WORM_AUTORUN.BWZ

This worm may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself. It drops files/components. It then deletes itself after execution.

It creates registry entries to enable its automatic execution at every system startup.

It modifies registry entries to hide files with both System and Read-only attributes.

It drops copies of itself in all physical and removable drives. It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.

Related Items