TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
WORM_AUTORUN.QW
Overview

Malware type: Worm

Aliases: Worm.Win32.AutoRun.bep (Kaspersky), W32/Autorun.worm.bn (McAfee), W32.SillyFDC (Symantec), TR/Crypt.NSPM.Gen (Avira), Mal/EncPk-CE (Sophos), Worm:Win32/Taterf.gen!C (Microsoft)

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

Medium

Distribution potential:

Medium

Infection Channel 1 : Propagates via removable drives


Infection Channel 2 : Copies itself in all available physical drives


Description: 

This worm is downloaded from remote sites or dropped by other malware. It can be downloaded unknowingly by a user when visiting malicious Web sites.

It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.

It drops files detected by Trend Micro as BKDR_AGENT.ZYG. It then executes the dropped files. As a result, malicious routines of the dropped files are exhibited on the affected system.

For additional information about this threat, see:
Solution
Technical Details

Description created: Jan. 2, 2008 11:12:30 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.