









 |
W32/AutoIt.S Worm
| Name |
W32/AutoIt.S Worm |
| Aliases |
Worm.Win32.AutoIt.s, Worm:AutoIt/Sohanad.CL, W32.SillyFDC |
| Updated on |
April 21, 2009 |
Virus Information - W32/AutoIt.S Worm:
W32/AutoIt.S is a worm. The worm will infect Windows systems.
Upon execution, the worm drops the following files in Windows System folder.
rundll.exe
COMCTL32.OCX
ijl11pro.dll
MSINET.OCX
regsvr.exe
winhelp.exe
It also drops regsvr.exe in Windows folder.
The worm modifies registry at the following locations:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run

|