WORM_AUTORUN.CG

This worm may be downloaded from remote sites by other malware. It may be dropped by WORM_AUTORUN variants. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself. It injects threads into normal processes. It stays resident in the affected system's memory.

It creates registry entries to enable its automatic execution at every system startup.

It drops copies of itself in all physical and removable drives. It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.

Related Items