VBS/AutoRun-FG

Category: Viruses and Spyware Protection available since:27 Jun 2008 10:26:53 (GMT)
Type: Visual Basic Script worm Last Updated:13 May 2011 07:16:51 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

VBS/AutoRun-FG is a VBScript worm for the Windows platform.

When run VBS/AutoRun-FG copies itself to:
<Root>\<worm script>
<Document and Settings>\<User>\<worm script>

VBS/AutoRun-FG also creates the file:
<Root>\autorun.inf - this file can be removed

VBS/AutoRun-FG spreads via removable shared drives.

VBS/AutoRun-FG sets the following registry entries:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
system
wscript.exe <path to worm script>

download Try Sophos products for free
Download now