Categories: Worm

Worm:Win32/Autorun.VY (file analysis)

The Worm:Win32/Autorun.VY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm:Win32/Autorun.VY virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Worm:Win32/Autorun.VY?


File Info:
name: 42217380555FF6AA66B2.mlwpath: /opt/CAPEv2/storage/binaries/d983de58e93713f4bf09b0a626cff07201199efa148baa36519d1a7db3df8089crc32: 77900829md5: 42217380555ff6aa66b2872cde9aabafsha1: b85997913afed830889acd8ba6b6aec4595b15ffsha256: d983de58e93713f4bf09b0a626cff07201199efa148baa36519d1a7db3df8089sha512: ed12ed36cd762c495fad68512b8008fe3c51e27056d2445fc3a17c8c39889972267a6420b2a9e00e1035248d022dddc25bf8eb4d55890b515131c2fa6ddde86dssdeep: 1536:lzOepvjSyLjQ85akEklV85gwlQhd54vcm:/Qq6klV85gwlQ7fmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T159D309023227E1F4D81C9876051761F62BCA2C715E0EED167158BF3B3D722D4AE1A72Bsha3_384: 0dd721f1fad4cdcf2a92cb7de3de286aad339f788fa28e5cabeb80a4194fc5f4018c21e6294daf5c510fa65602b6eb9aep_bytes: e897210000e978feffff8bff558bec81timestamp: 2010-11-10 01:02:53
Version Info:
CompanyName:  FileDescription: File FolderFileVersion: 1, 0, 0, 1InternalName: File FoderOriginalFilename: File FolderProductName: File FolderProductVersion: 1, 0, 0, 1Translation: 0x0409 0x04b0

Worm:Win32/Autorun.VY also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lpYy
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Midie.112397
FireEye	Generic.mg.42217380555ff6aa
CAT-QuickHeal	Worm.Autorun.VY4
Skyhigh	BehavesLike.Win32.Virut.cm
McAfee	W32/Autorun.worm.a
Cylance	unsafe
Zillya	Trojan.Genome.Win32.5630
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0015e4f01 )
Alibaba	Worm:Win32/Autorun.fa052c98
K7GW	Riskware ( 0015e4f01 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Midie.D1B70D
BitDefenderTheta	Gen:NN.ZexaF.36744.iu0@aKQ8s0ai
VirIT	Worm.Win32.Generic.ADKS
Symantec	Trojan Horse
ESET-NOD32	Win32/AutoRun.Agent.QO
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Worm.Autorun-2635
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Midie.112397
NANO-Antivirus	Trojan.Win32.Autoruner1.cvgvrf
SUPERAntiSpyware	Trojan.Agent/Gen-AutoFold
Avast	Win32:AutoRun-DBT [Trj]
Tencent	Trojan.Win32.AutoRun.ai
Emsisoft	Gen:Variant.Midie.112397 (B)
Baidu	Win32.Worm.Agent.aj
F-Secure	Trojan.TR/Crypt.CFI.Gen
DrWeb	Win32.HLLW.Autoruner1.10779
VIPRE	Gen:Variant.Midie.112397
TrendMicro	WORM_OTORUN.SMIA
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Jiangmin	Worm/AutoRun.kbg
Webroot	W32.Autorun.Gen
Varist	W32/Worm.OCWP-6476
Avira	TR/Crypt.CFI.Gen
Antiy-AVL	Virus/Win64.Expiro.rsrc
Kingsoft	Win32.HeurC.KVM007.a
Xcitium	Worm.Win32.Autorun.Agent_QO0@1isiw6
Microsoft	Worm:Win32/Autorun.VY
ViRobot	Worm.Win32.Autorun.136704.B
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Midie.112397
Google	Detected
AhnLab-V3	Worm/Win32.AutoRun.R25084
VBA32	Worm.AutoRun
ALYac	Gen:Variant.Midie.112397
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	WORM_OTORUN.SMIA
Rising	Worm.Win32.Autorun.sqn (CLASSIC)
Yandex	Trojan.GenAsa!6+kL129BomI
Ikarus	Trojan.Win32.Genome
MaxSecure	Worm.Autorun.etjz
Fortinet	W32/CoinMiner.F
AVG	Win32:AutoRun-DBT [Trj]
Cybereason	malicious.13afed
DeepInstinct	MALICIOUS