Threat Database Worms Worm.Autorun.ABS

Worm.Autorun.ABS

By CagedTech in Worms
Published:
Last updated:

Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 3
First Seen: October 7, 2011
OS(es) Affected: Windows

The detection of Worm.Autorun.ABS on your system indicates a potential security threat that requires immediate attention. This type of malware is designed to replicate itself and spread to other computers, making it a significant concern for both individual users and network administrators. In this report, we will provide an overview of Worm.Autorun.ABS, its operating methods, symptoms of infection, and most importantly, steps to remove it from your system.

What Is Worm.Autorun.ABS?

Worm.Autorun.ABS is identified as a worm, which is a type of malware that can spread from system to system without the need for human interaction. Unlike viruses, worms do not require a host program to replicate. The name "Worm.Autorun.ABS" suggests it may utilize the Windows autorun feature to propagate, although the exact mechanisms can vary. Understanding the nature of this threat is crucial for devising an effective removal strategy.

How Worm.Autorun.ABS Operates

Worms like Worm.Autorun.ABS typically operate by exploiting vulnerabilities in operating systems or applications to gain access to a computer. Once inside, they can perform a variety of malicious actions, including data theft, installing additional malware, or using the infected computer as part of a botnet for distributed denial-of-service (DDoS) attacks. The autorun feature, if exploited, allows the worm to execute automatically when an infected device is connected to a computer, facilitating its spread through external drives, networks, or other means.

Symptoms of Infection

Symptoms of a Worm.Autorun.ABS infection can vary but may include slowed system performance, frequent crashes, or unusual network activity. You might also notice unfamiliar programs or files on your computer, changes to your browser settings, or pop-ups and other unwanted advertisements. In some cases, the infection might not exhibit obvious symptoms, making regular system scans crucial for early detection.

How to Remove Worm.Autorun.ABS

  1. Enter Safe Mode with Networking: This will help prevent the worm from spreading or interfering with the removal process. Restart your computer and press the key to access your boot menu (this varies by computer manufacturer but is often F8, F12, or Del), then select Safe Mode with Networking.
  2. Conduct a Full Scan: Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system. Ensure your antivirus software is updated before running the scan to detect the latest threats.
  3. Uninstall Suspicious Programs: Go through your installed programs and remove any that you don't recognize or that were installed around the time you noticed the infection.
  4. Reset Your Browser: If your browser settings have been altered, reset Chrome, Firefox, Edge, or any other affected browsers to their default settings. This can often be done through the browser's settings or options menu.
  5. Reboot and Re-scan: After completing the above steps, restart your computer in normal mode and run another full scan with your anti-malware software to ensure the worm has been completely removed.

Conclusion

Removing Worm.Autorun.ABS requires careful and immediate action to prevent further damage to your system and potential spread to other computers. By following the steps outlined above and maintaining good security practices, such as regularly updating your operating system and applications, using strong antivirus software, and being cautious with email attachments and downloads, you can protect your computer from similar threats in the future. Remember, vigilance and proactive measures are key to a secure computing environment.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
Panda Suspicious file
Ikarus Backdoor.Win32.Floder
AhnLab-V3 Trojan/Win32.Buzus
F-Secure Trojan-Downloader:W32/Agent.DTLD
Comodo Heur.Suspicious
Kaspersky Backdoor.Win32.Floder.efk
Avast Win32:Flooder-HE [Trj]
NOD32 a variant of Win32/Injector.JUI
Panda Trj/CI.AN*
AVG Worm/Generic.CMTU
Ikarus P2P-Worm.Win32.CMDloh
Microsoft Worm:Win32/Autorun.ABS
Antiy-AVL Worm/Win32.CMDloh
Sophos Mal/Generic-L
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious.H

File System Details

Worm.Autorun.ABS may create the following file(s):
# File Name MD5 Detections
1. wcynsvc.exe e78e9a1ba9f0a94829c190c6a63479e3 2
2. ecleaner.exe 70476fe5f51f019af3ae17190654f78b 1