We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
VirTool:INF/Autorun.gen!L
Detected by Microsoft Defender Antivirus
Aliases: INI/AutoRun.CYJ (Norman) INF.Autorun.Gen (VirusBuster) Trojan.Autorun.AQX (BitDefender) INF/Autorun.gen (ESET) Trojan.Autorun (Ikarus) Sus/AutoInf-A (Sophos) INF.AutoRun (Sunbelt Software)
Summary
VirTool:INF/Autorun.gen!L is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
To detect and remove this threat and other malicious software that may be installed in your computer, run a full-system scan with an up-to-date antivirus product such as the following:
For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.
Follow us
