Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Dec 04, 2012 | Updated Sep 15, 2017

Worm:Win32/Bluber.A

Detected by Microsoft Defender Antivirus

Aliases: Possible_Otorun8 (Trend Micro)

Summary

Windows Defender detects and removes this threat.
 
This threat is a self-propagating program that can spread itself from one computer to another. Worms may spread themselves through various channels to compromise new computers. Typically, worms may spread directly by copying themselves to removable or network drives, or by attempting to exploit particular vulnerabilities on targeted computers.
 
Worms also often attempt to spread through platforms that require user interaction to run. They may send themselves as an attachment to an email, instant message, or send a link to a copy of themselves in the body of a message. In these cases, the message needs to be convincing enough to encourage the victim to click on the link or attachment and run or download a copy of the worm.
 
 
NOTE: On March 31, 2017, an incorrect detection for our cloud-based protection for Worm:Win32/Bluber.A was identified and immediately fixed.
 
To ensure that this issue is remediated, you can do a forced daily update to download your Microsoft antimalware and antispyware software. The fix has been deployed in signature build 1.239.530.0 on March 31, 2017, 2:50 PM PDT.
 

You might need to manually update your Microsoft security software.

After updating, make sure you run a full scan. Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC. 

Run antivirus or antimalware software 

Use the following free Microsoft software to detect and remove this threat: 

Additional remediation instructions

This threat may make lasting changes to an affected system's configuration that will NOT be restored by detecting and removing this threat. For more information on returning an affected system to its pre-infected state, please see the following information:
Disable Autorun functionality
Worm:Win32/Bluber.A attempts to spread via removable drives on computers that support Autorun functionality. This is a particularly common method of spreading for many current malware families. For information on disabling Autorun functionality, please see the following article: http://support.microsoft.com/kb/967715/
Use cloud protection

Use cloud protection to help guard against the latest malware threats. It’s turned on by default for Microsoft Security Essentials and Windows Defender for Windows 10. 

Go to All settings > Update & security > Windows Defender and make sure that your Cloud-based Protection settings is turned On.

Get more help

You can also see our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Follow us