Max Secure Software: Encyclopedia

Home / Spyware Encyclopedia / Worm.autorun.qnf << Back

Recommendation to Automatically remove Worm.autorun.qnf

Our products can remove Worm.autorun.qnf and thousands of other Virus and Spyware automatically and instantly.

Worm.autorun.qnf Details

Category Worm
Discovered 1/21/2010 6:51:30 PM
Modified 7/11/2023 5:06:58 PM
Threat Level Medium
Category Description
A Worm is a malicious program that spreads itself without any user intervention. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network and also through email by sending copies of itself to everyone in the user's address book. A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable.

The following Files were created:

VALUE	FILESIZE	SIGNATURE
4063765A.EXE	172032	dd3935db154649b3af9a0a1bbf9ef73c
9a1cb1cd.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
smss.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
taskmgr.exe	172032	b6f5c9f56501ef2553867cc7f745e32c
5931c4fa.exe	172032	794fc0e996dc16295af2ee4a15e1d7bd
smss.exe	172032	794fc0e996dc16295af2ee4a15e1d7bd
taskmgr.exe	172032	794fc0e996dc16295af2ee4a15e1d7bd
b7bac3d8.exe	172032	53f27320e544e842d6138cae046ecf2a
smss.exe	172032	53f27320e544e842d6138cae046ecf2a
taskmgr.exe	172032	53f27320e544e842d6138cae046ecf2a

The following Registry Entries were created:

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"manager task"\"%root%\recycler\s-1-5-21-1202660629-412668190-725345543-500\smss.exe"

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"task manager"\"%root%\recycler\s-1-5-21-1202660629-412668190-725345543-500\smss.exe"

..\Software\vb and vba program settings\f-h\(Default)

..\Software\Classes\Clsid\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\mycomputer\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\desktop\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\controlpanel\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Recommendation to Automatically remove Worm.autorun.qnf

Worm.autorun.qnf Details

Useful Links