W32/Autom-A

Category: Viruses and SpywareProtection available since:16 Oct 2006 00:00:00 (GMT)
Type: Win32 wormLast Updated:02 Jan 2008 16:06:02 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Autom-A is a script worm for the Windows platform.

When run the worm will attempt to start the component autorun.vbs which will then copy W32/Autom-A to <Windows>\system32 on all logical drives.

The following registry key is modified to start the worm after a reboot:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit
userinit.exe,autorun.bat