WORM_IMAUT.E

This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself. It creates registry entries to enable its automatic execution at every system startup. It modifies registry entries to enable its automatic execution at every system startup.

It creates registry key(s)/entry(ies). It drops copies of itself in all removable drives.

It disables Task Manager and registry tools. It connects to Web sites to download a file, which Trend Micro detects as WORM_SOHANAD.BR. As a result, routines of the downloaded worm are also exhibited on the affected system.

It creates a scheduled task.

Related Items