Skip to main content
Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 4 of 25.
Updated on Apr 11, 2011
Worm:Win32/Autorun.ABQ is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ABM is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:VBS/Autorun.BF is a worm that spreads via fixed, removable and network drives, and RAM disks. It changes the user’s Internet Explorer start page. In certain situations it may also attempt to shut down the computer.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.RG is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.FQ is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:VBS/Autorun.AX!inf is the detection for an autorun configuration file "autorun.inf" associated with Worm:VBS/Autorun.AX. The configuration file points to a VBScript worm named "UserConfig.vbs" stored in removable drives. When the removable or networked drive is accessed from another computer supporting the Autorun feature, VBS/Autorun.AX is launched automatically.
Alert level: severe
Updated on Apr 11, 2011
Worm:VBS/Autorun.AX!reg is the detection for a registry import data file "UserConfig.reg" associated with Worm:VBS/Autorun.AX. The registry import data file is used to modify the registry to run Worm:VBS/Autorun.AX at each Windows start.
Alert level: severe
Updated on Apr 11, 2011
Worm:VBS/Autorun.AL is a worm that spreads via removable and fixed drives.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ABW is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.XEA is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ABU is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.LU is a worm that spreads to all writeable logical drives. It has backdoor functionalities by connecting to a remote IRC server and performing actions as commanded by a remote attacker.
Alert level: severe
Updated on Nov 04, 2014

Windows Defender detects and removes this threat.

This threat can spread using removable drives, such as USB flash drives. When you connect the drive to your PC, the worm is run automatically.

Find out ways that malware can get on your PC.  

Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!T is a generic detection for "autorun.inf" files that use suspicious actions or commands. It may be used by other malware to automatically launch related .EXE or executable files.
Alert level: severe
Updated on Oct 10, 2013

Windows Defender Antivirus detects and removes this threat.

This is a detection for a file, called autorun.inf, that can be used by worms when they spread to local, network, or removable drives.

The file has instructions to launch the malware automatically when the removable drive is connected to a PC with the Autorun feature turned on.

This is a common way for malware to spread. However, autorun.inf files on their own are not necessarily a sign of infection; they are also used by legitimate programs.

See our infographic to the right which shows how these worms can spread. 

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.AR is a part of a multi-component malware that attempts to spread by being copied into all removable drives. It modifies system settings and gathers user information, which is then uploaded to a remote site.
Alert level: severe
Updated on Apr 11, 2011
Worm:VBS/Autorun.J is a VBScript-based worm that spreads by copying itself to fixed and removable drives. It may download arbitrary files and VBScript commands from a remote server and execute them at scheduled times.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.PH is a worm that spreads by copying itself into available drives.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ABZ is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ACA is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe