Max Secure Software: Encyclopedia

Home / Spyware Encyclopedia / Worm.autorun.qnf << Back

Recommendation to Automatically remove Worm.autorun.qnf

Our products can remove Worm.autorun.qnf and thousands of other Virus and Spyware automatically and instantly.

Worm.autorun.qnf Details

Category Worm
Discovered 1/21/2010 6:51:30 PM
Modified 7/11/2023 5:06:58 PM
Threat Level Medium
Category Description
A Worm is a malicious program that spreads itself without any user intervention. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network and also through email by sending copies of itself to everyone in the user's address book. A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable.

The following Files were created:

VALUE	FILESIZE	SIGNATURE
4063765A.EXE	172032	dd3935db154649b3af9a0a1bbf9ef73c
9a1cb1cd.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
smss.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
taskmgr.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
b7bac3d8.exe	172032	53f27320e544e842d6138cae046ecf2a
smss.exe	172032	53f27320e544e842d6138cae046ecf2a
taskmgr.exe	172032	53f27320e544e842d6138cae046ecf2a
e839d1c3.exe	172032	53026a5923a78fe01228f96568575d76
b0fc1ef7.exe	180224	42e54c3637020abedc6c6072129fdbb2
smss.exe	180224	42e54c3637020abedc6c6072129fdbb2

The following Registry Entries were created:

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"manager task"\"%root%\recycler\s-1-5-21-1202660629-412668190-725345543-500\smss.exe"

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"task manager"\"%root%\recycler\s-1-5-21-1202660629-412668190-725345543-500\smss.exe"

..\Software\vb and vba program settings\f-h\(Default)

..\Software\Classes\Clsid\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\mycomputer\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\desktop\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\controlpanel\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Recommendation to Automatically remove Worm.autorun.qnf

Worm.autorun.qnf Details

Useful Links