WORM_AUTORUN.BNH

This worm drops a copy of itself upon execution.

Through system registry modification, it then registers itself as a system service to ensure its automatic execution at every system startup.

To propagate, it drops copies of itself in all available physical and removable drives. It drops a file that allows it to automatically execute dropped copies when the drives are accessed.

Related Items