WORM_SOLOW.AD

This worm may be dropped by other malware. It may also be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, this worm drops several copies of itself. It then creates a registry entry to enable its automatic execution at every system startup.

This worm propagates by dropping copies of itself in all detected network shares. It also drops copies of itself in drives C: to Z: of the system. This worm also drops copies of itself in all removable drives.

It also drops an AUTORUN.INF file to automatically execute its dropped copies when the said drives are accessed.

Related Items