Threat Database Worms W32/Autorun.worm.aaav

W32/Autorun.worm.aaav

By GoldSparrow in Worms

Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 6
First Seen: September 13, 2011
Last Seen: January 10, 2022
OS(es) Affected: Windows

W32/Autorun.worm.aaav is a malignant worm that can hide itself as a legitimate file and use Windows exploits to download malicious files from remote websites. Usually, Worm.Win32.Autorun corrupts the targeted PC system via unsolicited spam email attachments, infected video media codecs, movie downloads and pornographic related images. Once W32/Autorun.worm.aaav is installed on to the compromised machine, it will activate malicious files and download and install additional malware threats. Worm.Win32.Autorun can steal personal information and destroy computer system. W32/Autorun.worm.aaav is a dangerous security threat that has to be uninstalled as quickly as possible.

File System Details

W32/Autorun.worm.aaav may create the following file(s):
# File Name Detections
1. %c:\Program Files\Windows Alerter\WinAlert.exe
2. c:\RECYCLER\X-1-5-21-1960408961-725345543-839522115-1003\WinSysApp.exe
3. c:\Program Files\Windows Common Files\Commgr.exe
4. c:\RECYCLER\X-1-5-21-1960408961-725345543-839522115-1003\info

Registry Details

W32/Autorun.worm.aaav may create the following registry entry or registry entries:
Windows Alerter = "C:\Program Files\Windows Alerter\WinAlert.exe"
WindowMessenger = "C:\RECYCLER\X-1-5-21-1960408961-725345543-839522115-1003\WinSysApp.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Windows Common Files Manager = "C:\Program Files\Windows Common Files\Commgr.exe""

Trending

Most Viewed

Loading...