Max Secure Software: Encyclopedia

Home / Spyware Encyclopedia / Worm.AutoRun << Back

Recommendation to Automatically remove Worm.AutoRun

Our products can remove Worm.AutoRun and thousands of other Virus and Spyware automatically and instantly.

Worm.AutoRun Details

Category Worm
Discovered 3/23/2011 6:00:54 PM
Modified 10/8/2024 10:48:34 AM
Threat Level Critical
Category Description
A Worm is a malicious program that spreads itself without any user intervention. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network and also through email by sending copies of itself to everyone in the user's address book. A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable.

The following Files were created:

VALUE	FILESIZE	COMPANYNAME	VERSION	SIGNATURE
c19538d2.exe	3447928	w3i, llc	1.61.0.0	f5cc65090ed570069a37ee50b10f6fe9
d9715a89.exe	4590712	w3i, llc	1.53.0.0	bdd7f3169be58df256f4d69641289f96
binSys06.DLL	14848	vbAccelerator	3.2.0.1	d69dcfcdf4a48e9e6311e84b572404b1
bmImage.ocx	37376	vbAccelerator	1.0.0.0	85c3a491a4fef059aff6ce4ccb991d27
63212A14.EXE	438272	tr0jan.net	1.0.0.0	1df6a549a9bc94acbfff540139973dd2
cdff373a.exe	196605	terratools/cyparade	1.0.0.1	b120ae6d8c430f7a272a2b0b022aeff0
baiduc.dll	151552	Syons.Fae	2.0.0.0	7392d782b8106dc26ab7fb6d63e1d92a
baiduc.dll	163840	Syons.Fae	2.0.0.0	23b25817c5dd167a0b3441088bd9309f
F935A5BA.EXE	433152	Realtek Sound	1.0.5.6	6a99eae57cb73dd4a5b2c6a38d0dbf1b
netpass.exe	39936	NirSoft	1.03	634faad6c5f06dbb88a40cbe91f9cd10

The following Registry Entries were created:

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"dllcache32.exe"\"%win.sys32.dllcache%32.exe"

..\Software\Microsoft\Windows\CurrentVersion\Run\\"app"\"%root%\f53e60ce.exe"

..\System\CurrentControlSet\Enum\root\legacy_icm\(Default)

..\System\CurrentControlSet\Services\icm\(Default)

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"manager task"\"%root%\recycler\s-1-5-21-1202660629-412668190-725345543-500\smss.exe"

..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"task manager"\"%root%\recycler\s-1-5-21-1202660629-412668190-725345543-500\smss.exe"

..\Software\vb and vba program settings\f-h\(Default)

..\Software\Classes\Clsid\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\mycomputer\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

..\Software\Microsoft\Windows\CurrentVersion\Explorer\desktop\namespace\{10020d75-0000-0000-c000-000000000000}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Recommendation to Automatically remove Worm.AutoRun

Worm.AutoRun Details

Useful Links