W32/Autorun-ZK is a worm for the Windows platform.
When the application is installed the following files are created:
<System>\drivers\sysdrv32.sys - detected as W32/Rbot-GXM
<System>\wmisys.exe - copy of W32/Autorun-ZK
W32/Autorun-ZK creates the following files on removable storage devices:
<Root>\RECYCLER\<random characters>\lk.exe
<Root>\autorun.inf - detected as W32/HostInf-A
The following registry entry is set, affecting internet security:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy
\StandardProfile\AuthorizedApplications\List\<System>
wmisys.exe
<System>\wmisys.exe:*:Microsoft Enabled