Skip to main content
Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 1 of 25.
Updated on Jun 01, 2015

Windows Defender detects and removes this threat.

This threat is a worm, which means it spreads from PC to PC. This particular worm spreads by copying itself to mapped network or removable drives. If someone tries to open that drive from another PC, their PC will be infected.

Find out ways that malware can get on your PC.  

 

Alert level: severe
Updated on Mar 25, 2009
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Rimecud.A is a worm that spreads by copying itself to removable drives, messenger and peer-to-peer file sharing networks. It also contains backdoor functionality that allows unauthorized access and control of an affected machine. It is dropped and executed by TrojanDropper:Win32/Autorun.GR. In the wild, TrojanDropper:Win32/Autorun.GR has been distributed inside a ZIP archive called 'christmas.zip'.
Also detected as: Worm:Win32/Autorun.GR(Microsoft)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.CD is a worm that spreads via removable drives and e-mail, and changes the affected user's Internet Browser Start page.
Alert level: severe
Updated on Aug 23, 2012

Worm:VBS/Autorun.BU is a worm that spreads by dropping copies of itself onto all available removable drives. It also modifies system security settings.

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.YR is a worm that spreads via Removable drives and corrupts files.
Alert level: severe
Updated on Apr 11, 2011
TrojanDropper:Win32/Autorun.GR is a trojan that drops a worm, Worm:Win32/Rimecud.A. In the wild, it has been distributed inside a ZIP archive called 'christmas.zip'.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.AAY is a worm that spreads by copying itself to removable and network drives. The worm attempts to connect to a remote server via TCP port 443.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.PI is a worm that spreads to other drives and could allow unauthorized access to an affected machine. This malware could be instructed by a remote attacker to download and execute arbitrary files.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.RA is a worm that copies itself to other drives and downloads malware from a predefined remote Web address.
Alert level: severe
Updated on Apr 11, 2011
Worm:BAT/Autorun.H is a detection for a batch file worm that spreads via logical drives.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.XGD is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new machines. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted machines. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.WA is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new machines. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted machines. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.WM is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new machines. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted machines. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
Alert level: severe
Updated on Sep 19, 2011
Worm:Win32/Autorun.ADB is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Sep 19, 2011
Worm:Win32/Autorun.ADC is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Sep 19, 2011
Worm:Win32/Autorun.ADG is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:AutoIt/Autorun.DQ is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new machines. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted machines. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
Alert level: severe
Updated on Sep 19, 2011
Worm:Win32/Autorun.ADF is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Jul 15, 2012

VirTool:INF/Autorun.gen!AE is a generic detection for autorun.inf files that may be used by variants of the Win32/Vobfus family of worms when spreading to local, network or removable drives.

Worms of the Win32/Vobfus family download and run arbitrary files and the downloaded files may include additional malware.

Alert level: severe