Sophos

W32/USBToy-A

Aliases
  • Trojan.Win32.Agent.wj
  • W32/USBToy
  • Win32/Agent.WJ
  • TROJ_AGENT.DLS
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Protection available since 16 October 2006 15:25:40 (GMT)
Detected by All Sophos products
  • Endpoint Security and Control 9.0
  • Small business solutions 4.0

Action

More Information

W32/USBToy-A is a worm for the Windows platform.

W32/USBToy-A attempts to spread by copying itself to toy.exe in the root folder of a removable storage device, if one is connected.

W32/USBToy-A copies itself to:
<Startup>\systemnt.exe
<Startup>\mslogon.exe

W32/USBToy-A also creates autorun.inf configuration file that is used to run toy.exe automatically when a device is plugged into an infected computer.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer