Home / malware

PDF

Worm:Win32/Autorun.UI!inf

First posted on 27 February 2019.
Source: Microsoft

Aliases :

There are no other names known for Worm:Win32/Autorun.UI!inf.

Explanation :

Worm:Win32/Autorun.UI!inf is detection for the autorun.inf file dropped by Worm:Win32/Autorun.UI.  It adds an action named 'Open folder to view files' to the autoplay menu, which looks the same as the standard 'Open folder to view files' option, in an attempt to trick the user into running the malware.  It will be found on removable drives along with Worm:Win32/Autorun.UI.  Analysis by Aaron Putnam

Last update 27 February 2019

 

TOP