Worm:Win32/Autorun.OA
Worm:Win32/Autorun.AGP
VirTool:Win32/Autorun.gen
Windows Defender detects and removes this threat.
This threat is a generic detection for an obfuscated .INF file named “autorun.inf”. The .INF file is created by malware and may be present in the root of infected removable media or shared folders and drives.
Find out ways that malware can get on your PC.
Worm:VBS/Autorun.BN
Worm:VBS/Autorun.BN is a worm that spreads by dropping copies of itself into all available removable drives.
Worm:VBS/Autorun.BI
Worm:VBS/Autorun.BN!inf
Worm:VBS/Autorun.BN!inf is an "autorun.inf" file that is dropped by Worm:VBS/Autorun.BN and used by the worm to propagate through removable drives.
Worm:Win32/Autorun.UI!inf
Worm:AutoIt/Autorun.DO
Worm:Win32/Autorun.ZH
Worm:Win32/Autorun.ZU
Worm:Win32/Autorun.ZI
Worm:Win32/Autorun.ACS
Worm:Win32/Autorun.ACP
Worm:Win32/Autorun
Windows Defender Antivirus detects and removes this threat.
This family of worms spreads by copying itself to the mapped drives of an infected PC, including network or removable drives.
Virus:Win32/Autorun
Windows Defender detects and removes this threat.
This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.
The Win32/Autorun family description has more details.
Trojan:Win32/Autorun
Windows Defender Antivirus detects and removes this threat.
This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.
The Win32/Autorun family description has more details.
Backdoor:Win32/Autorun
Windows Defender Antivirus detects and removes this threat.
This backdoor trojan can give a hacker remote access to your PC. Once your PC is infected a hacker can then do a number of things, including:
- Use your PC for distributed denial of service (DDoS) attacks
- Download other malware
- Open ports on your PC that can expose it to other attacks
This threat is detected by the Microsoft antivirus engine. Technical details are not currently available.
The Win32/Autorun family description has more details.
Worm:INF/Autorun
Windows Defender Antivirus detects and removes this threat.
This is a detection for a file, called autorun.inf, that can be used by worms when they spread to local, network, or removable drives.
The file has instructions to launch the malware automatically when the removable drive is connected to a PC with the Autorun feature turned on.
This is a common way for malware to spread. However, autorun.inf files on their own are not necessarily a sign of infection; they are also used by legitimate programs.
See our infographic to the right which shows how these worms can spread.