W32/AutoRun.PPD Worm

 Virus Information - W32/AutoRun.PPD Worm:

W32/AutoRun.PPD is a worm. The worm will infect Windows systems.

Upon execution, the worm drops the following files in Windows\System32 folder:

ckvo.exe
ckvo0.dll

The worm also drops the following files in root of Windows installed drive:

otyh.cmd
autorun.inf

The worm modifies registry at the following location:

HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run