About “Worm:Win32/Autorun.UE” infection

The Worm:Win32/Autorun.UE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm:Win32/Autorun.UE virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Worm:Win32/Autorun.UE?

File Info:
name: 91B3FA320C89D1610AB5.mlw
path: /opt/CAPEv2/storage/binaries/6a103d39b00f2f881ebe115506d9058714a6d110cc9b88279d4da34b5b51379d
crc32: FC7B472C
md5: 91b3fa320c89d1610ab586615e32a8ca
sha1: 61ac6824626ff3a3b5f428d79c5dc847f2e971ab
sha256: 6a103d39b00f2f881ebe115506d9058714a6d110cc9b88279d4da34b5b51379d
sha512: 5e5d65a3ecfa675e4c8b4dd52c4ce0664c244764415dbdc2ef3f8cfa7c9744ffe40dab86042d2c4123c692c7175771ee8e112f4524dce1723278b20ad86eb69b
ssdeep: 3072:QRrZBWAJCbL2+LaEdtQqXjuVx3ucPsunjzc5ULc5uszD9dDy6j6:QZZBWAJCbL2+LaEdSVx35P1nnc5ULc5B
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E1E38F39FA10611DEDE141793C683A3FB6481E7C0944AA66F7B1464BA0F3BE2B5E4707
sha3_384: 516ca184420293dbf3d8bda18d9e5910bfc525f68153e062993005949f7b33e2f8766f233290d775b6497e17fa23c0d7
ep_bytes: 6880244000e8eeffffff000000000000
timestamp: 2009-06-13 14:49:05

Version Info:
0: [No Data]

Worm:Win32/Autorun.UE also known as:

How to remove Worm:Win32/Autorun.UE?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.