Skip to main content
Microsoft Security Intelligence
500 entries found. Displaying page 1 of 25.
Updated on Oct 10, 2013

Windows Defender Antivirus detects and removes this threat.

This is a detection for a file, called autorun.inf, that can be used by worms when they spread to local, network, or removable drives.

The file has instructions to launch the malware automatically when the removable drive is connected to a PC with the Autorun feature turned on.

This is a common way for malware to spread. However, autorun.inf files on their own are not necessarily a sign of infection; they are also used by legitimate programs.

See our infographic to the right which shows how these worms can spread. 

Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!J is a generic detection for the "autorun.inf" configuration data files dropped by various worms, which perform automated actions associated with removable media drives.
Also detected as: INF/Autorun(ESET)
Alert level: severe
Updated on Apr 11, 2011
Also detected as: INF/Autorun(ESET),INF/AutoRun.FY(Norman)
Alert level: severe
Updated on Aug 05, 2010
Worm:INF/Vobfus.gen is a generic detection for an obfuscated Autorun script file named "autorun.inf" that is dropped by variants of Win32/Vobfus, a worm that spreads via removable drives and downloads and executes arbitrary files. Detection of this script component is an indication of a Worm:Win32/Vobfus infection.
Also detected as: INF/Autorun(ESET)
Alert level: severe
Updated on Jun 01, 2015

Windows Defender detects and removes this threat.

This threat is a worm, which means it spreads from PC to PC. This particular worm spreads by copying itself to mapped network or removable drives. If someone tries to open that drive from another PC, their PC will be infected.

Find out ways that malware can get on your PC.  

 

Alert level: severe
Updated on Oct 10, 2013

Windows Defender Antivirus detects and removes this threat.

This is a detection for a file, called autorun.inf, that can be used by worms when they spread to local, network, or removable drives.

The file has instructions to launch the malware automatically when the removable drive is connected to a PC with the Autorun feature turned on.

This is a common way for malware to spread. However, autorun.inf files on their own are not necessarily a sign of infection; they are also used by legitimate programs.

See our infographic to the right which shows how these worms can spread. 

Alert level: severe
Updated on Aug 14, 2019
Alert level: severe
Updated on Oct 22, 2010
VirTool:INF/Autorun.gen!L is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Also detected as: INF/Autorun.gen(ESET)
Alert level: severe
Updated on May 21, 2012

Worm:INF/Autorun.B is the detection for files with the name "autorun.inf" that may be used by worms when spreading to local, network, or removable drives. When the drive is viewed using Windows Explorer, "autorun.inf" may automatically run, thus running the worm copy.

Also detected as: INF/Autorun virus(ESET)
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!S is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on Sep 10, 2010
VirTool:INF/Autorun.gen!H is a generic detection for the "autorun.inf" configuration data file that performs automated actions associated with removable media drives. One such action is to open an executable named "\BUMARA\darica.exe" when the drive is first connected or accessed and Autorun is enabled.
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!C is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!Q is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!W is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on May 02, 2016

Windows Defender detects and removes this threat.

The autorun.inf file is created by worms when they copy themselves to a local, network, or removable drive.

Some worms can spread to other PCs by infecting removable drives that you have plugged into your PC (such as USB drives or portable hard disks). If you plug those drives into another PC, the worm will infect that PC as well.

This is a common way for malware to spread. However, autorun.inf files on their own are not necessarily a sign of infection, they are also used by legitimate programs.

Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!E is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!O is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!T is a generic detection for "autorun.inf" files that use suspicious actions or commands. It may be used by other malware to automatically launch related .EXE or executable files.
Alert level: severe
Updated on Apr 11, 2011
VirTool:INF/Autorun.gen!R is a detection for "autorun.inf" files that may be used by worms when spreading to local, network, or removable drives. When copying themselves to a drive, worms can create a file named "autorun.inf", which contains execution instructions for the operating system. When the drive is viewed using Windows Explorer, "autorun.inf" runs, thus executing the worm copy.
 
It should be noted that "autorun.inf" files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.
Alert level: severe
Updated on Oct 30, 2014

Windows Defender detects and removes this threat.

This is a file, named autorun.inf, that worms create when they copy themselves to a local, network, or removable drive.

See the VirTool:INF/Autorun.gen description for more information.

Alert level: severe