Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus downloadAnti Spyware Software
Spyware Detector - HomeSpyware Detector - PurchaseSpyware Detector - AffiliatesSpyware Detector - Download UpdatesSpyware Detector -FAQSpyware Detector -Contact Us

Home/ Spyware Encyclopedia / Worm.AutoRun

 Worm.AutoRun Technical Details
 CategoryWorm
 Discovered 4/12/2006 7:18:00 PM
 Modified 8/26/2008 10:02:39 AM
 Threat LevelMedium
 DescriptionA Worm is a malicious program that spreads itself without any user intervention. Worms are self-replicating. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network. Worms can also spread through email by sending copies of itself to everyone in the user's address book. A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable.
 SummaryN/A
 When the Worm is executed, it creates the following files:
 
NameVersionPublisherSignature (MD5)File Size (in KB)
..\worm.win32.autorun.beo \ef2d6d38.exe  9aded7aeefd8d7c417e01f41fad4c947572416
..\worm.win32.autorun.cew \7f539b65.exe3.2.11.0 71de4075498adafb0aa6b91346afeaff261339
..\worm.win32.autorun.cex \a37285a5.exe  4d29e04839cf3437e74f026d1be5c3ae103511
..\worm.win32.autorun.cfc \0fb1cc71.exe3.2.11.0 817f40dd121b2fcbc20bfc4604efa200261485
..\worm.win32.autorun.cfi \79b27d7f.exe  1a9c5b6d3c604ed736f70d2c9344fe2f65536
..\worm.win32.autorun.cgm \e476f25c.exe  23060c63f9da773a0c7b6f602c6374f5114138
..\worm.win32.autorun.cgz \375cba9a.exe3.2.8.1 231f5643ca1e2550acfa4b709141ee39293743
..\worm.win32.autorun.chu \a6c02ea9.dll  09ef2618ee2ae71ed4377e2b98fa589b54784
..\worm.win32.autorun.chv \4f20743e.exe  ece74b06a5c4a9ecfaae9ec3d45960b3104080
..\worm.win32.autorun.chw \761f6a91.exe3.2.8.1 ada942a2ae0e2b38ac534f4cb445d76a258129
..\quick launch\deepali1.exe  f6f2d0780b651d9af7c950d798cf93c675238
..\my music\backup folder.exe  f6f2d0780b651d9af7c950d798cf93c675238
..\temp\~df650a.tmp    
..\temp\~df7376.tmp    
..\temp\~df8145.tmp    
..\temp\~df9273.tmp    
..\temp\~dfa735.tmp    
..\temp\~dfbf1f.tmp    
..\temp\2t99k.dll  06cb00358df5c744f5e6a1c281dc677026603
..\temp\5a5wuz.dll  1d5b99a5758c04433f6500a659eec63525927
..\temp\cw2htvqh.dll  ba9c7d4f8e5b243000eebe51609b5c2d30357
..\temp\deepali1.exe  c3abdb8cdba735caa996d68966194b5679548
..\temp\eytsuap7.dll  abf0801bf467d979683ae104e3a77a8026388
..\temp\m8l.dll  604bfff4939fa769252e475c891fd36130500
..\temp\p.dll  6a7c1b51da66dc13acf0c7309e10f68b30412
 When the Worm is executed, it creates the following Registry entries:
 
•..\Software\Classes\Clsid\{59db5ff4-4960-48ca-aade-5348ab83d0dc}
•..\Software\Classes\Clsid\{c933e507-441e-4abd-9632-84e250b00f21}
•..\Software\data
•..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\360tray.exe
•..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\boot.exe
•..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\kwatch.exe
•..\Software\Microsoft\Windows NT\CurrentVersion\IMAGE FILE EXECUTION OPTIONS\MMSK.EXE
•..\Software\Microsoft\Windows NT\CurrentVersion\IMAGE FILE EXECUTION OPTIONS\NAVAPSVC.EXE
•..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\timeproapp.exe
•..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\woptilities.exe
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"cftmonn"
•..\System\CurrentControlSet\Services\zzz
•..\Software\Classes\Clsid\{0e341cc7-c567-45d3-803e-e05f6a4fd079}
•..\Software\Classes\Clsid\{15fd6584-698f-bcd2-602c-698745210351}
•..\Software\Classes\Clsid\{28401437-f53a-4b65-865d-4d04744cf0a5}
•..\Software\Microsoft\active setup\installed components\{28b0e5c2-99cb-11cf-ayx5-00401c648513}
•..\Software\Microsoft\active setup\installed components\{362bcbdb-72be-602a-0502-050507060007}
•..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\antiarp.exe
•..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\autorunkiller.exe
•..\Software\Microsoft\Windows NT\CurrentVersion\image file execution options\avmonitor.exe
•..\Software\Microsoft\Windows NT\CurrentVersion\IMAGE FILE EXECUTION OPTIONS\AVP.COM
Recommendation to remove Worm.AutoRun
Spyware Detector can remove Worm.AutoRun, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback. 
Speed up your computer and increase browsing performance by deleting Spyware & Adware
Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.
Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.
 
Free Spyware Scan
 Search Threats
Testimonials

Read More
Information Desk
Spyware & Adware Categories we scan
  
List of Spyware &
Adware we remove
Submit a Threat
Submit a threat to be reviewed by our research team

Submit a Threat
Home| About Us| Purchase| Contact Us| FAQ| Privacy Policy