Worm.AutoRun.dao
|
Description:
|
Worm
|
|
Risk Level:
|
Critical
|
|
Date of First Occurence:
|
Monday, April 21, 2008
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Computer worm is malicious software application designed to spread via computer networks.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SCAN & REMOVE NOW »
Geographical Distribution of Threat "Worm.AutoRun.dao"
Threat Info
View All
Detected Items
- Detected Files:
- Detected Files with variable Filenames:
MD5: 6DEC53038FD1BF0FADACF963B4923CF7 Size: 100754
%SYSDIR%\amvo.exe
%SystemDiskRoot%\un9.cmd
F:\System Volume Information\_restore{2C10C325-B56C-4426-85FB-CB597E022133}\RP150\A0242926.cmd
%SystemDiskRoot%\Documents and Settings\Administrador.PERSONAL.003\Configuracin local\Archivos temporales de Internet\Content.IE5\UVT07HCS\help[1].exe
D:\un9.cmd
E:\un9.cmd
%SystemDiskRoot%\System Volume Information\_restore{F08B7F75-7F22-4D11-8F01-0B1F6E7766CE}\RP649\A0387681.exe
H:\un9.cmd
%SystemDiskRoot%\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP14\A0006207.exe
%SYSDIR%\OLDB.tmp
e:\rthrw.com
and next 8 variations.
MD5: 558CDCD40A77CAB197FFFAE5E2A2E741 Size: 72192
%SYSDIR%\amvo0.dll
%SYSDIR%\amvo0.dll.ren
%SYSDIR%\amvo1.dll
%SystemDiskRoot%\System Volume Information\_restore{F08B7F75-7F22-4D11-8F01-0B1F6E7766CE}\RP649\A0387682.dll
%SystemDiskRoot%\System Volume Information\_restore{F08B7F75-7F22-4D11-8F01-0B1F6E7766CE}\RP649\A0387676.dll
%SystemDiskRoot%\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP14\A0006206.dll
%SystemDiskRoot%\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP13\A0006172.DLL
%SystemDiskRoot%\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP12\A0006127.DLL
%SystemDiskRoot%\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP12\A0006105.DLL
%SystemDiskRoot%\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP12\A0006085.DLL
%SystemDiskRoot%\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP12\A0006039.DLL
and next 2 variations.
Detecting items list:
- Files by MD5
MD5: 558CDCD40A77CAB197FFFAE5E2A2E741 Size: 72192
MD5: 6DEC53038FD1BF0FADACF963B4923CF7 Size: 100754
MD5: 2D0F319243C09E52DD560DDA108E0DF2 Size: 626
«
Go to Software Database