Max Secure Software: Encyclopedia

Home / Spyware Encyclopedia / Worm.autorun.qnf << Back

Recommendation to Automatically remove Worm.autorun.qnf

Our products can remove Worm.autorun.qnf and thousands of other Virus and Spyware automatically and instantly.

Worm.autorun.qnf Details

Category Worm
Discovered 1/21/2010 6:51:30 PM
Modified 7/11/2023 5:06:58 PM
Threat Level Medium
Category Description
A Worm is a malicious program that spreads itself without any user intervention. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network and also through email by sending copies of itself to everyone in the user's address book. A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable.

The following Files were created:

VALUE	FILESIZE	SIGNATURE
4063765A.EXE	172032	dd3935db154649b3af9a0a1bbf9ef73c
D03E6C5A.EXE	172032	0c30a3f265a14f4d3a818afa31379c66
9a1cb1cd.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
smss.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
taskmgr.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
92901127.exe	204800	28ae134c131c2c502b7ed3fe30296a52
smss.exe	204800	28ae134c131c2c502b7ed3fe30296a52
taskmgr.exe	204800	28ae134c131c2c502b7ed3fe30296a52
fe354f29.exe	172032	ebf16e692790ed8ddcc68c215866626a
0cc5293f.exe	172032	e3236f85fd8a664fb8fe0a9429cd555b

The following Registry Entries were created:

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"manager task"\"%root%\recycler\s-1-5-21-1202660629-412668190-725345543-500\smss.exe"

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"task manager"\"%root%\recycler\s-1-5-21-1202660629-412668190-725345543-500\smss.exe"

..\Software\vb and vba program settings\f-h\(Default)

..\Software\Classes\Clsid\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\mycomputer\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\desktop\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\controlpanel\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Recommendation to Automatically remove Worm.autorun.qnf

Worm.autorun.qnf Details

Useful Links