W32/AutoIt.CM Worm

 Virus Information - W32/AutoIt.CM Worm:

W32/AutoIt.CM is a worm. The worm will infect Windows systems.

Upon execution, the worm drops the following file in Windows\System32:

boot.ini in boote folder
logoneui.exe

It also drops following files in root of Windows installed drive

Jojo.exe
info.bat

The worm modifies registry at the following locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run