Worm.Win32.AutoIt.bg Description

Worm.Win32.AutoIt.bg is a network worm that copies itself to other computers connected to the same LAN. A remote hacker uses Worm.Win32.AutoIt.bg to take control the infected system and gain access to stored data on the hard drive. Worm.Win32.AutoIt.bg moves from one computer to another using shares. Worm.Win32.AutoIt.bg may consume system resources which slows or halts the computer’s performance. Worm.Win32.AutoIt.bg may prove difficult to manually detect and remove from infected computer networks.

Type: Worms

Aliases: Backdoor.CIADoor.13, W32/Autorun.worm.et (McAfee), Worm.Win32.AutoIt (Ikarus), W32/AutoIt-AO (Sophos).

How Can You Detect Worm.Win32.AutoIt.bg?

Worm.Win32.AutoIt.bg has typically the following processes in memory:

• %System%\MsRun32.exe
• %Windir%\MsRun32.exe

Worm.Win32.AutoIt.bg creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Important Article Disclaimer