Threat Search: 

ThreatExpert's Statistics for W32/Autorun-RI [Sophos]:

W32/Autorun-RI [Sophos] is also known as:
Threat AliasNumber of Incidents
Trojan.Agent.ASDJ [PC Tools]2
W32.Ackantta@mm [Symantec]2
Email-Worm.Win32.Agent.gew [Kaspersky Lab]1
Generic Dropper.ea [McAfee]1
Trojan.Win32.Agent.asdj [Kaspersky Lab]1
Trojan.Win32.Small [Ikarus]1
VirTool:Win32/DelfInject.gen!AG [Microsoft]1
W32/Xirtem@MM [McAfee]1
Win32/Ceein.worm.157184 [AhnLab]1
Win32/Ceein.worm.449024 [AhnLab]1
Worm:Win32/Prolaco.A@mm [Microsoft]1

W32/Autorun-RI [Sophos] is known to be created as:
%System%\qnx.exe
%System%\vxworks.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).