Skip to main content
Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 5 of 25.
Updated on Apr 11, 2011
Worm:Win32/Autorun.OA is a worm that spreads through fixed and removable drives by dropping copies of itself. It may change the computer system date, delete other programs, or connect to a remote site and await commands from a remote attacker.
Alert level: severe
Updated on Jan 13, 2013
Worm:Win32/Autorun.AGP is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on May 02, 2016

Windows Defender detects and removes this threat.

This threat is a generic detection for an obfuscated .INF file named “autorun.inf”. The .INF file is created by malware and may be present in the root of infected removable media or shared folders and drives.

Find out ways that malware can get on your PC.  

 

Alert level: severe
Updated on Apr 15, 2011

Worm:VBS/Autorun.BN is a worm that spreads by dropping copies of itself into all available removable drives.

Alert level: severe
Updated on Apr 11, 2011
Worm:VBS/Autorun.BI is a worm written in VBScript. It spreads by copying itself to the root of every writable drive as "nuevos !!!.hta".
Alert level: severe
Updated on Apr 16, 2011

Worm:VBS/Autorun.BN!inf is an "autorun.inf" file that is dropped by Worm:VBS/Autorun.BN and used by the worm to propagate through removable drives.

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.UI!inf is detection for the autorun.inf file dropped by Worm:Win32/Autorun.UI.  It adds an action named 'Open folder to view files' to the autoplay menu, which looks the same as the standard 'Open folder to view files' option, in an attempt to trick the user into running the malware.  It will be found on removable drives along with Worm:Win32/Autorun.UI.
Alert level: severe
Updated on Apr 11, 2011
Worm:AutoIt/Autorun.DO is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ZH is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ZU is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ZI is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Jul 20, 2011
Worm:Win32/Autorun.ACS is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Jul 20, 2011
Worm:Win32/Autorun.ACP is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Oct 09, 2013

Windows Defender Antivirus detects and removes this threat.

This family of worms spreads by copying itself to the mapped drives of an infected PC, including network or removable drives.

Alert level: severe
Updated on Oct 09, 2013

Windows Defender detects and removes this threat.

This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.

The Win32/Autorun family description has more details.

Alert level: severe
Updated on Oct 09, 2013

Windows Defender Antivirus detects and removes this threat.

This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.

The Win32/Autorun family description has more details.

Alert level: severe
Updated on Oct 09, 2013

Windows Defender Antivirus detects and removes this threat.

This backdoor trojan can give a hacker remote access to your PC. Once your PC is infected a hacker can then do a number of things, including:

  • Use your PC for distributed denial of service (DDoS) attacks
  • Download other malware
  • Open ports on your PC that can expose it to other attacks

This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.

The Win32/Autorun family description has more details.

Alert level: severe
Updated on Oct 10, 2013

Windows Defender Antivirus detects and removes this threat.

This is a detection for a file, called autorun.inf, that can be used by worms when they spread to local, network, or removable drives.

The file has instructions to launch the malware automatically when the removable drive is connected to a PC with the Autorun feature turned on.

This is a common way for malware to spread. However, autorun.inf files on their own are not necessarily a sign of infection; they are also used by legitimate programs.

See our infographic to the right which shows how these worms can spread. 

Alert level: severe
Updated on Jul 26, 2011
Worm:Win32/Autorun.ACU is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Jan 29, 2012
Worm:Win32/Autorun.AEA is a worm that spreads to other drives as a files named "syskernel.exe" and "new folder1.exe". The worm terminates certain Windows utilities such as Task Manager and Registry Editor and also renames files having certain extensions.
Alert level: severe