Threat Database Worms Worm.MSIL.Autorun

Worm.MSIL.Autorun

By CagedTech in Worms
Published:
Last updated:

Threat Scorecard

Popularity Rank: 10,340
Threat Level: 50 % (Medium)
Infected Computers: 512
First Seen: February 22, 2011
Last Seen: August 15, 2026
OS(es) Affected: Windows

Your system has been detected to be infected with Worm.MSIL.Autorun, a type of malicious software designed to replicate and spread to other computers. This type of malware can cause significant disruptions to your system's performance and compromise your personal data. It is essential to understand the nature of this threat and take immediate action to remove it from your system.

What Is Worm.MSIL.Autorun?

Worm.MSIL.Autorun is a type of worm, which is a self-replicating malware that can spread from system to system without the need for human interaction. Worms often exploit vulnerabilities in operating systems or applications to infect computers and can cause a range of problems, including data theft, system crashes, and disruption of network activity.

How Worm.MSIL.Autorun Operates

Worm.MSIL.Autorun, like other worms, operates by replicating itself and spreading to other computers through various means, such as infected software downloads, infected external devices, or exploited network vulnerabilities. Once inside a system, it can modify system settings, create new files, and interact with other malware to achieve its goals. Understanding how Worm.MSIL.Autorun operates is crucial for developing effective removal strategies.

Symptoms of Infection

Systems infected with Worm.MSIL.Autorun may exhibit a range of symptoms, including but not limited to, slow system performance, frequent crashes, and unusual network activity. You might also notice unfamiliar programs or files on your system, changes to your system settings, or alerts from your security software indicating malware activity. Recognizing these symptoms early can help in taking prompt action against the malware.

How to Remove Worm.MSIL.Autorun

  1. Boot your computer in Safe Mode with Networking to prevent the malware from loading and to allow for easier removal.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all instances of Worm.MSIL.Autorun.
  3. Uninstall any suspicious programs or applications that you do not recognize or that were installed around the time your system became infected.
  4. Reset your web browsers, such as Chrome, Firefox, or Edge, to their default settings to remove any malicious extensions or settings changes made by the worm.
  5. Reboot your system and perform another full scan with your anti-malware tool to ensure that all remnants of Worm.MSIL.Autorun have been removed.

Conclusion

Removing Worm.MSIL.Autorun from your system requires careful and thorough action to ensure that all components of the malware are eliminated. By following the steps outlined above and maintaining good computer hygiene practices, such as regularly updating your operating system and applications, using strong antivirus software, and being cautious with downloads and email attachments, you can protect your system from future infections. Remember, prevention and vigilance are key to safeguarding your digital assets and personal data in today's evolving cybersecurity landscape.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
AVG Generic19.BKFX
McAfee FakeAlert-SpyPro.gen.ak
McAfee-GW-Edition Artemis!8AA4E9DAF943
AntiVir TR/Crypt.ZPACK.Gen
Sophos Mal/FakeAV-CS
BitDefender Gen:Variant.Kazy.13722
Symantec Trojan.FakeAV!gen42
NOD32 a variant of Win32/Kryptik.LAS
McAfee FakeAlert-MalDoctor.v
Panda Trj/CI.A
AVG SHeur3.BPVG
Ikarus Gen.Variant.Kazy
BitDefender Gen:Variant.Kazy.11748
McAfee Artemis!B61FF15058AA
BitDefender Trojan.Generic.KD.139769

File System Details

Worm.MSIL.Autorun may create the following file(s):
# File Name MD5 Detections
1. csrss.exe 29459293531d7ecbf61d62de7527ba1f 28
2. ntuser.exe a4294fdb2b53c0e047a879a76bfc7bbf 22
3. Uw.exe c4e4f732b392a32b3224e49f87efeca9 10
4. AdobeUpdate.exe 8aa4e9daf943122c6152a424d23977bd 5
5. csccpl.dll e9f266cfab60b439f660df32087cb06f 2
6. explorer.exe 63c013673681430fb1f80dda49d757de 2
7. wjdrive32.exe 01e416d5891a5a87520096b723529f37 2
8. ckffsglyhsn.exe ada3fd631969ffac103ed635a7402610 1
9. jucheck.exe 4a556caf6116bb0a2c26a8c318276782 1
10. nrload7E.dll b61ff15058aae99c209afb0ac579e662 1
More files

Registry Details

Worm.MSIL.Autorun may create the following registry entry or registry entries:
Regexp file mask
%USERPROFILE%\Contacts\ntuser.exe
%USERPROFILE%\Contacts\SQlServer.exe
%USERPROFILE%\Contacts\Windows
%WINDIR%\system\csrss.exe