W32/Autorun-ASY

Category: Viruses and Spyware Protection available since:14 Nov 2009 01:37:39 (GMT)
Type: Win32 worm Last Updated:10 May 2011 14:31:33 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Autorun-ASY is a worm for the Windows platform.

When run W32/Autorun-ASY copies itself to:

C:\RECYCLER\<User>\sysdate.exe

and sets the following registry entry:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman
C:\RECYCLER\<User>\sysdate.exe

W32/Autorun-ASY spreads via removable shared drives by copying itself to the removable drive as <Temp>\winsetup.exe and creating the file <Root>\autorun.inf (detected as W32/Autorun-ASY).

W32/Autorun-ASY includes functionality to steal confidential information.

download Try Sophos products for free
Download now