W32/Autorun-AUH is a worm for the Windows platform.
W32/Autorun-AUH includes functionality to:
- create batch scripts in the <WINDOWS> folder
- run automatically
- copy itself to the <WINDOWS>\system32 folder
- create files in the <WINDOWS>\system32 folder
When W32/Autorun-AUH is installed the following files are created:
<System>\Se813.exe
<System>\_Se813.exe
<Root>\AutoRun.inf (this file is detected as Mal/AutoInf-A)
<Root>\Se813.exe
The worm may create registry entries under:
HKLM\System\CurrentControlSet\Services,Windows_rejoice2007_813\