Worm.Autorun.ABS
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 50 % (Medium) |
| Infected Computers: | 3 |
| First Seen: | October 7, 2011 |
| OS(es) Affected: | Windows |
The detection of Worm.Autorun.ABS on your system indicates a potential security threat that requires immediate attention. This type of malware is designed to replicate itself and spread to other computers, making it a significant concern for both individual users and network administrators. In this report, we will provide an overview of Worm.Autorun.ABS, its operating methods, symptoms of infection, and most importantly, steps to remove it from your system.
Table of Contents
What Is Worm.Autorun.ABS?
Worm.Autorun.ABS is identified as a worm, which is a type of malware that can spread from system to system without the need for human interaction. Unlike viruses, worms do not require a host program to replicate. The name "Worm.Autorun.ABS" suggests it may utilize the Windows autorun feature to propagate, although the exact mechanisms can vary. Understanding the nature of this threat is crucial for devising an effective removal strategy.
How Worm.Autorun.ABS Operates
Worms like Worm.Autorun.ABS typically operate by exploiting vulnerabilities in operating systems or applications to gain access to a computer. Once inside, they can perform a variety of malicious actions, including data theft, installing additional malware, or using the infected computer as part of a botnet for distributed denial-of-service (DDoS) attacks. The autorun feature, if exploited, allows the worm to execute automatically when an infected device is connected to a computer, facilitating its spread through external drives, networks, or other means.
Symptoms of Infection
Symptoms of a Worm.Autorun.ABS infection can vary but may include slowed system performance, frequent crashes, or unusual network activity. You might also notice unfamiliar programs or files on your computer, changes to your browser settings, or pop-ups and other unwanted advertisements. In some cases, the infection might not exhibit obvious symptoms, making regular system scans crucial for early detection.
How to Remove Worm.Autorun.ABS
- Enter Safe Mode with Networking: This will help prevent the worm from spreading or interfering with the removal process. Restart your computer and press the key to access your boot menu (this varies by computer manufacturer but is often F8, F12, or Del), then select Safe Mode with Networking.
- Conduct a Full Scan: Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system. Ensure your antivirus software is updated before running the scan to detect the latest threats.
- Uninstall Suspicious Programs: Go through your installed programs and remove any that you don't recognize or that were installed around the time you noticed the infection.
- Reset Your Browser: If your browser settings have been altered, reset Chrome, Firefox, Edge, or any other affected browsers to their default settings. This can often be done through the browser's settings or options menu.
- Reboot and Re-scan: After completing the above steps, restart your computer in normal mode and run another full scan with your anti-malware software to ensure the worm has been completely removed.
Conclusion
Removing Worm.Autorun.ABS requires careful and immediate action to prevent further damage to your system and potential spread to other computers. By following the steps outlined above and maintaining good security practices, such as regularly updating your operating system and applications, using strong antivirus software, and being cautious with email attachments and downloads, you can protect your computer from similar threats in the future. Remember, vigilance and proactive measures are key to a secure computing environment.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| Panda | Suspicious file |
| Ikarus | Backdoor.Win32.Floder |
| AhnLab-V3 | Trojan/Win32.Buzus |
| F-Secure | Trojan-Downloader:W32/Agent.DTLD |
| Comodo | Heur.Suspicious |
| Kaspersky | Backdoor.Win32.Floder.efk |
| Avast | Win32:Flooder-HE [Trj] |
| NOD32 | a variant of Win32/Injector.JUI |
| Panda | Trj/CI.AN* |
| AVG | Worm/Generic.CMTU |
| Ikarus | P2P-Worm.Win32.CMDloh |
| Microsoft | Worm:Win32/Autorun.ABS |
| Antiy-AVL | Worm/Win32.CMDloh |
| Sophos | Mal/Generic-L |
| McAfee-GW-Edition | Heuristic.BehavesLike.Win32.Suspicious.H |
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | wcynsvc.exe | e78e9a1ba9f0a94829c190c6a63479e3 | 2 |
| 2. | ecleaner.exe | 70476fe5f51f019af3ae17190654f78b | 1 |