Home / malware

PDF

Worm:Win32/Autorun.gen!inf

First posted on 17 November 2019.
Source: Microsoft

Aliases :

Worm:Win32/Autorun.gen!inf is also known as INF/Frethog, Worm.Win32.AutoRun.rja, Mal/AutoInf-B, INF.Autorun.Gen, Trojan.AutorunINF.Gen.

Explanation :

Worm:Win32/Autorun.gen!inf is a detection for 'autorun.inf' files that may be used by worms when spreading to local, network, or removable drives.   When copying themselves to a drive, these worms also create a file named 'autorun.inf' in the root of the targeted drive. The 'autorun.inf' file contains execution instructions for the operating system which are invoked when the drive is viewed using Windows Explorer, thus executing the copy of the worm.   It should be noted that 'autorun.inf' files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.  Analysis by Shawn Wang

Last update 17 November 2019

 

TOP