We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanDropper:Win32/Autorun.GR
Detected by Microsoft Defender Antivirus
Aliases: Win32/Autorun.worm.244282 (AhnLab) W32/DropperX.NWS (Command) Trojan-Dropper.Win32.Delf.cop (Kaspersky) W32/Autorun.worm.gen (McAfee) Trj/Downloader.MDW (Panda) Mal/Generic-A (Sophos)
Summary
TrojanDropper:Win32/Autorun.GR is a trojan that drops a worm, Worm:Win32/Rimecud.A. In the wild, it has been distributed inside a ZIP archive called 'christmas.zip'.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as the Microsoft Safety Scanner (http://go.microsoft.com/fwlink/?LinkId=212742). For more information, see http://www.microsoft.com/protect/computer/viruses/vista.mspx.