Autorun.EPW is a Virus. A Virus is a software program capable of reproducing itself spreading to other programs on the same computer or on other computers via the network. Autorun.EPW is compressed using the executable packer and its file size is 208,898 bytes. Autorun.EPW drops the following files on the hard drive: - C:\autorun.inf (340 bytes)
- C:\RECYCLER\autoplay.exe (208898 bytes)
- e:\autorun.inf (340 bytes)
It also changes Windows registry: - Creates value "SysUtils"="C:\sample.exe" in key "HKCU\Software\Microsoft\Windows\CurrentVersion\Run".
- Creates value "SysUtils"="C:\sample.exe" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run".
It also contains anti-debugging code, is executed every time Windows starts.
|
