









 |
W32/AutoRun.EPN Worm
| Name |
W32/AutoRun.EPN Worm |
| Aliases |
PSW.OnlineGames_r.G, Worm.Win32.AutoRun.epn, Worm:Win32/Taterf.B |
| Updated on |
April 17, 2009 |
Virus Information - W32/AutoRun.EPN Worm:
W32/AutoRun.EPN is a worm. The worm will infect Windows systems.
Upon execution, the worm drops the following files in the Windows System folder.
ckvo.exe
ckvo0.dll
olhrwef.exe
nmdfgds0.dll
It also drops autorun.inf in root of Windows installed drive.
The worm modifies registry at the following locations:
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Explorer
HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run

|