Home / Spyware Encyclopedia / Worm.AutoIt << Back

Recommendation to Automatically remove Worm.AutoIt


Our products can remove Worm.AutoIt and thousands of other Virus and Spyware automatically and instantly.

Worm.AutoIt Details


  • Category Worm
  • Discovered 6/30/2009 12:06:51 PM
  • Modified 2/23/2024 5:22:12 PM
  • Threat Level High
  • Category Description
    A Worm is a malicious program that spreads itself without any user intervention. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network and also through email by sending copies of itself to everyone in the user's address book. A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
411A5C8D.EXE 434504Macrosoft Corporation1.30.0000.000014441b4afe1eb5fc84471cb669622462 
csrcs.exe 863342 9.4.2.85ef42efa664d2040151f0de80e575eb1 
eb418597.exe 863342 9.4.2.85ef42efa664d2040151f0de80e575eb1 
csrcs.exe 509600 7.9.0.6f628972a796647542ed1b2dcc1cceaa8 
csrcs.exe 488574 7.9.0.665b80416e1974d0d4fbc6ecef849fa6e 
csrcs.exe 494176 7.9.0.64fe10cbd8b856fb419a0ac2b1692a37c 
csrcs.exe 454932 7.9.0.64cfce9686dc7d370764640176bac84c1 
csrcs.exe 462492 7.9.0.63350e935ca8bde0223f6e1228b4c73e7 
csrcs.exe 460592 7.9.0.62afa9846cc4a5c33f087ce607b328dd9 
csrcs.exe 336716 7.9.0.5d7281efe37d070da1bd2456cdd803fcf 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"msn messsenger"\"%win.sys32%\regsvr.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Yahoo Messengger"\"%WIN.SYS32%\gphone.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"YAHOO MESSENGGER"\"%WIN.SYS32%\SCVVHSOT.EXE"
..\Software\Microsoft\DRM\amty\"exp1"\"408406541BC5BBE4DC197A2A0C46B9ACF2F90D96B151D7C7BCBD177641EE95F662E634D70EB70FB65FC8FBF0EC312619"
..\Software\Microsoft\DRM\amty\"exp1"\"408406541BC5BBE4DC197A2A0C46B9ACF2F90D96B151D7C7BCBD177641EE95F562E634D70EB70FB65FC8FBF0EC31276E"
..\Software\Microsoft\DRM\amty\"exp1"\"408406541BC5BBE4DC197A2A0C46B9AFF2F90D96B151D7C7BCBD177641EE95F062E634D70EB70FB65FC8FBF3EC362618"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"user agent"\"%das.au.ls%\temp\svchost.com"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"user agent"\"%win.sys32%\fdisk.com"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"hotkey"\"%das.au.templates%\cache\sfcsrvc.pif"
..\Software\vlad\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware