W32/AutoRun-XA is a worm for the Windows platform.

When run W32/AutoRun-XA copies itself to System\(original name of worm) and sets the following registry entries:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows open
System\(original name of worm)

W32/AutoRun-XA spreads via removable shared drives by copying itself as (Root)\HiBestfriendThisIsMyPictureWhenIwasOnthebeach.exe and creating the file (Root)\autorun.inf (also detected as W32/AutoRun-XA).

W32/AutoRun-XA also creates the files
Root\HelloPhilippines.txt
System\HelloPhilippines.txt

These files are not malicious and can be safely removed.

More information can be found at this Sophos page.