Home / malware

PDF

Worm:Win32/Autorun

First posted on 27 March 2019.
Source: Microsoft

Aliases :

There are no other names known for Worm:Win32/Autorun.

Explanation :

Spreads via…

Mapped drives

When the worm runs on your computer, it enumerates all drives of your PC until a mapped drive is found. The worm tries to copy itself to the mapped drive. Worm:Win32/Autorun then writes an autorun configuration file named 'autorun.inf' pointing to the worm executable.

When the removable or networked drive is accessed from a computer supporting the Autorun feature, the malware is launched automatically.

Last update 27 March 2019

 

TOP