Threat Search: 

ThreatExpert's Statistics for Worm.Win32.AutoIt.ci [Kaspersky Lab]:

Worm.Win32.AutoIt.ci [Kaspersky Lab] is also known as:
Threat AliasNumber of Incidents
W32.SillyFDC [Symantec]6
IM-Worm.Win32.Sohanad [Ikarus]3
Win-Trojan/Autorun.259263 [AhnLab]3
Mal/Generic-A [Sophos]2
Net-Worm.SillyFDC [PC Tools]2
W32/Autorun.worm.gen [McAfee]2
Worm.Win32.AutoIt [Ikarus]2
Generic.dx [McAfee]1
Mal/Inet-Fam [Sophos]1
W32/Autorun.worm.c [McAfee]1
W32/Autorun-AJN [Sophos]1
Worm.Autoit [Ikarus]1
Worm.AutoRun.mhj [PC Tools]1

Worm.Win32.AutoIt.ci [Kaspersky Lab] has the following possible country of origin:
OriginNumber of Incidents
United Kingdom8

Worm.Win32.AutoIt.ci [Kaspersky Lab] is known to be created as:
%ProgramFiles%\explorer.exe
%Windir%\backup\explorer.exe
c:\explorer.exe
c:\recycler\explorer.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.