Threat Search: 

ThreatExpert's Statistics for Win32/Autorun.worm.144384 [AhnLab]:

Win32/Autorun.worm.144384 [AhnLab] is also known as:
Threat AliasNumber of Incidents
W32/Autorun.worm.aae [McAfee]52
Mal/Generic-D [Sophos]43
Worm.Win32.AutoRun.gsy [Kaspersky Lab]31
Worm:Win32/Autorun.NH [Microsoft]18
Backdoor:Win32/IRCbot.DL [Microsoft]13
W32.SillyFDC [Symantec]9
Trojan Horse [Symantec]8
Trojan.Generic [PC Tools]7
Mal/Generic-A, Mal/Generic-D [Sophos]6
Mal/Generic-E, Mal/Generic-D [Sophos]5
Net-Worm.SillyFDC [PC Tools]5
Worm.Win32.AutoRun.amts [Kaspersky Lab]4
Spyware.Keylogger [Symantec]2
Mal/Packer, Mal/Generic-D [Sophos]1
Spyware.Keylogger [PC Tools]1
Trojan:Win32/Comrerop [Microsoft]1
Trojan:Win32/Otran [Microsoft]1
Worm.Win32.AutoRun.akck [Kaspersky Lab]1
Worm.Win32.AutoRun.aqau [Kaspersky Lab]1
Worm.Win32.AutoRun.aqsy [Kaspersky Lab]1
Worm.Win32.AutoRun.auhh [Kaspersky Lab]1
Worm.Win32.AutoRun.auje [Kaspersky Lab]1
Worm.Win32.AutoRun.avtv [Kaspersky Lab]1
Worm.Win32.AutoRun.avvr [Kaspersky Lab]1
Worm:Win32/Autorun.RX [Microsoft]1

Win32/Autorun.worm.144384 [AhnLab] is known to be created as:
%AppData%\microsoft\csrss.exe
%AppData%\microsoft\desktop.exe
%AppData%\microsoft\irc.exe
%AppData%\microsoft\rundll.exe
%AppData%\microsoft\svchost.exe
%AppData%\microsoft\winlog.exe
%AppData%\microsoft\winlogg.exe
%AppData%\microsoft\winlogon.exe
%AppData%\microsoft\wmpsfrg.exe
%Temp%\2.exe
%Temp%\34341.exe
%Temp%\bfile2.exe
%Temp%\crypted.exe
%Temp%\cryptedfile.exe
%Temp%\ixp000.tmp\igfxpers.exe
%Temp%\ixp000.tmp\metusbot.exe
%Temp%\ixp000.tmp\server.exe
%Temp%\ixp001.tmp\server.exe
%Temp%\out.exe
%Temp%\server.exe
%Temp%\svchost.exe
c:\0jpz.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).