Worm.Autorun.XX
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 50 % (Medium) |
| Infected Computers: | 47 |
| First Seen: | December 8, 2010 |
| OS(es) Affected: | Windows |
The detection of Worm.Autorun.XX on your system indicates a potential security threat that requires immediate attention. This worm, like others of its kind, is designed to replicate itself and spread to other computers, potentially causing harm to your data and system integrity. It's essential to understand the nature of this threat and take appropriate steps to remove it and prevent future infections.
Table of Contents
What Is Worm.Autorun.XX?
Worm.Autorun.XX is a type of malware that falls under the category of worms. Worms are self-replicating malware that can spread from system to system without the need for human interaction, such as opening an email attachment or clicking on a link. They often exploit vulnerabilities in operating systems or applications to infect computers. The "Autorun" part of the name suggests it may utilize the Windows Autorun feature to spread, but without specific details, it's crucial to consider general worm characteristics and removal strategies.
How Worm.Autorun.XX Operates
Worms like Worm.Autorun.XX typically operate by scanning for vulnerable systems and exploiting those vulnerabilities to infect the system. Once inside, they can perform a variety of malicious activities, including data theft, installing additional malware, or using the infected computer as part of a botnet for distributed denial-of-service (DDoS) attacks. They can spread through various means, including USB drives, network shares, and infected software downloads. Understanding how worms operate is key to preventing their spread and removing them from infected systems.
Symptoms of Infection
Symptoms of a worm infection can vary widely depending on the specific actions the worm is programmed to perform. Common symptoms include slow system performance, unexpected changes to system settings, appearance of unwanted programs or files, and increased network activity. In some cases, the presence of a worm may not be immediately apparent, as it may be designed to operate stealthily in the background. Regular system monitoring and the use of antivirus software can help in early detection of such threats.
How to Remove Worm.Autorun.XX
- Boot your computer in Safe Mode with Networking. This will help prevent the worm from loading and make it easier to remove.
- Perform a full scan of your system using a reputable antivirus tool such as SpyHunter. Ensure the tool is updated with the latest virus definitions to increase the chances of detection and removal.
- Uninstall any suspicious programs that you do not recognize or that were installed around the time you noticed the infection.
- Reset your web browsers (Chrome, Firefox, Edge) to their default settings to remove any malicious extensions or settings changes made by the worm.
- After completing the above steps, reboot your computer and perform another full scan to ensure the worm has been completely removed.
It's also a good idea to check for and install any available updates for your operating system and applications, as these often include patches for vulnerabilities that worms and other malware exploit.
Conclusion
The removal of Worm.Autorun.XX requires careful and immediate action to prevent further damage to your system and data. By understanding how worms operate and following the steps outlined for removal, you can help protect your computer and personal information. Remember, prevention is key, so maintaining updated antivirus software, being cautious with email attachments and downloads, and regularly backing up important data can significantly reduce the risk of future infections.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| BitDefender | Gen:Variant.Kazy.1579 |
| Symantec | Trojan.FakeAV!gen39 |
| F-Prot | W32/FakeAlert.HX.gen!Eldorado |
| NOD32 | a variant of Win32/Kryptik.CU |
| McAfee | FakeAlert-SecurityTool.f |
| AVG | Cryptic.BEQ |
| Fortinet | W32/FraudPack.CG!tr |
| Sunbelt | FraudTool.Win32.FakeAV.a (v) |
| AntiVir | TR/Crypt.XPACK.Gen2 |
| BitDefender | Trojan.Generic.KD.58313 |
| Symantec | SecurityToolFraud!Gen4 |
| AhnLab-V3 | Trojan/Win32.OnlineGameHack |
| Panda | Trj/Banker.MKN |
| AVG | Downloader.Generic10.AAFP |
| Fortinet | W32/Homa.DGW!tr.dldr |
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | arking.exe | 75a6d3a8f00dbc7a9d9939d3bbec3345 | 15 |
| 2. | 027965933.exe | 74e4a22651536a75fac2adfeba8886ce | 8 |
| 3. | youm_3.dll | 8129480e12296227ae8ff3e593e3737e | 7 |
| 4. | javawhelper.dll | adb4cc1040428a2f88c29919b26b85a8 | 5 |
| 5. | d3dim32.dlld8qvq1s32.dllnz083rpp32.dllwm2bx32.dllpy1guijtnmf0d32.dll | f21fe1b54552658828fc67a0976f4e3f | 4 |
| 6. | zaking.exe | d0227a6fed51ee7c4a64eccc24633edc | 2 |
| 7. | winlogon.exe | 4d3f07ea1a8bd8c682ad869739e97790 | 1 |
| 8. | svchost.exe | ba150f33b6dcff6d5d3e05c3da153f20 | 1 |
| 9. | 0573500384.exe | f63ab448bc1c22e57eee2fa1ebb5a2f1 | 1 |
| 10. | ieakeng32.dll | 9a1c6680bdb11d859512ff72e4344be1 | 1 |
| 11. | hitblniaffm.exe | a27ec997c978fce250ab1ac226f33ea9 | 1 |