Home / malware

PDF

Worm:Win32/Autorun!inf

First posted on 22 May 2019.
Source: Microsoft

Aliases :

There are no other names known for Worm:Win32/Autorun!inf.

Explanation :

Worm:Win32/Autorun!inf is a detection for autorun.inf files that may be used by worms when spreading to local, network, or removable drives.   When copying themselves to a drive, these worms also create a file named 'autorun.inf' in the root of the targeted drive. The autorun.inf file contains execution instructions for the operating system which are invoked when the drive is viewed using Windows Explorer, thus executing the copy of the worm.   It should be noted that autorun.inf files on their own are not necessarily a sign of infection, as they are used by legitimate programs and installation CDs.   Analysis by Andrei Florin Saygo

Last update 22 May 2019

 

TOP