WORM_AUTORUN.CAL

This worm may be downloaded from remote sites by other malware. It may be dropped by other malware. It may arrive bundled with malware packages as a malware component. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It creates folders. It drops copies of itself.

It modifies registry entries to enable its automatic execution at every system startup.

It modifies registry entries to hide files with both System and Read-only attributes. It creates and modifies registry key(s)/entry(ies) as part of its installation routine. It creates and modifies registry key(s)/entry(ies) to hide file extensions.

It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.

Related Items