Follow:

 

VirTool:INF/Autorun.gen


Microsoft security software detects and removes this threat.

This is a file, named autorun.inf, that worms create when they copy themselves to a local, network, or removable drive.

Some worms can spread to other PCs by infecting removable drives that you have plugged into your PC (such as USB drives or portable hard disks). If you then plug those drives into another PC, the worm will infect that PC as well.

See our infographic to the right which shows how these worms can spread. 

This is a common way for malware to spread. However, autorun.inf files on their own are not necessarily a sign of infection; they are also used by legitimate programs.



What to do now

The following Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

Disable Autorun

This threat tries to use the Windows Autorun function to spread via removable drives, like USB flash drives. You can disable Autorun to prevent worms from spreading:

Threat behavior

This is a file, named autorun.inf, that worms create when they copy themselves to a local, network, or removable drive.

Some worms can spread to other PCs by infecting removable drives that you have plugged into your PC (such as USB drives or portable hard disks). If you then plug those drives into another PC, the worm will infect that PC as well.

Analysis by Tim Liu


Symptoms

Alerts from your security software may be the only symptom.


Prevention


Alert level: Severe
First detected by definition: 1.71.459.0
Latest detected by definition: 1.71.459.0 and higher
First detected on: Dec 03, 2009
This entry was first published on: Jan 22, 2010
This entry was updated on: Sep 16, 2013

This threat is also detected as:
  • Trojan.AutorunINF.Gen (BitDefender)
  • INF.AutoRun (Sunbelt Software)