W32/Autorun-DH is a worm for the Windows platform.

W32/Autorun-DH spreads via removable drives by creating the file autorun.inf that is designed to run the worm when the drive is connected to an uninfected computer.

When first run W32/Autorun-DH copies itself to:


Root\Mixa_I.exe
Windows\Mixa.exe
System\systemio.exe

and creates the following files:

Root\Autorun.inf
User\Application Data\Microsoft\Media Index\wmplibrary_v_0_12.lrd
System\restart.scf

The files Autorun.inf and restart.scf are detected as W32/Autorun-DH. The lrd file is a data file.

More information can be found at this Sophos page.