WORM_AUTORUN.APR

This worm drops copies of itself. It drops files/components.

It creates registry entries to enable its automatic execution at every system startup. It modifies registry entries to hide files with both System and Read-only attributes.

It drops copies of itself in all physical drives and in all removable drives.

It accesses Web sites to download file(s). As a result, malicious routines of the downloaded files are exhibited on the affected system. It drops component files.

Related Items