W32/AutoRun.UCO is a Windows system worm that propagates on local fixed and removable USB drives.
Upon execution, the worm drops Uninstall.exe in Program Files folder. It drops boot.com in C:\resycled folder.
The worm modifies registry at the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
More information can be found at this Proland Software page.
Loading Comments...