WORM_AUTORUN.HCE

This worm uses the default Windows folder icon to trick users into opening the file. Double-clicking the file executes this malware.

Installation

This worm uses the default Windows folder icon to trick users into opening the file. Double-clicking the file executes this malware.

Propagation

This worm searches for folders in all physical and removable drives then drops copies of itself inside the folder as {folder name}.EXE.

It drops the following copy of itself in all physical and removable drives:

• .exe

NOTES:

It sets the attribute of found folders to "Hidden" so that users are lured to click its dropped copy instead of the original folder.