W32/Autorun-HB

Category: Viruses and Spyware Protection available since:04 Aug 2008 19:34:23 (GMT)
Type: Win32 worm Last Updated:04 Aug 2008 19:34:23 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Autorun-HB is a worm for the Windows platform.

This worm copies itself to removable storage devices, such as USB sticks.

When first run, the worm copies itself to the following on a removable drive:

<Recycler>\S-<random numbers>\xop32.exe

W32/Autorun-HB also creates the following files:
autorun.inf (detected as Mal/AutoInf-A)
<Recycler>\S-<random numbers>\Desktop.ini (not malicious)

The files xop32.exe is registered as a COM object, creating registry entries under:

HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}

download Try Sophos products for free
Download now