Skip to main content
Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 1 of 25.
Updated on Oct 09, 2013

Windows Defender Antivirus detects and removes this threat.

This family of worms spreads by copying itself to the mapped drives of an infected PC, including network or removable drives.

Alert level: severe
Updated on Jun 01, 2015

Windows Defender detects and removes this threat.

This threat is a worm, which means it spreads from PC to PC. This particular worm spreads by copying itself to mapped network or removable drives. If someone tries to open that drive from another PC, their PC will be infected.

Find out ways that malware can get on your PC.  

 

Alert level: severe
Updated on Oct 09, 2013

Windows Defender detects and removes this threat.

This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.

The Win32/Autorun family description has more details.

Alert level: severe
Updated on Oct 09, 2013

Windows Defender Antivirus detects and removes this threat.

This backdoor trojan can give a hacker remote access to your PC. Once your PC is infected a hacker can then do a number of things, including:

  • Use your PC for distributed denial of service (DDoS) attacks
  • Download other malware
  • Open ports on your PC that can expose it to other attacks

This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.

The Win32/Autorun family description has more details.

Alert level: severe
Updated on Oct 09, 2013

Windows Defender Antivirus detects and removes this threat.

This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.

The Win32/Autorun family description has more details.

Alert level: severe
Updated on Aug 25, 2020
Alert level: severe
Updated on Jan 21, 2013

Worm:Win32/Autorun.PL is a worm that spreads by dropping copies of itself onto removable drives. It also modifies the system file "explorer.exe".

Also detected as: Win32/AutoRun.ARX(ESET)
Alert level: severe
Updated on Apr 11, 2011
TrojanDropper:Win32/Autorun.GR is a trojan that drops a worm, Worm:Win32/Rimecud.A. In the wild, it has been distributed inside a ZIP archive called 'christmas.zip'.
Also detected as: Win32/Autorun.worm.244282(AhnLab)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ZZ is a worm that spreads by copying itself to mapped network drives as a file named "klickmich1000.exe". The worm attempts to communicate with the remote server "lysclassic.dyndns.org".
Also detected as: Win32/AutoRun.Agent.XK(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.TA is a worm that spreads to available drives and may execute automatically when accessed from a computer that supports the Autorun feature. The worm blocks access to certain security-related websites by modifying the local hosts file.
Also detected as: Win32/AutoRun.VB.DL(ESET),Win32/Autorun.worm.102400.C(AhnLab)
Alert level: severe
Updated on Sep 30, 2012
Worm:Win32/Autorun.JQ!inf is an "autorun.inf" file created by Worm:Win32/Autorun.JQ and Worm:Win32/Autorun.CH in order for the worm to spread and infect other computers through network shares or removable devices.
Also detected as: Win32/AutoRun.NAE(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.MB is a worm that copies itself to mapped drives and allows remote access from an attacker. The worm can spread to other computers by exploiting a vulnerability that is present in computers that have not applied Microsoft Security Bulletin MS02-045, a security update first published in 2002.
Also detected as: Win32/AutoRun.Agent.JP(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.WZ!inf is detection for the Autorun configuration file "autorun.inf" dropped by Worm:Win32/Autorun.WZ, a worm that spreads via removable and network drives.
Also detected as: Win32/AutoRun.VB.NJ(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.FC is a worm that spreads via removable drives and attempts to download files from a remote Web address.
Also detected as: Win32/AutoRun.COB(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.CS is a worm that attempts to spread by copying itself to the local computer and to removable drives. This worm modifies system settings to hide its presence.
Also detected as: Win32/AutoRun.JS(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.PQ is a worm that spreads to other drives. This worm may terminate applications, change the access control lists (ACLs) of multiple files and download additional malware.
Also detected as: Win32/AutoRun.WC(ESET)
Alert level: severe
Updated on Apr 11, 2011
Virus:Win32/Autorun.NE is a virus that infects all Windows files and spreads by copying itself to the root of all drives.
Also detected as: Win32/AutoRun.Stihat.A(ESET),Worm:Win32/Autorun.NE(other),Worm:Win32/Autorun.NE!inf(other)
Alert level: severe
Updated on Jan 29, 2012
Worm:Win32/Autorun.AEA is a worm that spreads to other drives as a files named "syskernel.exe" and "new folder1.exe". The worm terminates certain Windows utilities such as Task Manager and Registry Editor and also renames files having certain extensions.
Also detected as: Win32/AutoRun.VB.APO(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.UO is a worm that copies Backdoor:Win32/IRCbot.DP locally and to all removable drives.
Also detected as: Win32/AutoRun.DK(ESET)
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.WZ is a worm that spreads via removable and network drives.
Also detected as: Win32/AutoRun.VB.JT(ESET)
Alert level: severe