Skip to main content
Published Jan 09, 2012 | Updated Sep 15, 2017

Worm:Win32/Autorun.AEA

Detected by Microsoft Defender Antivirus

Aliases: Win32.HLLW.Autoruner.63662 (Dr.Web) Win32/AutoRun.VB.APO (ESET) Trojan-Ransom.Win32.DoubleEagle.ld (Kaspersky) W32/Autorun.worm!oc (McAfee) TROJ_SPNR.03A312 (Trend Micro)

Summary

Worm:Win32/Autorun.AEA is a worm that spreads to other drives as a files named "syskernel.exe" and "new folder1.exe". The worm terminates certain Windows utilities such as Task Manager and Registry Editor and also renames files having certain extensions.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.

 
Follow us