Skip to main content
Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 6 of 25.
Updated on Apr 11, 2011
Virus:VBS/Autorun.A is a virus that spreads by copying itself to fixed and removable drives.
Alert level: severe
Updated on Apr 11, 2011
Worm:BAT/Autorun.L!inf is the detection for the autorun.inf created by Worm:BAT/Autorun.L when it spreads to logical drives. This INF file automatically runs the dropped copy of the worm when the drive is accessed.
Alert level: severe
Updated on Apr 11, 2011
Trojan:BAT/Autorun.A is a batch file component of Worm:VBS/Autorun.W. It creates an autorun registry entry for Worm:VBS/Autorun.W. It may also modify certain system settings and delete certain files.
Alert level: severe
Updated on Jul 08, 2012
Worm:Win32/Autorun.AFR is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:AutoIt/Autorun.DQ is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new machines. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted machines. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.ZO is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.VirTool:INF/Autorun.gen!P is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!V is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on Apr 15, 2011

Worm:VBS/Autorun.BN is a worm that spreads by dropping copies of itself into all available removable drives.

Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.UO is a worm that copies Backdoor:Win32/IRCbot.DP locally and to all removable drives.
Alert level: severe
Updated on Feb 22, 2012

Worm:Win32/Autorun.AED is a worm that spreads via removable drives. Variants of the Worm:Win32/Autorun family usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives. They do this by placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.

Alert level: severe
Updated on Jun 22, 2011
Worm:Win32/Autorun.ACL is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Dec 27, 2011
Worm:Win32/Autorun.ADY is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:VBS/Autorun.J is a VBScript-based worm that spreads by copying itself to fixed and removable drives. It may download arbitrary files and VBScript commands from a remote server and execute them at scheduled times.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.JN is a worm that spreads via removable drives, such as flash drives or portable hard disks. It attempts to connect to certain remote servers.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.JN!inf is the detection for an INF file dropped by Worm:Win32/Autorun.JN in removable drives as 'autorun.inf'.
Alert level: severe
Updated on Jul 08, 2012
Worm:Win32/Autorun.AFM is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Jan 13, 2013
Worm:Win32/Autorun.AGP is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new computers. Variants of Worm:Win32/Autorun usually spread using methods that include, but may not be limited to, copying themselves to removable or network drives, and placing an autorun.inf file in the root directory of each affected drive in an attempt to ensure that the worm is run when the removable drive is attached, or the network drive is visited from a remote system supporting the Autorun feature.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.MBS is a worm - a self-propagating program that can spread itself from one computer to another. Worms may spread themselves via a variety of different channels in order to compromise new machines. Commonly, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted machines. Worms also often attempt to spread via platforms that require user interaction in order to run. They may send themselves as an attachment to an email or an instant message, or send a link to a copy of themselves in the body of a message. In these cases the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
Alert level: severe
Updated on Apr 11, 2011
Worm:Win32/Autorun.WZ is a worm that spreads via removable and network drives.
Alert level: severe