Search the malware encyclopedia

Search Term = Worm:Win32/AutoRun

Worm:Win32/Autorun
Description: Worm:Win32/Autorun is a family of worms that spreads by copying itself to the mapped drives of an infected computer. The mapped drives may include network or removable drives.
Published Date: Aug 18, 2009
Alert level: Severe

Worm:Win32/Autorun.RW
Description: Worm:Win32/Autorun.RW is a worm that spreads via removable drives. It replaces the Windows "Automatic Updates" service with its own service. It may also download and run a file from a remote server.
Published Date: Jun 25, 2009
Alert level: Severe

Worm:Win32/Autorun.LS
Description: Worm:Win32/Autorun.LS is a bundled malware composed of executable files and library modules. In the wild, Worm:Win32/Autorun.LS has been known to be distributed as a ZIP archive with the name 'CUIDADO_COM_A_BOCA.zip'. However, users should note that this may only be one manifestation of this worm.
Published Date: Sep 11, 2009
Alert level: Severe

Worm:Win32/Autorun.AR
Description: Worm:Win32/Autorun.AR is a part of a multi-component malware that attempts to spread by being copied into all removable drives. It modifies system settings and gathers user information, which is then uploaded to a remote site.
Published Date: Sep 29, 2008
Alert level: Severe

Worm:Win32/Autorun.PH
Description: Worm:Win32/Autorun.PH is a worm that spreads by copying itself into available drives.
Published Date: Oct 31, 2008
Alert level: Severe

Worm:Win32/Autorun.PG
Description: Worm:Win32/Autorun.PG is a worm that spreads by copying itself into available drives.
Published Date: Nov 04, 2008
Alert level: Severe

Worm:Win32/Autorun.PI
Description: Worm:Win32/Autorun.PI is a worm that spreads to other drives and could allow unauthorized access to an affected machine. This malware could be instructed by a remote attacker to download and execute arbitrary files.
Published Date: Nov 04, 2008
Alert level: Severe

Worm:Win32/Autorun.RA
Description: Worm:Win32/Autorun.RA is a worm that copies itself to other drives and downloads malware from a predefined remote Web address.
Published Date: Nov 20, 2008
Alert level: Severe

Worm:Win32/Autorun.XFS
Description: Worm:Win32/Autorun.XFS is a worm that spreads via logical drives. It also has a keylogging routine.
Published Date: Jan 02, 2009
Alert level: Severe

Worm:Win32/Autorun.HO
Description: Worm:Win32/Autorun.HO is a worm that spreads via logical drives. It also disables autorun in the infected system to prevent other Autorun worm infections in the future.
Published Date: Jan 07, 2009
Alert level: Severe