalod\Kanop\Orgapin.exe File name: c:\nIKalod\Kanop\Orgapin.exe
File type: Executable File
Mime Type: unknown/exe
c:\nIKalod\Kanop\Desktop.ini File name: c:\nIKalod\Kanop\Desktop.ini
Mime Type: unknown/ini

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{4FG45TFT-HU58-6G57-HY56-6HY654F16G8U} StubPath = "c:\nIKalod\Kanop\Orgapin.exe"
Loading...